Most home computers and phones already ship with working malware protection, yet many people pay every year for a security suite without knowing what it adds. This guide helps you decide whether you need a paid antivirus or security suite at all, and if you do, how to compare products on evidence rather than on alarming pop-ups and first-year discounts. It covers Windows, Mac, Android and iPhone, the independent test labs, the extras bundled into suites and the renewal traps to avoid. It is written for households and small home offices, in plain English, and names no vendors.
Key takeaways
- Built-in protection is a real baseline. Windows 10 and 11 include Microsoft Defender Antivirus, Windows Firewall and SmartScreen; Macs include Gatekeeper and XProtect; Android has Google Play Protect switched on by default.
- Phones need antivirus least. The UK NCSC says Android in its default configuration should not need extra antivirus, and that antivirus on iPhone and iPad is of very limited value because apps are sandboxed.
- Pay for extras you will use, not for fear. A suite earns its price through features such as a password manager, backup, parental controls or identity monitoring, not through a slightly different detection engine.
- Use independent lab results. AV-TEST and AV-Comparatives test protection, false alarms and performance; vendor claims of "100% protection" are marketing.
- Run one antivirus, and read the renewal terms. Two real-time scanners conflict, and many suites renew automatically at a higher price than the first year.
Define requirements
Start with the devices and the people, not the product list. Answer these before you look at any offer:
- Devices: how many Windows PCs, Macs, Android and Apple devices, and are any of them running an operating system that no longer gets security updates? An unsupported system is the main case where a third-party product helps, and the better fix is to upgrade it. See the Securing Home Computers guide for updates, accounts and encryption.
- People: who uses each device, are there children, and does anyone tend to install unusual software, games mods or browser add-ons?
- Gaps you actually have: no password manager, no backup, no way to manage children's screen time, worry about identity theft after a data breach. These gaps, not detection, are what most suites sell.
- Budget and term: what you will pay in year two and year three, not just year one.
If the honest answer is "one up-to-date Windows laptop, two modern phones, a password manager already in use and a cloud backup", the built-in tools plus good habits are usually enough.
Capability areas
| Capability | What is built in | What a suite may add | Worth paying for when |
|---|---|---|---|
| Malware scanning (Windows) | Microsoft Defender Antivirus with real-time protection, managed in the Windows Security app | Another vendor's engine, extra scan options | The PC runs an unsupported Windows version, or lab results show a clear gap for your use |
| Malware scanning (Mac) | Gatekeeper and notarisation checks, XProtect signature scanning checked daily by default, and a remediation engine that removes known malware | On-demand scans, wider detection of adware and unwanted apps | You install a lot of software from outside the App Store |
| Android apps | Google Play Protect scans Play and sideloaded apps and can disable or remove harmful ones | Anti-theft, call filtering, app privacy checks | You sideload apps or need features Play Protect lacks |
| iPhone and iPad | App sandboxing and App Store review | Web filtering, VPN, breach alerts (no meaningful file scanning) | Only for the extras, never for "virus scanning" |
| Web and download protection | Microsoft Defender SmartScreen in Windows and Edge; safe browsing in major browsers | Browser extensions that block known bad sites | Rarely, and check the extension's data collection |
| Ransomware protection | Controlled folder access in Windows Security; OneDrive or iCloud file versioning | Folder shields, backup with version history | You have no backup with older versions today |
| Password manager | Browser and platform password managers with passkey support | Cross-platform vault | Your household mixes Windows, Mac, Android and iPhone |
| Parental controls | Microsoft Family Safety, Apple Screen Time, Google Family Link | Cross-platform dashboards, web filtering | Children use devices from several makers |
| VPN | None for consumer use | A bundled VPN, often with data or location limits | You often use public Wi-Fi and the VPN terms are clear |
| Identity and dark web monitoring | Free breach checking services | Alerts, credit monitoring, restoration help | The service covers your country and includes real recovery support |
One detail matters on Windows: Microsoft states that on a home PC, Defender Antivirus switches itself off when another antivirus becomes the main product, and switches back on automatically if that product expires, is uninstalled or stops protecting. So installing a suite replaces Defender's scanning rather than adding to it, and letting a suite lapse does not leave the PC unprotected for long, provided Windows Security shows Defender back on.
