Antivirus software: do you need it and what to compare

Do I need antivirus? For most people the answer starts with what’s already on their device: Windows, macOS, Android, iPhone and iPad, and ChromeOS all include built-in protection. Antivirus software looks for malicious software (malware) on a device and blocks or removes it, and paid security suites add extra features on top. This guide covers what each system includes and how to check it, what the Australian Signals Directorate’s ACSC says, and what to compare if you’re looking at a paid product.

Is the built-in protection enough?

Official guidance doesn’t name a product or say paid antivirus is required. The ACSC’s small business guide says security software “such as antivirus and ransomware protection can help protect your devices”, and that “no software is 100% effective”. It pairs security software with keeping devices updated and staying alert to suspicious emails, websites and downloads. So whichever protection a device has, updates matter as much as the antivirus itself.

Here’s what each system includes, and how to check it.

Windows: how to check Microsoft Defender is on

Microsoft says the Windows Security app “is built into Windows, ensuring that your device is protected from the moment you start it up.” It includes Microsoft Defender Antivirus, Windows Firewall and Smart App Control. Real-time protection checks files as they’re opened or downloaded, and Microsoft says Windows downloads the latest security intelligence through Windows Update. The ACSC’s small business guide also names Windows Security, saying it “includes free virus and threat protection” on Windows 10 and 11.

Based on Microsoft’s instructions (checked October 2026). Menus can change between versions; Microsoft’s Virus and threat protection page has the latest steps.

1. Open the Windows Security app.
2. Select Virus & threat protection.
3. To check real-time protection, select Manage settings and look at the Real-time protection switch.
4. To run a scan, go back to Virus & threat protection, select Scan options, then choose Quick scan (or Full scan or Custom scan).
5. To use the ransomware feature, select Manage ransomware protection and turn on Controlled folder access. By default it protects common folders such as Documents, Pictures and Desktop.

The rest of Windows’ built-in protection is in our Windows security settings guide.

Mac: how XProtect and Gatekeeper work

Apple’s Platform Security guide says “macOS includes built-in antivirus technology called XProtect for the signature-based detection and removal of malware”, and that XProtect “updates signatures automatically—independent from system updates.” Gatekeeper and notarisation aim to stop malware launching in the first place; Apple calls notarisation “a malware scanning service provided by Apple.”

There’s no scan to run. The setting to look at is where apps can come from: Apple’s Mac User Guide puts it under System Settings > Privacy & Security > Allow applications from, with a choice of App Store or App Store and Known Developers. Our Mac security settings guide has the full steps.

Android: how to check Google Play Protect

Google says “Google Play Protect checks your apps and devices for harmful behaviour”, runs a safety check on Play Store apps before they’re downloaded, and can warn about or remove harmful apps. It “is on by default, but you can turn it off.”

Based on Google’s instructions (checked October 2026). Google’s Play Protect page has the latest steps.

1. Open the Google Play Store app.
2. Tap the profile icon at the top right.
3. Tap Play Protect, then Settings.
4. Check that Scan apps with Play Protect is on.

More Android settings are in our Android security settings guide.

iPhone and iPad: how apps are kept apart

Apple’s Platform Security guide says “All third-party apps are sandboxed”, which is “designed to prevent apps from gathering or modifying information stored by other apps”. Apple also says every App Store app and app update “is reviewed to evaluate whether it meets requirements for privacy, security, and safety”, including automated malware scanning.

The main thing to check is updates. Apple’s update page puts automatic updates under Settings > General > Software Update > Automatic Updates. See our iPhone security settings guide or, for iPad, the tablet security guide.

ChromeOS: how Chromebooks protect themselves

Google’s Chrome device security overview says each web page and app “runs in a restricted environment called a sandbox”, and that a Chromebook runs a self-check called Verified Boot at start-up, repairing itself if it detects tampering. Google also says a Chromebook “automatically checks for updates and downloads when it connects to the internet.” To see the status, open Settings > About ChromeOS > Check for updates. Our Chromebook security settings guide covers the rest.

Do you need a paid security suite?

Official guidance doesn’t say one is required. A paid suite adds something mainly when someone wants more than the built-in protection covers. People who choose one usually do so for:

• Extra features in one subscription, such as a VPN, password manager, cloud backup or identity monitoring.
• One product across several platforms, for example Windows, Mac and phones under one account.
• Extra web, scam or banking protection layers that makers describe.

Each of these extras also exists as a separate product, and some are built in too. Our guides to what VPNs do and don’t do and how password managers work explain them.

