Skip to content
Some links are advertising or affiliate links. How we make money
THRYV News

Independent reviews, guides and reporting.

Tech

Buying Guide

How long a phone really gets security updates

Support length has quietly become the most consequential specification on a phone — and the one most likely to be missing from the product page.

By THRYV Tech Desk·Published July 27, 2026·Updated July 31, 2026·6 min read

Affiliate disclosure

THRYV may earn a commission when you buy through links in this article. Commissions never influence our testing, scores or rankings, and commercial links are marked as sponsored. How this works.

How long a phone really gets security updates
Tech · Illustration commissioned for THRYV. Photography is replaced with original imagery as each story is produced.

The takeaway

A handset stops being safe to use when it stops receiving security patches, not when it feels slow. Manufacturers publish support commitments in very different places and formats, and the promise attached to a flagship rarely applies to the budget model beside it. Check before buying, because it cannot be changed afterwards.

Battery life and camera specifications dominate phone reviews, but the number that decides how long a device is genuinely usable is the support window. Once patches stop, known vulnerabilities stay open permanently, and banking or authentication apps eventually withdraw support for the operating system version.

Two different promises

Manufacturers usually publish two figures: how many major operating-system versions a device will receive, and how many years of security patches it will get. The second is the one that matters for safety, and it is often longer than the first. A device can be receiving patches while no longer getting new features — that is a perfectly reasonable state to be in.

The clock does not start when you buy it

Support periods generally run from the device's original release date, not your purchase date. A discounted handset two years into its cycle may have far less remaining support than the price suggests.

How to check before buying

  1. Find the manufacturer's own support-lifecycle page and locate the exact model name, not the product family.
  2. Note the original release date and subtract it from the stated support period.
  3. Check whether carrier-branded versions receive patches on the same schedule as unlocked ones.
  4. For second-hand purchases, confirm the device is not carrier-locked or activation-locked before payment.

When support ends

  • Stop using the device for banking, email and authentication first; those are the highest-value targets.
  • A device without patches can still serve as a music player, camera or offline tool on a separate network.
  • Use a manufacturer or retailer take-back scheme for recycling rather than a drawer.

No handset is recommended or scored in this guide. When THRYV completes structured testing of device longevity, results will be published with the methodology attached.

Sources

This article is original writing by THRYV. We link to primary reporting and official documents rather than reproducing them.

  1. Mobile device security guidanceUS Cybersecurity and Infrastructure Security Agency
  2. Device security guidanceUK National Cyber Security Centre
  3. Ecodesign and right to repair for smartphonesEuropean Commission

Why you can trust this article

Written and edited in-house by the THRYV Tech Desk. We do not republish or reword agency copy, and we do not invent quotes, statistics, testimonials or ratings. Where figures move frequently, we point you to the primary release rather than printing a number that will be out of date. Advertising and affiliate partnerships have no influence on our reporting — see our editorial standards, fact-checking policy and affiliate disclosure. Spotted an error? Write to newsroom@thryv-affiliate.com.

General information only. Not personalised financial, medical or legal advice.

Related guides

See all

Related reading

The THRYV Brief

The market in 5 minutes, weekday mornings

Plain-English analysis of the day's financial news, what it changes for households, and the primary sources behind it. No hype, no stock tips.

Free. Unsubscribe any time. We never sell your email address.

Advertisement · Newsletter sponsorship600×120
AURZEN EAZZE D1R Cube — the world's first Roku TV smart projector

Currently showing a THRYV house ad. This position is available to a single sponsor per edition, is labelled in the email and on this page, and does not influence what the Brief covers.