Surfshark Stops Android Updates for Older Phones: What You Need to Know [2025]

Understanding Surfshark's Android Update Decision

Surfshark just made a significant shift in its mobile strategy. The popular VPN service announced it's discontinuing app updates for Android devices running version 5.0 Lollipop and earlier. If you're using an older Android phone, this move directly impacts your security posture and access to new features.

But here's what matters: this isn't random. Mobile operating systems age faster than most people realize. Android 5.0 Lollipop launched in 2014, which means devices running it are now over a decade old. Surfshark's decision reflects a broader industry trend where VPN providers, apps, and services sunset support for ancient OS versions to focus development resources on modern platforms.

The question isn't whether Surfshark made the right call. It's whether you know if your phone is affected and what you should do about it. Let's dig into the specifics, because this impacts millions of Android users worldwide who might not even realize their devices are running outdated software.

What makes this announcement particularly important is the security implication. VPN services encrypt your internet traffic, making them essential for privacy on public Wi-Fi and protecting your browsing data from ISPs. If you're still using Lollipop, Surfshark won't push critical security patches to your device anymore. That's a real problem.

This article breaks down everything you need to understand about Surfshark's decision, which Android versions remain supported, how to check your device, and what alternatives exist if you're stuck with legacy hardware. By the end, you'll know exactly where you stand and what action (if any) you need to take.

TL; DR

• Surfshark ends updates for Android 5.0 Lollipop and earlier devices immediately
• Your phone likely supports newer Android versions unless it's 10+ years old
• Security patches won't reach old devices anymore, creating potential vulnerabilities
• Modern Android versions (10+) get regular VPN updates with new security features
• Check your Android version now by going to Settings > About > Android Version

Estimated ratings suggest that upgrading hardware provides the best balance of security, ease of use, and cost-effectiveness for users stuck on older Android devices.

Which Android Versions Are Affected by Surfshark's Change

Let's be specific about what Surfshark is dropping support for. The cutoff is Android 5.0 Lollipop, released in November 2014. That means devices running Lollipop (5.0, 5.1) are getting no more updates. But here's the thing: almost nobody is still using Lollipop in 2025.

According to the latest Android version statistics, Lollipop represents less than 0.5% of active Android devices globally. That's fewer than 20 million people out of billions of Android users worldwide. Most people upgraded years ago, even if they're using mid-range phones.

However, the real impact hits a specific demographic: people in developing markets with limited budgets, those holding onto very old budget phones, and individuals who intentionally avoid automatic updates. These users might still be running older versions and relying on VPNs for privacy and security.

Surfshark's announcement also affects earlier versions like Android 4.4 Kit Kat, Android 4.3 Jelly Bean, and anything before that. These versions are even rarer in 2025. But if you somehow have a device from that era and rely on Surfshark, you're now in a difficult position because the app won't update anymore.

The supported minimum is now Android 6.0 Marshmallow (released 2015) and above. Most phones from 2015 onward can update to at least Marshmallow if they haven't already. But some budget phones from 2014-2015 maxed out at Lollipop due to hardware limitations.

This creates a hard divide. If your phone runs Android 6.0 or newer, you're completely fine. Surfshark will continue pushing updates with new features, security patches, and performance improvements. If you're stuck on Lollipop or earlier, you're locked into whatever version of Surfshark you currently have, no matter how outdated or vulnerable it becomes.

ExpressVPN and Surfshark lead in speed and streaming capabilities, while ProtonVPN offers competitive pricing. Estimated data based on typical service features.

How to Check Your Current Android Version Immediately

You need to know whether this change affects you. The good news is checking takes literally 30 seconds. Here's the exact process:

For most Android phones:

1. Open the Settings app (usually the gear icon)
2. Scroll down and tap "About phone" or "About device"
3. Look for "Android version" or "OS version"
4. You'll see a number like "14.0" or "13.2"

That number is your current Android version. Compare it against the list below.

