The specification that determines how many years a connected device is safe to keep is rarely printed anywhere near the price. Software support windows decide when a phone stops getting security patches, when a smart lock stops receiving firmware fixes, and when a streaming box stops running current apps. Here is how to find the answer before you buy, and what to do when the window closes.

Phones and tablets: the numbers have improved

Phone makers now publish support commitments, and the range is wide. Flagship phones from the largest vendors commit to five to seven years of operating system and security updates from the release date. Mid-range and budget models frequently get two to four years, and some carrier-exclusive models get less.

The important detail is that the clock starts at the model's release, not at your purchase. Buying a two-year-old phone on clearance with a four-year commitment leaves you two years of patches. That can be a fine trade, but it should be a decision rather than a surprise. Search the manufacturer's support page for the exact model and the phrase "security updates until" before you buy.

Smart home devices: look for a published end-of-support date

Connected locks, cameras, thermostats, doorbells, and hubs depend on a cloud service. When that service is retired, the hardware often loses most of its function. This has happened repeatedly across the industry, including devices that were still being sold months before the shutdown announcement.

Before buying, check for three things:

  • A published support policy with a minimum number of years, ideally stated as a calendar date
  • Whether the device works locally without the cloud, for example over Matter, Zigbee, Z-Wave, or a local API
  • Whether a subscription is required for the features you actually want, and what happens to those features if you cancel

Devices that support local control are meaningfully more durable. A camera that records to a local card or network drive keeps recording after a service shuts down. A camera that only uploads does not.

Routers are the most neglected device in the house

A home router is directly exposed to the internet and is a favorite target. Consumer routers typically receive firmware updates for two to five years after release, and many owners never install one. Two habits fix most of the risk: enable automatic firmware updates if the router offers them, and check the manufacturer's support page once a year to confirm the model is still receiving them.

When a router reaches end of support, replace it. There is no safe way to keep running an internet-facing device that no longer receives patches, and router vulnerabilities are exploited at scale rather than individually.

Televisions and streaming boxes age differently

A television's panel will outlast its software by many years. Smart TV platforms typically get app updates for four to six years, after which streaming apps begin dropping support and the interface slows. This is not a safety emergency, since a TV can be treated as a display, and it is an argument for buying a good panel and adding an inexpensive streaming stick that can be replaced for a modest sum every few years.

What to do when support ends

An unsupported device does not have to be thrown away. It has to be contained.

  • Put it on a guest or IoT network segment so it cannot reach your computers and file shares
  • Turn off remote access and any port forwarding you set up for it
  • Disable universal plug and play on the router, which is what silently opens ports
  • Remove saved credentials, and change any password you reused elsewhere
  • Keep it offline entirely if its function does not require the internet

An old tablet makes a perfectly good offline music player or recipe screen. An old phone with a support window that closed years ago is not a good place for a banking app.

Ask before you buy, not after

Support windows are a competitive feature, and vendors that offer long ones say so plainly. When you cannot find a stated policy for a connected product, that absence is the answer. Factor it into the price: a lock that will be supported for a decade and a lock with no published commitment are not the same product even when they cost the same.