For Home  •  For Business  •  About Webroot
My Account • Renew / Upgrade • Cart
Photo illustration of woman viewing mobile phone with ghost behind her.

6 settings that stop malware and ransomware

by Kate Hernandez | October 8, 2025 | Threat Lab

Reading Time: 4mins

Cyberattacks on computers and smartphones are exploding — and most people don’t realize they’re at risk. In 2024 alone, there were over 6.5 billion malware attacks worldwide. And it’s not just PCs anymore — your phone is now a big target too. Android malware skyrocketed by 151% in the first half of 2025, and nearly 1 in 5 mobile devices already carries some form of infection.

Think of it like a digital hitchhiker on your phone — quietly tracking, stealing data, and waiting to strike. Hackers go after the devices we trust most for banking, texting, photos, and work. That trust makes them valuable targets.

The biggest enablers? Unpatched software, unsafe downloads, and weak settings. Ransomware spreads fast, locking files until victims pay. The good news: a few simple device settings can stop most malware and limit ransomware damage across computers and mobile devices.

1. Turn on automatic updates

Keeping your operating system and apps up to date removes known flaws that attackers exploit.

What to do:

  • iOS / macOS: Enable Automatic Updates in Settings > General > Software Update.
  • Android: Use Google Play system update and allow automatic app updates.
  • Windows: Set Windows Update to automatic.
  • Mac: In System Settings > General > Software Update, check Install updates automatically.

Why it matters: Adoption rates vary widely by platform. Apple users tend to have the latest version of software—iOS 18 is already on 82% of all active iPhones, and 62.92% of macOS users were running the latest software version.

On Android, the picture is more fragmented — 28.5% use Android 15, but many are still on Android 13 or older. While on Windows more than half the users are on earlier OS versions. The longer a device waits on updates, the longer it stays exposed.

2. Use safer app sources

Most mobile malware comes from installing applications from unofficial app stores, websites, and emails.

What to do:

  • iOS: Only download from the App Store.
  • Android: Only download from Google Play and disable Install unknown appsWindows / Mac: Install software from trusted developers or the Microsoft Store / Mac App Store. Verify publisher identity before installing.

3. Practice smart download habits

Browsers and apps can block risky downloads and fake pop ups.

What to do:

4. Strengthen network protections

Ransomware often spreads across shared or unsecured networks.

What to do:

  • Turn on your firewall (built into iOS, Windows, and macOS, or use third party apps for protection such as Webroot solutions ).
  • Set Home Wi-Fi as private.
  • Turn off Auto Join for public Wi-Fi.
  • Use a VPN when you are travelling or at a coffee shop.
  • Forget old networks you no longer use.

5. Backup with version history

Backups are the last line of defense. If ransomware locks your files, you can restore from a clean version.  Backing up with version history ensures you have access to correct file versions.

What to do:

  • Use cloud or external backup with version history such as OS based features or more robust backup tools like Carbonite.
  • Test restoring a single file to confirm it works.
  • Keep additional backup copies offline or in the cloud.

6. Turn on real-time protection

Antivirus software can catch threats before they spread.

What to do:

  • Enable real-time protection with antivirus software such as Webroot Total Protection or Webroot Essentials.
  • Use ransomware shields and behavior monitoring such as built in Microsoft Defender and macOS XProtect and Gatekeeper.
  • Schedule a weekly quick scan.

Why it matters:  More than a quarter of Americans still don’t have antivirus protection on their mobile devices.  Solutions like Webroot deliver lightweight, always-on protection that stops malware and ransomware before it can put your computer and information at risk. Adding this missing layer closes one of the biggest security gaps.

Device Settings at a Glance

Setting iPhone (iOS) Android Windows Mac (macOS)
Automatic updates ✅ ✅ ✅ ✅
Safer app sources App Store only Google Play only Microsoft Store / verified Mac App Store / verified
Smart downloads Safari warning Chrome safe browsing SmartScreen Safari/Chrome safe browsing
Network protections Firewall, Auto Join off Firewall, Auto Join off Firewall, private profile Firewall, private profile
Backups iCloud with versions Google One, external OneDrive/File History Time Machine
Real-time protection Webroot Webroot Webroot Webroot

What to do if you suspect ransomware

  • Disconnect from the internet immediately.
  • Do not pay the ransom. Payment does not guarantee recovery.
  • Run a full antivirus scan and remove detected threats.
  • Restore clean files from backup.
  • Contact a professional if recovery is complex.

Stay ahead of hackers

Securing your devices does not require advanced skills. By enabling updates, using safe app sources, practicing smart download habits, strengthening networks, backing up files, and running real-time protection, you block the main paths malware and ransomware uses to spread.

Protect your digital life with Webroot device security and stay one step ahead of attackers.

Additional resources:

Apple Personal Safety User Guide

Microsoft Security Features Settings

Android Security and Privacy Settings