When to Update Software (and When to Wait a Week)

Always update. Never update. Both extreme positions are wrong. Here's the rule we follow.

Update immediately when:

• The release notes mention "security." Every time. Even if other people are reporting bugs in the new version.
• The release fixes a CVE you can find on the vendor's security page. Same logic.
• The vendor explicitly recommends "update now."

Wait 3-7 days when:

• It's a feature release ("v3.0 — new dark mode!").
• The release notes don't mention security at all.
• It's a non-essential tool.

Wait longer when:

• It's a major version (.0) of mission-critical software. Let early adopters find the bugs.
• It's a database or file format change.
• You've heard early reports of issues from sources you trust.

Auto-update settings

• OS security updates: auto, always.
• OS feature updates: manual. You'll want to know.
• Browser: auto, always. Browsers are constantly under attack.
• Mission-critical apps: manual. Test in a quiet moment.
• Hobby/casual apps: auto, fine.

For deeper security context, see what actually makes software secure.