PHP end-of-life dates
Every PHP version from 5.6 to 8.5: when it was released and when it stops getting security fixes.
Checked October 2026 against the official PHP supported-versions page. Dates change rarely, but always confirm at php.net/supported-versions.
Is my PHP version safe? How to checkBook a free conversation
The table
| PHP version | Released | Security support ends | Status (October 2026) |
|---|---|---|---|
| 5.6 | August 2014 | December 2018 | End of life |
| 7.0 | December 2015 | January 2019 | End of life |
| 7.1 | December 2016 | December 2019 | End of life |
| 7.2 | November 2017 | November 2020 | End of life |
| 7.3 | December 2018 | December 2021 | End of life |
| 7.4 | November 2019 | November 2022 | End of life |
| 8.0 | November 2020 | November 2023 | End of life |
| 8.1 | November 2021 | 31 December 2025 | End of life |
| 8.2 | December 2022 | 31 December 2026 | Security fixes only, ending soon |
| 8.3 | November 2023 | 31 December 2027 | Security fixes only |
| 8.4 | November 2024 | 31 December 2028 | Supported |
| 8.5 | November 2025 | 31 December 2029 | Supported |
Four years of support per version. Under the current policy each release gets roughly two years of active support, then two more of security fixes only, so each version lasts around four years in total.
What "end of life" means
- No more security fixes. A vulnerability found tomorrow will never be patched in that version.
- No more bug fixes either.
- Attackers know. Old versions are scanned for automatically.
- Your host will stop offering it, usually before you're ready. When your host drops support
- Libraries, frameworks and payment providers drop it too, so everything around it gets harder.
It doesn't mean your site stops working on the day. It means the clock on its safety, and on your options, has run out.
Active support and security support
- Active support: bug fixes and security fixes.
- Security support: security fixes only.
- End of life: nothing.
In practice you want to be on a version that's still in active or security support, and you want to move before it leaves security support, not after.
"But my host still offers it"
Hosts, and some Linux distributions, sometimes keep older versions available, and may backport security fixes themselves. That can be a short bridge. It's not a plan.
- It may cost extra every month.
- It doesn't fix your application, which stays on an old version.
- Insurers, auditors and customers may still treat it as unsupported. Cyber Essentials and insurer questionnaires
Ask your host exactly what's covered and for how long.
What to do with this table
| If you're on | Do this |
|---|---|
| 5.6, 7.x, 8.0, 8.1 | Plan an upgrade now. You're already unsupported. The older it is, the bigger the jump. PHP upgrades |
| 8.2 | Plan before 31 December 2026 |
| 8.3 | Fine until the end of 2027. Diary the next upgrade |
| 8.4 or 8.5 | Current. Keep it updated, and keep everything around it current too |
Don't forget everything else
PHP is one layer. Your framework, CMS, database and operating system have their own end-of-life dates, and an application is only as safe as its weakest layer.
- Laravel: support dates and upgrades
- The rest of the stack: what else to check
A sensible routine
Treat PHP upgrades as routine maintenance, not a rescue. Each year, check the table above, plan the move for any version within a year of leaving security support, and test the upgrade on a copy first. A small yearly step costs a fraction of a five-year catch-up. Ongoing care | What an upgrade costs
Frequently asked questions
When does PHP 8.2 reach end of life?
31 December 2026. After that it receives no further security fixes.
Is PHP 8.1 still supported?
No. Its security support ended on 31 December 2025.
Is PHP 7.4 still supported?
No. It reached end of life in November 2022.
Which PHP version should I be on?
The newest version your framework and packages support. Today that's usually 8.3, 8.4 or 8.5. A version with a long runway means you aren't back in the same position next year.
How often is a new PHP version released?
About once a year, normally in November.
Will my site break on the end-of-life date?
Not on the day. But it stops receiving security fixes, and your host may remove the version on its own schedule. Test on a copy and plan ahead.
Tell me what you've inherited.
Not sure which version you're on, or what an upgrade involves? Tell me, and I'll tell you honestly what it means.
Book a free conversationLegacy System Assessment, from £2,500