Updates, Antivirus and the Settings That Matter

Your computer and phone are built on a main program called the operating system. Windows 11, macOS, iOS (iPhone) and Android are all operating systems. Every program you use sits on top of it. When someone finds a hole in one of them, the maker writes a fix and sends it out as a software update. The sad part is that criminals read the same announcements. Once a hole is public, the race is on: your update against their attack.

CISA, the federal Cybersecurity and Infrastructure Security Agency, puts it simply. It says to install updates quickly, to turn on automatic updates, and to stop choosing "remind me later" over and over. It names web browsers and antivirus software as the first things to keep current. That is the whole idea of this lesson.

Where each update lives

Updates on Android depend on the phone maker and sometimes the phone company. Google says timing varies by device, maker and carrier. Pixel phones get theirs first.

Windows 10: what end of support means for you

On October 14, 2025, Microsoft ended regular support for Windows 10. That does not mean your PC stops working. It means Microsoft stopped sending ordinary free security fixes for it. Over time that makes a Windows 10 computer less safe to use for banking and email, because newly found holes stay open.

Microsoft offers home users a bridge called Extended Security Updates (ESU). Here are the facts as of October 2026, from Microsoft's own page:

Whatever you choose, do not leave a Windows 10 computer with no updates at all and keep using it for banking. If you decide to retire it, copy your files first (the backup lesson later in this course shows how), and then follow the safe disposal steps for old computers. A phone or tablet that no longer receives updates falls in the same bucket. Check the maker's support page for your model.

Antivirus: what you already have, and what paid adds

Antivirus is software that watches for harmful programs and blocks them. You probably already have it.

• Windows 10 and 11. Windows Security is built in and includes Microsoft Defender Antivirus. Microsoft says it starts when Windows starts, runs all the time, and updates its protection by itself. To open it, click Start and type Windows Security, then press Enter. A green check mark on Virus and threat protection means all is well. Click Quick scan if you want to check right now.
• If you install another antivirus. Defender turns off by itself. Microsoft says it turns back on if you remove the other program. Do not run two real-time antivirus programs at once.
• Mac, iPhone and iPad. Apple builds checks into the system that warn you about apps from unknown sources, and keeps the App Store reviewed. You still need updates and careful clicking.
• Android. Google Play Protect scans apps from the Play Store. Install apps only from the official store, which is covered in the phones lesson later in this course.

For most home users, the built-in tool with automatic updates and the five habits from lesson 1 is a sound base. Paid products add things such as web-page warnings, extra scanning, a bundled password manager or VPN, and services that watch for your information on the dark web. Some people find those handy. None of them replace the habits. If you want one, buy it directly from the company's own site or a store you know, not from a pop-up or a phone call.

Browser and extension hygiene

Your browser is the program you use to visit websites: Chrome, Edge, Firefox, Safari. It is the part of your computer that touches the outside world most. A few habits keep it tidy.

• Keep only extensions you use. An extension is a small add-on, like a coupon finder or a PDF tool. Each one can read what you do on web pages. Fake or sold-off extensions have been used to spy. In Chrome, click the three dots, then Extensions, then Manage extensions. Google advises turning on only extensions you trust. Remove anything you do not remember adding. In Edge, type edge://extensions in the address bar. In Safari, open Settings and click Extensions.
• Reset a hijacked browser. If the home page or search keeps changing, use Chrome's Settings, Reset settings, Restore settings to their original defaults, then re-add only the extensions you need. On Windows, check Settings, Apps, Installed apps for unfamiliar programs and uninstall them. On a Mac, drag unwanted apps from the Applications folder to the Trash and empty it.
• Be stingy with notification permission. Some websites ask, "Allow notifications?" Say Block. Fake virus alerts often arrive that way. You can undo past choices under Site settings, then Notifications.
• Download only from the maker. If you want a program, go to the company's own site by typing the address. Search results can be paid ads that lead to fakes. A search for "free PDF reader" can land on a copycat page.
• Close, do not call. If a full-screen warning appears, press the Escape key. If it will not go away, hold the power button to shut down, and restart. Reopen the browser and, if asked to restore pages, choose No.

User accounts: administrator and standard

Your computer has at least one user account. The first one you made is usually an administrator account, which can install programs and change any setting. A standard account can do all the normal things, like email and web, but must enter an administrator password to install or change the system.

Why does that matter? If a bad file runs while you are signed in as an administrator, it can change the whole computer. Under a standard account it hits a wall. So the safest setup is: one administrator account with a strong password that you rarely use, and a standard account for everyday life.