What to compare

Most suites share the same core: real-time protection that checks files as they’re opened, scans of files already on the device, regular malware definition updates, web protection that blocks known dangerous sites, and ransomware protection for important folders (how ransomware works explains why that matters). The differences are in the detail:

• Platforms covered. Some plans are computer-only; others include phones and tablets. Feature lists often differ by platform.
• Number of devices. Plans are sold by device count.
• Real-time protection on each platform. Check it applies to every device you’d install it on.
• Ransomware protection. Folder protection or recovery features, described differently by each maker.
• Extras. VPN, password manager, backup and identity monitoring. Makers often say identity features aren’t available in all countries.
• Privacy policy and data handling. Security software can see a lot of what happens on a device. The maker’s privacy policy describes what is collected and shared.
• Renewal terms. Many subscriptions renew automatically. The maker’s terms set out how cancellation works.

How the products compare

Based on makers’ published specifications, checked October 2026. Listed alphabetically, not ranked. Prices aren’t shown; the maker’s site has current plans.

The product summaries below set out what each maker states.

How to install a security suite

Makers’ setup steps vary, but the pattern is similar: create an account on the maker’s official site, download the installer from that site or the official app store, install it on each device and sign in, then check that real-time protection is on. On Windows, Microsoft says Defender Antivirus “will automatically turn itself off” when a compatible non-Microsoft antivirus is installed, so the two don’t run real-time protection side by side. The maker’s own help pages have the exact steps for each device.

Things to watch for

• Fake virus warnings. IDCARE lists “a pop-up alert or advertisement that claims your device is infected or compromised”, with a phone number to call, as a sign of a remote access scam. Our guide to remote access scams explains how these work.
• Downloads from unofficial sites. Installers from look-alike websites or unofficial stores may not be genuine.
• Automatic renewal. Norton, for example, describes its subscription as automatically renewing unless cancelled before billing.
• Identity features that don’t fully apply in Australia. McAfee and Norton both note some monitoring features aren’t available in all countries.

Common questions

Do I need antivirus?

Every major operating system already includes built-in malware protection, and official guidance doesn’t say paid antivirus is required. The ACSC’s small business guide says security software can help protect devices, that no software is 100% effective, and pairs it with keeping devices updated. Paid suites mostly add extras such as a VPN, password manager or backup. Is the built-in protection enough? shows how to check each device.

Is Windows Defender enough?

Official sources don’t make that call for any individual. Microsoft says Microsoft Defender Antivirus is built into Windows through the Windows Security app, with real-time protection and a ransomware feature called Controlled folder access, and the ACSC’s small business guide says Windows Security includes free virus and threat protection. A paid suite mostly adds extras or cover for several devices. The Windows steps show how to check it’s on.

Do Macs need antivirus?

Apple says macOS already includes built-in antivirus technology called XProtect, which updates its signatures automatically, independent of system updates. Gatekeeper and notarisation aim to stop malware launching in the first place. There’s no scan to run; the setting to check is where apps are allowed to come from, under System Settings > Privacy & Security. Apple’s guide doesn’t discuss third-party antivirus. See how XProtect and Gatekeeper work.

Do I need antivirus on my phone?

Android phones and iPhones both include built-in protection. Google says Google Play Protect checks apps for harmful behaviour and is on by default. Apple says all third-party apps on iPhone and iPad are sandboxed and every App Store app and update is reviewed. Some suites offer phone apps with extra scam or web protection; ESET says it doesn’t offer antivirus for iOS. See the Android and iPhone sections.

Does antivirus stop phishing and scams?

Not on its own. Some products block known dangerous sites, but the ACSC says no software is 100% effective, and many scams rely on persuading a person rather than on malware. IDCARE lists fake “your device is infected” pop-ups with a number to call as a sign of a remote access scam. Our guide to how phishing works covers the warning signs.

What do I do if a pop-up says my computer is infected?

IDCARE lists a pop-up or advertisement claiming a device is infected, with a phone number to call, as a sign of a remote access scam. Genuine built-in tools don’t ask anyone to phone a number. If a scammer may have accessed a device, IDCARE offers free support on 1800 595 160. Our guides to remote access scams and first steps after a scam list who to contact.

Where to get official help

• The ACSC’s small business cyber security guide covers security software alongside updates and backups.
• Microsoft’s Windows Security help, Apple’s macOS malware protection guide and Google’s Play Protect page describe each built-in tool.
• If a scammer may have accessed a device, IDCARE offers free support on 1800 595 160, and our first steps after a scam guide lists who to contact.

Related guides

• How to secure a Windows PC
• How to secure a Mac
• How to secure an Android phone
• How to secure an iPhone
• How to secure a Chromebook
• What ransomware is and how it spreads
• How remote access scams work