How to Keep Your Devices Updated, and What to Do When They Can’t Be

The short version

• Turn on automatic updates for your phone, computer, apps and browser, then check once in a while that they are actually installing. The UK’s National Cyber Security Centre (NCSC) calls updating one of the most important and quickest things you can do [1].
• Find out whether each device is still supported. as of 6 October 2026, Windows 10 is past its end of support (14 October 2025) [21] and some Pixel phones no longer receive updates [18].
• If a device is out of support, replace it, or accept a higher risk and limit what it can do. For organisations, the NCSC says the only fully effective fix is to stop using it [3].

Support dates below are as of 6 October 2026, from the sources at the end. Vendors change them, so check the linked page.

Who this is for

Anyone with a phone, laptop, home router or browser who wants a short routine. It is not written for businesses; the NCSC also publishes organisational guidance.

What you need

• About 20 minutes (our estimate, plus backup time) and your devices.
• A recent backup; the NCSC says before an update is a good time [2].
• Wi-Fi and a charger; Apple’s Mac guide says laptop computers must have the power adapter plugged in to download updates automatically [12].

Why updates matter

The NCSC says patches fix known flaws that attackers can use to compromise devices, which could mean stolen data, encrypted files or a device that stops working [2].

The US Cybersecurity and Infrastructure Security Agency (CISA) keeps a public list called the Known Exploited Vulnerabilities (KEV) catalogue. CISA says it maintains the authoritative source of vulnerabilities that have been exploited in the wild [7], and its directive says known exploited vulnerabilities are a frequent attack vector for malicious cyber actors [8]. As of 6 October 2026, CISA’s machine-readable KEV feed (version 2026.10.04, released 4 October 2026) lists 1,734 vulnerabilities. For 893 of them, the action CISA records is “Apply updates per vendor instructions.” By our count it has 389 entries for Microsoft, 95 for Apple and 75 for Google [6]. The list grows, and these numbers show that fixes exist for many flaws already being exploited; they do not measure your own risk. CISA’s public advice is that with automatic updates devices install updates “without any input from us” [9].

Step by step

Time estimates are ours and exclude backups.

1. Turn on automatic updates on your phone (5 minutes)

   iPhone or iPad. Open Settings, tap General, Software Update, then Automatic Updates. “Automatically Install” downloads and installs updates overnight while charging and on Wi-Fi, and Apple says you are notified first [11]. App Store apps update automatically by default [16].

   Android. Google says most Android system updates and security patches install automatically, and Pixel phones apply them after a restart [17]. For apps, open Google Play, tap your profile picture, then Settings, Network preferences, Auto-update apps, and pick an option such as Update over Wi-Fi only [19].

   Expected result: automatic system and app updates are on.

2. Turn on automatic updates on your computer (5 minutes)

   Windows 11. Microsoft says Windows 11 automatically downloads and installs updates. To check by hand, go to Start, Settings, Windows Update, then Check for updates [22][23]. You cannot stop updates entirely; you can only pause them for a limited time [22].

   macOS. Apple’s current guide says to open System Settings, General, Software Update, then click the information button next to Automatic Updates. You can turn on “Install macOS updates” and “Install Security Responses and system files” [12].

   Expected result: your device says it is up to date [13][22].

3. Check your router (3 minutes)

   We found no current, brand-neutral official router page, so this step is general. CISA’s 2021 home network guidance says to check your router manufacturer’s website to confirm you run the latest firmware, and notes that some routers have an option for automatic updates [10]. NCSC’s 2017 advisory says routers issued by major internet providers may update automatically, while many other Wi-Fi devices need a manual update [5]. If your provider supplied it, ask how it is updated; if you bought it, look up the model on the manufacturer’s site for firmware and a support end date. Use only the manufacturer’s own update method and do not cut the power during a firmware update (our advice, not sourced).

   Expected result: you know whether your router updates itself and who is responsible.

4. Update the browser and its extensions (2 minutes)

   The NCSC says browsers and extensions need keeping current because sites you visit could exploit flaws in them [2]. In Chrome, select More, Help, About Google Chrome, and choose Relaunch if it is offered. Google says updates normally happen when you close and reopen the browser [20].

   Expected result: no pending Relaunch.

5. Check whether each device is still supported (3 minutes)

   The NCSC says it can be hard to find when a product leaves support [2]. Verified as of 6 October 2026:

