Buyer’s guide · Desktop security

Avast Premium Security: what the licence covers, and what it does not

Avast Premium Security is the paid desktop tier of one of the oldest names in antivirus. It is a reasonable product. It is also persistently misdescribed online — usually by pages that list a VPN and a password manager among its features. Neither is included. Here is what a licence actually buys, what it does not, and the six things worth checking before you pay.

What we corrected in this guide

An earlier version of this page repeated the standard marketing summary of Avast Premium Security. Checking it against Avast’s own current product pages showed that several points were wrong. We have rewritten them rather than quietly deleting them, because a reader who has seen the same claims on a dozen other sites deserves to know why this one differs.

If any statement here and Avast’s own current documentation disagree, Avast’s information prevails. Product line-ups, plan names and regional availability change without notice, and a vendor is the authority on its own product. Please check the feature list on the Avast page before you pay for anything on the strength of this guide.

What an Avast Premium Security licence actually covers

Avast began in Prague in 1988, under the name ALWIL Software, which makes it one of the oldest continuously operating antivirus businesses in the world. Today it is part of Gen Digital, the company formed when Avast merged with NortonLifeLock in 2022, and which also owns Norton, AVG, Avira and CCleaner. Premium Security is its paid consumer desktop tier, sitting above the free Avast Antivirus and below the bundled Avast One and Avast Ultimate packages.

The clearest way to understand what you are buying is to separate three categories: what the licence covers, what Avast sells alongside it, and what no longer exists.

The protection features, in plain language

• The shields. A file shield checks files as they are opened or written, a web shield inspects downloads and pages, a mail shield inspects attachments. These run constantly and account for most of what the product does day to day.
• Behaviour monitoring. Rather than asking “have I seen this file before?”, this asks “is this program acting like malware?” — injecting itself into other processes, adding startup entries, encrypting documents in bulk. It is how brand-new threats get caught.
• Ransomware shield. A rule that stops applications you have not approved from modifying files in your documents and pictures folders. Microsoft ships a comparable feature in Windows called Controlled Folder Access, but it is switched off by default; Avast’s equivalent is on.
• Advanced firewall. Windows has a capable built-in firewall. Avast’s replaces it with one that exposes per-application rules more readily and changes profile according to the network you are on.
• Network inspector. Scans the devices on your local network and flags weak router settings, default passwords and open services.
• Webcam protection. Requires an application to ask before it can open the camera.
• Sensitive data scanning. Searches your drive for documents that appear to contain identity or financial data, so you can decide where they should really live.
• Sandbox. Runs a program you are unsure about in an isolated environment where it cannot reach the rest of the system.
• Secure file shredder. Overwrites a file rather than only removing its directory entry. On spinning hard disks this is meaningful; on modern solid-state drives with wear levelling and TRIM, overwriting a single file is far less reliable than encrypting the whole drive, which is worth knowing before you rely on it.

How the protection is layered

Security suites are marketed as lists of features, which makes them sound like a pile of unrelated tools. They are better understood as a series of gates. A threat has to pass every one of them, and each gate exists because the gate outside it is imperfect.

The practical consequence is that the layers are not equally valuable. The file and behaviour layer does the overwhelming majority of the work. The network layer matters most on shared or public networks. The privacy layer is the most situational — a webcam shield is valuable if you have a webcam and worthless if you do not.

How infections actually arrive on a home computer

The mental image most people carry — a virus that arrives on its own, from nowhere — is a poor fit for how compromises actually happen now. In the overwhelming majority of consumer cases something on the machine was run, and a person was persuaded to run it.

This shapes what protection is worth. A product that is excellent at scanning archives but poor at recognising a lookalike login page is defending the wrong door. It is also why the least glamorous habits — not installing cracked software, treating unexpected attachments as hostile, keeping the operating system and browser updated — still outperform any single product feature.

Ransomware: where a suite helps, and where only a backup does

Ransomware deserves separate treatment because it is the one category where the difference between catching something early and catching it late is the difference between an inconvenience and losing years of files.

Note where the diagram ends. Once encryption has completed, no feature of any security suite gets your files back. Only a copy that the ransomware could not reach does that — an external drive that is normally unplugged, or a cloud service with genuine version history and a recycle bin that survives deletion.

Coverage by platform: the same licence, four different products

A multi-device licence is often presented as though the same protection travels to every machine. It does not. The Windows build is the complete product; the macOS build is smaller; the Android app is a different application with a different feature set; and on iOS, Apple’s own restrictions mean that no third-party security app can scan other apps at all.

Is a paid suite worth it when Windows already includes Defender?

This is the question that matters most, and it is the one review pages most often skip. Microsoft Defender is built into Windows, costs nothing, updates through Windows Update, and in independent laboratory testing has for several years scored in the same broad band as the commercial products rather than well below them. Any guide that does not tell you this is not being straight with you.

So what does the paid tier genuinely add? Three things worth paying for, depending on who you are:

• Coverage of non-Windows devices from one purchase. Defender does not exist on macOS or Android in a consumer form. If you are securing a household of mixed devices, a multi-device subscription is a real convenience.
• Features Windows either lacks or hides. Sensitive data scanning, the sandbox, the shredder and webcam gating have no straightforward Windows equivalent, and Controlled Folder Access is off by default and awkward enough that most people never enable it.
• Removal of the upsell prompts. If you are already running Avast Free, a large part of what the paid tier buys is silence. That is a legitimate reason to pay, and vendors are rarely willing to say so out loud.

And the honest case against: if you use a single, up-to-date Windows machine, browse carefully, avoid pirated software and already have backups, Defender plus good habits is a defensible choice, and you should not be made to feel reckless for making it.

