Software Updates & Patching
Software updates fix security holes that criminals actively use to break into phones and computers. Once a fix is released, attackers study it and target people who haven’t updated. Turning on automatic updates is one of the easiest, most effective security steps there is.
- Everyone
- Small businesses
What to keep updated
- Phone operating system (iOS or Android)
- Computer operating system (Windows, macOS, ChromeOS)
- Web browsers (Chrome, Edge, Safari, Firefox)
- Apps, especially banking, email, messaging and work apps
- Home router and Wi-Fi equipment. See Home Wi-Fi
- Smart devices: cameras, doorbells, TVs
- Security software built into or installed on your computer
Turn on automatic updates
- Turn on automatic updates in your phone and computer settings, and in each app store.
- Restart when prompted. Many updates only finish after a restart.
- Keep enough storage space free so updates can install.
- For work devices, follow your company’s update schedule and don’t postpone critical updates.
Fake update warnings
Criminals use fake “Your browser is out of date” or “Install this update” pop-ups on websites to trick people into installing malware. Real updates come from your device’s settings or official app store, not from a web page or an email link. See Tech Support Scams.
End-of-life devices
When a phone, computer or router stops getting security updates, new holes never get fixed. Check whether your device still gets updates. If not:
- Plan to replace it, especially if you use it for banking or work.
- Don’t use it for sensitive accounts in the meantime.
- Wipe it before selling or recycling it.
Antivirus and built-in protection
Modern Windows and Mac computers include built-in malware protection; keep it on and updated. Avoid “free” security tools from pop-ups or unknown websites. Phones are best protected by updates and installing apps only from official app stores. See Smartphone Security.
Standards & references
- CISA: Update software
- See also: Online Safety Basics
Last updated: