Match the protection to the device
For personal computers and other home devices you own or are authorised to manage. Windows, Mac, phones, tablets, routers and smart devices do not all run the same security software or offer the same controls. Managed work equipment and employer data need their responsible IT team’s requirements.
Step 1 of 9
In this guide
Identify devices, owners and any active incident
Identify devices, owners and any active incident
List the computers, phones/tablets and connected equipment that hold important information or access your accounts. Record the model, operating system, owner and who maintains it, privately. Include the accounts and ordinary tasks that matter, without putting passwords, recovery codes or full device labels in a shared checklist. Separate employer-managed equipment from personal devices.
Check whether this is prevention or a current incident. If there is a genuine detection, ransom demand, unexpected remote control or unexplained account changes, stop routine setup and use the malware-response guide or responsible incident team. A browser advert claiming viruses is not by itself a genuine system alert; open the real security app independently rather than call the advert’s number.
For an ordinary review, choose one device at a time and preserve its working access and files. Do not install a computer antivirus package on a phone or smart device just because the household uses it elsewhere. Find the manufacturer’s supported controls and who can authorise changes. If ownership or existing protection is unclear, stop and ask before removing software or profiles.
A device list is a starting point, not proof every device is protected. Keep routine prevention separate from active malware, account or workplace incidents.
Keep supported systems and apps current
Keep supported systems and apps current
Use the operating system’s genuine update controls and the publisher’s supported app update route. Include the browser, mail app and software used to open files, not only antivirus definitions. Read restart/power requirements, save work and preserve important records before a planned update. Do not install a driver pack or updater from a pop-up.
Check that the exact system and product still receive the security updates needed for your use. An antivirus subscription does not repair an unsupported operating system. If a device or important app has reached its support limit, keep data/licences and recovery access intact while planning a supported replacement with the responsible person. Do not assume every older computer can run a new OS or that a normal Windows10 installation receives all current security updates.
Phones, tablets and smart devices have their own system, app and sometimes firmware updates. Use the genuine manufacturer/provider process; do not change router firmware during an unstable connection or remove a work-management profile to get around a restriction. The software and driver update guide covers targeted compatibility and recovery checks. If an update fails or required support is unavailable, record that gap for help rather than repeatedly force it.
Record actual support/update status and any unresolved gap. A downloaded installer, paid licence or version number alone does not establish that required protection is current.
Check the active protection and update status
Check the active protection and update status
On Windows, open Windows Security independently and read the protection status. Its Settings > Manage providers view identifies the antivirus, firewall and web-protection providers registered for those functions. If another legitimate product manages protection, use its genuine app and support to interpret its status; do not assume a particular built-in scanner must be the active provider on every computer.
Check for protection that is off, update failure, expired coverage where applicable, pending action or a detection. Antivirus software and its threat intelligence need ongoing maintenance; an old engine or stale detection information can miss newer threats. Microsoft’s virus/threat protection guidance explains supported controls and update status. Follow the installed provider’s instructions, keeping intended protection active; do not turn off tamper protection or add exclusions to silence an error.
A Mac includes built-in malware defences with background security updates and app checks; it does not have the same Windows scan interface. Phones and smart devices differ again. Do not install multiple competing real-time antivirus products, a random mobile cleaner or a tool advertised in a scare message. If status cannot be confirmed or a genuine detection needs action, use the responsible support/incident path. A clean scan is not proof no information or accounts were exposed.
Keep the exact active provider and status result. A visible icon, successful scan or dismissed warning is not complete protection or incident clearance.
More checks6 detailed checks
Use supported app sources and keep warnings effective
Use supported app sources and keep warnings effective
Get needed apps and updates through genuine publishers or appropriate authorised stores. Confirm the exact product and platform; a sponsored result, familiar logo, positive review or encrypted connection does not establish that a download is legitimate. Avoid cracked software, unsolicited browser extensions, macros or scripts supplied to fix an unexpected warning. Do not insert unknown USB storage to investigate its contents.
Keep browser and operating-system warnings in place. If a download or app is blocked, stop and verify the publisher, purpose and supported installation process with the responsible person. Do not bypass the warning, disable malware checks, broadly allow a folder or restore quarantined files because a website says that is required.
Review permissions requested for camera, microphone, files, contacts, accessibility and remote control. Allow only what the understood task needs through the genuine app’s supported process. Some legitimate functions need sensitive access; uncertainty is a reason to verify, not approve everything or revoke every app blindly. Preserve app data and licences before removing an unwanted app, using its supported uninstall route.
Keep necessary warnings and supported access controls effective. A signed/stored app or permission decision reduces one risk; it does not prove all content or future behaviour safe.
Keep everyday accounts and app access appropriate
Keep everyday accounts and app access appropriate
Use an appropriate everyday account instead of routinely approving administrator-level changes. On a shared computer, confirm who owns the device and keep separate legitimate user access where supported. Before changing account roles, retain a known working administrator/recovery route; do not remove the last administrator or another person’s access without authorisation.