Plans, renewal, refunds and your rights as an EU consumer

Premium Security is sold in single-device and multi-device forms, with the multi-device plan covering a number of machines that Avast states on its own store page. We do not reproduce the device count, the price or any discount here, because all three vary by country and by the day, and a stale figure on a review page is worse than no figure.

The renewal price is the real price

As with nearly every consumer security subscription, the advertised price is usually an introductory rate for the first term. The subscription then renews automatically at the standard rate, which is frequently a good deal higher. Before subscribing, find the renewal price — it is normally in the terms beside the checkout button — and decide whether the product is worth that.

Cancelling and getting a refund

• Automatic renewal can be switched off in your Avast account. Doing it immediately after purchase is a reasonable habit; the subscription still runs its full paid term.
• Avast’s own money-back guarantee applies to purchases made directly from Avast, within a window and under conditions that Avast states at the point of sale. Read that statement at checkout: it is the term that actually binds, not any summary of it elsewhere.
• Your statutory right of withdrawal. Under EU consumer law you generally have fourteen days to withdraw from a distance contract. For digital content and services there is an important exception: if you expressly ask for the service to start immediately and acknowledge that you therefore lose the right of withdrawal, you can lose it. Ticking that box at checkout is normally what starts the download — so read it rather than clicking through.
• Where you bought it matters. A licence bought through a reseller or an app store is governed by that seller’s refund policy, not Avast’s.

Avast’s privacy record, stated plainly

A page paid on commission has an obvious reason to omit this section. We are including it because leaving it out would make everything else here less trustworthy.

In January 2020, following reporting by Motherboard and PCMag, Avast announced it was winding down Jumpshot, a subsidiary that had been packaging and selling browsing data derived from Avast users. In February 2024 the United States Federal Trade Commission announced an order against Avast concerning that conduct, including a monetary payment of 16.5 million US dollars and a prohibition on selling or licensing browsing data for advertising purposes. These are matters of public record; the FTC’s own announcement is the source to read, and it is linked in the sources below.

How much weight to give this is a judgement, not a fact, so we will give ours and let you disagree with it. The conduct was serious and the company’s explanations at the time were unconvincing. It also happened several years ago, was ended, and was followed by a binding regulatory order that constrains the specific behaviour. Some readers will reasonably decide that is enough. Others will reasonably decide they would rather give their money to a vendor without that history. Both positions are defensible, and a review page that pretends the question does not exist is not helping you make either choice.

How to judge detection quality for yourself

We do not run malware laboratories, so we publish no detection scores. Two independent European institutes do this properly and publish their results openly:

• AV-TEST (Magdeburg, Germany) publishes bi-monthly consumer results scored on protection, performance and usability — the last of which is essentially a false-positive count.
• AV-Comparatives (Innsbruck, Austria) publishes real-world protection tests, malware protection tests, performance tests and false-alarm tests through the year.

Two habits make those reports far more useful. First, read the current one: a product’s standing genuinely moves between rounds, and a verdict from two years ago tells you very little. Second, read the false-positive column, which most summaries ignore. A product that blocks slightly less malware but almost never quarantines your own files is often the better product to live with, and that trade-off is exactly what these tests expose.

Be sceptical of any page — including this one — that hands you a single number out of ten, or a “winner”. We publish no score for this product and no star rating, because we have not conducted the testing that would justify one.

Who it suits, and who it does not

Note the second row in particular. If your reason for shopping is “I want a VPN too”, Premium Security is the wrong purchase and you should be looking at Avast One, Avast Ultimate, or a dedicated VPN from another vendor entirely. We would rather tell you that than take a commission on a product that will not do what you wanted.

A buyer’s checklist for any security subscription

None of this is specific to Avast. It applies to every consumer security product sold on a subscription, and it is the list we would want a friend to work through before paying.

Questions and answers

How this page is funded

We think readers are owed a mechanical explanation rather than a one-line disclaimer, so here is the whole chain.

Three consequences follow, and we would rather state them than have you infer them:

• We are paid only if you buy. That is a real incentive to be positive, and it is why this page opens with corrections rather than with praise.
• We are paid the same whether the product suits you or not. Our defence against that is the who it does not suit section, which we would have no commercial reason to write.
• We cannot see whether you bought anything. This site sets no cookie and runs no tracker. The advertising network attributes sales on its own systems, and reports to us as a number, not as people.

Sources and method

This guide was written by Paul Murphy and is based on Avast’s published product and support documentation, the published results of the two independent testing institutes named below, and the public record of the Jumpshot matter. No claim here is based on a press release alone, and no statistic has been reprinted that we could not trace to a named source. Where we could not verify something — current prices, current device limits, current detection rates — we have said so and pointed you at the authority rather than guessing.

• Avast — Premium Security product and support pages avast.com and support.avast.com. The authority on features, plan composition, system requirements, pricing and refund terms.
• AV-TEST Institute av-test.org — bi-monthly consumer protection, performance and usability results.
• AV-Comparatives av-comparatives.org — real-world protection, malware protection, performance and false-alarm tests.
• US Federal Trade Commission ftc.gov — the 2024 announcement and order concerning Avast and the sale of browsing data.
• IBM, Cost of a Data Breach Report — named here as the source readers should consult directly for breach-cost figures, rather than as a figure we have reprinted.
• ENISA Threat Landscape enisa.europa.eu — the European Union Agency for Cybersecurity’s annual survey of threat trends.

Corrections log

• 18 September 2026 — article substantially rewritten. Removed the claims that a VPN, a password manager and a secure browser are included in a Premium Security licence; removed a headline discount percentage; removed an unsourced data-breach cost statement; removed a “reader story” framing that implied first-hand testimony the page did not contain.

Published 18 September 2026 by Paul Murphy, director of publication, Durimenko s.r.o.. Last reviewed 18 September 2026.