Windows 10 users who aren't ready to migrate to Windows 11 will have to open their wallets—or link a Microsoft account—to keep their PCs safe after October 14, 2025. On that date, Microsoft will shutter free support for the decade-old operating system, but it's dangling a one-year reprieve: an Extended Security Updates (ESU) subscription priced at $30 per device for consumers, with a free option available for those willing to sync their settings to the cloud.

The end-of-support deadline has been years in coming, yet millions of PCs still run Windows 10. After October 14, Microsoft will stop delivering monthly security patches, non-security fixes, and technical support for the OS. That doesn’t mean the computers will suddenly brick themselves—they’ll still boot and run applications—but they’ll become increasingly vulnerable to cyberattacks and compatibility snags as time goes on.

The Support Clock Runs Out

When Microsoft designates a product as “end of support,” it draws a hard line: no more protection against newly discovered exploits, no more bug fixes, and no more official assistance from Microsoft’s help desks. For Windows 10, that line falls on October 14, 2025. The date appears on the company’s lifecycle policy page and in repeated warnings pushed through Windows Update.

For the average home user, this means the PC that sits in the den or kitchen will no longer get the automatic patches that have shielded it for years. Any vulnerability found after that date—like the kind ransomware gangs eagerly hoard—will remain unpatched on that machine unless the owner takes specific action. In corporate environments, the stakes climb higher because unpatched endpoints can act as springboards into company networks, putting entire organizations at risk and running them afoul of regulatory requirements.

Buying Time: How the $30 ESU Program Works

Microsoft’s primary olive branch to consumers is the Extended Security Updates program. For the first time, the company is offering individuals a direct way to purchase security updates for an unsupported OS, modeled after the commercial ESU it has long sold to enterprises for products like Windows 7.

The consumer ESU window opens on October 15, 2025, and runs through October 13, 2026. During that year, enrolled devices will receive “critical” and “important” security updates. Users won’t get new features, non-security fixes, or more than minimal technical support. The license is a one-time purchase of $30 and covers up to 10 devices under a single Microsoft account—a detail likely to appeal to households with multiple aging laptops.

Enrollment happens through the Settings app, under Update & Security > Windows Update, where a prompt will guide users through three paths. The paid $30 option is straightforward: fork over the money and the updates flow. But Microsoft has also baked in two no-cost routes: linking your PC’s settings to a Microsoft account, or redeeming Microsoft Rewards points. For users who already use a Microsoft account to sign in, the free path is automatic once they sync their device settings. For Rewards members, accumulated points can cover the cost, though Microsoft hasn’t specified the exact point threshold.

The free route does come with a privacy wrinkle. Tying the ESU license to a Microsoft account means users who deliberately run local accounts—avoiding cloud sign-ins—will have to cave in or pay cash. That requirement has rankled privacy advocates and set off debates in user forums, but Microsoft has shown no sign of budging.

The Free Pass: Sync Settings, Pay with Rewards

For those comfortable with Microsoft’s ecosystem, the free ESU route is the path of least resistance. By toggling on sync of settings through a Microsoft account, the PC gets the same security updates as the $30 tier. The process essentially treats the ESU entitlement as a benefit of engaging with Microsoft’s cloud services.

Critics argue this is a thinly veiled push to tie more users to Microsoft accounts, boosting telemetry and ecosystem stickiness. But for the pragmatist who just wants another 12 months before buying a new PC, it’s a zero-cost bridge. The Rewards option adds another layer: points earned by using Bing, Edge, or completing quizzes can now be spent on OS security. It’s an unconventional barter, but it might resonate with frugal consumers.

Beyond One Year: Commercial ESU and Microsoft 365 Apps

The consumer ESU is limited to a single year, but organizations have a separate, more complex path. Commercial ESU subscriptions are available through volume licensing agreements, with annual renewals and sliding pricing that typically increases each year. These plans deliver the same critical-only updates but are designed for bulk deployment and can extend beyond the consumer window—though the exact durations depend on how Microsoft structures the offers; for Windows 7, it offered up to three years of ESU.

A parallel concession involves Microsoft 365 Apps. Microsoft confirmed that it will continue to provide security updates for Word, Excel, Outlook, and other M365 Apps running on Windows 10 for three full years after the OS’s retirement, until October 10, 2028. Feature updates for those apps will also continue on a limited schedule into 2026–2027, depending on the update channel. This doesn’t harden the underlying operating system, but it does protect a critical attack surface—the productivity suite—against exploits. Still, Microsoft reserves the right to limit troubleshooting for issues that only manifest on Windows 10, nudging users toward Windows 11 for full support.

The Official Recommendation: Upgrade to Windows 11

Microsoft’s preferred outcome is unambiguous: get onto Windows 11. The newer OS brings a slate of security improvements—TPM 2.0, Secure Boot, virtualization-based security—that simply aren’t available on Windows 10. Upgrading is free for compatible PCs, and it resets the support clock for years to come.