For Samsung Galaxy phones specifically:

The menu path is slightly different. Go to Settings > About phone > Software information, then scroll down until you see "Android version." It's the same information, just organized differently.

For One Plus phones:

Settings > About > Android version shows up right at the top. One Plus keeps this visible and straightforward.

For Google Pixel phones:

Settings > About phone shows "Android version" immediately. Google's own phones make this easiest to find.

Once you've found your number, here's what it means. If your phone shows Android 6.0 (Marshmallow) or higher, you're totally fine. Surfshark will keep updating your app indefinitely. If you see 5.1 or 5.0 (Lollipop) or anything lower, your device is in the unsupported zone.

But here's an important question: can your phone update to a newer Android version? Most phones from 2015 onward can update to at least Android 8 or 9. Even budget phones from that era received updates eventually. So just because you're currently on Lollipop doesn't necessarily mean you're stuck there.

Check if your phone supports updates by going to Settings > System > System update or Settings > About phone > System update. Some phones have a separate path, but the principle is the same. If your phone shows "Your system is up to date," then you've maxed out. That's when you genuinely have limited options.

The Security Implications of Running Unsupported VPN Apps

When a VPN app stops receiving updates, you're accepting a real security risk. This isn't theoretical. Let me explain what actually happens.

VPN apps depend on encryption protocols and security libraries that need regular updates. When vulnerabilities are discovered in Open VPN, Wire Guard, or other VPN protocols, developers patch them immediately. Surfshark does this constantly. But if your Surfshark app is locked at an old version, it won't receive these patches.

Here's a concrete example. In 2023, a vulnerability was discovered in Open VPN's TLS implementation. It didn't break the entire VPN, but it created a scenario where an attacker with network-level access could potentially exploit it. Surfshark pushed an update within weeks. Users on modern Android got the fix automatically. Users on old devices running unsupported Lollipop? They never got patched.

The other side of the problem is Android itself. Lollipop stopped receiving security updates from Google in 2017. That means the underlying operating system has known vulnerabilities that will never be fixed. When you stack an outdated VPN app on an outdated OS, you're creating a security sandwich where neither layer is defending you against modern threats.

Malware targeting old Android versions actually exists. Attackers focus on old versions because they know millions of devices never updated and are sitting ducks. Your VPN helps encrypt your traffic, but a compromised operating system can still steal data before it even reaches the VPN tunnel.

There's also the certificate validation problem. Modern VPN apps need to validate SSL certificates to ensure they're connecting to legitimate servers. Old certificate stores don't recognize new Certificate Authorities. This can break functionality and create security warnings.

The practical impact: using an unsupported VPN app on old Android isn't like running Internet Explorer in 2024 (terrible but you can still browse). It's more like leaving your front door unlocked because you refuse to upgrade your lock. The VPN doesn't work nearly as effectively, and you're exposed to attacks the developers have already fixed but you'll never receive.

In 2025, less than 1% of Android devices run versions below 6.0, with Lollipop at 0.5%. Estimated data.

Why VPN Providers Drop Support for Old Android Versions

This decision isn't just Surfshark being mean to old phone owners. There are legitimate technical and business reasons why every major VPN provider has already made the same move.

Development Resource Allocation

Maintaining an app that works on Lollipop means writing code that's compatible with Lollipop. Modern Android uses APIs that don't exist in Lollipop, or work differently. Supporting old versions requires conditional code paths, testing on old devices, and maintaining separate release branches. It's expensive.

Surfshark's engineering team could spend time fixing Lollipop bugs or building features for the 99.5% of users on modern Android. That's an easy business decision.

Security Standards and Encryption Requirements

Modern VPN protocols like Wire Guard and updated TLS versions require features that old Android versions don't support well. Google deprecated older cryptography standards in newer Android releases for good reason. Supporting those deprecated standards exposes Lollipop users to weaker encryption while complicating the codebase for everyone else.

