First, check that your iPhone really can’t update
Many iPhones that “can’t update” are actually compatible. Apple confirmed at WWDC in June 2026 that iOS 27 would support every iPhone that runs iOS 26. It released iOS 27 on September 14, 2026, for these models:
- iPhone 11, 11 Pro and 11 Pro Max, and iPhone SE (2nd and 3rd generation)
- every iPhone 12, 13, 14, 15, 16 and 17 model, including the 16e, 17e and Air
- iPhone 18 Pro and 18 Pro Max
If yours is on that list, go to Settings > General > Software Update. Apple’s troubleshooting page gives four reasons a compatible phone won’t update:
| What you see | Likely cause | Fix (from Apple) |
|---|---|---|
| Not enough space | The update needs free storage | Settings > General > iPhone Storage, then Enable next to Offload Unused Apps |
| “Unable to Check for Update” | The phone can’t reach Apple’s server | Try another Wi-Fi network, or update from a Mac or iTunes |
| Download takes hours | Slow connection | Use Wi-Fi and pause other downloads |
| Update won’t finish | Low battery or a stuck download | Plug in. If it still fails, delete the update in iPhone Storage and download it again |
To find your model, open Settings > General > About and look at Model Name. If it says iPhone XS, XS Max, XR or anything older, it really can’t get iOS 27, and the rest of this page is for you.
Where each older iPhone stops
Each older iPhone is frozen on the last major version it supported, and Apple still releases occasional point updates for those versions. This is the state of play on Apple’s security releases page, checked October 20, 2026:
| iPhone | Last iOS | Latest update | Released |
|---|---|---|---|
| XS, XS Max, XR | iOS 18 | iOS 18.7.10 | August 17, 2026 |
| 8, 8 Plus, X | iOS 16 | iOS 16.7.16 | May 11, 2026 |
| 6s, 7, SE (1st gen) | iOS 15 | iOS 15.8.8 | May 11, 2026 |
| 5s, 6, 6 Plus | iOS 12 | iOS 12.5.8 (no security fixes listed) | January 26, 2026 |
The iPhone 5s and 6 are the only ones in this table whose security fixes have clearly stopped. Their last security fix, iOS 12.5.7, came on January 23, 2023. Apple did release iOS 12.5.8 in January 2026, but its security page lists no published CVE entries for it.
How long Apple keeps patching a phone it has dropped
Apple publishes no end date. Its record shows it usually keeps fixing a dropped iPhone for about three years or more after the new iOS leaves it behind. The iPhone 6 got iOS 12 security fixes for 40 months after iOS 13 arrived. The iPhone 6s and 7 are 44 months past iOS 16 and still received a fix in May 2026.
The length isn’t the whole story, though. What matters is how much each update fixes. Apple’s own advisories show a steep drop once a phone is two versions behind:
| Update | For | Security fixes listed |
|---|---|---|
| iOS 27 (September 14, 2026) | iPhone 11 and later | 145 |
| iOS 18.7.10 (August 17, 2026) | XS, XS Max, XR | 131 |
| iOS 16.7.16 (May 11, 2026) | 8, 8 Plus, X | 1 |
| iOS 15.8.8 (May 11, 2026) | 6s, 7, SE (1st gen) | 1 |
Counts are CVE entries on each update’s Apple security page. Both May updates for iOS 15 and 16 fixed one issue: notifications marked for deletion could stay on the phone.
So an iPhone XS or XR is still well looked after, about a year into life on iOS 18. An iPhone 8, X, 6s or 7 gets fixes mainly when something serious is being exploited. That’s a narrow kind of protection.
The risks that actually matter
The biggest risk is a booby-trapped web page, not a virus you install. In April 2026 Apple published a page about web-based attacks aimed at out-of-date versions of iOS. It said that tapping a malicious link or visiting a compromised site could expose your data. MacRumors reported the attack kit, known as DarkSword, had been used against iPhones in several countries and was posted publicly on GitHub.
Apple responded across the older lines. It released fixes for iOS 15 and iOS 16 on March 11, 2026. On April 1, it made iOS 18.7.7 available more widely so phones with automatic updates would get it. Phones on iOS 13 or 14 had to move up to iOS 15 to be protected. Devices on the latest version they could run were already safe.
Apple’s advice, if you can’t update, is to consider Lockdown Mode, its optional high-security setting. It’s available in iOS 16 or later, so it covers the iPhone 8, X, XS and XR but not the 6s or 7. It blocks many message attachments and link previews and switches off some complex web features, so some sites will break. Apple says it’s designed for the very few people who might be personally targeted, and that most people never face these attacks.
