Agent Wranglers

IOT-45Optional US law

Consider the US Cyber Trust Mark for consumer devices

If you sell wireless consumer devices in the US, decide per model whether to apply for the FCC's voluntary Cyber Trust Mark. Record the decision and the reason.

By Agent Wranglers. Updated .

Region

United States (US). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.

Review by

2027-04-30

How to do it

The mark tells buyers that an accredited lab tested the product against criteria based on NIST IR 8425. The label carries a QR code that leads to a registry entry with the support period and whether updates install automatically. Most of what the lab tests is already in this playbook, such as unique credentials, automatic updates and the support end date. The FCC changed the program's administrator in 2026, so check its page for the current way to apply before you plan the work.

How to check

Every model sold in the US has a recorded decision on the mark, with a date. For each model that carries it, the registry entry behind the QR code shows the same support end date as the product page.

Sources

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports/us-cyber-trust-mark">Agent Wranglers connected devices playbook</a>. In code you write, add a comment next to it with the same link.