   • iPhone. Find your model under Settings, General, About [15]. Apple’s guide says iOS 27 works on iPhone 11 and later and the iPhone SE (2nd and 3rd generation) [15]. Apple’s security releases page lists iOS 18.7.10 (17 August 2026) for iPhone XS, XS Max and XR, and iOS 16.7.15 (11 March 2026) for iPhone 8, 8 Plus and X [14]. Apple states no fixed support period on these pages.
   • Mac. Apple’s page lists security releases for macOS Golden Gate 27.0.1, Tahoe 26.7.1 and Sequoia 15.8.1, all dated 28 September 2026 [14]. Software Update shows only releases compatible with your Mac [13].
   • Pixel. Google says Pixel 8 and later get 7 years of OS and security updates from when the phone first went on sale in the Google Store in the US. Pixel 6, 6a, 6 Pro, 7, 7a, 7 Pro and Fold get 5 years. Pixel 5a and earlier no longer receive updates [18]. Google’s availability table gives October 2021 for the Pixel 6 and 6 Pro [28], so their 5 years end about now; check your model’s date.
   • Samsung. Samsung states 7 years of OS upgrades and security updates for the Galaxy Z Fold6 and Flip6, and says other models may differ [26]. The NCSC says to check other Android makers directly [1].
   • Windows. Windows 10 reached end of support on 14 October 2025 [21]. Microsoft’s lifecycle table for Windows 11 Home and Pro lists version 24H2 ending on 14 October 2026 (6:59 am; the table is labelled Pacific Time, so treat 13 October as the safe last day), about a week after 6 October 2026. It lists 25H2 ending 13 October 2027 and 26H2 ending 10 October 2028, with the same caveat [24]. To see your version, go to Settings, System, About, and look under Windows specifications [27].
   • Smart devices. The NCSC says to treat the support date as a “use by” date. New UK law from 29 April 2024 requires smart devices to state a support end date [4]; we did not verify which products it covers.

   Expected result: a list of supported, near-end and unsupported devices.

6. Decide what to do about an unsupported device (variable)

   Microsoft says an unsupported Windows 10 PC keeps working but is at greater risk from viruses and malware [21]. Options, stated neutrally:

   • Upgrade the device you have. Back up first. Microsoft says the Windows 11 upgrade is free for PCs on Windows 10 version 22H2 that meet the hardware requirements; Microsoft’s PC Health Check and Windows Update show eligibility [21].
   • Enrol in extended updates. As of 6 October 2026, Microsoft says consumer Extended Security Updates (ESU) give security updates only (no feature fixes or technical support) for Windows 10 version 22H2, until the programme ends on 12 October 2027 [25]. Microsoft lists three ways to enrol: at no additional cost if you are syncing your PC settings, by redeeming 1,000 Microsoft Rewards points, or a one-time purchase of $30 USD or local equivalent plus tax [25]. You need a Microsoft account with administrator rights, and you enrol in Settings, Update & Security, Windows Update [25].
   • Replace it. Microsoft recommends this if the PC cannot run Windows 11 [21]. The NCSC says you do not need the latest or most expensive model, but should avoid buying phones that are no longer supported [1].
   • Keep using it, with limits. The NCSC’s guidance for organisations says this is never risk-free [3]. Its two ideas are to stop the device reaching untrusted content such as email and web browsing, and to stop it reaching sensitive data or services [3]. It adds that an unpatched browser cannot be fully protected short of blocking internet access [3]. At home, avoid web browsing, email and banking on it. Wiping it only helps temporarily, because the flaw stays [3].
   • Other software. We do not cover installing a different operating system or unofficial firmware. Doing so can erase data and may leave a device unusable or remove its protections; use only the manufacturer’s own options.

7. Handle major upgrades sensibly (2 minutes)

   Some people delay a major OS upgrade to wait for bug fixes or app compatibility. In our view that can be reasonable, but only on a device still on a supported previous major version, and only briefly. NCSC guidance, aimed at organisations that test updates, warns that waiting gives attackers time to work out the patched flaws, and recommends installing updates ideally within a few days [2].

   Where the vendor allows, take the security-only route. As of 6 October 2026, Apple’s security releases page lists iOS 27.0.1 and also iOS 26.7.1 (for iPhone 11 and later), both on 28 September 2026, and likewise macOS 27.0.1, Tahoe 26.7.1 and Sequoia 15.8.1 [14]. So an iPhone 11 or later, or a Mac, can stay on the previous major version and still get fixes, for now. Apple does not say how long this lasts; it does not apply to a phone on iOS 18 or older, nor to Windows. Android is different: Google says to get the latest security update you need the latest Android version available for your device [17]. Windows will eventually require a move, since monthly updates need a supported version [22]. iOS cannot be downgraded after updating [14]; back up your data before any major upgrade.

Mistakes to avoid

• Assuming automatic means working. The NCSC lists causes: the setting is off, no Wi-Fi or power, low storage, or no restart [2].
• Ignoring prompts. The NCSC says not to ignore update prompts [1]. Update only from device settings or the official app store, never a message link; see our phishing guide.
• Leaving an old device on your main accounts. Use two-factor authentication and a password manager on a supported device instead.

How to check it worked

• iPhone: Settings, General, Software Update shows the current version and whether an update is available [11].
• Android: Settings, About phone, Android version shows the security update level [17].
• Windows 11: Settings, Windows Update, then Update history lists what was installed and when [22].
• Repeat monthly; the NCSC advises occasional checks that automatic updates still work [2].

The 20-minute checklist

1. Back up your phone and computer (5 minutes).
2. Switch on automatic updates and app updates on phone and computer (5 minutes).
3. Restart each device and relaunch your browser (3 minutes).
4. Look up the support status of each device and your router (3 minutes).
5. Note devices nearing end of support (2 minutes).