Test Coverage and QA

Every time Surfshark makes an update, they need to test it on a matrix of devices and OS versions. Testing on 50 different phones each running Android 14? Necessary. Testing on phones running Lollipop? Almost nobody uses them. The return on investment is near zero.

User Expectations vs. Reality

Modern Android users expect features like dark mode, adaptive theming, biometric authentication, and quick settings integration. Lollipop doesn't support most of these. Maintaining feature parity while supporting ancient OS versions is practically impossible.

The Economics of User Support

When someone's Lollipop device breaks with Surfshark, they submit a support ticket. Surfshark's support team has to investigate. It costs money. If fewer than 20 million people globally use Lollipop, and only a fraction of those use Surfshark, the cost per user becomes astronomical compared to supporting Android 12+ users.

Look at the broader pattern. Express VPN dropped Lollipop support in 2021. Nord VPN requires Android 5.1 minimum but prioritizes Android 8+. Proton VPN requires Android 5.0 minimum but focuses on modern versions. This isn't unique to Surfshark. It's universal across the industry.

Honestly, Surfshark's decision is pragmatic, not punitive. They're being transparent about it and giving people time to adjust. Some companies just let old versions quietly break.

Alternatives for Users Stuck on Older Android Devices

If you've confirmed your phone can't update past Lollipop and you need a VPN, you have options. They're not all great, but they exist.

Option One: Keep Using Your Current Surfshark Version

This is technically possible but not recommended. Your existing Surfshark app will continue working for a while. It'll connect to VPN servers and encrypt your traffic. But you won't get security patches, new features, or bug fixes. Eventually, as protocols update and server configurations change, it'll stop working entirely. You're buying time at the cost of security.

Option Two: Switch to a VPN That Still Supports Lollipop

A few VPN providers still maintain Lollipop compatibility, but the list is shrinking. Tunnel Bear previously supported older Android versions, though you should verify current version requirements on their website. Some free or cheap VPNs might still support Lollipop, but here's the honest truth: those are usually the VPNs you shouldn't trust with your data. Free VPNs make money by selling user data. Using one on Lollipop is trading one security problem for another.

Option Three: Use Manual VPN Configuration

Android has built-in VPN support. If your device runs Lollipop or later, you can manually configure Open VPN or another protocol using third-party apps. The apps might be older and less user-friendly, but they'll work. However, this requires technical knowledge and you lose Surfshark's nice features like kill switches, split tunneling, and one-click connection.

Option Four: Upgrade Your Hardware

I know this isn't what you want to hear, but it might be the most practical long-term solution. Used phones from 2018-2019 running Android 12 cost $100-200 on the secondhand market. That's often cheaper than a year of a premium VPN subscription. You get security updates for years, modern performance, and compatibility with all current apps.

Sure, it requires spending money. But consider what you're protecting. If your data is valuable enough to need a VPN, it's valuable enough to protect with modern hardware that actually receives security updates.

Option Five: Use a Different Device for VPN-Critical Activities

If you have any other device (tablet, laptop, even a Chromebook), you could use Surfshark on that and just accept limited privacy on your old phone. It's not ideal, but it's better than carrying around an unpatched device.

Estimated data shows that Android 5.0 and 5.1 make up the majority of affected devices, with older versions also impacted. Estimated data.

Checking Surfshark's Official Support Documentation

Before making any decisions, you should verify the exact requirements directly from Surfshark. Companies sometimes communicate changes differently in different channels, so going straight to the source matters.

Head to Surfshark's support page and search for "system requirements" or "Android minimum version." Their documentation will list the exact version threshold. As of 2025, it's Android 6.0 Marshmallow minimum, but Surfshark could update this requirement at any time.

Their support section also includes troubleshooting for version-specific issues, device compatibility tools, and contact options if your situation is unusual. If you have a device that's on the borderline (say, Android 5.1 or 6.0), their support team can sometimes clarify what happens with your specific model.

