Millions of Android phones fall outside Google’s security cover as older versions lose support

A large number of Android smartphones globally are operating without Google’s latest security protection after the company ended official update support for older versions of its operating system. Devices running Android 12 and earlier are no longer part of Google’s regular security patch cycle, raising concerns over growing exposure to malware, spyware and cyberattacks.

Google’s Android Security Bulletin shows that March 2025 marked the final round of security patches issued for Android 12 and Android 12L. From April 2025 onwards, the versions were dropped from Google’s monthly security update releases, effectively bringing an end to official platform-level protection for devices running these systems.

Security patches are crucial as they fix vulnerabilities that hackers can exploit to access personal data, banking applications, and login credentials. Once a device stops receiving these updates, newly discovered weaknesses remain unaddressed, increasing the risk of data breaches and fraud over time.

Recent distribution data suggests the scale of the issue remains significant. Android 16 accounts for around 7.5% of devices, Android 15 holds 19.3%, Android 14 represents 17.2%, while Android 13 covers 13.9%. These versions continue to receive security updates. However, a substantial share of devices runs on unsupported software, including Android 12 at 11.4%, Android 11 at 13.7%, Android 10 at 7.8%, Android 9 at 4.5% and Android 8 at 2.3%. Combined, these figures indicate that more than four out of ten Android smartphones are operating without Google’s active security patch support.

The situation highlights long-standing challenges in Android’s update ecosystem. Unlike Apple, which controls both hardware and software and rolls out updates simultaneously across supported devices, Android updates depend heavily on individual smartphone manufacturers. Each brand sets its own timeline for operating system upgrades and security patches, resulting in uneven software adoption across devices.

Samsung, one of the largest Android smartphone makers, has expanded update support in recent years. Many of its latest flagship smartphones now receive up to seven years of Android operating system and security updates, while several mid-range models are also receiving extended support periods. However, devices launched before these policies were introduced typically received shorter update windows.

Motorola also provides software and security updates, but support durations vary widely depending on the device and price segment. Historically, many Motorola smartphones have received around two to three years of Android upgrades and security patches, though some newer models are now being introduced with longer support commitments.

The contrast becomes sharper when compared with Apple’s ecosystem. Data from StatCounter shows that nearly half of iPhones run the latest iOS version, with a large portion of remaining devices operating on the previous version. The narrower gap between software versions highlights Apple’s ability to maintain more uniform update adoption across its device base.

What can users do?

Users can check their Android version through their device settings and install available updates. If a device no longer supports newer versions, upgrading to a smartphone that continues to receive security patches remains the safest option. As smartphones increasingly store sensitive financial and personal data, software updates are becoming critical to everyday digital security rather than simply offering new features.