Your TP-Link Deco BE85 firmware update keeps failing, and the Deco app just shows "Update failed" with a retry button. The LED on the satellite is blinking blue when it should be solid, or the main unit's firmware progress bar in the app hasn't budged in twenty minutes. The BE85 has a particular quirk: as a mesh system, it needs to apply the update to every node in sequence, and if any single unit loses connection mid-process, the whole thing stalls.
First thing to try: skip the Deco app and use the web interface instead. Connect a laptop directly to the main Deco BE85 via Ethernet, open a browser, and visit tplinkdeco.net. Log in with your Deco account credentials, then go to Advanced, System, Firmware Upgrade. The web UI is much more reliable for updates and shows you exactly where it's getting stuck.
If the web UI also fails or hangs, here's what to check next.
Why the BE85 Update Keeps Failing
The Deco BE85 is a Wi-Fi 7 BE22000 tri-band mesh router with 10GbE ports, including an RJ45/SFP+ combo port. Common reasons the firmware update fails:
- Internet instability during download: the main unit needs a steady WAN connection to pull the firmware file, which is around 100-150 MB.
- Satellite connection drops mid-update: the mesh applies the firmware to each node sequentially. If a satellite loses its wireless backhaul during the process, the whole update errors out.
- Partial download leftover from a previous attempt: the BE85 doesn't always clean up incomplete downloads automatically.
- Deco app is outdated: an older version of the TP-Link Deco app (iOS or Android) can't push the new firmware payload correctly.
- Auto-update interfering with a manual attempt: a scheduled auto-update can kick in while you're mid-manual update and confuse the router.
- HomeShield security falsely blocking the firmware server: it occasionally flags the download URL as a threat.
- Skipping too many firmware versions: large version jumps sometimes need an intermediate build installed first.
Use the Web UI Instead of the Deco App
Connect a laptop to the main Deco BE85 with an Ethernet cable. Open a browser and navigate to tplinkdeco.net. Sign in with your Deco account credentials (same ones you use in the app). Go to Advanced, System, Firmware Upgrade and click Check for Upgrade.
The web interface is more stable because it doesn't rely on your phone staying connected to WiFi during the update. If your phone switches to cellular mid-update, the app loses contact with the router and the process appears to fail even when it hasn't.
Power-Cycle the Whole Mesh and Retry
If an update is truly stuck, unplug the main Deco BE85 and all satellites. Wait a full 60 seconds. Plug the main unit back in first and wait for its LED to go from flashing yellow (booting) to flashing blue (factory default state) and then to solid blue (online). Then plug each satellite in one at a time, waiting for each to come online before adding the next.
This power cycle clears any locked state from the failed update and frees up storage that may have been reserved by a partial download. Once everything is back online, retry the update from the web UI.
Turn Off Auto-Update Temporarily
In the web UI at tplinkdeco.net, go to Advanced, System, Firmware Upgrade, then Auto Upgrade Settings. Switch auto-update off for now. This prevents a scheduled update from starting while you're trying to run a manual one.
You can turn it back on once the manual update completes successfully.
Download the Firmware File Manually from TP-Link
If the router can't pull the firmware from TP-Link's servers, download the file directly. Go to tp-link.com/support/download, search for Deco BE85, and grab the latest firmware that matches your hardware version (printed on the bottom label as V1 or V1.2, for example). Installing the wrong hardware revision can brick the unit.
Back in the web UI, go to Advanced, System, Firmware Upgrade, scroll to Manual Upgrade, click Browse, select the downloaded .bin file, and click Upgrade. The router warns that the process takes about 5 minutes per node. Do not unplug any unit during this time.
Check Your WAN Connection First
Before even attempting an update, make sure your internet connection is stable. Run a speed test from a wired device. Watch the Deco app's system status to confirm the main unit shows a solid connection. If your modem is dropping packets or renegotiating the link with the 10G WAN port, the firmware download will fail every time.
If the WAN is unstable, sort that out first. The BE85's 10GbE port can be sensitive to cable quality try a different Cat6a or Cat7 cable between the modem and the router.
Pause HomeShield Temporarily
HomeShield security can occasionally block the firmware download URL as a false positive. In the Deco app, tap HomeShield, then pause it for one hour. Retry the firmware update during that window.
If the update succeeds with HomeShield off and fails with it on, that's your culprit. Re-enable HomeShield after the update finishes. Note that full HomeShield features require a Pro subscription, but the basic security layer is still active and can cause this issue.
Update One Node at a Time If Needed
The BE85 tries to update all nodes simultaneously by default. If your satellites are far from the main unit or using wireless backhaul, they may lose sync during the update. In the Deco app, go to the device list, tap on each satellite, and check for a manual update option for that specific node.
Some users have reported better success updating the main unit first, then each satellite one at a time. This keeps the mesh stable because only one node reboots at a time while the others keep the network running.
Factory Reset and Start Fresh
If updates persistently fail after all the above, factory reset the main unit. Press the reset button on the bottom for about 1 second. The LED will flash yellow (resetting), then go solid yellow (booting), then flash blue (factory default). This clears all settings and any corrupted update state.
Set up the network fresh using the Deco app (iOS 14+ or Android 8+), then immediately run the firmware update from the web UI. Budget about 30 minutes to reconfigure your network, including re-entering WiFi name, password, and any VLAN or port forwarding rules.
