Microsoft has quietly expanded its consumer Extended Security Updates (ESU) program for Windows 10, giving users until October 12, 2027, to receive critical security patches. The original deadline was October 13, 2026—a one-year grace period. Now, you get an additional 16 months of protection, but the clock is ticking: you must enroll before the official end-of-support date on October 14, 2025. Yes, the enrollment window closes months before you'd even need the first post-retirement patch.

The new timeline: what just changed

In August 2025, Microsoft rolled out a cumulative update (KB5063709) that refined the enrollment process for the consumer ESU program. The update fixed bugs in the enrollment wizard and began displaying end-of-support messaging inside Windows Update. Initially, the consumer ESU was billed as a single year of security-only updates. But according to PCMag, Microsoft has since decided to extend that coverage by 16 months. The new final date: October 12, 2027.

That means if you enroll now, your Windows 10 PC will keep getting critical and important security fixes for nearly two years beyond the October 2025 cutoff. There are no feature updates, no guaranteed quality-of-life patches, and no technical support—just security bulletins. Think of it as a safety net that suddenly got a lot wider.

The three ways to get ESU

Once your PC meets the prerequisites, the Settings → Update & Security → Windows Update page will show an “Enroll now” prompt. From there, you’ll choose one of three paths:

  1. Free via OneDrive / Windows Backup
    Sign in with your Microsoft Account (MSA) and turn on Windows Backup. This automatically syncs settings and optionally backs up files to OneDrive. Note: you only get 5 GB of free OneDrive storage; backing up everything might force you to buy extra space. Still, this is the zero-cash option.

  2. Microsoft Rewards points
    If you’ve been using Bing, Edge, or other Microsoft services, you may have accrued Rewards points. Redeem 1,000 points and you’re enrolled. No credit card needed. This path is effectively free, assuming you’ve earned the points.

  3. One-time paid purchase
    Reports put the price at about $30 (US; local pricing may vary). One payment covers up to 10 devices linked to the same Microsoft Account. That’s $3 per device if you max it out—cheaper than a streaming subscription. Confirm the exact amount in the enrollment wizard, since regional taxes and currency fluctuations apply.

All three routes require a Microsoft Account. If you’ve been holding out with a local account, you’ll need to switch. That’s a deliberate move by Microsoft to tie more users into its ecosystem.

What this means for you

For home users: The extended timeline means you can keep your perfectly functional PC safe well into 2027. If you couldn’t afford a new machine or your hardware doesn’t meet Windows 11 requirements (TPM 2.0, specific CPUs), this is a reprieve. You can now plan a replacement over two years instead of one. Just remember: ESU isn’t a forever solution. Use this time to save up or explore alternatives like lightweight Linux distros.

For power users: You can continue running legacy apps or specialized setups that break on Windows 11. But be aware that third-party software vendors may drop Windows 10 support long before 2027. Also, Microsoft 365 apps on Windows 10 will only get security updates, not new features, after October 2025—and even that support ends in October 2028.

For small businesses and IT admins: The consumer ESU only applies to non-domain-joined machines. If you have a few standalone PCs in the office or home-based workers on Windows 10 Pro, this buys you extra time to coordinate migrations. Larger environments should look at enterprise ESU offerings, which have different pricing and deployment rules.

How we got here: a brief history

Windows 10 launched in 2015 with a promise of “Windows as a service.” And for a decade, it was. Microsoft released 22H2 in late 2022 as the final feature update, then set an official end-of-support date: October 14, 2025. The company’s push toward Windows 11—with its stricter hardware requirements—left millions of PCs stranded. Estimates suggest hundreds of millions of devices can’t upgrade because of missing TPM chips or unsupported processors.

Microsoft first offered ESU to enterprise customers, then quietly built a consumer variant. The program appeared in Windows Insider builds in early 2025, with the KB5063709 update finalizing the enrollment flow in August. Initially, Microsoft said the consumer ESU would run only until October 2026. That language suddenly changed when the company announced the 16-month extension, likely in response to user feedback and the sheer size of the Windows 10 installed base.