This is an extra step, and many people skip it. If it feels like too much, put it at the bottom of your list. Updates, strong passwords and two-step sign-in matter more.

Screen lock

A lock keeps a lost or borrowed device from becoming a gate to your bank, email and photos.

Pick a code that is not your birth year, address or 123456. Do not tell it to callers. A bank, Apple, Google or Microsoft will never ask for it.

Disk encryption: scrambling what is stored

Encryption scrambles stored data so it cannot be read without the right password. If your laptop is stolen, encryption means the thief gets a locked box and not your tax returns. Most phones now do this by default once you set a passcode. Computers take one setting.

Questions and answers

How do I know an update message is real and not a trick?

Do not click update links in pop-ups, emails or texts. Open Settings yourself, as shown above. A real update lives in Settings, not in a banner on a web page. A browser warning that says "Your Chrome is out of date, click here" is a trap if it appears on a web page, because Chrome updates itself and shows its own prompt in its own menu.

How often should I restart my computer?

At least once a week. Many updates only finish after a restart. If the computer says "restart to finish updating" and you keep postponing, that update is not protecting you.

Do I have to use a Microsoft account on Windows?

For the Windows 10 consumer ESU program, yes: Microsoft says you must sign in with a Microsoft account. For ordinary use, a local account works for many tasks, but some features, such as device encryption turning on by itself with the key saved online, depend on signing in with a Microsoft account. Keep the Microsoft account password strong and protect it with two-step sign-in, which lesson 3 covers.

What does "end of support" mean for my phone?

The maker stops sending security fixes. Apple and Google do not promise the same length of support for every model. Check the maker's support page for your model number. A phone that no longer gets security updates is a good reason to replace it, especially if you bank on it.

My computer says "Your files are encrypted." Is that BitLocker or something worse?

If a message appears while you are using the computer, with a countdown, a payment demand and a way to pay in cryptocurrency, it may be ransomware, not BitLocker. Do not pay. Turn off the computer, disconnect it from the internet and read the "when things go wrong" lesson. If it is a blue screen asking for a BitLocker recovery key after a hardware or software change, that is the real feature, and your recovery key opens it.

Is a cleaner or "PC tune-up" program worth it?

Mostly no. Many are ads, and some are scams. If the computer is slow, uninstall programs you do not use, free some disk space, restart weekly and check the browser extension list. Windows has built-in storage tools under Settings, System, Storage.

How do I know if my router is a type that gets updates?

Lesson 4 covers it. Routers are often forgotten, and the FBI warned in May 2025 about criminals taking over routers old enough to be past their support.

Hard questions

Is the built-in antivirus really enough, or is that what Microsoft wants me to think?

Microsoft built Defender and has an interest in saying it is enough. Independent labs test antivirus products and many rate Defender well. The honest answer is that, for people who update, avoid pirated software and follow the five habits, built-in tools stop most threats, and no antivirus stops a phone call that talks you into paying. If you want proof, look up the latest results from independent test labs such as AV-Test or AV-Comparatives, which publish them free. Pay for extra only if a feature solves a problem you actually have.

If updates fix security holes, don't they also introduce new bugs?

Sometimes. An update can break a printer or change a menu. That is annoying but rarely costly. An unpatched hole can cost savings. The balance favors updating. If an update causes trouble, search the problem on the maker's support page, and ask a family member or the store where you bought the device. Do not search for a phone number to call.

I cannot afford to replace a Windows 10 computer. Am I stuck?

No. Check first whether the free Windows 11 upgrade is offered. If not, the ESU choices run from free (syncing settings with Windows Backup, or earning 1,000 Microsoft Rewards points) to $30, and they protect you through October 12, 2027. Some people also install a different system, such as a Chromebook-style operating system or Linux, but that is a bigger step and best done with a helper you trust. Some libraries, senior centers and nonprofits help with low-cost computers. Call and ask.

Should I let a helper remotely control my computer to do all this?

Only a person you know and trust, whom you called, and who is sitting with you or on the phone. Never let a caller who called you, a pop-up, or a "technician" who found you online control your computer. Remote access is the main tool of the tech-support scam. After any remote session, change the passwords that matter.

Is a standard account really worth the trouble?

It helps, but it is not the top item. If you use it, you must keep an administrator password safe. If you forget it, you may be locked out of changes. For a person who rarely installs software, a standard account is a sensible layer. For someone who installs things weekly, it may feel like a nuisance. Choose what you will actually keep doing.