The cleanup finished. Then I almost bought a year.
The first thing that went wrong was not the installer I should not have clicked. It was my thumb hovering over the three-device card after the free scanner had already mopped the leftover junk off a Sunday-afternoon Windows laptop. I was standing in the kitchen, waiting on a pasta pot, watching the homepage treat a finished cleanup like proof I needed a year of seats. I almost paid. The scare was already over.
That is the whole buying problem at malwarebytes.com, and I am saying it twice because I keep watching people miss it: the free pass is a mop. Premium Security is the lock you leave on. If you only wanted a second opinion after a bad download, you already got the useful part. If you want the same engine sitting there tomorrow morning, you are shopping a different object. Do not let the homepage mash those two jobs together.
The shop still tells the 2004 origin on the live homepage, the family PC, founder Marcin. I am not here to retell it. I reopened the footer and the plan tabs on 27 September 2026. The cart still hid the real total behind a scripted widget. The footer printed 2445 Augustine Drive, Suite 550, Santa Clara, California 95054 and Penrose One, Penrose Dock, 1st Floor, Cork T23 KW81, Ireland. An identity page also printed One Albert Quay, 2nd Floor, Cork T12 X8N6. Homepage badges that day still showed 2026 PCMag and AVLab lines. Those are badges, not a promise that any scan stops every threat.
What I actually opened on 27 September 2026
Individual. Family. Small business. Those were the three live tabs. The small-business row still used Sole proprietor for three devices, Boutique business for ten, and Small office for twenty. An October 6, 2025 Santa Clara press release described individual plans as one person on one, three, or five machines, and family plans as two adults plus ten children on ten or twenty machines. The live cards I saw still offered a one-device Standard route beside the three-device cards. A larger invoice is not a different engine. It is more seats, a personal tunnel, or identity monitoring for enrolled people.
The JavaScript cart still refused to print a total I could copy. I am dating that check because stickers move, and because I will not invent a figure I could not read. Existing customers are told to open MyAccount for current deals. Annual plans on the homepage still advertised a sixty-day money-back line. Tax, the renewal toggle, and the second-year amount after a promotional strikethrough were unpublished on the public cards I could read without finishing a checkout. If that number decides it, finish the cart and read the line before you pay.
Who this shop is actually for
This shop fits a household that will actually fill most of a one-to-ten seat card and will let Premium Security stay resident on those machines. It fits the person who already used the free mop after a scare and now wants the same engine watching the next download. It also fits a one-person shop that wants a dashboard and a monthly report without hiring anyone to stare at logs. Count the machines you will actually activate. Empty seats are how a family card turns limp.
It does not fit a Linux-first desk that will never run the Windows or Mac installer, or a twenty-one-endpoint office. The small-business page sends shops bigger than twenty devices to the company's managed-endpoint lineup, and I am not walking that catalog here. It also does not fit anyone buying a paid seat as a substitute for patches, a second-factor login, or an offline copy of photos and tax files. Those jobs stay yours.
Who should skip the paid seat
Skip is a cleaner word than later. If any of the lines below is you, close the tab. The free scanner can still sit there as a second opinion. You do not owe the homepage a year.
- Skip a paid seat if Defender is patched, you take the updates, and you only wanted a one-time second look after a bad file
- Skip the middle consumer card if you already pay for a personal tunnel you prefer and will not switch it
- Skip the highest consumer card if you are outside the United States and wanted it mainly for credit-bureau files or the US-only identity insurance
- Skip if you run only Linux desktops and just need the browser extension the shop still gives away
- Skip if you need more than twenty managed endpoints; that is a different sales lane
- Skip a family band if most of the seats will sit empty after the first week
Open the live Malwarebytes plan tabs Recheck Individual, Family, or Small business on malwarebytes.com and read the device count before you subscribe.
The mop versus the lock
The Help Center still splits the two jobs without much poetry. Free is the mop you run after something already landed. Premium Security is the lock meant to sit there and block the next one. On Windows and Mac you still get a quick pass and a custom pass without paying. The deeper threat pass and the always-on layers want a paid seat. A digital-footprint look and the screenshot-and-link checker stay free on both desktops. Keep the free scanner for a single look. Pay only when this product will be the layer that stays awake.
