iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Short answer: you cannot make an unsupported gadget fully secure with a setting, antivirus program, or accessory. Once security updates stop, newly discovered flaws remain unpatched and the device may lack newer protections. You can, however, reduce exposure and limit the damage a compromise could cause while you arrange offline use, replacement, or retirement. The UK National Cyber Security Centre (NCSC) describes these as temporary risk controls, not a risk-free way to keep using obsolete products.
First verify support for the exact model and every software layer. Then remove network access the gadget does not need, keep it away from sensitive accounts and devices, update all supported components, strengthen credentials, monitor for trouble, and set a firm exit plan.
What “no longer receives updates” really means
A gadget can continue to turn on and run apps after its security-support period ends. That does not mean it remains supported. The manufacturer may stop issuing fixes for the operating system, firmware, drivers, browser, or other built-in components. Attackers can then exploit newly discovered weaknesses indefinitely on that model or software version.
Unsupported status also means the device may lack mitigations introduced in newer generations. Ordinary antivirus, a new case, or a different password cannot repair a vulnerability in an unpatched operating system or firmware. The NCSC says the only fully effective mitigation is to stop using the obsolete product; its guidance is intended to reduce risk while migration is pending, not to promise safety. Read the official guidance at NCSC: Obsolete products.
#1 Best Overall
Risk is not identical for every gadget. An offline music player has a different exposure from an internet-facing router, a phone used for banking, or a camera that controls a door. Decide based on what the device connects to, what it contains, and what a compromise could affect.
Confirm exactly what has reached end of support
Do not rely on the purchase date, a warning from a friend, or the age of the brand. Support can differ by model, regional edition, processor, carrier variant, operating-system release, and firmware branch. Check the manufacturer’s support page for the exact model number and record the published end date or final security-update version.
Audit each layer separately:
- Device model, hardware revision, and region or carrier variant.
- Operating-system version and security-patch level.
- Firmware, bootloader, drivers, and vendor components.
- Browser, document reader, media player, and other internet-facing apps.
- The mobile or desktop app used to administer a smart gadget.
- Cloud service support, account requirements, and remote-access features.
A current browser does not make an unsupported operating system supported, and an updated management app cannot repair a flaw in an old smart-device firmware. The NCSC’s keeping devices and software up to date guidance explains why every supported component must be patched and why failed automatic updates need checking.
Free tools Windows power users keep installed
One-click scans. No signup required.
Record the evidence
Write down the model, serial or hardware revision (without publishing it), operating-system and firmware versions, the date of the last security update, and the support-page URL. Note whether the maker offers a final update, an extended-support channel, or recovery instructions. If no clear date is published, treat the support status as uncertain and ask the manufacturer before exposing the device to sensitive work.
Do these steps before continuing to use the gadget
- Back up important data. Copy photos, documents, contacts, authenticator recovery codes, and device configurations to a supported destination. Do this before a major update, reset, migration, or replacement.
- Install every legitimate update still available. Turn on automatic updates, apply pending manual updates, and restart when required. Verify the new version or patch date after installation rather than assuming the process succeeded.
- Update supported software around the gadget. Patch browsers, apps, antivirus if you use it, the computer or phone that administers the device, and the router firmware. An app update helps only the app; it cannot fix an unsupported operating system or firmware.
- Remove unneeded network paths. Disable remote administration, unused radios, discovery, file sharing, and cloud features. Disconnect equipment that no longer has a purpose.
- Choose offline operation where possible. If the core task works without internet or local network access, keep the gadget disconnected except when a necessary transfer is performed from a trusted, supported device.
- Separate it from sensitive systems. Place a networked gadget on a separate guest or IoT network when your router supports that feature. Do not let it reach banking, work, password-manager, backup, camera, microphone, door-lock, or other high-value services.
- Harden accounts and network settings. Replace default and reused passwords with unique ones, enable two-step verification where offered, change default router credentials, and enable modern Wi-Fi encryption. These controls reduce account and network abuse but do not patch the obsolete gadget.
- Set an exit date and review it. Reassess whenever a new vulnerability, service change, or safety concern appears. Arrange replacement, retirement, or a supported alternative rather than allowing temporary use to become indefinite.
Reduce exposure: keep the old gadget away from attacks
Disconnect when connectivity is not required
Removing an internet or local-network connection closes the most direct remote attack route. Unplug Ethernet, disable Wi-Fi or cellular data, and turn off Bluetooth or other radios when the task does not need them. For a smart device, disable away-from-home control and vendor remote access unless you have a specific reason to keep them.
Rank #2
Offline use is not a complete guarantee. Malicious files, removable media, local attackers, and unsafe computers can still introduce problems. Transfer only the files you need, scan them on a supported system, and avoid opening untrusted documents or installing unknown software on the old gadget.
Constrain network access when it must connect
Use your router’s guest or IoT network, client isolation, and outbound controls if available. Do not expose the gadget directly to the internet with port forwarding or a public management interface. Turn off universal plug-and-play port mapping when you do not need it. Keep administrative access limited to a trusted local device and disable it from the WAN.
Segmentation limits what a compromised gadget can contact; it does not make the gadget trustworthy. A vulnerable router deserves particular caution because every connected device depends on it. The Federal Trade Commission’s Securing Your Internet-Connected Devices at Home advises changing default router credentials, enabling encryption, and checking for firmware updates.
Limit the damage if compromise occurs
Assume the old gadget could eventually be compromised and design around that possibility. Do not sign in to sensitive accounts from it when another supported device is available. Avoid storing passwords, payment details, identity documents, private work files, health records, or recovery codes on it. Sign out of accounts you no longer need and revoke the gadget’s sessions or tokens from the account’s security page.