Evaluation criteria
| Criterion | What good looks like | How to check |
|---|---|---|
| Protection | Consistently high scores across several recent test rounds, not one | AV-TEST home user results and AV-Comparatives real-world protection tests for your platform |
| False alarms | Few false positives, so you are not trained to ignore warnings | The usability or false positive part of the same lab reports |
| Performance | Little slowdown when opening sites, copying files and installing apps | Lab performance scores, plus your own trial on your oldest device |
| Privacy | Clear statement of what is collected, no sale of browsing data, opt-outs that work | Read the privacy policy, especially for browser extensions and VPNs |
| Extras you need | Each bundled feature replaces something you would otherwise buy or set up | Map each feature to a gap from your requirements list |
| Price over three years | Renewal price stated plainly; easy to switch off auto-renewal | The terms page and your account settings before you pay |
| Cancellation and removal | Online cancellation; an official removal tool that leaves the system clean | Vendor support pages |
| Platform support | Current versions of Windows, macOS, Android and iOS, with automatic updates | Product system requirements |
Questions to ask vendors
- What will I pay at the first renewal and every year after, and can I turn off auto-renewal before I buy?
- Which independent lab tests has this exact product taken part in during the last 12 months, and where are the results?
- What data does the product and its browser extension send to you, is any of it sold or shared for advertising, and how do I opt out?
- Does the bundled VPN have data caps, logging or a separate subscription after the first year?
- Does identity monitoring cover my country, and what practical help do I get if my identity is misused?
- How do I cancel online, get a refund within the guarantee period and fully remove the software?
- Which features work on each of my devices? Many suites offer much less on iPhone than on Windows.
Red flags
- Pop-ups saying you are infected with a phone number or a "buy now" button. The FTC warns these are tech support scams and advises never calling a number shown in a pop-up. See the Recognising Tech Support Scams guide.
- Software found through an advert rather than the maker's own website. The FTC advises typing the maker's address yourself.
- "Antivirus" apps for iPhone that promise virus scans. Apple's sandbox means they cannot scan other apps.
- Claims of 100% protection or "removes all hackers". No product does this.
- Cleaner and "booster" add-ons that report hundreds of "issues" to push an upgrade.
- Renewal at a much higher price hidden in small print, or cancellation only by phone.
- Running two antivirus products at once. The NCSC advises against it because of conflicts and minimal benefit.
Proof of concept
- Check what you already have: open Windows Security and confirm Virus and threat protection, Firewall and network protection, and App and browser control show no warnings; on Android, open Play Store, tap your profile, then Play Protect, and confirm Scan apps with Play Protect is on; on a Mac, keep automatic security updates switched on so XProtect stays current.
- Write down the gaps from your requirements list. If there are none, stop here and spend the money on a backup or a password manager.
- Shortlist two or three products that appear in recent AV-TEST or AV-Comparatives results for your platform.
- Install a free trial from the vendor's own site on your oldest or slowest device first. Uninstall any other third-party antivirus before you do.
- Use it normally for one to two weeks: note slowdowns, false alarms, nagging upgrade prompts and whether the extras are actually useful.
- Before the trial ends, check the renewal price and switch off auto-renewal in your account if you are not sure.
- If you remove it, use the vendor's removal tool, then confirm Windows Security shows Defender Antivirus back on.
For a business fleet rather than a household, the questions are different: see the EDR and XDR Buyer's Guide and the Next-Generation Antivirus (NGAV) Guide.
How NHI Mgmt Group can help
We publish independent, vendor-neutral security guidance for households and organisations. Browse vendors in our products directory or contact us.
Sources: Microsoft Support: Stay protected with the Windows Security app · Microsoft Learn: Microsoft Defender Antivirus compatibility with other security products · Apple Platform Security: Protecting against malware in macOS · Google: Use Google Play Protect · NCSC: Antivirus and other security software · FTC: How to recognize, remove, and avoid malware · AV-TEST: Test procedures · AV-Comparatives: Real-World Protection Tests
Related NHI Mgmt Group resources: Securing Home Computers · Windows 11 Security Settings Guide · Password Manager Buyer's Guide · Parental Control Apps Buyer's Guide