2 answers
Don't assume it's safe just because the phone still powers on. Android 5.1 stopped receiving security updates years ago, and that's the core problem. You're running a phone with known vulnerabilities that attackers actively exploit. Apps have moved on too - most modern apps either won't install on it or behave poorly, leaving you with fewer options for the essentials.
The practical risks depend on what you're doing with it. If it's purely a wifi-only device for light browsing and games you've already installed, the damage is limited but still not ideal. But if you're checking email, using banking apps, or connecting to any accounts with personal data, you're taking real chances. Even apps that do technically work on Android 5.1 often need security patches that won't reach your phone. Most newer versions of popular apps have dropped support entirely.
My honest take: it's not a question of "is it safe" but "how much risk are you comfortable with." If you need a phone for daily use in 2026, moving to something current makes sense. If you're keeping it as a dedicated device for specific offline tasks, fine, but isolate it from anything sensitive. At minimum, disable auto-install updates from the Play Store for any apps you do have, and just... don't use it for anything that matters financially or personally.
If you're still using one, you're basically carrying around a device with a giant "hack me" sign on it - Android 5.1 hasn't had security patches in years, so any banking apps, passwords, or sensitive stuff you access on it is genuinely at risk. My old phone from that era started acting weird after I kept using it for email, and I realized later it probably had malware since it never got updates.
What are you actually using it for? If it's just a backup device or a wifi-only thing for games or reading, the risk is way lower than if you're doing anything with personal data or accounts.
Your answer
Log into answer.