I am not going to dump the platform grid. Those tiles change, and they are not why a year should leave your card. The useful fact is fussier than the homepage icons: buying ten seats is not the same as cloning the full Windows kit ten times. Web filtering is listed for Windows, Mac, and Android. Several Windows-only extras stay on the Windows page. Call screening before the phone rings is an iPhone extra. Fraudulent-text flags are an Android extra. iOS and iPadOS, in that Help Center table, have no on-device scanner. Add up the computers and phones you will turn on, then read the operating-system page for each seat.
A ten-seat card will not clone the Windows extras onto a phone
The Help Center still names Windows 11, 10, 8.1, 8, and 7 SP1, wants at least four gigabytes of RAM, prefers eight, and asks for a gigabyte of free disk. ARM Windows PCs and Windows on ARM Macs are listed as supported. Mac builds on that page run from Big Sur 11 through Sequoia 15. You need a live internet connection to install. Microsoft already dropped Windows 7, 8, and 8.1, and the shop says those machines only keep intelligence updates for a while. Linux has no desktop client on that grid. Some Linux users still add the leftover browser extension without paying for a desktop seat.
What the yearly bill looks like in words
The scripted cart hid list prices again on 27 September 2026, so any dollar figure I can type is a snapshot, not your card screen. A July 29, 2026 grab of the US shop put the three-device Individual Standard card near sixty dollars a year, the middle card near eighty, and the highest card at a sale-like one hundred forty with about two hundred eighty crossed out. Family cards for ten devices that same day sat near one hundred twenty, one hundred fifty, and a sale-like two hundred. I have also seen a one-device Standard card near forty-five. Crossed-out numbers are ad math, not a documented second-year bill. Direct yearly buyers are told a reminder lands thirty days before the next charge, and that reminder is the figure that matters.
- Standard: the paid real-time device layer plus the browser extension, the clean comparison when you only want this engine awake
- Middle card: Standard plus an unlimited personal tunnel, worth the increment only if that tunnel will actually run on the covered devices
- Highest card: the middle card plus identity monitoring, recovery help, credit services, insurance, and a personal-data remover where the region allows it
- The identity extras cover people you enroll, not the number of laptops; the insurance figure is described as one to two million dollars, US-only, and it does not reach incidents from before you signed up
- The tool that asks sites to drop your personal listings is described as a United States extra only
- Family math only helps when most seats are occupied; empty seats do not get cheaper because the card has a household label
The catch: a bigger invoice does not mean a sharper scanner. Standard, the middle card, and the highest card are three invoices, not three engines. Identity monitoring can ping you after a leak shows up. It cannot pull back a number you already typed into a fake form. Where insurance is offered, the shop describes a US-only group policy and says events from before you enrolled stay outside it. Buying ten seats for a household does not open an adult credit file for every child in the house.
How the download and the store that billed you actually work
Here is where I got stuck the first time I walked this path: I treated the App Store button like a convenience — then I could not move the subscription into MyAccount when I wanted a different device band. The store you pick is the merchant. You can fetch Premium Security from the company site for Windows and Mac, or through the Microsoft, Apple, and Google stores. Pay the company site and you manage the term in MyAccount. Pay Apple or Google and you change or cancel inside those stores. Direct annual terms renew on their own unless you flip the switch. Consumer sizes jump in steps of one, three, five, or ten, so shrinking often means stopping renewal and buying a smaller term later. Taking a laptop out of the pool frees a seat. It does not delete the app. It does not kill the bill.
- Type malwarebytes.com yourself, pick Individual, Family, or Small business, and read the live device count before you pay
- Pick the merchant first: the company site if you want MyAccount and the sixty-day yearly window, or Apple or Google if you want store billing
- Get the Windows or Mac installer from the company site or Microsoft, phones from Apple or Google Play
- Sign into MyAccount with the email from a direct purchase so the license can attach
- Run an update after install, and enroll identity extras only if that card includes them
- When a laptop retires, free the seat, then separately kill auto-renew if you want the invoice to stop
Sixty days, and the merchant that actually charged you
The homepage still waves a sixty-day money-back line on yearly terms. A personal refund note last touched on April 13, 2026 tells you to read the license text and write Support so they can say whether you qualify. Trust that page after a charge, not the banner. If Google Play or the Apple store took the money, their clocks apply, and those clocks are often counted in days rather than two months. Save the order number, the account email, and the receipt. Type the Help Center address yourself. Dragging the app to the trash does not halt a renewal. Flipping auto-renew off still leaves the weeks you already paid running until they end.
