IMDA Publishes Technical Specifications for Residential Gateways (Home Routers) to Enhance Security

Last updated: 20 October 2020

Published on: 12 October 2020

Enhanced security requirements for new home routers sold in Singapore

SINGAPORE - 12 Oct 2020: The Infocomm Media Development Authority (“IMDA”) today published enhanced security requirements for new home routers sold in Singapore.

The finalised Technical Specifications for Residential Gateways (“RG”), commonly known as home routers, take into account feedback from the public and industry, following an earlier consultation exercise. The Technical Specifications will come into effect in six months, on 13 April 2021. Home routers previously approved by IMDA can continue to be sold until 12 October 2021.

Home routers are often the first entry point for cyber-attacks targeting the public, as they form the key bridge between the Internet and residents’ home networks. In March 20201, IMDA announced its plan to set minimum security requirements for home routers, to provide a safer and more secure Internet experience for users, and to strengthen the resilience of Singapore’s telecommunications networks.

This proactive move comes against the backdrop of continued proliferation of networked intelligent devices in homes, such as web cameras and baby monitors, which has translated into higher risks of cyber-attacks that target such devices. Japan imposed similar requirements from April 2020 this year, while the United Kingdom has recently begun to evaluate such requirements.

While users do not need to change their existing home routers, they are encouraged to purchase those which are compliant with IMDA’s cybersecurity requirements when they next upgrade their devices. They are also advised to continue to upgrade their firmware regularly. Wi-Fi home routers which comply with IMDA’s specifications qualify for Level 1 of the Cyber Security Agency of Singapore’s Cybersecurity Labelling Scheme. Users can look out for the label to ensure that they purchase home routers that are secure and compliant.

Please refer to Annex for a summary of the key cybersecurity requirements by IMDA, and visit this URL (222.36KB) for more information on the Technical Specifications for home routers.


Annex: Key Cybersecurity Requirements by IMDA (412.00KB)



About Info-communications Media Development Authority (IMDA)

The Infocomm Media Development Authority (IMDA) leads Singapore’s digital transformation with infocomm media. To do this, IMDA will develop a dynamic digital economy and a cohesive digital society, driven by an exceptional infocomm media (ICM) ecosystem – by developing talent, strengthening business capabilities, and enhancing Singapore's ICM infrastructure. IMDA also regulates the telecommunications and media sectors to safeguard consumer interests while fostering a pro-business environment, and enhances Singapore’s data protection regime through the Personal Data Protection Commission. For more news and information, visit or follow IMDA on Facebook IMDAsg and Twitter @IMDAsg.

For media clarifications, please contact:

CHOO Hong Xian (Mr)

Manager, Communications and Marketing

DID: (65) 6955 0221