On October 14, 2025, Microsoft will permanently stop delivering security updates for Windows 10. After that date, any PC still running the decade-old operating system will become an open target for new vulnerabilities. But upgrading to Windows 11 doesn't require a new computer for everyone—and even some officially ‘incompatible’ machines have a path forward, though not without risk.
October 14, 2025: The Day the Updates Stop
After a ten-year run, Windows 10 is entering its final months of support. Microsoft has confirmed that the final security update for Windows 10 Home, Pro, Enterprise, and Education will be released on October 14, 2025. There will be no more patches, no more feature updates, and no technical support from Microsoft after that date. The operating system itself will continue to function, but without a steady stream of fixes, each newly discovered vulnerability will leave Windows 10 users exposed for the lifetime of the hardware.
What exactly ends? All editions of Windows 10—including the LTSC (Long-Term Servicing Channel) variants with their own timelines—will cease receiving free security updates. The consumer Extended Security Updates (ESU) program, which Microsoft will offer for the first time to individuals, provides a temporary paid bridge, but it’s a short-term bandage, not a solution. Microsoft has not disclosed ESU pricing for consumers, but the enterprise program historically costs per device and doubles in cost each year. For most home users, the free upgrade to Windows 11 remains the recommended path.
The Official Upgrade Routes for Eligible PCs
If your PC meets Microsoft’s hardware requirements, upgrading to Windows 11 is free and straightforward. The minimum bar is well-documented: a 64-bit processor with at least 1 GHz speed and 2 or more cores, 4 GB of RAM, 64 GB of storage, UEFI firmware with Secure Boot capability, and a TPM 2.0 module. The PC Health Check app, available from Microsoft’s website, quickly tells you whether your system clears these hurdles. Many OEMs have BIOS settings to enable firmware TPM (fTPM) and Secure Boot if they're currently disabled, so an initial failure is not always the final word.
Once compatibility is confirmed, three official paths await.
Windows Update
This is the simplest method. If Microsoft’s rollout servers have queued your device, an "Upgrade to Windows 11" option appears in Settings > Update & Security > Windows Update. Click it, and an in-place upgrade preserves your apps, settings, and files while migrating you to the new OS. Microsoft continues to deliver security and feature updates automatically. The only downside is patience: not every eligible PC sees the offer immediately, as Microsoft staggers the rollout.
Windows 11 Installation Assistant
For those who don’t want to wait, the Installation Assistant downloads and runs the upgrade directly. Visit Microsoft’s Windows 11 download page, grab Windows11InstallationAssistant.exe, and follow the prompts. The tool downloads the necessary files in the background while you work, then prompts a restart. Like Windows Update, it preserves your data and applications, and keeps you on the official update track.
Media Creation Tool or ISO
This is the Swiss Army knife of upgrades. The Media Creation Tool builds a bootable USB drive (requires 8 GB) or downloads an ISO file that you can mount and run from within Windows. Once setup.exe launches, you can choose to keep your files and apps, keep only files, or start fresh. This method is ideal for upgrading multiple PCs, performing a clean installation, or creating recovery media. It’s also the go-to if Windows Update or the Installation Assistant misbehaves.
Regardless of which method you pick, a few universal pre-flight checks are wise: back up your data (OneDrive, an external drive, or an image backup), install the latest firmware and drivers from your OEM, and set aside at least 30 minutes for the process, longer on older hardware.
Bypassing the Block: Windows 11 on Older Hardware
Microsoft’s strict requirements—particularly the TPM 2.0 and CPU list—leave a significant number of otherwise capable Windows 10 PCs officially locked out. A Core i7-7700K or a Ryzen 1000-series chip, for example, may run Windows 11 flawlessly but are deemed incompatible by Microsoft’s arbitrary cutoff. For these machines, the community has rallied around workarounds that trick the installer into proceeding.
The most popular and regularly updated tool is Rufus, an open-source utility for creating bootable USB drives. When you feed it a Windows 11 ISO from Microsoft, Rufus presents a dialog with options to "Remove requirement for 4GB+ RAM, Secure Boot, and TPM 2.0." Selecting that checkbox builds an installer that skips those hardware checks entirely. You can also remove the requirement for an online Microsoft account during setup, which is increasingly forced in newer Windows 11 builds.
