What’s the difference between a patch and an update?
It's likely you've seen update notifications on your phone, tablet, laptop or software packages. The update might add new features or functions to your device. It could also upgrade your operating system (the core software that runs the device).
But sometimes, an update will include a patch. And understanding what a patch is (and why it's important) could protect your from a cyber attack.
From time to time researchers or companies will identify a security vulnerability in a device or software. Hackers can use these vulnerabilities can to access your software or device. Once they're in, they can steal information or money.
Because security weaknesses put you at risk, tech companies will write a piece of code to fix it. This code is known as a patch.
Why should I install patches?
Many of us don't install updates and patches. We might feel that it will take too long, or fear that installing updates will slow down our device.
But installing patches is a simple and free way to protect yourself from cyber attacks. You don't need specialist knowledge or money to install a patch. And each patch you don't install leaves you a little more vulnerable to attacks.
While installing patches is a good place to start, it's even better if you install them regularly. This is because there's often a delay between finding a security vulnerability and creating a patch for it. This delay can be anything from days to months. And during that time cyber criminals, hackers, and fraudsters can use that vulnerability to launch attacks.
The longer you wait to install a patch, the more time criminals have to act against you. So we recommend setting a regular note in your calendar to check for - and install - updates and patches.
What if there are no patches available?
There will come a point when companies stop producing patches for some of their products. This is especially the case with devices like laptops, phones, tablets and smart devices. When this happens, we refer to the device as being ‘end of life’ or 'out of support.'
We recommend that you avoid using devices that are out of support. That's because any future security vulnerability won't be fixed, and that leaves you at a higher risk of attack.
Sometimes, technology companies will extend the life of a product, but you'll usually have to pay. For example, Windows 10 was due to go out of support in October 2025. Microsoft have said they'll provide security updates for three more years, at a price. If you're using Windows 10, you should pay for the extended updates to keep yourself protected.
But, this example is rare. In most cases, you should assume that an out of support product is no longer protected. We recommend that if the device is out of support, you should replace it.
What can I do?
The best thing you can do is to regularly check your devices and systems for updates and patches, and install them.
You can also find out more using these resources below:
Find out if your device is no longer receiving security updates (endoflife.date)
Find guidance on how to turn on automatic updates under the heading More Information. (NCSC)
