Microsoft has quietly updated its Windows 10 Extended Security Updates (ESU) program for consumers, extending the paid security patch window by a full year to October 12, 2027. The change gives home users two years of extra monthly security updates after the operating system’s October 14, 2025 end‑of‑support date—double the original commitment.

The move was spotted in a revision to a Microsoft support document detailing the consumer ESU program, which originally offered only a single year of coverage running to October 13, 2026. The newly added second year shifts the final ESU delivery date to the second Tuesday of October 2027, aligning with the company’s traditional Patch Tuesday schedule. While Microsoft has not blogged about the change or sent a press release, the updated policy directly addresses long‑standing feedback from home users and small offices that felt a one‑year bridge to Windows 11 was too short.

The new ESU timeline at a glance

Windows 10 version 22H2, the final feature release for the platform, will stop receiving free monthly security and quality updates on October 14, 2025. After that date, only devices enrolled in the consumer ESU program will continue to receive critical security patches. Pricing for the first year remains unchanged at $30 for a one‑time purchase, which covers all updates from October 14, 2025 through October 13, 2026. The second‑year extension, covering October 14, 2026 to October 12, 2027, will be sold separately, though Microsoft has not yet published its price.

Businesses and education customers already had the option of up to three years of paid ESU coverage via volume licensing, with a tiered pricing structure that escalates each year. The consumer program’s extension to two years now puts it roughly in line with the common practice of deploying a two‑year security net while companies complete operating system transitions.

No automatic enrollment—users must opt in

Unlike Windows 10’s free cumulative updates, the ESU program for consumers is strictly opt‑in. Users will need to purchase the ESU license from the Microsoft Store (or authorized retailers) after the end‑of‑support date. Microsoft has indicated that a direct purchase link will appear in the Windows Update settings panel once the deadline passes, but it will not be forced on anyone. Devices that do not enroll will simply stop receiving patches.

The license is tied to a specific Windows 10 device and a Microsoft account. When a user buys the ESU, they must sign in with the same Microsoft account used on that PC; the entitlement is then digitally linked to the machine’s hardware ID. This design prevents license sharing and ensures that each protected device has a valid subscription. For households with multiple PCs, each computer requires its own $30 (or equivalent) purchase.

What the extended window actually delivers

Extended Security Updates for consumers are strictly limited to security patches rated “critical” or “important” by Microsoft’s security response team. They will not include new features, non‑security bug fixes, or technical support. That means if a Windows 10 application compatibility issue arises after October 2025, Microsoft will not address it—only vulnerabilities that could allow remote code execution, elevation of privilege, or information disclosure will be patched.

The patches themselves will be delivered through the normal Windows Update channel, but they will only download and install if the device’s ESU license is valid and active. Devices that are not enrolled will simply see a “You’re up to date” message, even though no new security content is being loaded.

Why the sudden extension?

Microsoft has not publicly explained the decision, but industry analysts point to several converging factors. Windows 11’s hardware requirements—in particular the need for a TPM 2.0 chip and 8th‑generation Intel or equivalent CPUs—have left a large portion of the installed base unable to upgrade. By extending consumer ESU, Microsoft can continue collecting revenue from these older machines while keeping them reasonably secure, avoiding the public relations liability of a wave of unprotected devices.

Telemetry data from 2024 and early 2025 reportedly showed that millions of Windows 10 PCs lack the necessary TPM or processor support, and a significant number of those are in non‑business environments. The one‑year ESU was seen by many as a stopgap that would still strand users in late 2026; two years gives both home users and Microsoft an extra cycle to either migrate or, in some cases, simply run the hardware into the ground.

Comparing consumer and business ESU programs

For context, the business‑oriented ESU program follows a different model:

  • Year 1 (Oct 2025 – Oct 2026): Approximately $61 per device for Windows 10 Pro/Enterprise
  • Year 2 (Oct 2026 – Oct 2027): Approximately $122 per device
  • Year 3 (Oct 2027 – Oct 2028): Approximately $244 per device

The consumer program, at $30 for the first year, is priced far below the business annual cost, though it lacks the full breadth of update categories (business ESU can include non‑security fixes in some cases) and does not come with support incidents. The extension to a second year for consumers likely means a second purchase of a similar or slightly higher fee, but Microsoft has not clarified if the price will step up like the business model or remain flat.

