Phones, computers & home
Do software updates really matter? How to keep everything up to date
“Restart to update” is easy to ignore. But many hacks don’t rely on clever tricks. They use security holes that were fixed months ago, on devices that never installed the fix. Keeping things updated is one of the cheapest and most effective security habits there is.
The short version
Set and forget
- Turn on automatic updates on phones, computers and apps.
- Restart when asked, ideally the same day.
- Don’t forget browsers, routers and smart devices.
- Replace devices that no longer receive security updates.
Why updates matter
When a security flaw is found, the software maker releases a fix in an update. Once that fix is public, attackers study it and scan the internet for devices that haven’t installed it yet. The longer you wait, the more exposed you are.
Patching applications and operating systems are both part of the Australian Signals Directorate’s Essential Eight, its core set of protections for organisations. They matter just as much at home.
Turn on automatic updates
iPhone and iPad
Go to Settings, then General, then Software Update, then Automatic Updates, and turn on both downloading and installing, including security responses. Apps update automatically when App Updates is on in the App Store settings.
Android
Go to Settings, then look for System or Software update (the name varies by brand) and turn on automatic updates. In the Google Play Store, open your profile, then Settings, Network preferences and Auto-update apps. Also check Google Play system update in your security settings.
Windows
Go to Settings, then Windows Update. Install anything waiting, and consider turning on the option to get the latest updates as soon as they’re available. Set Active hours so restarts happen when you’re not working.
Mac
Go to System Settings, then General, then Software Update, and turn on automatic updates, including security responses and system files.
Web browsers
Chrome, Edge, Firefox and Safari update themselves, but often only after a restart. If you rarely close your browser, close and reopen it every few days.
The things people forget
- Your router. See how to secure your home Wi-Fi.
- Smart devices. Cameras, doorbells, TVs and speakers usually update through their app. Check the settings.
- Printers and NAS drives, especially at work.
- Plugins and add-ons, like browser extensions and website plugins. Remove ones you no longer use.
- Old apps you don’t use any more. Deleting them means one less thing to update.
Restart means restart
Many updates only finish installing when you restart. Shutting a laptop lid isn’t the same thing. If your device has been asking for days, save your work and restart today.
When a device stops getting updates
Every phone, computer, operating system and router eventually reaches end of support, after which security flaws are no longer fixed. Using it after that point becomes riskier over time.
- Phones: check how long your manufacturer promises updates for your model. If yours no longer gets them, it’s time to plan a replacement, especially if you use it for banking.
- Windows 10: support ended in October 2025. See our Windows 10 end of support guide.
- Routers: check the manufacturer’s website for end-of-life notices.
If you can’t replace an old device yet, limit what you do on it. Don’t use it for banking, email or work.
For businesses
Updates in a business need a little more structure:
- Use a management tool, such as Microsoft Intune, to push and report on updates across all devices.
- Follow the ASD’s Essential Eight timeframes: for example, at maturity level one, security updates for internet-facing systems within 48 hours when an exploit exists, and updates for everyday apps like browsers and Office within two weeks.
- Keep a list of every device and its support end date, so replacements are planned and budgeted.
- Don’t forget servers, firewalls, VPN devices and line-of-business software, which are frequent targets.
Common questions
Can updates break things?
Occasionally. That risk is much smaller than the risk of not updating. For businesses, test major updates on a few machines first, but don’t delay security updates for long.
My phone says it’s up to date but it’s old. Is that fine?
It might mean there are simply no more updates for it. Check whether your model is still supported.
Do I need to update apps I rarely use?
Yes, or delete them. Unused apps can still have security flaws.
Sources
This guide is general information, not legal or financial advice. If you think you’ve lost money or personal information, contact your bank and the services named above straight away.
Keep reading
Related help
Talk to NovaSoft
Want a hand with this at work?
These guides are free to use. If your business wants help putting the checks, accounts and devices in place, our team can do it with you.