Windows 10 users staring down the October 14, 2025, end-of-support deadline just got a reprieve—and it doesn’t have to cost a penny. Microsoft’s consumer Extended Security Updates (ESU) program, originally announced as a straightforward $30 per-year purchase, now includes two zero-cost enrollment routes: either sync your PC settings to OneDrive, or cash in 1,000 Microsoft Rewards points. The last-chance safety net delivers critical and important security patches for one additional year, through October 13, 2026, but it bundles in a thicket of prerequisites, privacy concessions, and a hard requirement that you use a Microsoft account.

Why Windows 10 Refuses to Die

The sticking point is hardware. Windows 11’s strict mandate for TPM 2.0, Secure Boot, and a narrow list of supported CPUs still locks out a sizeable chunk of the Windows 10 installed base. Microsoft knows that cutting off millions of machines cold-turkey would create a security fiasco. The consumer ESU program is its controlled bridge—a time-limited, feature-frozen patch pipeline that reduces the immediate exposure while nudging everyone toward newer hardware or the cloud.

Unlike the enterprise ESU plans that can span multiple years and include deeper support, the consumer version is spartan. It covers only security updates classified as “critical” or “important.” No new features, no bug fixes, no general technical support. And after October 13, 2026, the tap shuts off entirely unless Microsoft shifts policy again.

The Three Routes to ESU—Two Free, One for $30

Microsoft now surfaces three distinct enrollment paths inside a dedicated Settings wizard. All three demand a Microsoft account; local accounts are shut out.

1. Sync Windows Backup to OneDrive

Turn on Windows Backup and let it save your PC settings to OneDrive. That’s it. The enrollment wizard recognizes the sync and grants a free ESU license for the year. The caveat, however, is storage: OneDrive offers only 5 GB for free, and a full settings backup can easily brush against that ceiling. If your backup exceeds the limit, you’ll either trim what gets synced or start paying for additional OneDrive capacity. Privacy-minded users will also balk at handing over a thorough map of their PC configuration just to receive security updates.

2. Redeem 1,000 Microsoft Rewards Points

If you already use Bing, Edge, or other Microsoft services that rack up Rewards points, this path is effectively a no-cash buffer. Redeeming 1,000 points through the enrollment wizard applies a one-year ESU license to your Microsoft account. For heavy Microsoft ecosystem participants, earning those points happens almost passively—downloading the Bing app alone grants 500 points. But newcomers who haven’t been collecting points may need weeks of deliberate activity to reach the threshold, making it less of a last-minute quick fix.

3. Pay a One-Time $30 Fee

The original plan remains: a $30 charge, plus any applicable tax, covers up to 10 eligible Windows 10 devices tied to a single Microsoft account. For a household with several older machines, this flat fee is a bargain. It also sidesteps the cloud-sync proviso, making it the cleanest option for anyone who simply wants to write a check and move on.

Prerequisites No One Should Overlook

Before the enrollment wizard even appears, your system must check several boxes. Failing any one of these will leave you stuck without updates after October 14.

  • Windows 10 version 22H2: Open Settings > System > About. If you see anything older, upgrade immediately. The ESU program supports only the final feature release of Windows 10.
  • All pending updates installed: The enrollment wizard itself was delivered through a cumulative update that first rolled out in mid-2025. Users who haven’t kept Windows Update current won’t see the ESU option.
  • A Microsoft account with administrator rights: Convert a local account or sign in with an existing Microsoft account at the admin level. This is non-negotiable.
  • Independent backups: Even if you choose the OneDrive route, maintain a separate system image on external media—sync isn’t a holistic disaster-recovery plan.

Microsoft is staging the rollout gradually. If you meet every requirement but the wizard still doesn’t show under Settings > Update & Security > Windows Update, it may simply not have reached your device yet. Checking for updates periodically is the only workaround.

Step-by-Step Enrollment (Do It Now, Not Later)

Waiting until the days before October 14 is a gamble. The wizard may not appear instantly, and any gap between the cut-off and successful enrollment leaves your PC unprotected. Here is the calmest sequence:

  1. Confirm Windows 10 version 22H2 in Settings > System > About.
  2. Open Windows Update and install every available patch. Reboot and repeat until no pending updates remain.
  3. Sign in with a Microsoft account that has administrator rights.
  4. Navigate to Settings > Update & Security > Windows Update. Look for an “Enroll now” link or the ESU enrollment prompt beneath the Check for updates button.
  5. Select your route: enable Windows Backup if you want the free OneDrive path, redeem Rewards points, or purchase the $30 license.
  6. Verify the license appears as active on the Windows Update page. Note the Microsoft account used—it’s your key for covering up to 10 devices.
  7. Keep a local record of enrollment, including the date and the chosen method.

If you enroll after October 14, Microsoft’s servers retroactively deliver any missed ESU-classified patches from the gap period, but your device will have been exposed during that interval. Early action avoids that window entirely.

