Your phone still turns on, still holds a charge, and still does everything you ask of it. The only thing that changed is a line in the settings screen: the last security update was a long time ago, and there will not be another one.
Here is the honest answer. A phone does not become dangerous the day support ends — the risk builds slowly, and for most people it is safe to keep using one for a while, provided you change what you use it for. Move banking, email, and any authenticator app to a supported device, keep the browser and your apps updated (those often keep updating after the operating system stops), and stop installing anything new. Replace it promptly if it is your only phone, if you use it for work data, or when the browser and the apps you rely on start refusing to update — that last one is the point where waiting stops being reasonable.
What actually changes the day updates stop
Nothing visible. No warning screen, no slowdown, no app that suddenly quits. That is exactly why the date passes unnoticed.
What changes is on the other side. Security flaws are found in phone software continuously: one is discovered, the maker patches it, and the patch is described publicly so everyone knows what was fixed. Once your phone is out of support, that cycle keeps running without you, and every published fix for your version becomes a map of a door still open on your device.
This is why the risk grows rather than jumps. A phone one month past its last patch is close to the phone it was last month. A phone several years past it is running software with a long, public, unpatched list.
How to check whether your phone is still getting updates
Do this before you plan anything, because plenty of phones people assume are abandoned are not, and vice versa.
- On Android: Settings, then About phone (or Settings, Security), and look for the Android security update or security patch level date. That date is the answer.
- On iPhone: Settings, then General, then Software Update. If the phone offers a current version, it is supported. If it is stuck several major versions behind and reports it is up to date, support has ended.
Then compare that date with today. A gap of a couple of months usually means nothing — patches roll out in batches and some makers are slower than others. A gap of a year or more means you are past the end, whatever the screen says.
Also check the second clock. The operating system and your apps update separately, so the browser, the app store, and individual apps often keep receiving updates for a while after the OS stops. That extra runway is real, and it is what makes waiting reasonable at first.
The signals that mean replace it now
Any one of these is enough. They are ordered by how directly each one exposes something you cannot easily recover.
- It is your only phone, and it holds your bank app, your main email, or your two-factor codes. Those three accounts are the keys to everything else you own online.
- Your browser has stopped updating. The browser is the part of the phone most exposed to the outside world, and an unpatched one is the most likely way a problem actually reaches you.
- A bank, payment, or work app now refuses to run on your OS version. Companies drop old versions for security reasons; treat it as their security team telling you something.
- You use it for work data or a company account. That is not only your risk to take, and many employers have a policy on it.
- It has started missing app updates generally, so you are pinned to older versions of everything, and the newest security fixes never arrive.
- You install new apps regularly, which is the most common route for something unwanted to get onto a phone that can no longer defend itself.
The signals that mean you can reasonably wait
- It is a second device — the tablet-in-the-kitchen role, a spare, a travel phone, a phone for a child that mostly plays offline games.
- You use a handful of well-known apps and little else, and you are not installing new ones.
- The browser and your apps still update, which means the most exposed layer is still being maintained.
- You have moved the sensitive accounts off it already — banking, primary email, authenticator, password manager.
- It lives on your home Wi-Fi rather than hopping between public networks.
- Nothing else is wrong with it. If the phone is fine, the update question is the only question — and if it is also slow, work through the real causes of a slow phone first, because that is usually fixable and cheaper.
What it costs you to replace too early
This side of the trade-off gets ignored, and it is a real cost.
You spend money you did not have to spend, on a phone whose main advantage is that its support window has not run out yet. You lose a working device — and a phone that gets replaced early usually ends up in a drawer, which is the worst outcome for both your wallet and the pile of electronics nobody knows what to do with. You also spend an afternoon migrating, re-logging into everything, and re-learning small habits.
There is a subtler cost. Replace in a hurry and you buy on price, screen, and camera without checking how long the new phone is promised updates for. Support windows vary widely between makers and between models from the same maker, and a cheaper phone with a long stated window outlasts a fancier one that is abandoned early. Hurrying is how people end up repeating this decision far sooner than they expected.
What it costs you to wait too long
The failure here is not dramatic and it is rarely obvious. Nobody watches a phone get compromised.
What happens is quieter: a booby-trapped page or a malicious app exploits a flaw that was patched everywhere except on your device, and something on the phone gets read that should not be. If that phone holds your email, the damage is not confined to the phone — email is how password resets work, so it is the account that unlocks the others. If it holds your authenticator codes, the same logic applies with a shorter path.
The cost is therefore measured in recovery, not in hardware: frozen cards, a bank fraud process, locked accounts, contacting everyone whose details were in your messages. That is the asymmetry that should drive the decision. Replacing a year early costs the price of a phone. Waiting a year too long can cost a great deal more, and the loss is not one you can shop your way out of.
There is also a mundane version of waiting too long: an app you depend on stops working the week you need it, on a trip or at a checkout, and you replace the phone under pressure with no time to choose well.
How to make an unsupported phone safer while you decide
If you have judged that you can wait, these steps carry most of the benefit and take about an hour:
- Move the sensitive accounts off. Banking, primary email, authenticator app, password manager — onto a supported device. This is the single highest-value step, and it changes what a problem on the old phone could actually reach.
- Update everything that still updates. The browser first, then the app store, then every app.
- Delete apps you do not use. Fewer apps means fewer ways in, and old unmaintained apps are the weakest of them.
- Stop installing new apps, and install nothing from outside the official store.
- Do not log into anything important on public Wi-Fi with it.
- Take a proper backup now, so the phone can be wiped or abandoned at any moment without losing anything — our guide to backing up your phone covers both platforms.
- Give it a job instead of a retirement. Music player, alarm clock, sat-nav, camera, kids' offline games, spare travel device. An unsupported phone doing something offline is a genuinely useful object.
The habits that matter most on any phone, supported or not, are in our phone privacy and security guide — screen lock, app permissions, and where your accounts actually live.
FAQ
Does a phone stop working when security updates end?
No. It works exactly as it did the day before. The only change is that newly found flaws in its software will not be fixed, which is why the risk grows with time rather than arriving all at once.
Do apps keep updating after the operating system stops?
Usually for a while. Apps and the app store update on their own schedule, and that extra runway is what makes it reasonable to keep an old phone in a limited role. When apps start refusing to update, the runway has ended.
Will an antivirus or security app protect an unsupported phone?
Not really. Those apps can flag known bad downloads, but they cannot patch a flaw in the operating system itself. Treat one as a small extra, never as a replacement for support.
Can I install a different operating system to keep getting updates?
Some people do it happily, but it is a technical job with real trade-offs: banking apps often refuse to run, some hardware features break, and a mistake can leave the phone unusable. It is not a general answer.
How do I avoid this decision landing so soon next time?
Check the promised support window before you buy, not after. Makers publish how many years of OS and security updates a model will get, it varies far more than the price does, and it is the single specification that decides how long the phone stays safe to use.
Support ending is a prompt to change what the phone does, not an emergency. Move the accounts that matter to a supported device, keep the browser current, install nothing new, and set your own replacement trigger — the day the browser or your bank app stops updating is a good one. For more plain-language guides to your phone and the settings worth changing, visit CNTechApp.
