Do I really need antivirus in 2026?

[PaleCipher]

Backups deserve another vote, especially for documents and photos. A security tool can help prevent an infection, but it is not a replacement for being able to recover your important files.

Even a simple routine where important files are copied to another location can make a horrible incident much less disastrous. For anything genuinely irreplaceable, having more than one copy is sensible.

It is not particularly glamorous advice, though. Nobody gets excited about a backup drive. Nobody posts screenshots of their beautifully configured backup schedule. Then the day comes when the laptop dies and suddenly that boring little backup is the most valuable thing in the house.

[Ronan76]

The biggest improvement most family computers could probably use is a better backup routine. People spend ages debating antivirus detection rates and then keep their only copy of their photos on the same laptop.

If ransomware or a bad hardware failure takes out the files, having an independent backup is a completely different kind of protection. Ideally it should not be permanently exposed to the computer either.

That does not make antivirus irrelevant, of course. It just puts the risk into perspective. A security setup with built-in protection and good backups is much more reassuring than an expensive security suite with no backup plan.

[BillyBob]

There are cases where third-party antivirus still earns its keep, especially if it includes strong web filtering, ransomware rollback, parental controls, or a useful dashboard for several devices. The problem is that marketing often bundles those features with system cleaners and mysterious performance optimisers that create more noise than protection.

For a single up-to-date personal computer, I would start with the operating system's built-in tools and spend the money on a password manager or a proper backup drive instead. Review the setup once in a while, test that the backups can actually be restored, and do not mistake a green security icon for immunity. Even the best security program cannot patch a user who keeps clicking "urgent final warning" emails

[StarKnight36]

The advice I give less technical relatives is deliberately boring: let updates happen, use a password manager, turn on MFA where available, and do not install software because a web page told you that your computer is infected.

That last one is worth repeating because fake virus warnings are incredibly convincing to someone who does not know what normal browser behavior looks like. A web page saying "12 threats detected" does not mean the browser has somehow performed a full forensic examination of the computer.

If they have those basics covered, I am much less worried about whether they have paid for another antivirus package.