The Hidden Costs of “Free”

Zero-dollar ESU comes with trade-offs that extend beyond dollars. The OneDrive backup route locks your eligibility to cloud sync, eroding the line between genuine security necessity and Microsoft’s ambition to tether every device to its online services. For privacy-conscious users, this is a material sacrifice—one that can lead to the very “just pay $30” pattern Microsoft likely anticipated.

Even the Rewards route, while cashless, encourages deeper immersion in Bing searches, Edge browsing, and other data-generating activities that feed Microsoft’s ad engine. And the universal Microsoft account mandate closes the door on anyone trying to maintain a purely local Windows identity.

On the storage front, the 5 GB OneDrive ceiling is a time bomb. Many users have background syncing of documents, photos, and desktop folders already enabled. Adding a full PC settings backup can push them over the limit, at which point Microsoft suggests a subscription. What began as a free security extension can morph into a recurring cloud bill.

What You Lose—and What You Keep—After October 2026

ESU buys exactly one year. After October 13, 2026, consumers have no official source of patches. The risks compound quickly:

  • Zero-day vulnerabilities disclosed after the ESU cutoff will remain unpatched, leaving machines open to worms, ransomware, and credential theft.
  • Hardware vendors and third-party software makers will progressively cease driver and application updates for Windows 10, leading to stability regressions.
  • Regulatory compliance for businesses using consumer devices with sensitive data becomes untenable.

There is a bright spot for productivity users: Microsoft 365 Apps on Windows 10 will continue to receive security updates through October 10, 2028. But those updates are separate from the OS’s ESU program; they only cover Office and do not protect the operating system itself.

Alternatives to ESU: Choose Your Own Exit Strategy

If the ESU strings—Microsoft account, cloud sync, deferred hardware purchase—feel intolerable, other off-ramps exist, each with its own cost and effort profile:

  • Upgrade to Windows 11: The obvious move for any machine that meets the hardware requirements. Microsoft’s free upgrade offer remains in place (though the company could theoretically change that at any time).
  • Buy a new Windows 11 PC: Budget laptops start under $300. For an office machine or a home kiosk, the jump to supported hardware buys peace of mind well beyond the ESU horizon.
  • Switch to a Linux distribution: Ubuntu, Fedora, and Linux Mint offer long-term security updates for aging hardware, often with a familiar desktop metaphor. The learning curve is real but manageable for non-specialized workloads.
  • Isolate Windows 10 in a virtual machine: If a specific legacy app chains you to Windows 10, run it inside a VM on a secure host and deny the guest internet access. This turns the old OS into a contained appliance.
  • Enterprise ESU for businesses: Organizations with volume licensing can purchase longer ESU terms, but those agreements are priced per device and escalate annually.

The consumer ESU year should be treated as funded planning time. Use it to test a Windows 11 install on spare hardware, trial a Linux live USB, or budget for a replacement device. Do not treat the extension as a permanent shelter.

What Microsoft’s Concessions Tell Us

The architecture of consumer ESU reveals a company grappling with its own upgrade ecosystem. Microsoft is unwilling to relax Windows 11’s hardware requirements—doing so would undercut its push for modern security—but it also cannot ignore the horde of perfectly functional machines that fail the check. The result is a tightly scoped program that is generous in price but invasive in its Microsoft-account requirement and its entanglement with OneDrive and Rewards.

For users, the message is dual-edged: you can stay, but only on terms that deepen your dependence on Microsoft’s cloud identity. The free routes are genuine value but also a funnel toward services that generate recurring revenue. The $30 route offers a cleaner exit from those strings, yet still insists on a Microsoft account.

If you intend to use ESU, do not wait. Take these steps now:

  • Confirm your OS and patch level: Settings > System > About, then Windows Update. Update to 22H2 and install everything.
  • Log in with a Microsoft account: If you have been using a local account, switch now and test that all your workflows still function.
  • Make a full system image to external media. Do not rely solely on OneDrive for disaster recovery.
  • Choose your ESU route: If you already have 1,000 Rewards points or are comfortable with OneDrive sync, pick the free path. Otherwise, queue up the $30 purchase through the wizard once it appears.
  • Start planning the post-2026 reality: Research Windows 11 hardware, trial a Linux distro, or set a budget for a new device.

For those who cannot or will not adhere to Microsoft’s account requirement, or who flat-out distrust the cloud strings, the only rational course is an immediate migration away from Windows 10. That might mean upgrading to Windows 11, replacing hardware, or adopting a different operating system entirely. The ESU program is a temporary life preserver, not a ship.

Microsoft’s consumer ESU gambit lands as a pragmatic stopgap—more generous than many expected, yet laced with hooks that pull users deeper into its ecosystem. For every Windows 10 holdout, the clock is now ticking not just toward October 2025, but toward October 2026, when even this limited safety net dissolves.