When a Device Stops Receiving Updates: What to Do

At some point the manufacturer stops issuing updates for your computer or phone. The machine keeps working, nothing visibly changes, and the risk starts accumulating quietly.

This is the one hardware deadline that matters, and it is unrelated to how fast the machine feels.

What actually changes

Security flaws stop being fixed. New vulnerabilities are found continuously in every system. On a supported device they are patched. On an unsupported one they remain open permanently, and they are publicly documented — which means attackers know exactly what works.

Risk accumulates rather than appearing suddenly. A device one month past support is barely different. Two years past, it has a substantial list of known unfixed flaws.

Applications stop supporting it. Browsers drop old systems, and a browser that no longer updates is the most exposed thing on the machine, because it processes untrusted content constantly.

Compatibility erodes. New file formats, new websites, new peripherals.

What does not change: the hardware works exactly as before, and everything that ran yesterday runs today.

Finding out where you stand

Look up your specific model and system version. Manufacturers publish support timetables, and the information is public.

Operating systems have end-of-support dates. Windows versions and macOS versions each have a published horizon.

Hardware has a separate horizon. A machine may be unable to run the current supported system version even while that version is supported.

Phones and tablets typically state a support period at launch, now measured in years and disclosed by most manufacturers.

Check your browser separately. It may have stopped updating on your system even if the system itself is still supported.

What is still safe, and what is not

Realistic rather than alarmist.

Reasonably safe on an unsupported machine:

Offline work — documents, photo editing, music production, anything not connected. Playing games that do not need an account. Running specialist software that only exists for that system. Use as a media player on a network you control.

Not safe:

Banking, shopping, or anything involving payment details. Email, because email resets every other account. Anything holding personal data. General web browsing, which is how most compromise arrives. Storing anything you would not want disclosed.

The practical division: an unsupported machine can be a useful offline tool. It should not be your main connected device.

The options

Install a supported system

The best outcome where it is possible.

A lightweight Linux distribution frequently runs well on hardware that the original manufacturer has abandoned, receives security updates for years, and is free. For browsing, email, documents and media it is entirely adequate.

The obstacles: learning a different system, and software that only exists for the original. Neither is as large as people expect if the use is ordinary.

On a Mac, community projects extend support to older hardware, with caveats about reliability.

On Android, custom systems exist with real technical requirements and real risks.

Worth trying first from a USB stick, which runs without installing anything and shows whether your hardware works.

Repurpose it

As a dedicated offline machine for one task.

As a media server on your own network.

As a machine for a child, with the connected activity done elsewhere.

As a test or learning machine, where breaking it costs nothing.

Isolate it

If it must stay connected:

Put it on a guest network, separated from your other devices. See your home network.

Do not sign into anything important on it.

Do not store anything sensitive.

Keep the browser as current as it can be, and use a content blocker.

Accept that this reduces rather than removes the risk.

Replace it

The straightforward answer, and it is worth doing the arithmetic first. See repair, upgrade or replace.

Before you retire it

Get your files off. Everything, not just the obvious folders — check application data, downloads, browser bookmarks and anything stored only locally.

Find the encryption recovery key if the drive is encrypted. Without it, the drive is unreadable afterwards, and this is how people permanently lose their own files.

Sign out of everything, and deauthorise the device in accounts that track authorised devices.

Note licences for software you may want to move.

Wipe the drive properly. Deleting does not remove. See how to wipe a hard drive.

Then dispose or pass it on. Manufacturing accounts for a large share of a device's lifetime environmental cost, so extending its life elsewhere is genuinely better than recycling it early.

Buying with this in mind

Ask about the support period before buying. Manufacturers increasingly publish it, and the difference between two similar devices can be several years.

Longer support is worth paying for, and it is a specification people ignore entirely while comparing processor speeds.

A device with three years of support left is a three-year device, whatever else it offers.

The short version

End of support is the one deadline that matters, and it is unrelated to how the machine feels.

Risk accumulates quietly. The flaws are public and unfixed, which is why attackers find them easily.

An unsupported machine can be a useful offline tool — it should not be where you do banking or email.

Try a lightweight Linux distribution from a USB stick before assuming the hardware is finished.

And find the encryption recovery key before you retire anything, or the drive becomes unreadable.

For broader technical standards and computing references, see NIST Information Technology Laboratory.