Why old devices become a security risk
In short: Devices become risky not because they wear out but because their makers stop sending security updates. Each new flaw then stays open forever. The UK National Cyber Security Centre says the only fully effective fix is to stop using obsolete products. If you cannot replace something yet, limit what it can reach and what it is used for.
Working is not the same as safe
A ten-year-old router may still give you Wi-Fi, and an old tablet may still play videos. But software ages differently from hardware. New flaws are discovered every month in older software too. If the maker no longer provides updates, those flaws are never fixed, and attackers know it. Our explainer Windows 10 end of support is one high-profile example.
What the experts say
The UK National Cyber Security Centre (NCSC) warns that obsolete products no longer receive fixes for known or new vulnerabilities, often lack modern protections and make serious incidents more likely, including malware spreading across a network. Its advice is direct: the only fully effective way to remove the risk is to stop using the obsolete product. Where that is not yet possible, it recommends reducing both the chance and the impact of a compromise.
Which old devices matter most
| Device | Why it matters |
|---|---|
| Router | Faces the internet directly and protects everything behind it. Old routers are frequently hijacked into botnets. |
| Phone | Holds banking apps, email and 2-step codes. |
| Laptop or PC | Used for email, documents and web browsing, the main routes for attacks. |
| Network storage, cameras, smart gadgets | Often left online for years without updates. See Plex2Shell. |
| Business firewalls and VPNs | Prime targets for attackers; government agencies have repeatedly warned about end-of-life edge devices. |
How to find out if something is still supported
- Check the maker's support or "end of life" page for your exact model.
- Look at when the last update was installed. If it was more than a year ago and nothing is waiting, it may no longer be supported.
- For phones, check how many years of updates the maker promised from the release date.
If you cannot replace it yet
- Change what it is used for: an old tablet can play downloaded music or show recipes offline, but should not be used for banking.
- Limit what it can reach: put it on a guest network, or disconnect it from the internet entirely.
- Remove what you do not need: delete accounts, saved passwords and unused apps.
- Keep the browser updated separately for as long as possible.
- Set a deadline to replace it, and stick to it.
Tip: Replace the router first. It is usually cheap, it protects everything else, and many internet providers will send a newer one if you ask.
Buying with the future in mind
When you buy, compare support periods as carefully as price. New EU rules require at least five years of operating system updates for phones and tablets, and the Cyber Resilience Act will require makers to state support periods. See Longer-lasting phones and the Cyber Resilience Act.
Do not forget to recycle safely
When you finally retire an old device, reset it fully, remove SIM and memory cards, and sign out of your accounts so it no longer appears in your device lists. Then recycle it through a proper electronics scheme, many of which are run by shops and local councils.
Key takeaways
- Devices become risky when updates stop, even if they still work.
- The NCSC says the only fully effective fix is to stop using obsolete products.
- Routers, phones and internet-facing gadgets matter most.
- If you cannot replace something yet, limit its use and network access and set a deadline.
Sources and further reading
© 2026 FM TecHub. Original content written for FM TecHub. Share the link freely; please don't copy the text elsewhere without permission.