Crucially, this extension also addresses an urgent security gap: Secure Boot certificates for some systems were set to expire in September 2025. Enrolling in ESU and installing its updates should refresh those certificates, closing a critical vulnerability, as noted by PCMag.

What to do right now

  1. Confirm you’re on Windows 10 22H2. Go to Settings → System → About and check the version. If you’re on an older release, update to 22H2 first.
  2. Install every pending update, especially KB5063709. Open Windows Update, check for updates, and reboot as needed. The August 2025 cumulative update is essential for the enrollment option to appear. Without it, you won’t see “Enroll now.”
  3. Make a full disk image backup. Use the built-in Windows 7 backup tool or a third-party utility like Macrium Reflect. ESU updates are security-only, so a broken patch could leave you stranded without a recovery path.
  4. Sign in with a Microsoft Account. If you’re on a local account, go to Settings → Accounts → Your info and select “Sign in with a Microsoft account instead.”
  5. Look for the enrollment wizard. Navigate to Settings → Update & Security → Windows Update. If the “Enroll now” link is there, follow the prompts. If not, wait a day or two—the rollout is phased, and not every device will see it immediately. If it’s still missing after a week with all updates installed, contact Microsoft Support.
  6. Choose your payment method (or the free route). Decide whether to use Rewards points, link OneDrive, or pay $30. Factor in that a single purchase covers 10 devices, so coordinate with family members under one MSA if possible.
  7. Verify enrollment. After completing the wizard, Windows Update should confirm your status. Keep a screenshot for your records.

A note on backup: Enabling OneDrive backup for the free route doesn’t create a full system image. For disaster recovery, you’ll still need a separate disk image. Don’t skip that step.

The fine print: what ESU doesn’t do

  • No feature updates. You won’t get Windows 11 or any new toys for Windows 10.
  • No general quality fixes. If a non-security bug emerges, you’re on your own.
  • Limited technical support. Microsoft won’t help you troubleshoot performance or driver issues under ESU.
  • No indefinite stay. Even with the extension, October 2027 is the absolute end. After that, no more patches, period.

Additionally, some products that rely on Windows 10 will still age out. Microsoft 365 apps will get security updates until October 2028, but no new functionality. Third-party antivirus and business software may gradually drop support.

Should you pay or go free?

If you’re privacy-conscious and don’t want to sync files to OneDrive, the Rewards route is the least intrusive. Paying $30 gives you straightforward coverage for multiple devices without cloud baggage. The OneDrive option is easiest for those already using Microsoft’s cloud, but it can become a storage trap if you exceed the 5 GB limit.

Consider your long-term plans. If you’re certain you’ll buy a new Windows 11 PC in 2026, a single year of ESU might have sufficed—but the two-year extension changes the math. For parents equipping a kid’s school machine or a secondary household laptop, the extended support is a genuine cost-saver.

The road ahead

The enrollment deadline of October 14, 2025, is firm. After that date, you can’t sign up, even if you were willing to pay. And Microsoft has shown that it can and will flip the switch—miss the deadline and your machine goes unprotected. The phased rollout of the enrollment wizard also means you shouldn’t wait until the last week; early birds will have the smoothest experience.

This extended lifeline probably isn’t the final word. Microsoft could introduce paid yearly subscriptions for ESU beyond 2027, especially if Windows 11 adoption remains sluggish. But no one should plan around that possibility. Instead, treat 2025–2027 as a migration runway. Test Windows 11 on compatible hardware, explore Linux on older boxes, or budget for a new PC.

The consumer ESU extension is a rare win for users holding onto aging but functional computers. It doesn’t solve the underlying problem—that Windows 11’s hardware requirements cut off a huge segment of the user base—but it gives you more time to figure out your next move. Take advantage of it, but don’t get too comfortable. October 12, 2027, arrives faster than you think.