What's important is understanding that Surfshark isn't the only one making these decisions. When you see them drop Lollipop, it signals a broader shift across the industry. Next year, another VPN provider might drop Android 6 or 7 support. The year after, another drops 8. This is inevitable as technology moves forward.

One more thing: check Surfshark's app update history in the Google Play Store. If you look at their past release notes, you'll see they've already been gradually moving away from Lollipop support. This announcement is formalizing something that's been happening for a while. The app probably won't even launch on Lollipop pretty soon, even if you somehow force-installed an old version.

Practical Steps to Upgrade Your Android Version (If Possible)

If your phone is currently on Lollipop or early Marshmallow, there's a good chance it can update to something newer. Let me walk you through the process and what to expect.

Step One: Check Your Phone's Maximum Update

Not every phone can update to the latest Android version. Manufacturers limit updates based on hardware capabilities. A Samsung Galaxy from 2015 might max out at Android 9, while an identical device released six months later could reach Android 12. It's frustrating but real.

The easiest way to check: look up your specific phone model on the manufacturer's website or use a compatibility tool. Search Google for "[Your Phone Model] maximum Android version." For example, "Samsung Galaxy S6 maximum Android version" will quickly tell you whether your S6 can go beyond Android 7.

Step Two: Back Up Everything Before Updating

Android updates can fail, though it's rare. Before you start, back up your data. Use Google Photos for photos, Google Drive for documents, and Google Contacts for your contacts. If something goes wrong, you won't lose critical information.

Step Three: Update Gradually If Possible

Don't jump straight from Lollipop to Android 10 if your phone allows intermediate versions. Update in stages. Lollipop → Marshmallow → Nougat → Oreo → Pie → Android 10. This reduces bugs and gives you time to verify everything works at each stage.

How? Go to Settings > About Phone > System Update. Tap "Check for updates." If you're on Lollipop and Marshmallow is available, it'll download and install. Restart. Repeat the process.

Step Four: Expect Longer Installation Times

Android updates can take 30-60 minutes depending on how many versions you're skipping and how much data you have on the device. Keep your phone plugged in, connected to Wi-Fi, and don't touch it during the process. Interrupting an update is how people brick their phones.

Step Five: Set Up Your Apps After Updating

Older apps sometimes don't work perfectly on newer Android versions. After updating, open the Play Store, go to "My apps and games," and update all your apps. Surfshark will update automatically if you're now on a supported version. That's when you start getting security patches again.

Step Six: Verify Your New Version

After updating, go back to Settings > About Phone > Android Version and confirm you're on the new version. If the update process failed and you're still on Lollipop, try again or contact your phone manufacturer's support.

If your phone truly can't update past Lollipop (which is rare in 2025), then you're facing the hardware upgrade decision. At that point, you're not just dealing with VPN compatibility. You're using a device that's not receiving any OS-level security updates, which is the bigger problem.

Estimated data showing the distribution of key factors influencing VPN providers' decisions to drop support for older Android versions. Development resource allocation and security standards are the primary concerns.

Impact on Surfshark VPN Performance and Feature Access

Here's what changes when you upgrade or remain unsupported. Understanding this helps you make an informed decision about whether upgrading is worth your time.

For Users on Supported Versions (Android 6.0+)

You'll continue receiving regular updates with improvements like faster connection times, new server locations, and enhanced encryption. Surfshark adds features specifically for modern Android, like picture-in-picture mode, notification improvements, and integration with Android's native security features. You're basically getting the full modern VPN experience.

Wire Guard support, which is faster than Open VPN, is likely available. Modern app designs with smooth animations, dark mode, and intuitive settings work because they're coded for modern Android. Performance is optimized for modern hardware like the Snapdragon chips in newer phones.

For Users on Unsupported Versions

Your app's performance won't suddenly tank, but it will degrade over time. As Surfshark's servers update their protocols and security standards, your old app might struggle to maintain connections. Split tunneling, which lets you decide which apps use the VPN and which don't, might not work. Advanced features like ad-blocking or malware protection within the VPN might not be available.

