Microsoft has quietly extended its consumer Extended Security Updates (ESU) program for Windows 10, giving home users and enthusiasts another year of critical security patches. The program, which originally ran from October 2025 to October 2026, now stretches to October 12, 2027. That means anyone willing to pay a yearly fee can keep their Windows 10 PC protected against major vulnerabilities for two years beyond the operating system's official end of support.

What Microsoft Changed

When Windows 10 reached its end of support on October 14, 2025, Microsoft stopped delivering free updates, including security fixes, for the vast majority of users. For the first time, however, the company offered a consumer ESU option—previously reserved for businesses—that let individuals purchase one additional year of critical and important security patches for $30.

That first year was set to expire on October 10, 2026. Now, according to Microsoft's updated support documentation, the program has been extended. Enrolled devices will continue receiving security updates through October 12, 2027—a full 24 months after official support ended.

The extension appears to be a direct response to the millions of PCs still running Windows 10. StatCounter data shows that as of early 2025, Windows 10 still held a larger market share than Windows 11. Many users have resisted upgrading, citing hardware compatibility issues, a preference for the older interface, or simple inertia.

Microsoft has not yet detailed whether the price structure will change for the extra year. The initial $30 fee covered one year only. If the company follows the same model, users would need to pay another $30 to get updates from October 2026 to October 2027. Alternatively, Microsoft might bundle both years into a single, higher-priced license. So far, the ESU enrollment page simply notes the extended date without clarifying cost.

Who Is Affected

The change directly benefits three broad groups:

  • Home users with incompatible hardware: Millions of perfectly functional PCs can't upgrade to Windows 11 because they lack a TPM 2.0 chip or a supported processor. ESU gives those machines another year of secure use, delaying the need for a new computer.
  • Holdouts who prefer Windows 10: Some users simply don't like Windows 11's design or workflow changes. ESU lets them stick with a familiar OS while staying protected.
  • Small businesses using consumer licenses: While Microsoft offers an enterprise ESU program, small shops that rely on standard Windows 10 Pro or Home licenses can use the consumer ESU as a stopgap.

It's important to understand what ESU does not include. There are no new features, no design improvements, and no technical support from Microsoft. You get only security patches rated \"critical\" or \"important.\" If a bug causes your printer to stop working, Microsoft won't help. Additionally, some software vendors may stop supporting applications on Windows 10 once it's out of mainstream support, regardless of ESU status.

Your Options: Upgrade or Pay the Fee

If you're still on Windows 10, you essentially have three paths forward:

  1. Upgrade to Windows 11 for free. This is the simplest long-term solution, provided your hardware meets the TPM 2.0 and processor requirements. Use the PC Health Check app to verify compatibility. If your system passes, upgrading takes about an hour and preserves your files and apps. Windows 11 support runs until at least 2031, so you'll get years of free updates.
  2. Enroll in the ESU program and stay on Windows 10. Ideal for devices that can't run Windows 11 or for users who simply want more time. Enrollment requires a Microsoft account and a one-time payment (likely per year, per device). After paying, Microsoft provides a license key that you enter in Windows Update to continue receiving patches. The original enrollment window opened after October 2025; it's unclear if Microsoft will offer a new enrollment period for the second year or simply auto-renew existing subscribers. Check the Microsoft Support website for the latest instructions.
  3. Do nothing. Some users may choose to keep running Windows 10 without any security updates. This is risky. Unpatched vulnerabilities are quickly exploited by malware and ransomware. Even with a good antivirus, an unpatched OS is a sitting duck. For any machine that connects to the internet, this option is not recommended.

Enterprise users should note that the consumer ESU is distinct from the volume-licensing ESU available to organizations. Large deployments require separate licensing and offer more flexibility. Small businesses using consumer licenses can use the consumer ESU, but it's a device-by-device purchase, which may become unwieldy at scale.

A Brief History of Windows 10 Support

Windows 10 launched in July 2015 with a promise of 10 years of support. Mainstream support ended in October 2020, while extended support continued until October 14, 2025. Throughout that decade, Microsoft pushed regular feature updates, eventually settling on an annual update cadence.

Historically, Microsoft never offered ESUs to consumers. Businesses could buy extended support for Windows 7, paying per-device fees that increased each year. For Windows 10, the company first announced enterprise ESU plans in 2021, granting up to three years of additional patches for a price. Consumer options didn't appear until late 2023, when Microsoft surprised users by announcing a one-year, $30 ESU for home users—a major shift in policy.

That one-year plan was always described as a limited-time bridge, not a long-term solution. Yet hints of a possible extension emerged in early 2024 when Microsoft updated a support document mentioning \"subsequent years\" of ESU availability. Now that extension is official.

Why the change of heart? Two factors likely drove Microsoft's decision. First, Windows 11 adoption has been slower than anticipated. The strict hardware requirements, particularly the TPM 2.0 mandate, left a significant portion of the existing Windows 10 base unable—or unwilling—to upgrade. Second, keeping those devices insecure would create a public relations nightmare and a security hazard for the entire internet. Providing a paid extension gives Microsoft revenue while reducing the risk of massive botnets emerging from unpatched machines.

How to Enroll in the Extended Security Update Program

If you decide to pay for another year of patches, follow these steps:

  1. Verify your Windows 10 version. ESU is only available for Windows 10, version 22H2. If you're on an older version, update to 22H2 first via Windows Update (it's free). Note: Windows 10 22H2 is the final feature update for Windows 10.
  2. Visit the official ESU portal. Microsoft has not yet published a direct consumer enrollment page for the second year, but it will likely be accessible from the \"Windows 10 End of Support\" page on Microsoft.com. Keep an eye on that site for an \"Extended Security Updates\" section.
  3. Sign in with your Microsoft account. The license is tied to your account, not just your device, allowing you to transfer it if needed.
  4. Complete the purchase. Expect to pay $30 for one year. If Microsoft offers a two-year bundle or a different price, the checkout page will reflect that.
  5. Receive your ESU license key. After payment, Microsoft provides a key. You'll enter this in the \"Windows Update\" settings under \"Optional updates\" or through a dedicated ESU activation dialog.
  6. Enable automatic updates. Once activated, your PC will continue downloading and installing security patches just as it did before end of support. No manual intervention is needed.

Microsoft also typically offers a 30-day grace period after each patch release, so if you enroll late, you'll still receive the latest updates.

What Comes After 2027

October 2027 may feel far away, but it's just over two years from now. After that date, no further security patches will be released for Windows 10, regardless of enrollment status. At that point, the OS becomes a genuine security liability.

For most home users, the extension should serve as a bridge to a new device or an eventual upgrade to Windows 11 (or its successor). If you're buying a new PC today, it will ship with Windows 11, which is supported until at least 2031. If you plan to keep using an older machine, budget for ESU payments now and start planning for replacement by 2027.

Microsoft may offer yet another extension, but there's no guarantee. The company is keen to push users toward Windows 11 and its Copilot+ features, which require new hardware. Further delays in adoption could prompt another last-minute reprieve, but smart users will plan for the worst: a hard end in late 2027.

For IT professionals managing fleets, the extension reinforces the need to accelerate hardware refresh cycles or migrate to Windows 11. The consumer ESU doesn't apply to managed environments, but the overall messaging suggests Microsoft is willing to be flexible as long as users are paying. Enterprise ESU programs have their own timelines, so consult your volume licensing agreement.

Ultimately, the extension is a pragmatic move that gives consumers breathing room without sacrificing security. It's not a free pass to ignore the future, but it does mean Windows 10 will remain a viable, protected operating system for nearly two more years.