Release ASUS RT-AC68U Firmware version 3.0.0.4.386_52048 (2025/08/19)

[bennor]

The venerable old end of support RT-AC68U gets another firmware release. This release has similar security updates and suggested router reset after firmware update that other Asus routers have been getting in the past few weeks.

Download firmware: https://www.asus.com/networking-iot...ers/rtac68u/helpdesk_bios/?model2Name=RTAC68U

ASUS RT-AC68U Firmware version 3.0.0.4.386_52048
Version 3.0.0.4.386_52048 99.38 MB 2025/08/19
SHA-256 ：40F812B7675953CC49448BEA052443D8A980C3E883F1649D03CC83F398F420F5

Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.

Security Enhancements
- Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defence against brute-force attacks.
- HTTPS on 8443 – Management interface now served over TLS by default.
- UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
- AiCloud Authentication Hardening (CWE-287) – Added layered verification.
- Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
- Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
- Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
- Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.

Update: Download link that was posted below.

Here's the download link to the firmware:

https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AC68U/FW_RT_AC68U_300438652048.zip?model=RT-AC68U

ZIP SHA-256 : 40F812B7675953CC49448BEA052443D8A980C3E883F1649D03CC83F398F420F5
FW SHA-256 : 49ba7b100a6b2ff1f6d4e2b38ccd17e5c187763fe267f5208b716dce60ba20d2

 

[John Adler]

just finished the flash
thxs

 

[visortgw]

Never say never!

This must be a major security change for Asus to bother updating post-EOL!

 

[fruitcornbread]

It lives! I didn't expect AC routers to also get the update.

 

[John Fitzgerald]

WENT TO DOWNLOAD ANNND!

 

[bennor]

Note the update on the router login password policy if setting up the router anew or changing the login password:

Password must contain at least 10 characters in length, including 1 letter, 1 special character, and 1 numeric character. Shall not have consecutive identical characters. Login username and password shall not be the same.

 

[bennor]

WENT TO DOWNLOAD ANNND!

The link in OP and the download link on that page worked for me just now.

 

[John Fitzgerald]

The link in OP and the download link on that page worked for me just now.

Just tried again x3 and got the same. Tried The RTAC5300 and while slow to retrieve the web page did load, no update for that model.

Using new Firefox v142.

EDIT: just came up, page loaded but incomplete, driver & tool side loaded but firmware did not, then after a refresh and looong wait the firmware side populated.

 

[wouterv]

Note the update on the router login password policy if setting up the router anew or changing the login password:

Password must contain at least 10 characters in length, including 1 letter, 1 special character, and 1 numeric character. Shall not have consecutive identical characters. Login username and password shall not be the same.

Mind they recommend performing a factory-default reset after the firmware upgrade, so you will run into the new password policy anyway.
And factory-default reset means it MUST be followed by manual configuration the router (not loading an old configuration backup).
As recommended since ages: write down your changes from factory default to be able to manual restore your settings.

Here an example of my configuration notes (which may change after the upgrade to this latest firmware):

RT-AC68U

2.4 GHz Network Name: aaa
Network Key: bbb
5 GHz Network Name: ccc
Network Key: ddd

Advanced Settings - Wireless - General - 2.4 GHz
Channel bandwidth: 20 MHz
Control Channel: 6

Advanced Settings - Wireless - WPS
Enable WPS: OFF

Advanced Settings - Wireless - Professional - 2.4 GHz
Modulation Scheme: Up to MCS 7 (802.11n)
Airtime Fairness: Disable
Explicit Beamforming: Disable
Universal Beamforming: Disable

Advanced Settings - Wireless - Professional - 5 GHz
Airtime Fairness: Disable
Universal Beamforming: Disable

Advanced Settings - LAN - LAN IP
Host Name: eee
IP Address: 192.168.1.1

Advanced Settings - LAN - DHCP Server
IP Pool Starting Address: 192.168.1.3
Manual Assignment
mac - 192.168.1.10 - fff

Advanced Settings - WAN - Internet Connection
Enable UPnP: No

Advanced Settings - Administration - System
USB Mode: USB 2.0
Time Zone: (GMT+1:00) Amsterdam, Berlin, Bern
DST time zone changes starts: month = 3, weekday = 5th Sun, 2 hours
DST time zone changes ends: month = 10, weekday = 5th Sun, 3 hours

USB application - Servers Center - Media Server
Enable UPnP Media Server: OFF

USB application - Servers Center - Media Server
Network Printer Server
Network Printer Server: OFF

 

[John Fitzgerald]

Mind they recommend performing a factory-default reset after the firmware upgrade, so you will run into the new password policy anyway.
And factory-default reset means it MUST be followed by manual configuration the router (not loading an old configuration backup).

Change the password before you flash.

 

[bennor]

Mind they recommend performing a factory-default reset after the firmware upgrade, so you will run into the new password policy anyway.

Not everyone will follow Asus's recommendation to reset the router to apply the new security updates so they may not run into the new password policy during the QIS setup post router reset. They will see that login password notice if they try to change their router's password on the Administration > System > Router Login Password > Edit section post update to 3.0.0.4.386_52048.

 

[fruitcornbread]

Here's the download link to the firmware:

https://dlcdnets.asus.com/pub/ASUS/wireless/RT-AC68U/FW_RT_AC68U_300438652048.zip?model=RT-AC68U

ZIP SHA-256 : 40F812B7675953CC49448BEA052443D8A980C3E883F1649D03CC83F398F420F5
FW SHA-256 : 49ba7b100a6b2ff1f6d4e2b38ccd17e5c187763fe267f5208b716dce60ba20d2

 

[Justinh]

"Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment."

So what happens to the masses that use auto-update?

 

[visortgw]

"Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment."

So what happens to the masses that use auto-update?

The masses can factory reset when and IF they wish following the auto update.