WanderRouter
Everything a great router has — WiFi 7, tri-band 6GHz, guest network, IoT isolation, mesh, parental controls, plain-language setup. The one thing it doesn't have: a business model built on selling your browsing data.
Home Router Privacy & InfrastructureEverything on the box at Best Buy — plus what they don't mention
What the routers at Best Buy are actually doing
Eero is owned by Amazon. Every domain you visit, every device that connects, every DNS query — routed through Amazon's infrastructure. Amazon uses this to build advertising profiles. There is no opt-out that removes the data collection; there is only an opt-out from "personalized ads" using the data they already collected.
- Google Nest WiFi — all DNS queries go to Google by default. Google's stated purpose is "improving Google services" — that means your browsing history trains their ad models.
- TP-Link — FCC banned from new US sales (March 23, 2026). The FCC issued DA-26-278 blocking all new equipment authorizations for foreign-manufactured routers, citing links to Volt, Flax, and Salt Typhoon Chinese cyberattacks on US infrastructure. TP-Link has no path to new US market models. Existing inventory can still be sold until firmware support ends March 2027 — after which those routers get no security updates. TP-Link was ~60% of the US consumer router market. That gap has no good replacement yet.
- Eero — Amazon confirmed in their privacy policy that Eero data is shared across Amazon services. Your router sees everything: every site, every device, every app.
- Orbi / Netgear — collects device information, network traffic metadata, and usage patterns. Shared with "partners" per their privacy policy.
- WanderRouter — runs OpenWrt, an open-source firmware with no manufacturer cloud. No data sent anywhere. Your network traffic belongs to you.
Two SKUs — travel and home
- GL.iNet GL-BE3600 (Slate 7) — WiFi 7, 688 + 2,882 Mbps, CES 2026 award
- Dual 2.5G ports + 1× USB 3.0
- Touchscreen status display — network status at a glance, no app needed
- Pocket-sized — fits in a jacket pocket
- Uplink: hotel WiFi, ethernet, or USB tethering from phone
- External battery bank runs it without a wall outlet
- WireGuard pre-configured — tunnel back to WanderNode Hub
- Every device you bring is behind your router, not the hotel's
- Captive portal passthrough — authenticate once, all devices pass
- SSID disguise — rename to anything to blend in
A hotel network sees every device on it. WanderRouter Travel creates a private encrypted bubble — your laptop, phone, and tablet are on your network, not the hotel's. The hotel sees one device. You're invisible.
- GL.iNet GL-BE9300 (Flint 3) — WiFi 7, tri-band, 9,335 Mbps aggregate
- 6GHz band — the new uncrowded lane, blazing fast on compatible devices
- Five 2.5G ports (1 WAN + 4 LAN) — wire everything that matters
- 1× USB 3.0 — plug in a drive for instant household network storage
- Coverage: 2,500 sq ft, 100+ simultaneous devices
- 3 network zones pre-built: Trusted · Smart Home · Guest
- Mesh: add Slate 7 nodes for full-house WiFi 7 coverage
- WireGuard server — all your away devices tunnel home through this
- WireGuard client — route all traffic through Mullvad or your VPS
- AdGuard Home — 30%+ of DNS queries blocked on an average household
Eero Max 7 costs $599 and sends everything to Amazon — and charges $3.99/mo extra for a VPN that routes your traffic through Amazon. WanderRouter Home costs $399 with better specs, sends data nowhere, and requires no subscription to own or use. Ever. WireGuard is built in. OpenWrt is open source. You own the hardware and the firmware.
Three network zones — pre-built, not something you configure
Every WanderRouter Home ships with three isolated networks already set up. Your devices can't reach guest devices. Guest devices can't reach your devices. Smart home sensors can't snoop on your laptop. It's wired in — not a setting you toggle.
Ships configured to your exact spec
At checkout, specify your setup. A real person configures it before it ships. You plug it in. It works.
- WireGuard — provide your public key and endpoint. Pre-enrolled. Or use our key generation: private key shown once, your choice to save or generate new. Four paths: bring your own key, generate a keypair, Mullvad config paste, or skip and configure later via WanderAssist.
- DNS provider — NextDNS (your config ID pre-entered), AdGuard DNS, or Cloudflare 1.1.1.1 with WARP. DNS-over-HTTPS on by default. No plain-text DNS leaks.
- Mullvad — if you have a Mullvad subscription, paste your WireGuard config at checkout. Pre-loaded. One toggle to switch exit nodes via WanderAssist.
- WanderNode Hub tunnel — if you have a WanderNode Hub, pre-configure WanderRouter to tunnel back home. Your travel router becomes an extension of your home network.