A less user-friendly alternative is a registry edit: before running setup.exe from a mounted ISO, you add a DWORD value AllowUpgradesWithUnsupportedTPMOrCPU set to 1 under HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup. This can sometimes coax the installer to proceed. However, both methods are explicitly unsupported by Microsoft.
The Hidden Costs of an Unsupported Upgrade
Bypassing the checks might get Windows 11 running on old hardware, but it comes with three categories of risk that every technician must weigh.
Security Posture Takes a Hit
TPM 2.0 and Secure Boot are not just bureaucratic hurdles—they underpin critical security features in Windows 11. BitLocker disk encryption relies on the TPM to seal keys; Windows Hello biometrics use it for credential protection; and attestation services verify the integrity of the boot chain. Without these hardware anchors, your system is more vulnerable to firmware-level attacks and bootkits. For any machine that handles sensitive work or financial data, this is a serious downgrade in protection.
Updates Are Not Guaranteed
Microsoft has stated that unsupported hardware might not receive all security updates. While community reports suggest that systems bypassed with Rufus currently get the same cumulative updates as supported devices, this could change at any time. A future quality update or feature release might detect the mismatch and block you from further patches. Microsoft’s stance is unambiguous: you are on your own.
Driver and Stability Unknowns
Older PCs may lack drivers tested for Windows 11. Wi-Fi cards, graphics adapters, fingerprint readers, and chipset components might behave erratically or lose features after the upgrade. Even if everything works today, a future driver update could break things. Before attempting a bypass, check your OEM’s website for any Windows 11 driver packs or known issues.
For businesses or users who cannot accept these risks, the only responsible moves are to enroll in the ESU program (to buy a year or two of breathing room), replace the hardware, or migrate the PC to an alternative operating system like ChromeOS Flex or a lightweight Linux distribution.
Your Pre-October To-Do List
Time is short. Here’s a concrete plan to execute before the October 14, 2025 cutoff.
- Back up everything. Use File History, OneDrive, or an image backup tool. If something goes wrong, you want a full restore point.
- Run PC Health Check. Download the app from Microsoft’s site and note which requirement fails, if any. If TPM or Secure Boot shows as missing, restart into your UEFI/BIOS and look for fTPM or "Platform Trust Technology" (Intel) or "AMD fTPM" options. Enable them and rerun the check.
- Update firmware and drivers. Visit your PC or motherboard manufacturer’s support page and install the latest BIOS/UEFI and chipset drivers. This often resolves compatibility issues and exposes hidden TPM switches.
- Choose your upgrade path.
- If eligible: Check Windows Update first. If the upgrade is offered, let it run. If not, use the Installation Assistant or Media Creation Tool.
- If ineligible but you accept the risks: Download the Windows 11 ISO and Rufus, create a bypass USB, and perform an in-place upgrade keeping your files and apps. Document the process so you can roll back later.
- If you need a supported path: Consider ESU (details to come from Microsoft) or a new PC. - Post-upgrade verification. Once on Windows 11, open Windows Update and install any pending patches. Confirm that BitLocker, Windows Hello, and other security features are functioning. Re-enable any settings you disabled during the installation.
Beyond Windows 10: What Comes Next
The October deadline will force a reckoning for the roughly 26% of Windows users still on Windows 10, according to recent usage share data. Microsoft is betting that most will move to Windows 11—either on existing hardware or by buying new machines. The ESU program is a limited-time extension, not a permanent fix. Expect Microsoft to become more aggressive with upgrade prompts in the months leading up to the cutoff, and possibly tighten the screws on unsupported installations after October.
For those who stick with bypassed systems, the community will continue to find workarounds, but the cat-and-mouse game with Microsoft’s update checks could become unsustainable. The smart money is on moving to a supported platform now, while there’s still time to plan and test.
Whichever path you choose, October 14, 2025 will arrive sooner than you think. Back up, check compatibility, and take control of your upgrade before the clock runs out.