I've got an old Samsung Galaxy S5 sitting in a drawer that still powers on. It's stuck on Android 6.0 and I don't think it gets updates anymore. Was thinking about using it again as a backup phone for when I travel. Is it safe to use for basic stuff like maps and messaging, or am I just asking for trouble with malware at this point?
If you're keeping it offline and only using it for maps and texting through WiFi without logging into sensitive accounts, you're probably fine. I had an old phone in a drawer too and grabbed it for a trip once - just used it for Google Maps and messaging people on WhatsApp, nothing that touched banking or email. The real risk kicks in when you're installing apps from sketchy sources or signing into accounts where someone compromised could reset your passwords elsewhere. So yeah, it can work as a travel backup, just treat it like a device you wouldn't mind losing and don't use it for anything that matters financially.
The Galaxy S5 is pretty risky in 2026 since Android 6.0 stopped getting security patches years ago, which means any new vulnerabilities discovered won't be patched and malware has an easier time finding holes. If you really need a backup phone for travel, it's safer to grab a cheap newer used phone - even a few years old is way more secure than something that's a decade behind on updates. If you do decide to use it anyway, at least keep it offline as much as possible, avoid banking apps or anything with sensitive info, and stick to WiFi from places you trust rather than public networks.
What apps are you planning to use on it, and will it have your important accounts logged in?
That matters because Android 6.0 stopped receiving security patches years ago - Samsung ended support way back in 2017. In 2026, that's nearly a decade of unpatched vulnerabilities sitting on a phone that's connecting to the internet. Using it for basic maps and messaging *might* seem harmless, but malware doesn't announce itself. If you're logging into email, banking, or social media accounts on that device, you're exposing those credentials to real risk. Even something like Google Maps needs to know your location and can pull sensitive data if the OS gets compromised.
The safer middle ground is treating it as extremely limited-use only. If you install nothing new, don't log into any sensitive accounts, and only use pre-installed apps like the calculator or notes, the risk drops significantly - but it's still not zero. The real problem is that you can't update anything: third-party apps stop getting security patches on old Android versions, and the OS itself is full of known exploits that people actively exploit. For travel backup, honestly, I'd rather see you pick up a cheap newer budget phone (even a couple years old) than rely on this. You'd get current security patches, better battery life, and actual support. If the S5 is your only option and you absolutely must use it, keep it offline as much as possible and don't treat it like a secure device.
I'm gonna be real with you - using it for maps and basic messaging is probably okay if you're not logging into anything sensitive like banking or email! The previous answers nailed the security risk part, but they're making it sound scarier than it needs to be for truly basic stuff. Just don't store passwords on it, avoid public WiFi, and definitely don't use it for anything financial. Think of it like keeping cash in your wallet instead of credit cards - not ideal, but manageable if you're careful about what you're doing with it.
Log into answer.
