Do I need to pay for antivirus in 2026?

For most households, no. Windows Defender is built in, free, and scores alongside paid suites in independent testing. Your money is better spent on a backup drive than a security subscription.

Is a VPN a security product?

It hides your traffic from your internet provider and from others on public Wi-Fi, which is a privacy benefit. It does nothing at all about malware, despite being marketed alongside antivirus.

Are Macs safe from viruses?

Safer, not immune — and completely irrelevant to the biggest threat, which is being persuaded to grant access. Remote-access scams and phishing work identically on a Mac.

I already pay for a security suite. Should I cancel it?

There is no urgency if it is working and not slowing the machine. Just make sure only one real-time antivirus is active. When the subscription lapses, Defender takes over automatically and most households notice no difference.

30 Jun 2026 · 6 min read

What actually protects a home computer in 2026

Most paid security suites solve a problem you no longer have. Here is what genuinely reduces risk on a home machine, and what is theatre.

The security software market still sells against the threat landscape of 2010, when Windows shipped with almost no protection and a third-party antivirus was genuinely essential. That has not been true for years, and continuing to buy on that basis means paying for the wrong things.

Windows Defender is enough for most households

Defender is built into Windows, free, updated automatically, and consistently scores alongside the paid suites in independent testing. It has no upsell prompts, no subscription to forget about, and — importantly — it does not slow the machine down the way heavier suites do.

For an ordinary household doing email, banking, shopping and streaming, Defender plus the habits below is a sound position. You do not need to buy anything.

Where the actual risk is now

Malware that arrives on its own, silently, by exploiting the operating system is much rarer than it was. Modern Windows and macOS are genuinely hardened. Almost everything we clean up now arrived because a person was persuaded to allow it.

Phone calls asking to connect to your computer — see our guide to the remote-access scam
Fake update prompts in the browser, especially "your Flash is out of date" or "your browser needs updating"
Search results for software downloads, where the paid advertisement above the real site leads to a bundled installer
Email attachments in messages that appear to be invoices, delivery notices or resumes
Browser extensions installed for one useful feature that later change hands and turn malicious

Notice that an antivirus is poorly placed to stop most of that. It cannot tell that you did not mean to say yes.

The five things that actually help

1. Automatic updates, left on

The most effective security measure available, and it is free. The vulnerabilities used in real attacks are overwhelmingly ones that were patched months earlier on machines where updates were deferred. Turn them on and stop clicking "remind me later".

2. Two-factor authentication on email

Not strictly malware protection, but it limits the damage of almost everything else. Whoever controls your email can reset every other account you own.

3. A backup that is not permanently connected

This is what turns ransomware from a catastrophe into an afternoon. An external drive that is always plugged in gets encrypted along with the computer — a backup needs to be disconnected, or versioned in a way the ransomware cannot reach. More on this in our backup guide.

4. An ad blocker

Genuinely a security tool, not just a convenience. A large share of drive-by malware and fake-download traffic arrives through advertising networks, and blocking them removes an entire category of risk. uBlock Origin is free and the standard recommendation.

5. Downloading from the source

When you search for a program, the first result is often a paid advertisement pointing at a repackaged installer bundled with extras. Type the official address, or use the Microsoft Store, rather than clicking the top search result.

What is largely theatre

"PC optimiser" and registry cleaner bundles: They find hundreds of trivial issues to justify the subscription. The useful functions are built into Windows already.
VPNs sold as antivirus: A VPN hides your traffic from your internet provider and from other people on public Wi-Fi. It does nothing whatsoever about malware, despite how they are advertised.
Identity-theft add-ons: Usually a monitoring service telling you your details appeared in a breach after the fact. Occasionally useful, rarely worth the recurring cost.
A second antivirus for "layered protection": Actively harmful. Two real-time scanners conflict, and the result is slower and no safer.

A sensible household setup

If you want a checklist to work through this weekend:

Confirm exactly one antivirus is running — Windows Defender is fine
Turn automatic updates on for Windows and for your browser
Install uBlock Origin in whichever browser you use
Turn on two-factor authentication for your email
Set up a backup that is not permanently connected to the machine
Tell everyone in the house the rule about unsolicited phone calls

That costs nothing except the backup drive, and it addresses far more real risk than any security suite you can buy. If you would rather have it set up properly and checked, that is a normal virus removal and protection visit.

Want us to just handle it? Free diagnosis, fixed price, no fix no fee.

0423 680 596