The second risk is slower and more certain: apps stop supporting you. As of October 20, 2026:
| App | Needs | Who’s cut off |
|---|---|---|
| Chase Mobile | iOS 17.4 or later (App Store listing) | iPhone 8, X and older |
| iOS 15.5 or later from November 30, 2026 | iPhone 6 and older; 6s and 7 must be on iOS 15.8.8 | |
| X | iOS 15.0 or later (App Store listing) | iPhone 6 and older |
Bank apps matter most because they’re what people use daily on an old phone. In one MacRumors forum thread from 2024, an iPhone 6s Plus owner on iOS 15.8.2 found the Apple Store app wouldn’t install because it needed a newer iOS. They then asked whether online banking on that phone was safe. Replies varied: one said always to install the latest updates, another that the bank’s own app was safer than Safari as long as you avoided shady websites.
How to keep an older iPhone safer
Five habits cover most of the risk. None of them costs money.
- Install the last fix. Go to Settings > General > Software Update and make sure it says your iPhone is up to date. Turn on Automatic Updates so the next critical fix arrives without you checking.
- Treat links in texts and emails as hostile. The attacks above start with a link. If a message says your package is held or your account is locked, open the company’s app or type its address yourself. If you’ve already tapped one, here’s what happens if you click a link in a scam text.
- Leave Safari’s protections on. Apple says Safe Browsing in Safari is on by default and blocks the domains used in the 2026 attacks.
- Use Lockdown Mode if you’re a likely target. That means journalists, activists and anyone with a reason to think they’re being watched. Turn it on in Settings > Privacy & Security > Lockdown Mode (iOS 16 or later).
- Move money and work accounts to a current device first. If you have an iPad, Mac or newer phone, do banking there. Keep the old iPhone for calls, maps, music and the camera.
The battery is not a security issue. If the phone feels slow or dies early, a new battery can still be worth it. Check our guide to whether a battery replacement is worth it at 80%, but remember it won’t change which iOS your phone can run.
When it’s time to replace it
Upgrade when one of these happens, whichever comes first:
- Apple stops fixing your version. No iOS 12 security fix has appeared since January 2023. When a full year passes with no new fix for your version, assume support has ended.
- Your bank or a must-have app won’t install or update. That already applies to the Chase app on an iPhone 8 or X.
- You use the phone for work email, two-factor codes or payments. That’s the data attackers want, so the bar is higher.
By model, a reasonable plan as of October 2026:
- XS, XS Max, XR: fine for daily use. iOS 18 is still getting large fix releases. Plan to replace sometime in 2027.
- 8, 8 Plus, X: usable with care. Fixes are rare and the Chase app already requires iOS 17.4. Replace soon if it’s your main phone.
- 6s, 7, SE (1st gen): same as the 8, but no Lockdown Mode. Best kept as a backup, music player or kids’ Wi-Fi device.
- 6, 5s and older: retire it from anything involving accounts or money. Apple’s last iOS 12 security fix came in January 2023.
Old tablets follow the same rules. Our look at whether the iPad 2 is still usable covers what a device can still do safely long after updates end.
What to do next
- Check Settings > General > About for your model, then Settings > General > Software Update for the latest version it can run.
- If your model is iPhone 11 or newer, fix the update problem using the table above and install iOS 27.
- If it’s older, install the last fix and turn on Automatic Updates today.
- Check that your bank’s app still opens and updates. If it won’t, do banking on another device.
- Set a date to replace an iPhone 8 or older within months, and an XS or XR within about a year. Apple’s new iPhones and iOS versions arrive every fall, as our guide to when Apple releases new iOS versions explains.
Sources
- iPhone models compatible with iOS 27, Apple Support
- Apple security releases, Apple Support
- Apple security updates (2022 to 2023), Apple Support
- Apple security updates (2018 to 2019), Apple Support
- About the security content of iOS 18.7.10, Apple Support
- About the security content of iOS 16.7.16, Apple Support
- About the security content of iOS 15.8.8, Apple Support
- About the security content of iOS 27, Apple Support
- Update iOS to protect your iPhone from web attacks, Apple Support
- If your iPhone or iPad won’t update, Apple Support
- About Lockdown Mode, Apple Support
- iOS 27 Supports iPhone 11 and Newer, Says Apple, MacRumors
- Apple Issues Rare iOS 18 Security Update to Protect Against DarkSword Exploit, MacRumors
- WhatsApp to drop support for these older iOS and iPadOS versions later this year, 9to5Mac
- Chase Mobile, App Store
- X, App Store
- Is it a bad idea to do online banking on iPhone running 15.8.2?, MacRumors Forums
More from Gadget Daily News
- What happens to your passkeys if you lose your phone?Usually nothing is lost. Passkeys saved to iCloud Keychain, Google Password Manager, Microsoft Password Manager or a password manager like 1Password are backed up and come back when…
- Does dialing *#21# tell you if your phone is hacked?No. Dialing *#21# only tells you whether your incoming calls are being forwarded to another number, and if so, which one. It can't see spyware, a hacked account…
- Someone asked for my Google Voice verification code: what now?If you haven't sent the code, don't. If you already have, it's fixable in a few minutes. The scammer most likely used it to set up a Google…
- Got a data breach notice letter? What to do nextDon't panic, and don't call any number in the letter until you've checked it's real. A breach notice means your information was exposed, not that anyone has used…