> Pay for Premium Security when you want that real-time layer running on a weekday morning, not just after a scare. Keep the free scanner when a second look is the whole job. A personal tunnel, a link checker, and identity insurance do not replace a backup drive or a second-factor login. > > — Jordan Blake
The jobs this license will not do
I think this is the part people skip because it feels like nagging. Malwarebytes does not replace a current patch cycle, a unique password, or a second-factor login on the accounts that can reset everything else. Ransomware detection, where it exists, watches for trouble. It does not roll the disk back. A personal tunnel hides a café Wi-Fi hop from local snoopers. It does not make a reused password safe, and it is not a company gateway. Identity monitoring can tell you after a leak. It cannot walk the data back. Small-office reports help a shop see what is installed. They are not a twenty-four-hour security desk.
I could not verify three things a careful buyer will still want. I did not finish a paid checkout on 27 September 2026, so the tax line and the exact renewal amount after a promotional first year stay unpublished here. I did not sit through a clean Windows 7 install to watch the limited-update warning. I did not enroll a US identity file, so I will not pretend I saw a credit-bureau dashboard. If any of those three decides the purchase, finish the cart on malwarebytes.com or write Support before you pay.
Confirm the live card and the store that will bill you Match the device band, the sixty-day yearly window, and the merchant on malwarebytes.com before you turn a seat on.
Frequently asked questions
Is the free scanner enough if Defender is already on?
Sometimes. If Defender is patched, you take the updates, and you only wanted Malwarebytes to look once after a bad download, the free scanner is enough. The Help Center still puts the always-on malware, web, ransomware, and exploit pieces behind a paid Windows seat. Two resident engines can stack alerts and make cleanup fussy, so pick a primary before you spend. Keep the free scanner for a single pass. Buy Standard when you want Premium Security sitting there tomorrow. Leave the middle and highest cards alone unless you separately want the tunnel or the identity bundle.
I paid Apple or Google. Can Malwarebytes Support refund me?
Go back to whoever charged the card. The April 2026 refund note says Play and App Store terms follow Apple and Google, not the sixty-day banner on the company site. That banner is for a direct yearly purchase, and even then Support has to check the license text. Flip the renew switch in Settings or Play before the next bill, then ask that store for money back if you are still inside its window. A Malwarebytes ticket cannot rewrite an Apple or Google merchant of record. Do not dial a number that arrived with a surprise invoice.
Can I drop from five devices to three without buying again?
Not as a quiet slider on the invoice I saw. Consumer sizes jump from one to three to five to ten. Parking a retired laptop frees a slot so another gadget can take it. It does not shrink the plan you already bought, and it does not stop the charge. To drop a band you usually wait out the term, kill renewal, and buy the smaller size later. Apple and Google keep that change in their own account screens. A direct purchase lives in MyAccount, so read the seat count there before you assume Support can rewrite the bill mid-year.
Does every gadget on the license get the same Windows tools?
No. Exact features vary by operating system. A ten-device family card is ten activations, not ten copies of the deepest Windows extras. Phones get the pieces listed for iOS or Android. A Mac seat does not inherit the Windows ransomware and exploit modules just because those icons sat on the marketing row. Read the operating-system page for each seat you plan to turn on. If the Windows extras are why you are paying, you need a Windows machine in the count, not an iPhone sharing the pool.
If I uninstall the app, does the yearly charge stop?
No. Pulling the program off one computer is not a cancellation. The Online Store bill keeps going, and so does an Apple or Google subscription. Kill auto-renew with the merchant that charged you, then let the weeks you already bought run out if you do not want another year. Taking a device out of the pool only hands the seat back. People mash those three moves together because they feel alike. They are not. The charge follows the receipt, not the folder you dragged to the trash.
Does a family card enroll every child in credit monitoring?
No. Those extras follow the people you enroll, not the pile of laptops. The shop talks about watching leaked credentials, a live agent after a mess, and credit files from Equifax, Experian, and TransUnion on some cards. A household plan sized for two adults and ten children still does not mint an adult credit file for every kid. Where insurance exists, the copy I read is US-only and ignores trouble from before you signed up. If the highest card is mostly those people-shaped extras and you live outside the United States, read the region line before you pay for seats you already wanted.