Keep it away from devices and services whose compromise would spread harm. A smart speaker should not administer a door lock unless necessary; an old computer should not hold the only copy of your backups; an unsupported phone should not be your sole two-step-verification device. Use least privilege for shared folders, disable unnecessary administrator accounts, and remove old paired devices.
For a router, replacement is usually stronger than attempting to protect an obsolete firmware base. Before buying, confirm the candidate’s stated security-support period, firmware-delivery method, encryption options, and compatibility with your connection. A new router protects the network path; it does not patch an old phone, computer, or smart-home gadget connected to it.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsDevice-specific guidance
Phones and tablets
Mobile security depends on the operating system, browser engine, apps, cellular components, and vendor services. Keep the device offline or use it only for low-risk tasks if the operating system no longer receives security patches. Do not use it for banking, primary email, password management, work administration, or as the only authenticator for important accounts. Browsers are especially exposed because they process complex, hostile web content; the NCSC specifically highlights their vulnerability.
Remove unsupported apps, disable sideloading and unknown sources, and install only still-supported apps from the official store. If an app requires an old operating-system version, treat that combination as unsupported even if the app itself shows a recent release.
Computers
An unsupported desktop or laptop should not browse arbitrary websites, open unsolicited documents, or handle sensitive accounts. If you must keep a legacy application, disconnect the computer from the internet, use it for that single task, and transfer files through a supported intermediary after scanning. Keep backups offline or otherwise protected from ransomware access.
Updating antivirus may improve detection, but it cannot compensate for an unpatched kernel, browser, driver, or document parser. Do not mistake a current security product for vendor support.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #4
Routers
Check the exact hardware revision and firmware-support policy. Change the router’s default administrator password, enable current Wi-Fi encryption, disable remote administration and unused services, and install every available firmware update. If the router itself has reached end of support, replacement is the safer general choice because an attacker who controls it can observe or redirect traffic and attack other devices.
Smart-home gadgets
Change default passwords, enable two-step verification when offered, disable remote access you do not need, and review which accounts and integrations can control the device. Follow the maker’s reset and recovery procedure if the gadget behaves suspiciously. A factory reset may remove existing malware or personal data, but it does not repair the vulnerability that allowed compromise.
The UK NCSC tells consumers to treat a support date like a “use by” date. In the UK, smart-device products have been subject to basic product-security requirements, including stating an end-of-support date, since 29 April 2024. That legal statement is UK-specific and should not be generalized to other countries. See NCSC: Smart devices in the home for the consumer checklist.
Devices you no longer use
Disconnect unused equipment from power and networks. Before selling, donating, or transferring it, follow the manufacturer’s model-specific factory-reset instructions and remove personal accounts, paired devices, SIM or memory cards, and cloud access. The reset is for data removal; it does not extend security support.
Choose: continue briefly, isolate, or replace
Use these questions to make the decision rather than relying on age alone:
- Is the operating system or firmware still receiving security fixes?
- Must the gadget connect to the internet, process untrusted content, or accept remote commands?
- Does it store or reach sensitive accounts, files, cameras, microphones, payment data, or home controls?
- Could compromise affect other devices, other people, or physical safety?
- Is a supported replacement or genuinely offline workflow practical?
| Option | When it fits | Controls and residual risk |
|---|---|---|
| Continue briefly with controls | Replacement is delayed; the task is low-risk and the gadget can be constrained. | Patch all supported components, remove unnecessary connectivity, isolate it, use no sensitive accounts, and review frequently. Unpatched flaws remain. |
| Isolate or use offline | The core function does not require internet or local-network access. | Disconnect radios and cables, transfer only necessary files, and use a supported intermediary. Local media and malicious files can still create risk. |
| Replace or retire | The product is internet-facing, handles sensitive data, controls safety-critical functions, or cannot be constrained. | Move data and accounts to a device with a published support period; securely reset and disconnect the old one. |
The NCSC’s obsolete-product guidance says, “This guidance does not provide a risk-free way of continuing to use obsolete products, but will help to reduce the risks of doing so.” Its stronger conclusion is: “The only fully effective way to mitigate this risk is to stop using the obsolete product.”
Warning signs that should end temporary use
Retire or isolate the gadget immediately if you see unexplained account-login alerts, new administrator accounts, settings that change without permission, unknown apps, persistent pop-ups, unusual outbound traffic, disabled security controls, overheating, battery drain, or smart-home actions you did not request. Disconnect it from networks before investigating from a supported device.
For a smart device, use the manufacturer’s reset guidance, change associated account credentials from a clean device, revoke sessions, and check other devices on the same network. A reset can clear an existing infection but does not remove the underlying unsupported flaw, so do not return the product to its former internet-facing role.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Build a practical retirement plan
- Inventory dependencies: list accounts, files, accessories, subscriptions, automations, and peripherals tied to the old gadget.
- Move identity and recovery functions: transfer authenticator codes, passkeys, contacts, and recovery methods to a supported device before wiping the old one.
- Migrate data: create and verify at least one usable backup; export photos, documents, settings, and recordings in standard formats.
- Replace integrations: update smart-home routines, router rules, printer pairings, and application permissions.
- Remove access: sign out, revoke sessions and API tokens, remove the device from account dashboards, and cancel unnecessary cloud services.
- Reset and dispose responsibly: perform the model-specific factory reset, remove storage and SIM cards where applicable, and use an appropriate electronics-recycling or secure-disposal route.
If replacement must wait, set a calendar review and record the conditions that will trigger earlier retirement: a newly disclosed vulnerability, loss of a required service, inability to isolate the device, or any sign of compromise.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
