Does Your iPhone Still Get iOS Updates?

Published August 28, 2026 · Last reviewed September 2, 2026

Why we do not print a model list here

Supported-device lists change every year, and a list published today is misleading within months. Apple maintains the authoritative list for the current release, and it is linked in the sources at the bottom of this page. Checking it directly takes thirty seconds and is always right; reading a list on a blog is fast and frequently wrong.

The three-minute check

1. Open Settings, tap General, then About. Note the Model Name and the Software Version.
2. Go back and tap Software Update. If an update is offered, you are still supported — install it.
3. If it says your software is up to date, check whether a newer major iOS version exists.
4. If one does and it is not being offered to you, compare your Model Name against Apple's supported-device list for that release.
5. If your model is absent from that list, support for major releases has ended for your device.

One nuance worth knowing: a device that no longer receives major releases sometimes still receives security-only updates for its last supported version for a period afterwards. Check the Software Update screen periodically rather than assuming nothing will ever arrive again.

What actually happens when support ends

• The phone keeps working. Nothing is switched off, and everything installed continues to run.
• Security patches stop. This is the real consequence. Newly discovered vulnerabilities are fixed in current iOS and not in yours, and because those fixes are published, the weaknesses become publicly known.
• Apps gradually stop supporting it. Developers raise their minimum iOS version over time, so apps stop updating and eventually stop working. Banking apps are often among the first to require a newer version.
• New features never arrive, which is the least important part despite being the most discussed.

How to think about the risk

Action

Assess what the phone is used for before deciding how urgent replacement is.

Why it helps

A phone holding banking apps, email, and password resets carries far more risk unpatched than one used for calls, photos, and a music app.

Verification

You can list what an attacker would gain from compromising this specific device.

Action

Move the highest-risk accounts off it if you cannot replace it immediately.

Why it helps

Removing banking and primary email from an unpatched device reduces the consequence without requiring a purchase.

Verification

Those apps are no longer installed and the device is not a two-factor destination.

Action

Keep the last available version installed, even if it is no longer current.

Why it helps

The final release for your device usually includes accumulated fixes, so an unpatched phone on its last version is meaningfully safer than one several versions behind.

Verification

Software Update says your software is up to date.

Action

Set a replacement date rather than leaving it indefinite.

Why it helps

Unpatched risk grows steadily, and an unstated intention to replace 'soon' typically lasts years.

Verification

There is a date in a calendar.

How long you realistically have

Apple has historically supported iPhones with major iOS releases for a long period relative to the industry, and has issued security updates for older versions beyond that in some cases. The practical planning horizon most people use is that a phone bought new remains fully supported for around five to six years, and that the year support ends is the year replacement becomes a security decision rather than a preference.

That is a planning heuristic, not a guarantee — Apple does not publish a support-length commitment in advance, and the actual duration has varied by model. Treat it as a basis for budgeting, and confirm the current position against Apple’s own list.

The second-hand buying implication

When buying a used iPhone, the remaining support window matters more than the price difference. A phone two generations old at a considerable discount may have two years of updates left; a phone four generations old may have none, which makes it a poor purchase at almost any price if it will be used for anything that matters.

How it works

Apple ties each iOS release to a set of supported devices, determined by hardware capability — processor, memory, and the sensors a release depends on. When a device drops off that list it stops receiving major releases, though it may continue to receive security-only updates for its final version for some time. The two are separate tracks, which is why a phone can be permanently on an older major version and still occasionally receive a patch.

The security consequence of support ending is not gradual. Vulnerabilities are discovered continuously, and each fix Apple ships is documented publicly, including which components were affected. That documentation is valuable to defenders and equally valuable to anyone targeting devices that will never receive the fix, because it identifies exactly what remains open. An unsupported device therefore becomes more exposed over time, not less, even though nothing about it has changed.

App compatibility applies pressure from the other direction. Developers raise their minimum supported iOS version to use newer capabilities and to reduce testing burden, so an unsupported phone gradually stops receiving app updates and then stops running some apps entirely. Banking and payment apps typically move earliest, because they have their own regulatory reasons for requiring a patched platform — which is how the two pressures converge on the same devices first.

Worked example

An iPhone in regular use as a second phone, running an older iOS. The owner's assumption is that it is fine because it works.

The check takes three minutes. The About screen shows the Model Name and a Software Version two major releases behind current. Software Update says the software is up to date — which is the ambiguous result people misread as reassurance. Comparing the Model Name against Apple's supported-device list for the current release confirms it: the model is absent, so major releases ended for this device roughly a year ago.

The risk assessment is what turns that into a decision. This phone holds a banking app, the primary email account, and is the destination for SMS two-factor codes on four services. That is a high-consequence device running without security patches — a materially worse position than the same phone used only for calls and photos.

Rather than an immediate purchase, three things happen in one evening. The banking app is removed and the account's two-factor destination is moved to a supported phone. The email account is removed. A replacement is budgeted for within six months, with a date in the calendar rather than an intention.

The verification is the changed consequence: an attacker compromising this device would now gain photos and a music library rather than banking access and the reset path for four accounts. The vulnerability is unchanged; the exposure is not.