PhoneLifespan
Buying basics

What Happens When Your Phone Stops Getting Updates?

The phone keeps working — that's the trap. Here's the real timeline of what goes wrong in the months after the security patches stop.

By Muhammad Tahir · Updated August 1, 2026 · 7 min read

Here is the most important thing to understand about a phone reaching the end of its software support: nothing happens on the day itself. The screen still lights up, your apps still open, calls still connect. There is no warning banner, no countdown, no forced shutdown. That silence is exactly what makes end-of-support so dangerous — the risk is invisible and it grows quietly, month after month, while the phone feels completely normal in your hand.

So instead of a vague “it becomes unsafe,” let's walk through what actually changes, roughly on what timeline, after a phone stops getting security patches.

The day support ends: the lock stops being changed

A security patch is the manufacturer quietly fixing newly discovered holes in your phone's software before criminals can walk through them. New holes are found every month— that's why patches arrive monthly. When support ends, that monthly fix simply stops. The holes keep being discovered; they just stop being closed on your phone.

On day one you are no less safe than you were the day before. The problem is that your phone is now frozen in time while the world of people trying to break into it keeps moving forward.

Months 1–6: the gap starts to open

In the first few months, researchers and attackers publish details of fresh vulnerabilities in the Android or iOS version your phone is stuck on. A supported phone gets these patched within weeks. Yours doesn't. Each one is a key that now works on your lock and will never be changed.

This is the phase most people never notice, because there is still nothing to see. The phone works. But the list of known, unpatched ways into it is growing — and unlike a years-old exploit, these are current, documented, and trivially searchable by anyone who wants them.

Months 6–12: apps begin to notice

App developers target a range of OS versions, and they drop the oldest ones over time. Within the first year after support ends, you'll start to see it: your banking app warns that your OS is no longer supported, a payment or authenticator app refuses to update, a game or streaming service quietly stops working. None of this is catastrophic on its own, but it's the first time the end-of-life status becomes visible— and it's a signal that the wider software world has already moved on without you.

Year 1–2: the resale value falls off a cliff

This is the part that hits your wallet directly. A phone with years of support left holds its value because the next buyer is buying a usable device. Once a phone is unsupported — or visibly close to it — the second-hand market reprices it as disposable. The drop is steep and it's permanent. This is the hidden cost behind our TrueCostidea: a phone's real value is tied to its remaining support, not its spec sheet, so the moment support runs out the resale floor drops with it.

Year 2 onward: genuinely risky for anything important

By now your phone has gone a couple of years without a single security fix while accumulating dozens of known, public vulnerabilities. For low-stakes use — a media player, a kid's game console, a spare — that can be an acceptable risk. For anything that matters — your email, your banking, your passwords, your photos, the two-factor codes that protect every otheraccount you own — it isn't. The phone is no longer a trustworthy place to keep the keys to your digital life.

How to know how long you've actually got

The whole point of this site is to turn that invisible clock into a date you can see before any of this happens. A few practical steps:

End-of-support isn't a cliff you fall off in one step. It's a slope that gets steeper the longer you stay on it. Knowing where you are on that slope — and how many months are left before it tilts — is the single most useful thing you can know about a phone you own or are about to buy.

What keeps working, and for how long

It is worth being precise about this, because the doom-laden version of this advice is not accurate and does not help anyone plan.

Calls, texts and mobile datakeep working indefinitely. These depend on the carrier network and the phone's modem, not on software updates. The exception is when a carrier retires a network generation entirely — the 3G shutdowns stranded a lot of older hardware — but that is unrelated to update support.

Apps you already have keep working until they are updated in a way that requires a newer OS, which typically takes one to three years after support ends. The Play Store and App Store continue serving you older compatible versions for a while after that.

The browser often outlives the OS by a year or two, because Chrome and Firefox maintain support for older Android versions independently. This matters, because a current browser closes a meaningful share of the practical attack surface even on an unpatched system.

Banking and payment apps are the first things to actively refuse. They perform their own integrity checks and are contractually motivated to be strict. This is usually the point at which people notice their phone has been dropped.

Planning the exit before you are forced into it

The worst version of this is finding out because something broke. The best version is knowing the date eighteen months ahead and choosing your moment.

Look up your phone's end-of-support date on the Longevity Trackerand work backwards. Two years out is when the phone is still worth a useful amount on the used market, so if you plan to sell or trade in, that is the window — our guide on selling before updates end covers the timing. One year out is when you should be watching for a good price on a replacement rather than buying reactively. At the date itself, at minimum move your banking and authentication apps elsewhere.

If replacing is not an option right now

Plenty of people cannot simply buy a new phone when this date arrives, and pretending otherwise is not useful advice. The goal in that case is to reduce what the phone is trusted with rather than to stop using it.

Move banking, payments and two-factor authentication codes to another device or to a laptop. Stop installing new applications. Keep the browser updated even though the OS is not. Remove apps you no longer use, because each one is additional exposure. And avoid using the phone on public Wi-Fi for anything that matters.

Updates stopped — now what? works through this as a step-by-step process, and Android end-of-life optionscovers custom ROMs for anyone technically inclined enough to extend the phone's life properly.

Keep reading

Put it into practice

Check any phone's real expiry date, or see which phones are still safe to buy right now.