What happens after October 2027

Beyond the final ESU date, Windows 10 will enter a permanent unsupported state. No more patches—security or otherwise—will be issued. Third‑party antivirus vendors may continue to provide some protection, but the operating system itself will become increasingly risky to use on the public internet. Microsoft’s official recommendation remains to transition to Windows 11, and for machines that cannot run Windows 11, to recycle them through a responsible e‑waste program.

The extended ESU period does not change the end‑of‑life timeline for free feature updates or support. Those still end in October 2025. The ESU is purely a security bridge, and Microsoft has made clear that it intends to enforce that boundary strictly. Attempts to extract more than security updates will be denied, and the company has the technical means to verify ESU enrollment on every patch request.

Practical steps for Windows 10 users

If you plan to stay on Windows 10 past the October 2025 deadline, there are a few concrete actions to take now:

  1. Check hardware eligibility for Windows 11. Run the PC Health Check app or a third‑party tool to see if your processor and TPM meet the requirements. If you can upgrade, do so while it is free.
  2. Prepare a Microsoft account. The consumer ESU purchase process will require a Microsoft account linked to the device. If you currently use a local account, you will need to switch to a Microsoft account before the purchase can be completed.
  3. Budget for two purchases. With the first year priced at $30 and the second likely similar, set aside around $60 to cover the full two‑year extension. This is still far cheaper than a new PC for users whose hardware is otherwise adequate.
  4. Monitor the Microsoft Store. Microsoft has promised that the ESU purchase link will appear in Windows Update settings around the end‑of‑support date. Keep an eye on official Microsoft communications to avoid scam websites.
  5. Consider alternative operating systems. A vocal minority of users may choose to migrate to Linux or ChromeOS Flex on older hardware, though this requires a willingness to learn a new environment and may not support all applications.

The broader Windows landscape

Microsoft’s ESU extension underscores a recognition that the Windows 10 installed base remains enormous. Statcounter and other analytics firms regularly place Windows 10 above 60% of the global Windows share, while Windows 11, after three years on the market, hovers around 30%. The gap is not closing as quickly as Microsoft hoped, and the company’s aggressive push toward AI‑integrated features in Windows 11 has not universally resonated with users who prefer a simpler, more familiar interface.

By offering a second year of consumer updates, Microsoft simultaneously earns goodwill, generates revenue from older hardware, and buys time for the Windows 11 ecosystem to mature—especially its Arm‑based and Copilot+ PC initiatives, which promise performance and battery life leaps but remain expensive and novel to mainstream buyers. The extended ESU also gives enterprise customers that rely on consumer‑grade machines in field roles a longer tail to plan their own migrations without resorting to third‑party patching services like 0patch.

The fine print that hasn’t changed

One detail that the extension does not alter: ESU updates are always cumulative. Once a device enrolls, it will receive all past ESU updates the next time it checks in, ensuring no gaps in protection. However, a machine that enrolls late—say, in November 2025 rather than October—will still need a valid license dating back to the end‑of‑support date; Microsoft’s system will not let you skip the first month and only pay for later months.

Additionally, the ESU license is non‑transferable. If a device dies or is replaced, the license does not move to the new hardware. Users must weigh the cost of a temporary ESU purchase against the price of a new Windows 11 machine, especially for older hardware that may fail before the extended support window closes.

Looking ahead

Microsoft’s surprise extension may not be the last adjustment to the Windows 10 sunset. With antitrust scrutiny on the rise and regulators examining the environmental impact of forced hardware upgrades, the company could face further pressure to soften its end‑of‑support posture. For now, the message is clear: Windows 10 can receive security updates into 2027, but only for those who open their wallets—and link their Microsoft accounts.

The quiet nature of this announcement suggests Microsoft wants to avoid encouraging users to stay on Windows 10 indefinitely. The long‑term goal remains a unified, AI‑forward Windows 11 platform. But for the millions of PCs caught between capable hardware and strict requirements, an additional year of paid patches delivers a pragmatic, if temporary, reprieve.