- Custom firewall rules — free text field. "Set WireGuard to port 51821, my ISP blocks 51820." A person reads it and handles it.
- Device list — list the devices you'll use. WireGuard peer configs pre-generated for each and included in the box.
USB port: plug in a drive, instant network storage
WanderRouter Home has a USB 3.0 port. Plug in any USB hard drive or flash drive and it becomes a network share — visible to every device on your trusted network. No NAS required. No extra hardware. Just a drive and a cable.
- Samba / SMB share — shows up in Windows Explorer and Mac Finder like any network drive. Drag and drop. No app required.
- Shared family storage — photos, documents, media accessible from every device in the house without a cloud account
- Shelter use — staff shared drive, document templates, resources available to every device on the network without a cloud service account
- 4G/LTE backup — plug in a USB cellular modem for automatic failover if your ISP goes down. Router switches to cellular, then back when broadband returns
Router interfaces are designed without you in mind — this one isn't
Every major router app assumes you are a sighted, dexterous person with a smartphone and a background in networking. None of them are designed for the communities WanderVerse serves.
- Eero requires a smartphone app — no web interface, no browser fallback. If you don't have a capable smartphone, you cannot manage your router.
- Color-only status indicators — Eero, TP-Link, and Google use LED colors and colored dots to show status. No text alternative. Colorblind users cannot tell if their network is healthy.
- Jargon with no explanation — DHCP, SSID, NAT, WPA3, VLAN, QoS. All router interfaces assume you know what these mean. The interfaces provide no help.
- Small text, no scaling — router web dashboards universally fail accessibility standards. Fixed font sizes, no keyboard navigation, no screen reader labels.
- WanderAssist is different — plain language in a browser. Works on any device. Works with screen readers. Works if your hands shake. "My WiFi is slow" is a valid input. So is "I think someone is on my network who shouldn't be."
You bought it. You own it. It works forever.
The WanderVerse position on hardware subscriptions
BMW charged $18/month for heated seats already wired into the car you bought. The coils were there. The wiring was there. The seats worked. BMW just turned them off in software and sold you back access. GM locked remote start behind $25/mo. Mercedes gates rear-wheel steering that is physically installed. John Deere uses software locks to prevent farmers from repairing equipment they own. Eero's VPN runs on hardware that could do it natively for free — they charge $3.99/mo anyway. Ring's core recording function requires $10/mo or your security camera doesn't record.
WanderRouter runs OpenWrt — open-source firmware you own. Every feature works on day one, works without a subscription, and works if WanderVerse shuts down tomorrow. We sold you a router. That's the transaction. If WanderVerse closes, your router keeps routing. The firmware is GPL — it belongs to the community.
- Built on WiFi 7 now, ready for what comes next — as the next generation of wireless matures, WanderVerse will offer upgrade paths for major hardware transitions. Same workers, same configuration, ships back. You don't start over.
- 7-year spare parts — WanderVerse commits to keeping replacement parts available for 7 years from purchase. Not end-of-life after 2 years like every other router brand.
- GPL firmware — OpenWrt is open source. When WanderVerse moves on, the community maintains it. Your device is not a subscription that expires.
- Component-level repair — power supply failed? Send it back. Not "send it back for recycling credit toward a new one." Send it back, we fix it, it comes back.
- No mandatory updates — you choose when to update. We recommend staying current for security, but we do not push forced firmware updates that change behavior you rely on.
WanderAssist manages everything after delivery
- "Add my new laptop to the trusted network" — done, no terminal
- "Switch my VPN exit to Amsterdam" — done, one command
- "Block TikTok for devices on the guest network" — done, DNS rule added
- "Show me what's using the most bandwidth" — live report, no router dashboard required
- "Update my firmware" — downloads, verifies signature, applies, reboots
- "Set up a new Mullvad config" — paste config, WanderAssist handles the rest
How it compares
| Router | Price | WiFi 7 | VPN built in | No data collection | Open firmware |
|---|---|---|---|---|---|
| WanderRouter Home | $399 | ✓ | ✓ WireGuard | ✓ OpenWrt | ✓ GPL |
| Amazon Eero Pro 6E | $299+ | ✓ | $3.99/mo add-on | ✗ Sends to Amazon | ✗ Closed |
| Google Nest WiFi Pro | $299 | ✓ | ✗ | ✗ Sends to Google | ✗ Closed |
| TP-Link Deco XE75 | $200 | ✓ | ✗ | ✗ FCC banned March 2026 | ✗ Closed |
| Netgear Orbi RBK863S | $599 | ✓ | ✗ | ✗ Shares with partners | ✗ Closed |