My device has no automatic updates: what should I do?

If a device has no automatic update option, install updates as soon as it notifies you, check by hand on a fixed day each week, and ask the maker why there is no auto-update. If updates never come, treat the device as unsupported and plan to replace it.

First, look harder for the setting

CISA says to turn on automatic updates in the device's or application's security settings. It suggests looking in the device's settings, possibly under software or security, and searching the settings for automatic updates. Check the operating system and each app, since each may have its own switch. Also check the companion app, as some devices manage updates there.

If there is no setting

CISA's advice for a product with no auto-update option is to ask your provider why not, and says every product should have auto-updates turned on by default. Meanwhile:

• Install notified updates promptly, especially critical ones.
• Do not keep choosing remind me later.
• Prioritize web browsers and antivirus software.

The CISA update page also notes that automatic updates install without input as soon as available, while manual updates depend on you.

Build a manual routine

Pick a weekly slot. A calendar reminder is enough. In it:

1. Open the app and check for firmware updates.
2. Check the maker's support page for notices.
3. Record the version, so you notice when versions never change.

The NCSC also says to install manual updates promptly when prompted, and turn on automatic updates where the device supports them.

Signs the device is not supported

• The firmware version has not changed for a long time, despite news of problems with the model.
• The support page is gone or the product is listed as discontinued.
• The app no longer works with current phones.

Any of these suggests the maker has moved on. Check whether a support end date was published. If it has passed, treat the device as out of support.

Which devices to check first

You may own more connected devices than you remember. Start with the ones that face outward or hold sensitive data: the router, cameras, doorbells, door controls and anything with a microphone. Then phones, tablets and computers, where CISA says to prioritize web browsers and antivirus software. Last, the low risk items such as bulbs and plugs.

For each one, write down three facts in a note: the name and model, whether it updates automatically, and the date you last confirmed it was current. After a month you will have a list that shows which devices rely on you and which look after themselves.

Reduce the exposure meanwhile

• Turn off remote access if you do not need it. The NCSC advises this.
• Use a strong unique password and two step verification where offered.
• Remove features and accounts you do not use.

When to replace

Replace it when support ends, or when you cannot confirm that updates exist and the device matters, such as a camera or lock. When you replace it, factory reset the old device first.

Quick check

Sources

• CISA: Update software
• NCSC: Smart devices, using them safely in your home

Last reviewed: 19 October 2026.