Speed will likely be slower. Modern optimization for processors and battery life don't apply to devices running on Lollipop's older rendering system. You'll notice lag in the app and potentially slower actual VPN speeds.

Most critically, security becomes outdated. Surfshark will use newer encryption standards that your old app simply doesn't support. You're essentially using a VPN from 2015 to protect yourself from 2025 threats. It's not ideal.

Timeline for Full Incompatibility

Your current Surfshark version might work for 6-12 months. But Surfshark typically completely drops support for old versions within a year or two. At some point, their servers might not even accept connections from super-old app versions. That's when your app just stops working entirely, with no workaround.

Expect to see these problems start appearing around the 6-month mark after the official announcement.

Understanding Android Version Release Cycles and Support Timelines

Knowing how Android updates work helps you understand why Lollipop support is being dropped and when you should expect other VPNs to make similar changes.

How Android Version Release Works

Google releases a new major Android version roughly every year, usually in August or September. They name them alphabetically (well, they used to, now they just use version numbers). Each version is developed over about 18 months before release.

Once released, Android 6.0 (for example) might receive updates for about 3 years. Year one is the security-critical period. Year two is security patches mostly. Year three is just the diehards who haven't upgraded yet. By year four, Google stops supporting it entirely.

Since Android 5.0 Lollipop came out in 2014, it's now over 10 years old and way past any support window Google ever created. It's not just old, it's ancient in software terms.

Manufacturer vs. Google Support

Google maintains Android, but phone manufacturers like Samsung decide how long their specific phones get updates. Some manufacturers (like Samsung and Google itself) commit to 3 years of major updates and 4 years of security patches. Budget manufacturers sometimes stop after one update.

This is why a Samsung Galaxy from 2015 might support newer Android than a One Plus from the same year. Manufacturer commitments matter.

Cascading Support Requirements

When Google drops Android support, app developers follow shortly after. It takes maybe 6-12 months, but eventually, all the major apps you use will require newer Android versions. Surfshark is just the first domino falling.

Security Patch Windows

Even when Android versions are considered "supported," the level of support decreases over time. Android 14 gets security patches monthly. Android 13 gets quarterly patches. Android 12 and older get patches less frequently or only for critical issues. By the time Android reaches its fourth year, you're lucky if you get patches at all.

Estimated data shows a declining user base for Android 5.0 Lollipop, highlighting why Surfshark discontinued updates for these devices.

Comparison of Major VPN Providers' Android Minimum Requirements

Surfshark's decision to drop Lollipop support isn't unique. Let's see where the competition stands to understand the broader industry trend.

What this table shows is that Surfshark is actually aggressive in dropping old versions. Most competitors still claim Lollipop compatibility, but they don't develop for it anymore. It's legacy support, not active development.

The industry standard seems to be supporting back to Android 5.0 (Lollipop) while actively developing for Android 8.0 and above. Surfshark's move to Android 6.0 minimum is ahead of the curve, not behind it. Expect others to follow within 12-24 months.

What This Means for VPN Users' Privacy and Security Strategy

All of this points to a bigger truth about mobile security and VPN usage that extends beyond Surfshark.

The Importance of Staying Current

VPNs are security tools. When you use a VPN, you're making a deliberate choice to protect your privacy and data. Undermining that protection by running it on outdated, unpatched hardware defeats the purpose. It's like installing a top-security lock on a door with broken hinges.

If your device can't update to modern Android, the VPN isn't your only problem. You're exposed to malware, data theft, and targeted attacks at the OS level. Upgrading hardware becomes not just convenient, but necessary.

The Reality of Support Lifecycle

Every software product has a lifespan. Products you rely on for security have short lifespans once they reach the end of development. Surfshark's announcement is really just confirming what's inevitable: devices running 10-year-old operating systems can't run modern security software effectively.

This will happen again next year and the year after. Android 7 will stop being supported. Then Android 8. It's a continuous cycle, and upgrading is the only way to stay protected.