Protect important online accounts with unique passwords or supported passkeys and appropriate multi-factor authentication (MFA). Keep recovery methods private and usable. A device screen lock and an online account password protect different access paths. Lock an unattended device and choose suitable automatic-lock behaviour while preserving accessibility and essential tasks.
For work at home, use the employer’s approved account, apps, storage and network access. Do not copy work files into personal sync folders or weaken the required VPN/security to avoid a prompt. Review unfamiliar account or app access with the responsible team; suspected takeover is an account-response task, not resolved by installing antivirus on the computer.
Keep legitimate administration and recovery intact. Separate users, a lock or MFA do not replace supported updates, safe app permissions or investigation of unexplained access.
Review home-network and smart-device support
Review home-network and smart-device support
Check the router and smart devices through their genuine owner apps/manuals for current support, updates and appropriate account access. Replace default credentials through the supported setup where applicable, retaining private recovery. Disable or remove an unneeded feature only when its role and effect on other devices are understood; do not guess router modes, firewall rules or firmware files.
Guest or device-isolation features can limit local access when the actual system supports and implements them, but a network name alone does not prove separation. Preserve intended printer, streaming, accessibility, alarm and other essential dependencies. Medical/alarm/payment equipment needs its responsible provider’s checks before interruption. Ask for help when the roles or supported isolation are unclear.
The official home-device security guidance includes ongoing support, permissions and manufacturer maintenance for connected equipment. Do not assume a recent purchase guarantees long-term updates or that a phone’s security app scans a smart TV or router. Keep unsupported or unmanageable-device risks in a specific replacement/access plan.
Keep the actual device/support boundary clear. Router security, web filtering and endpoint protection have different scopes and do not guarantee every household device is covered.
Keep recoverable backups with separate protection
Keep recoverable backups with separate protection
Identify the files and app records you could not afford to lose. Use an appropriate backup method with version/retention and restore behaviour you understand, stored separately and protected from unauthorised access. A sync folder is not an independent backup: deletion or changed files can propagate. A drive beside the computer or a completed copy dialog does not prove a usable backup.
On a known-good system, test restoring a harmless sample into a separate location and check it opens without replacing the only original. Keep backup credentials/recovery details private. Disconnect or protect offline backup media appropriately when not in use. Do not connect the only backup to a device suspected of infection; use the incident team’s preservation/recovery plan first. Our backup checks cover useful restore evidence.
Some supported security features restrict untrusted app access to protected folders. If considering one, review exact compatibility and test necessary apps with a recovery plan; do not blindly allow every blocked app or treat it as backup. These controls and recovery copies reduce different risks. A protected folder, sync status or clean scan does not guarantee ransomware recovery or undo stolen information.
Keep restore evidence and backup access separately protected. Recovery preparation is not proof of incident cleanup, guaranteed recovery or complete protection from data theft.
Verify protection and ordinary use without dangerous tests
Verify protection and ordinary use without dangerous tests
Review the genuine system/protection status and resolve or record remaining actions with the responsible provider. Check the required updates, account access and backup restore result that were part of this review. If a scan was appropriate for the installed product, record its real result and required actions rather than promise it proves the device safe.
Try ordinary apps, browsing, printing and other agreed home/work tasks. Preserve intended security and privacy boundaries; do not download live malware, deliberately open a phishing page or disable a safeguard to test the setup. If an essential app is blocked, investigate its exact supported access rather than add a broad exclusion.
When intended protections are active, required normal use works and recovery arrangements are understood, stop targeted changes and keep a suitable update/backup/review routine. If warnings, detections or unexplained access remain, use the relevant support/incident path. No checklist or product prevents all threats; keep independent request verification and prompt reporting part of normal use.
Stop unnecessary changes after intended status and normal tasks are verified, while retaining maintenance and unresolved incident actions. This is not a safety certificate or promise no threat remains.
Back to the symptom checkerWhen should you get home-device security help?
When should you get home-device security help?
Get help if intended protection is inactive or cannot update, the operating system is unsupported, recovery/ownership is uncertain or a genuine alert needs response. Managed work devices and essential connected services need their responsible team. Provide the model/system, exact status/error and last change privately; never send passwords, codes or unrestricted remote-access details to an unsolicited contact.
Our malware protection support can help assess the current arrangement and an appropriate next step. Ask which devices/functions are covered, what needs maintenance and how faults or detections are handled.
Agree preservation, access, any interruption and ordinary-use verification. An assessment can recommend better supported protection or recovery arrangements without promising every threat blocked, a device certified malware-free or any particular online-account outcome.
Keep essential use, recovery access and private evidence intact while the specific support gap or incident is addressed. Buying or installing protection is not itself a completed security outcome.
Book IT support
