What an Android phone can still run after security updates stop

Google’s Pixel software-update page states that Pixel 8 and later phones get seven years of OS and security updates from the date each device first became available on the Google Store in the US, and that Pixel 5a and earlier phones no longer receive Android version updates or security updates. The phone can still turn on and open software already stored on it. What stops is the maker’s patch stream—and Google Play may withhold apps that the developer set to require a newer Android version.

What still runs, and what the vendor stops patching

• Still works: The handset itself. Google’s update page lists older Pixels that no longer get OS or security updates; it does not say those phones stop powering on. Apps and files already on the device remain until you erase them.
• Stops working: Vendor Android version updates and security updates for models past the stated window. On the same Pixel page, Pixel 5a with 5G through Pixel 1 and 1 XL no longer receive those updates. Google Play Help says apps may be unavailable when they are not designed for your device’s version of Android.
• Needs subscription: Not applicable. The Pixel page describes a time-limited update commitment from Google Store availability, not a paid security-patch subscription.
• Needs previous owner removed: Yes, if a Google Account was still signed in. Google’s Pixel device-protection page says that after a factory reset of a protected phone, setup expects the Google Account previously synced on that device, and that without that information you will not be able to use the device at all after the reset. Android Help says removing an account also deletes that account’s email, contacts, and settings from the phone.
• Can work offline: Local use of what is already on the phone does not wait on the vendor’s update servers. OS and security updates arrive from the maker; they do not stay current offline.
• Last checked: September 29, 2026. Pages opened that day: Pixel software updates; Android version and security-update check; Google Play app compatibility and “can’t find an app”; Pixel device protection; Android factory reset; add or remove an account on Android; Samsung Mobile Security update scope.

What lives on the handset versus the account and update servers

Three places hold what you think of as “the phone.” The device holds storage, the installed Android build, downloaded apps, and the security-update level in Settings. Google’s Android Help page on checking your version says to open Settings → About phone or About tablet → Android version, where you can read the Android version, Android security update, Google Play system update, and build number.

The Google Account signed into the handset is separate. Android Help’s add-or-remove-account page says adding a Google Account syncs email and contacts to the device, and removing the account also removes that account’s email, contacts, and settings from the device. A used phone can still be signed into a previous owner’s account until that account is removed the way Google’s page describes—or until a factory reset triggers the ownership check on the Pixel device-protection page.

Vendor update servers are the third place. Pixel phones receive OS and security software through Google’s update channel (Settings → System → Software update on the Pixel update page). Samsung’s Mobile Security page describes firmware security updates for listed Galaxy models on monthly, quarterly, or biannual schedules, covering Android OS patches from Google plus Samsung-specific issues. Those packages go to eligible models from the maker; they are not a permanent library on every old phone.

Play Store apps follow developer rules, not only the vendor patch calendar. Google Play Help says individual developers set compatibility, and an app may be missing from search when it is not compatible. Another Play Help page says a device can appear grayed out on the Play website when an app is not designed for your screen size or version of Android, and that compatibility can change over time. That store gate is different from software already on the phone. This article does not explain how to install apps outside the Play Store; it only separates the store’s minimum-version check from files already present.

When the security-update window ends

End of security support is not a cancelled subscription. On What a Peloton can still do after the membership ends, classes stop because the membership that supplies them ends. On a Pixel, OS and security updates stop because Google’s stated update window ended—or, for Pixel 5a and earlier, because Google’s page already lists those models as no longer receiving Android version updates and security updates. Samsung’s security page, opened the same day, says that as of January 2024 it is extending security-update support for Samsung Galaxy devices by up to seven years, with availability that may vary by market, network provider, and model. That is a vendor support window, not a paid patch membership.

From Google’s pages: the end of software updates is not the same as the phone refusing to turn on. Older Pixels remain devices you can open Settings on. What still opens is the Android build and apps left on the handset, plus local features the hardware still supports. What has stopped is the vendor’s stream of security fixes and OS upgrades.

Play Store rules can keep changing after the last vendor patch. Google’s “Can’t find an app” page says you can only download or use an app if it is compatible, and that About this app can show the required OS on your active devices. A phone that still boots may fail to install an app whose developer raised the minimum Android version, even while another already-installed app still opens.

What to check before you trust a used phone

Open the maker’s pages yourself. For Pixel update length and models that no longer get OS or security updates: https://support.google.com/pixelphone/answer/4457705 (opened September 29, 2026). For the security-patch date in Settings: Android Help at https://support.google.com/android/answer/7680439 (opened the same day)—Settings → About phone or About tablet → Android version, then read Android security update. For Galaxy security-update cadence and current model lists: https://security.samsungmobile.com/workScope.smsb (opened September 29, 2026).

On the handset, confirm the model, Android version, and Android security update date. Compare the model to the maker’s page: still inside a multi-year window, listed for monthly or quarterly patches, or already on Google’s “no longer receive” list. In Play Store, open About this app for compatibility and required OS when the listing is available. Check Settings → Passwords & accounts for a leftover Google Account. Pixel’s device-protection page says a protected phone wiped without the previous synced account cannot be used after factory reset.

What to do before you buy, or before updates end

If you own the phone and the window is closing, check its status on the Pixel or Samsung page while updates are still offered. Install the latest update under Settings → System → Software update (Pixel) or your maker’s path. Note the Android security update date. Before a reset, put needed data into the Google Account backup Google describes—Android’s factory-reset page says a factory data reset erases phone data, uninstalls apps and their data, and that data in the Google Account can be restored afterward. Do not invent an export the pages omit.

If you are selling or giving the phone away, remove your Google Account under Settings → Passwords & accounts → Remove account, then factory-reset from Settings. Pixel’s factory-reset page says the reset erases all data and that trade-ins should use the Settings reset. Pixel’s protection page says turning off device protection means removing the Google Account from the device.

If you are buying, power the phone on, read About phone, and confirm no previous Google Account remains—or that the seller removes the account and resets in front of you—before you pay. After a protected reset, Google’s page says you need the previous account information during setup, or you cannot use the phone. Prefer a model still inside a current update commitment on the maker’s page.

One number from Google’s Pixel update policy

On the Pixel software-update page opened September 29, 2026, Google states that Pixel 8 and later phones will get updates for seven years from Google Store US availability, including seven years of OS and security updates. The page names those models, including Pixel 8, Pixel 8 Pro, Pixel 8a, and later Pixel 9, 10, and 11 family devices listed there. That seven-year figure is Google’s stated window for that group—not an end date invented for one serial number, and not a promise that every Play Store app will support that Android build for seven years.

The harmful mistake: treating an unpatched phone as still patched

The harmful mistake is using an unpatched phone for banking—or assuming that because the screen unlocks, the device is still receiving security fixes. Google separates “the phone turns on and Settings still show a security update date” from “the vendor is still shipping new patches.” When that date freezes because the model is off the update list, new fixes are not arriving through that channel. Play Store apps can also raise their minimum Android version, so an app you need may stop being installable while older icons still open.

An unpatched phone is not a safe banking device. Keep high-risk accounts on hardware the maker’s current page still places inside an active OS and security-update window. Treat a phone past that window as a limited local tool, not a patched vault for money apps.

Read next: What a Peloton can still do after the membership ends. Related topics without live pages on this site yet: What an iPhone can still do after Apple ends software support; What a Chromebook can still open after ChromeOS updates stop.