Software Support Windows: The Specification Nobody Puts on the Box

Every other specification on a product page describes what a device can do. The support window describes how long it will be allowed to keep doing it — and until recently it was almost impossible to find before buying.

That changed in the UK. This guide explains where the commitment is published, what it does and does not cover, and how to turn a date into a number you can compare against a price.

Why security updates set the real lifespan

A connected device is a computer, and computers accumulate discovered vulnerabilities. Updates are how those are closed. When updates stop, the device does not break; it simply stops being maintained, while the number of known ways to attack it continues to grow.

This produces the defining asymmetry of modern hardware: the physical object may be in excellent condition years after it has become unwise to keep using for anything sensitive. A well-built device with a short support window is a shorter-lived purchase than a mediocre one with a long window, which inverts how most people judge quality.

It also changes what "durable" means. Construction quality, covered in how to judge product quality online, sets the ceiling for anything mechanical. For anything connected, the support date usually arrives first.

Where support commitments are published

Since April 2024, manufacturers of consumer connectable products sold in the UK have had to publish the minimum length of time the product will receive security updates, including an end date, alongside a ban on universal default passwords and a published route for reporting vulnerabilities. Products must also come with a statement of compliance.

In practice, the information sits in one of four places: the manufacturer's product security or support pages, which is where a defined period is usually stated most clearly; the specification tab of a retailer's listing; the documentation supplied in the box; or the statement of compliance itself.

Two cautions. The rules require transparency, not generosity — there is no statutory minimum length, so a short published period is entirely lawful, which makes the figure a comparison tool rather than a guarantee. And several categories sit outside the regime, including desktop and laptop computers and Wi-Fi-only tablets, so for those the operating system vendor's own published lifecycle is the more useful date to find.

Categories with the shortest support windows

Without publishing figures we cannot verify, the pattern across categories is consistent and worth knowing.

Devices where software is the product — phones, tablets, computers — tend to have the most clearly published and most actively managed support, because the vendor's platform depends on it.

Devices where software is incidental — connected appliances, wearables tied to an app, budget smart accessories, connected toys — are where the shortest windows and the vaguest commitments cluster, because updating them earns the manufacturer nothing after the sale.

Devices sold on hardware specifications at low prices are structurally exposed: the margin that would fund years of security engineering is not there.

The reliable signal is not the category but the disclosure. A manufacturer publishing a specific end date has made a commitment it can be held to. One publishing "regular updates" or "as required" has made none, which is a finding rather than an absence.

Smart devices, cloud dependency and server shutdowns

Support ending is one risk. A service being withdrawn is a different and often sharper one.

Where a device depends on the manufacturer's servers to function — an app that is the only interface, a hub that routes everything, a subscription that unlocks core capability — the withdrawal of that service can render working hardware useless overnight, regardless of any security update window.

Three questions separate resilient devices from fragile ones. Does it function locally if the internet or the manufacturer's service is unavailable, or does it need the cloud to do anything at all? Does it support an open or widely adopted standard as well as the manufacturer's own app, so that another system could take it over? And can your data be exported in a usable form?

A device that answers well on all three has a lifespan governed by its hardware and its updates. One that answers badly has a lifespan governed by someone else's commercial decisions — the compatibility question examined in smart home compatibility.

What happens when support ends

Nothing dramatic on the day. The consequences accumulate.

Newly discovered vulnerabilities stop being patched, so exposure grows with time rather than arriving at once. Applications and services begin to drop support for older versions, so features degrade gradually — a browser stops updating, a banking app refuses to run, a streaming service ends compatibility. Accessories and companion apps may follow the platform rather than the device.

The severity depends entirely on the role of the device. An unsupported device holding personal data, handling payments, carrying a camera or microphone, or controlling access to your home is a different proposition from an unsupported device playing music offline. A reasonable end-of-support plan is therefore not "replace immediately" but "reassign": move the device to a lower-risk role, isolate it from sensitive accounts and networks, or take it offline entirely.

Turning a support window into cost per year

The most useful thing you can do with a published end date is convert it into money.

1. Find the end date and calculate the remaining months from the date you would buy — not from launch, which is the number a discounted older model quietly relies on.
2. Divide the price by the remaining supported years. That is the cost per supported year, and it is directly comparable between two products.
3. Run it on the cheaper alternative and compare. A cheaper device with a much shorter remaining window frequently costs more per supported year than a dearer one.
4. Add the running costs — subscriptions, consumables, an expected battery replacement — using the framework in total cost of ownership.

This is the calculation that makes last year's discounted model honest. The discount is real; so is the fact that part of its supported life has already elapsed. Where the battery is also non-replaceable, the two clocks compound, which is why the runtime claims in battery life claims explained matter alongside the support date.

Questions to ask before buying anything that connects

1. What is the published end date for security updates, and where is it stated?
2. Is there a separate commitment for feature or operating system updates?
3. Does the device work without the manufacturer's cloud service?
4. Is there a route to report vulnerabilities, and is there a statement of compliance?
5. How are updates delivered — automatically, or only through an app you must keep installed?
6. What happens to the companion app if the product line is discontinued?
7. Can data be exported, and can the device be transferred to a new owner?

A manufacturer that answers all seven clearly is unusual, and worth paying for. One that cannot answer the first has effectively told you the window is short — the reasoning developed across how to choose future-proof tech.