Firmware updates without surprises
Most people put off router updates because they are afraid of breaking the office internet. That fear is reasonable — and easy to manage. This is the procedure we follow on every visit.
1. Download only from the vendor
Use the vendor's support page for your exact model and hardware revision. Hardware revision matters: the v1 and v2 of the same router can need completely different images.
2. Verify the image before flashing
Compare the checksum published by the vendor with the file you downloaded:
- macOS / Linux:
shasum -a 256 firmware.bin - Windows PowerShell:
Get-FileHash firmware.bin -Algorithm SHA256
If the vendor also publishes a signature, verify it. A mismatch means stop — do not flash.
3. Back up the configuration first
Export the configuration from the admin panel and store it next to the old firmware file. On OpenWrt: System → Backup / Flash Firmware → Generate archive.
4. Keep a rollback path
Know how to get back before you start: the vendor's recovery mode, a dual-boot partition, or the previous image on a USB stick. Write the steps on the update log.
5. Flash over a cable, outside office hours
Never flash over Wi-Fi and never on a power strip someone might switch off. Allow 15 minutes of downtime; it is usually less than five.
6. Check, then record
- Internet, Wi-Fi and printing work from a staff device.
- The admin password, firewall rules and port forwards survived the update.
- The new version, date and checksum are written in the update log.