iOS 26.4 Is the Update That Fixes What iOS 26 Should Have Fixed Months Ago

On Tuesday, March 24, Apple released iOS 26.4. If you haven’t received the update notifications on your phone yet, they will soon. The most obvious and long overdue change for the majority of iPhone users is a fix for the keyboard bug that made typed characters vanish in the middle of sentences, confusing autocorrect and leaving messages with jumbled text. It sounds insignificant. It wasn’t. Every app, message, and email on a smartphone is impacted by keyboard bugs, and Reddit discussions about this specific problem had been going on for weeks before Apple finally acknowledged it. The solution has been implemented. Only a few days of real use will verify whether it can withstand fast-typing conditions in the real world.
Another reason Apple is urging users to install iOS 26.4 as soon as possible is the security payload that comes with it. This release includes patches for over 37 vulnerabilities that affect everything from the kernel to Messages and Safari. A Keychain vulnerability that could have exposed stored credentials to a local attacker, a Siri flaw that could have allowed someone with physical access to a locked device to view sensitive information, and multiple WebKit issues that could have allowed cross-site scripting attacks or sandbox bypasses when visiting malicious sites are some of the more serious fixes. Additionally, a number of kernel-level vulnerabilities were fixed, which are the kinds of defects that could allow applications to leak private system information or corrupt kernel memory if they were exploited. Forbes put it this way: update right away. For a feature release, that framing is out of the ordinary and deserving of serious consideration.

The update has more features than a standard point release. The biggest additions went to Apple Music. Playlist Playground allows users to create a 25-song playlist from a text description, with follow-up prompts to refine the results. It is currently in beta for US subscribers. Similar to what Spotify has been testing, it’s an AI-assisted feature, and Apple is being open about the possibility of unpredictable outcomes at this point. You might receive something completely different if you ask for a workout playlist. There’s a purpose behind that beta label. In addition, the Apple Music app now features a new Concerts Near You section that is based on a partnership with Ticketmaster and displays local show details, such as dates, venues, and ticket links. It fills a long-standing gap in the app and is a useful addition.
An orca, a trombone, a landslide, a ballet dancer, a distorted face, a treasure chest, a hairy creature meant to evoke Sasquatch, and a fight cloud are the eight new emoji that have joined the keyboard and are worth a quick glance. Although they were accepted by the Unicode Consortium as part of Unicode 17.0 back in September 2025, they are now first seen on iPhones. It’s best to leave the question of whether anyone has been waiting impatiently for a trombone emoji unanswered, but the orca and the Sasquatch creature have already sparked their fair share of positive responses on the internet.
With this update, CarPlay introduces something truly novel: AI assistants Claude, Gemini, and ChatGPT can now be accessed hands-free in the car without a wake word. Although it raises the obvious question of whether a system that doesn’t require a wake word will be too easy to accidentally trigger at 60 miles per hour, it’s a noteworthy addition for anyone who has found Siri’s in-car capabilities insufficient for more complex requests. In practice, drivers will most likely figure that out quickly.
In iOS 26.4, Stolen Device Protection—which adds biometric verification requirements for sensitive actions when an iPhone is away from familiar locations—is now enabled by default instead of requiring users to opt in. It’s a significant security change that safeguards individuals who would never consider turning on a setting they are unaware of. Additionally, a new accessibility feature called “Reduce Bright Effects” lessens the bright flashing connected to Liquid Glass interface elements, which have been criticized since the release of iOS 26. For users who are sensitive to on-screen motion, the Reduce Motion setting has also been improved to more consistently reduce those animations.
One new feature for UK users has nothing to do with emojis or Apple Music: age verification linked to the nation’s Online Safety Act. Users in the UK will now be required to verify their age using a credit card, a scanned ID, or an existing payment method for a number of services and features. There has been a range of responses in UK forums, from encouraging to perplexed. One Reddit user mentioned that their driver’s license is a paper one from the early 1990s and expressed sincere doubts about how the system would handle it.
Looking at iOS 26.4 as a whole, it seems like Apple is treating this as a consolidation and cleanup update following the more significant structural changes that iOS 26 brought about. It seems like the update is catching up to actual usage patterns with the keyboard fix, security patches, and default Stolen Device Protection. It’s worth keeping an eye on as the year goes on, whether that’s an acknowledgement that iOS 26’s release left some things unfinished or simply the normal pace of software updates. In any case, the update can be found at Settings → General → Software Update.