Is free antivirus enough? When free protection is fine — and what paying actually adds

For a lot of people, yes. If you use one Windows PC, keep it updated and are careful with downloads, free protection covers the core job: catching malware before it runs. The case for paying is narrower than the marketing suggests — and it's mostly about covering more devices, getting extras you'd use, and having someone to call.

What free protection covers

• Windows 10 and 11 include Microsoft Defender Antivirus in the Windows Security app, on by default and updated through Windows Update — so every Windows PC already has free real-time protection.
• Macs have their own built-in layers — Gatekeeper, notarisation and XProtect — that run without any setup.
• Some security brands offer a free tier on top of that. Of the suites we cover, Avast is the best known for its free antivirus, and Avira's free suite goes furthest — adding a VPN capped at 500 MB a month on desktop and a password manager.

What paying usually adds

• Coverage for several devices and platforms under one account, with one place to check that each is protected.
• Extras such as a VPN, a password manager, identity or breach monitoring, and — on some suites — cloud backup or parental controls.
• Fewer upgrade prompts, and access to customer support when something goes wrong.

Notice what's missing from that list: "real" protection. A paid suite doesn't turn a vulnerable PC into a safe one; it widens what's covered and bundles tools around the antivirus.

How free antivirus pays for itself

Free products are funded somehow — usually by persuading a share of users to upgrade, which is why free tiers show prompts. Data is the other route, and it's worth checking. In 2024 the US Federal Trade Commission finalised an order requiring Avast to pay $16.5 million and banning it from selling, disclosing or licensing web browsing data for advertising, over data its subsidiary Jumpshot sold between 2014 and 2020. Whatever you install, free or paid, read its privacy policy and switch off data-sharing options you don't want.

Is free antivirus safe?

A free tier from an established vendor, downloaded from that vendor's official website, is legitimate software. The risk is fake "free antivirus": pop-ups and ads that claim your device is infected and push you to install something immediately. Real security software doesn't find you through a scare banner. And don't run two real-time antivirus engines at once — Windows switches Defender off automatically when you install another one.

When free is enough

• One or two computers that you keep updated.
• You don't need a VPN, password manager or monitoring — or you already use separate tools you like.
• You're comfortable checking now and then that real-time protection is on.

When paying makes sense

• A household with several devices across Windows, Mac, Android and iOS that you want to manage in one place.
• You'd use the extras and would otherwise pay for them separately.
• Someone at home is less confident online and would benefit from consistent warnings on every device.
• You want support you can contact.

What's the best free antivirus?

On Windows, start with the one you already have: Microsoft Defender is built in, free and updated automatically. If you want a third-party free tier, choose an established vendor, download it from the official site, and compare what it adds against the prompts and the privacy settings that come with it. If you find yourself wanting the paid extras, compare suites at their renewal price, not the first-year offer.

Free protection handles the basics well. Pay when you need more devices, more tools or more help — not because a pop-up says you're at risk.