See our digital security hub, the self-audit tool, and how we test.

What we could not verify

• Samsung’s support period for most models. Samsung’s security pages loaded only as scripts we could not read, so we cite one model page [26].
• Any stated Apple support period; its pages list releases, not promises.
• Router steps for specific brands; our router sources date from 2017 and 2021.
• Whether UK smart-device law covers routers.
• Firefox and Edge update steps, and how extensions update.
• Samsung-specific automatic-update steps.
• CISA’s pages refused plain command-line downloads (HTTP 403), so we read them in a browser engine. The KEV figures come from the JSON feed we downloaded directly.

Sources

All fetched 2026-10-06.

1. NCSC: Install the latest software and app updates (https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/install-the-latest-software-and-app-updates), fetched 2026-10-06
2. NCSC: Keeping devices and software up to date (https://www.ncsc.gov.uk/collection/device-security-guidance/managing-deployed-devices/keeping-devices-and-software-up-to-date), fetched 2026-10-06
3. NCSC: Obsolete products (https://www.ncsc.gov.uk/collection/device-security-guidance/managing-deployed-devices/obsolete-products), fetched 2026-10-06
4. NCSC: Smart devices: using them safely in your home (https://www.ncsc.gov.uk/guidance/smart-devices-in-the-home), fetched 2026-10-06
5. NCSC: ‘Krack’ Wi-Fi guidance (2017) (https://www.ncsc.gov.uk/guidance/krack), fetched 2026-10-06
6. CISA: Known Exploited Vulnerabilities catalogue (JSON feed, version 2026.10.04) (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json), fetched 2026-10-06
7. CISA: Known Exploited Vulnerabilities Catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog), fetched 2026-10-06
8. CISA: BOD 26-04, Prioritizing Security Updates Based on Risk (https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk), fetched 2026-10-06
9. CISA: Secure Our World, Update Software (https://www.cisa.gov/secure-our-world/update-software), fetched 2026-10-06
10. CISA: Home Network Security (archived page dated 1 February 2021) (https://www.cisa.gov/news-events/news/home-network-security), fetched 2026-10-06
11. Apple: Update your iPhone or iPad (https://support.apple.com/en-gb/118575), fetched 2026-10-06
12. Apple: Keep your Mac up to date (https://support.apple.com/en-gb/guide/mac-help/mchlpx1065/mac), fetched 2026-10-06
13. Apple: Update macOS on Mac (https://support.apple.com/en-gb/108382), fetched 2026-10-06
14. Apple: Apple security releases (https://support.apple.com/en-us/100100), fetched 2026-10-06
15. Apple: iPhone models compatible with iOS 27 (https://support.apple.com/en-gb/guide/iphone/iphe3fa5df43/ios), fetched 2026-10-06
16. Apple: Update apps from the App Store on iPhone (https://support.apple.com/en-gb/guide/iphone/iph98709f167/ios), fetched 2026-10-06
17. Google: Check and update your Android version (https://support.google.com/android/answer/7680439?hl=en-GB), fetched 2026-10-06
18. Google: Learn when you’ll get software updates on Google Pixel phones (https://support.google.com/pixelphone/answer/4457705), fetched 2026-10-06
19. Google: How to update apps on Android (Google Play Help) (https://support.google.com/googleplay/answer/113412?hl=en-GB), fetched 2026-10-06
20. Google: Update Google Chrome (https://support.google.com/chrome/answer/95414?hl=en-GB), fetched 2026-10-06
21. Microsoft: Windows 10 support has ended on October 14, 2025 (https://support.microsoft.com/en-us/windows/windows-10-support-ends-on-october-14-2025-2ca8b313-1946-43d3-b55c-2b95b107f281), fetched 2026-10-06
22. Microsoft: Windows Update: FAQ (https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2), fetched 2026-10-06
23. Microsoft: Install Windows Updates (https://support.microsoft.com/en-gb/windows/get-the-latest-windows-update-7d20e88c-0568-483a-37bc-c3885390d212), fetched 2026-10-06
24. Microsoft Learn: Windows 11 Home and Pro lifecycle (https://learn.microsoft.com/en-us/lifecycle/products/windows-11-home-and-pro), fetched 2026-10-06
25. Microsoft: Windows 10 Consumer Extended Security Updates (ESU) (https://www.microsoft.com/en-us/windows/extended-security-updates), fetched 2026-10-06
26. Samsung: Galaxy Z Fold6 and Flip6 update policy (https://www.samsung.com/ae/support/mobile-devices/how-many-years-of-updates-can-we-receive-if-we-purchase-the-fold6flip6/), fetched 2026-10-06
27. Microsoft: Find information about your Windows device (https://support.microsoft.com/en-us/windows/find-information-about-your-windows-device-a66d52c8-3323-44fd-8f34-a9497bb935e1), fetched 2026-10-06
28. Google: Find when your Pixel device became available (https://support.google.com/pixelphone/answer/15738422?hl=en), fetched 2026-10-06