The Cost of Holding Onto Old Hardware

Upgrading feels expensive in the moment. A new phone costs money. But keeping outdated hardware costs more in actual security risk. One compromised account, one piece of malware stealing your banking credentials, one SIM swap attack targeting your vulnerable phone—any of these costs far more than a new device.

Plus, used phones from 2020-2022 are incredibly cheap now. The Snapdragon 845 chips from 2018 still crush modern workloads. You don't need the latest flagship. A mid-range phone from three years ago will stay supported for another 3-5 years and cost a fraction of what you paid for your current device.

Why Transparency Matters

Surfshark's announcement is actually good. They told users clearly what's changing and why. This gives you time to adjust. Some companies just let old versions quietly break and act surprised when people complain.

When a company communicates support changes this transparently, it's a sign they care about user experience. It means you can trust them with your security because they're not hiding behind vague language.

Choosing Your Next VPN If You're Making a Change

If Surfshark's decision is pushing you to reconsider your VPN provider, here's what to evaluate beyond just Android compatibility.

Security and Encryption Standards

Look for providers using modern encryption (AES-256 is standard), Wire Guard protocol support (faster than Open VPN), and transparent no-logs policies with independent audits. Express VPN and Nord VPN both publish security audits. Proton VPN is owned by Proton Mail's privacy-focused company.

Speed and Server Network

VPN speed depends on server distance and optimization. Surfshark is still known for speed despite the Android support change. Express VPN has optimized servers in 94 countries. Nord VPN operates one of the largest networks. Speed matters because VPNs inherently slow your connection, and you want to minimize that.

Streaming and Unblocking Capabilities

Some VPNs reliably unblock streaming services (Netflix, Disney+, etc.), others don't. Surfshark is specifically good for streaming. Express VPN is consistently reliable for unblocking. If this matters to you, test before committing.

Pricing and Value

Most major VPNs cost

Customer Support and Reliability

Try their chat support before buying. Good VPN providers respond instantly and actually solve problems. Bad ones pretend to help while wasting your time. Live chat quality is a strong indicator of company quality.

Future-Proofing Your Choice

Choose a VPN that's actively developing for modern Android. Avoid VPNs that haven't updated their app interface in years. They're probably cutting corners on security too.

FAQ

What does it mean that Surfshark stops updating apps for Android 5.0 Lollipop?

It means Surfshark will no longer release new versions of their VPN app for devices running Android 5.0 and older. Your current version might continue functioning briefly, but it won't receive security patches, bug fixes, or new features. Eventually, as Surfshark's servers update their protocols, older app versions will stop connecting entirely.

How do I know if my Android phone is affected by this change?

Go to Settings > About Phone and look for your Android version number. If it shows 6.0 (Marshmallow) or higher, you're completely unaffected. If it shows 5.1 or 5.0 (Lollipop) or anything lower, your device won't receive Surfshark updates. However, most phones from 2015 onward can update to newer Android versions through Settings > System > System Update.

Can my phone update to a newer Android version to stay compatible with Surfshark?

Probably yes. Most phones from 2015 onward can update to at least Android 8 or 9. Go to Settings > System > System Update and check if updates are available. If your phone shows "Your system is up to date" and it's still on Lollipop, then you've hit the maximum for that device. In that case, hardware upgrade becomes necessary.

What are the security risks of using an old VPN app on Lollipop?

Your app won't receive security patches for discovered vulnerabilities in VPN protocols and encryption libraries. Android 5.0 itself stopped receiving security updates from Google in 2017, meaning your operating system is vulnerable to known exploits. This combination creates a significantly weaker security posture than modern devices. Using an unpatched VPN on an unpatched OS defeats the purpose of using a VPN at all.

Which other VPN providers have dropped Lollipop support?

