Built-in antivirus is enough for most people
What Microsoft Defender, Apple XProtect and Google Play Protect do, how to check they are on, and the specific situations where a paid security suite is worth the money.
The short answer
For most home users, the protection built into your operating system is good enough, as long as you keep your device updated. Independent test labs such as AV-TEST and AV-Comparatives regularly rate Microsoft Defender close to the top paid products for detection. Apple and Google also build malware scanning directly into macOS and Android.
What protects you most is not the brand of antivirus. It is updates, a password manager, two-factor authentication, backups and caution with downloads and links.
Microsoft Defender on Windows
Microsoft Defender Antivirus is included free in Windows 10 and Windows 11 and turns itself on automatically when no other antivirus is installed. You manage it in the Windows Security app.
Things worth checking:
- Virus and threat protection: real-time protection and cloud-delivered protection should both be on.
- Ransomware protection: "Controlled folder access" blocks unknown apps from changing files in protected folders. It can occasionally block legitimate apps, which you can allow manually.
- App and browser control: SmartScreen warns about unrecognized downloads and known malicious sites. Windows 11 also offers Smart App Control on clean installs.
- Device security: shows whether features such as Secure Boot and memory integrity are enabled.
XProtect and friends on Mac
macOS uses several layers rather than one visible antivirus app:
- Gatekeeper checks that downloaded apps are signed by an identified developer and notarized by Apple before they open.
- XProtect scans for known malware signatures and is updated silently by Apple in the background.
- Built-in removal tools clean up known malware after it is detected.
You do not configure XProtect directly. Keep automatic updates on, including the option to install security responses and system files, and avoid overriding Gatekeeper warnings for apps you do not fully trust.
Play Protect on Android and the iPhone model
Google Play Protect scans apps in the Play Store and on your device, including apps installed from outside the store, and can disable or remove harmful ones. Check it in the Play Store app under your profile icon, then Play Protect, and leave scanning on.
iPhone and iPad do not need antivirus apps. iOS isolates every app in a sandbox, and apps sold as "iPhone antivirus" mostly offer extras like VPNs or web filters. Your best protection is installing updates promptly. Apple's Lockdown Mode exists for the small number of people who may be personally targeted by sophisticated attacks.
Built-in versus paid suites
| Platform | Built-in protection | Cost | Good enough for most? |
|---|---|---|---|
| Windows 10/11 | Microsoft Defender, SmartScreen | Free | Yes |
| macOS | Gatekeeper, XProtect, notarization | Free | Yes |
| Android | Google Play Protect | Free | Yes, if you avoid unknown app sources |
| iOS / iPadOS | App sandboxing, App Store review | Free | Yes |
When a paid suite makes sense
A paid product can be worthwhile when:
- You look after devices for others, such as an elderly relative or a small office, and want central alerts and reporting.
- You need bundled extras you would otherwise buy separately, such as parental controls or identity monitoring, and you compare the total price honestly.
- You run an older system that no longer gets security updates and cannot upgrade yet (upgrading is still the real fix).
- A business needs endpoint detection and response (EDR) with logging and remote response. That is a different category from home antivirus; see security basics for small business.
Never install "security" software from a pop-up or a phone call saying your device is infected. Fake antivirus and tech-support scams are a common way real malware gets installed.
Do not run two real-time antivirus products at once. They can conflict and slow your computer. If you install a third-party product on Windows, Defender steps aside automatically.
A five-minute checkup
- Open your device's security settings and confirm protection is on.
- Install any pending software updates.
- Remove apps and browser extensions you no longer use.
- Make sure you have a recent backup, the best defense against ransomware.
