Deprecation is the planned retirement of a feature, protocol, or service that will no longer be supported. In security work, deprecation matters because a retired component can break trusted workflows such as authentication, device sync, logging, or backups. What once looked automatic may stop working, and the failure is often silent until someone needs the data or control path that depended on it.
Attackers and defenders both care about deprecation. Threat actors often target outdated interfaces, legacy APIs, and unsupported software because they are less monitored and may never receive fixes. Defenders use deprecation to remove risky capabilities, but they must also migrate users, verify permissions, and confirm that replacement paths work. In practice, a deprecation event should trigger asset review, configuration checks, and backup validation so that security does not depend on an expired feature.