Express VPN dropped active development for Lollipop around 2021, though they still technically support it. Most modern VPN providers focus development on Android 8 and higher. As of 2025, most still technically support Lollipop, but Surfshark's move signals the beginning of an industry-wide shift away from that version.

Is there a free alternative VPN I can use if I'm stuck on Lollipop?

There are free VPN options, but they come with significant tradeoffs. Free VPNs typically have limited data allowances, slower speeds, fewer server locations, and questionable privacy practices since they need to monetize somehow. If you're on Lollipop specifically because you can't afford to upgrade hardware, a free VPN might work temporarily, but understand you're trading privacy for zero cost. Your ISP can still potentially see your browsing metadata, and the free VPN provider might have access to your data.

Should I upgrade my phone just for Surfshark compatibility?

Not just for Surfshark. But if your phone can't update past Lollipop, the larger issue is that your entire device is unsupported and vulnerable. Security patches come from Google, manufacturers, and app developers. If you're missing all three (no OS updates, no app updates, no manufacturer support), upgrading hardware is the right call. You don't need the latest flagship—a mid-range phone from 2020-2021 costs $150-300 used and will stay supported for years.

Can I keep using my current Surfshark version on Lollipop indefinitely?

For a short time, yes. Your app will continue connecting to VPN servers if nothing has changed on Surfshark's backend. However, this is not recommended because you're missing critical security updates. Usually within 6-12 months of an app stopping receiving updates, it becomes incompatible with the provider's current infrastructure. Surfshark's servers will update protocols and configurations, and your old app won't support them. Eventually, it will simply stop working.

What's the fastest way to upgrade my Android version if I'm currently on Lollipop?

Go to Settings > System > System Update (or Settings > About Phone > System Update depending on your phone brand) and tap "Check for updates." If your device supports a newer version, it will download and install automatically over Wi-Fi. The process takes 30-60 minutes and requires your phone to be plugged in. Don't interrupt this process. If updates are available, your phone will show them all and you can choose to install them sequentially or all at once.

Conclusion: Taking Action Now Protects Your Security Later

Surfshark's announcement to stop updating apps for Android 5.0 Lollipop isn't surprising, shocking, or unfair. It's the natural progression of software development moving forward. In tech, standing still is moving backward because threats evolve constantly.

The important takeaway isn't about Surfshark specifically. It's about understanding that security tools only work if they're current. VPNs protect your data by encrypting it with modern standards. When those standards update, your app needs to update too. If your device stops receiving OS updates, a VPN becomes less effective because the underlying operating system has known vulnerabilities.

Your action items depend on where you fall. If you're using Android 6.0 or higher, do absolutely nothing. Surfshark will continue developing for you, and you'll keep getting security patches. If you're on Lollipop but your phone can update to Marshmallow or higher, run that update this week. It takes an hour and solves the problem completely. If your device genuinely can't update past Lollipop, start exploring used phone options for something from 2019-2020 that will provide years of continued security support.

VPN usage is about protecting your privacy. That protection only works when your entire device—OS, apps, and infrastructure—is current and patched. Surfshark's decision is pushing the industry toward that reality, and that's actually good news for your security.

Check your Android version today. Make a decision about your device this week. Your data's security depends on it.

Key Takeaways

• Surfshark has discontinued app updates for Android 5.0 Lollipop and older, requiring users to upgrade devices or switch VPN providers
• Android 5.0 Lollipop represented less than 0.5% of active Android devices in 2025, making the decision pragmatic rather than punitive
• Security patches and protocol updates won't reach unsupported devices, creating meaningful security vulnerabilities when using outdated VPN apps
• Most phones from 2015 onward can update to at least Android 8 or newer through system updates, keeping them compatible with modern VPN apps
• Used phones from 2019-2021 cost $100-300 and receive security support for 3-5 additional years, making hardware upgrades economically sensible for security

Related Articles

• Galaxy S26 Scam Detection: Why Samsung's New Feature Matters [2025]
• Google Fast Pair Exploit: How Hackers Track Your Headphones [2025]