The catch, of course, is hardware. Windows 11’s minimum requirements are stringent: TPM 2.0, UEFI firmware with Secure Boot, and a relatively recent CPU (generally Intel 8th gen or AMD Ryzen 2000 and newer). Many perfectly functional machines fall short. Microsoft’s own PC Health Check tool can verify eligibility, and the results often deliver a cold reality: millions of devices are locked out.

That hardware gate has become the central point of friction in the Windows 10 end-of-life story. It creates a dilemma: invest $30 for a single extra year of security, buy a new PC, switch to another OS, or explore cloud-based workarounds. For users who cannot justify a hardware refresh right now, ESU is the bridge; for those who can, a jump to Windows 11 is the cleaner, longer-term solution.

Cloud PC: A Stopgap for Legacy Hardware

Organizations, and even some individuals, have a third option: Windows 365 Cloud PC. Microsoft positions this as a way to run a fully supported Windows 11 desktop in the cloud, streamed to the aging local machine. The physical device becomes a thin client, shifting the security burden and hardware dependencies to Microsoft’s data centers.

For IT departments, the appeal is immediate: no need to rip and replace hundreds of workstations on a tight deadline. User profiles, apps, and settings live in the cloud, accessible from anywhere. But it’s not without downsides. Cloud PC subscriptions are ongoing operational expenses, not one-time buys. Reliable high-speed internet becomes non-negotiable, and workloads that demand local GPU power or specialized peripherals may suffer. Still, for knowledge workers using standard office suites, it’s a compelling interim strategy that aligns with broader “device-agnostic” workplace trends.

The Risks of Doing Nothing

Ignoring the deadline and running an unpatched Windows 10 machine is the riskiest path. Without ESU, the operating system becomes a static target. Attackers monitor patch releases for Windows 11 and reverse-engineer them to find holes that will never be closed on Windows 10. Ransomware operators love such environments.

The risks extend beyond security. Software vendors will gradually stop testing their products on Windows 10. New printers, scanners, and other peripherals may ship without drivers. Web browsers and cloud services may start throwing up compatibility warnings. Over time, the machine may still turn on, but using it productively and safely will become a gamble.

What Home Users Should Do Right Now

The months between now and October 2025 are the planning window. Here’s a practical checklist:

  • Check eligibility: Run the PC Health Check tool. If the PC can run Windows 11, schedule the free upgrade before the deadline to avoid any hassle.
  • Back up everything: Create full disk images, sync critical files to OneDrive or an external drive. Ransomware attacks spike around end-of-support transitions.
  • Decide on ESU: If Windows 11 isn’t possible, weigh the $30 fee against the free Microsoft account route. Make the choice before October 14 to ensure seamless enrollment.
  • Harden the system: Enable disk encryption (BitLocker), set strong passwords, and use a reputable third-party antivirus that still supports Windows 10.
  • Research app compatibility: Check whether your must-have software has announced Windows 10 support timelines. Chrome, Firefox, and other popular apps will likely keep working for a while, but niche tools may not.
  • Consider a new PC: If the device is more than five years old, start budgeting. Black Friday and back-to-school sales can soften the financial blow.

IT Checklist: Inventory, Budget, Migrate

For businesses, the playbook is more structured:

  • Inventory everything: Use asset management tools to catalog every Windows 10 device, its hardware spec, and its critical applications. Segregate machines into “can upgrade,” “needs ESU,” and “must replace” buckets.
  • Prioritize regulated systems: Any device governed by HIPAA, PCI-DSS, GDPR, or similar rules must be on a supported OS before October 14 to remain compliant.
  • Test Windows 11 thoroughly: Spin up a lab environment and run your core business applications on Windows 11. Iron out compatibility kinks now, not in October.
  • Procure ESU or cloud seats: For machines that can’t be upgraded, work with your Microsoft licensing partner to purchase ESU subscriptions or provision Windows 365 licenses. Budget for potential multi-year costs.
  • Communicate: Inform employees about upcoming changes, timelines, and any new workflows associated with Windows 11 or Cloud PCs.

Common Questions Answered

Will my PC stop working on October 15, 2025?
No. It will boot and run, but it will stop receiving security updates unless you enroll in ESU. Continued use is possible but progressively riskier.

Can I keep using a local account and still get ESU updates?
Only if you pay the $30 fee. The free ESU option requires linking your PC to a Microsoft account during enrollment.

Will Microsoft 365 Apps stop working?
No. They’ll keep working and get security updates until October 10, 2028. However, feature updates will slow down, and official support may be limited.

Is the $30 ESU a recurring annual charge?
Microsoft has described the consumer ESU as a one-time purchase for the 2025–2026 term. It has not announced a second year. Commercial ESU is annual and typically gets more expensive each year.

What about workarounds to install Windows 11 on unsupported hardware?
Unofficial methods exist but are risky. They can lead to unstable systems, missing updates, and are not supported by Microsoft. Organizations should avoid them.

The Bottom Line

Windows 10’s October 14, 2025 end-of-support date is a hard pivot point, not a cliff. Microsoft has given users a trio of bridges—a $30 consumer ESU, a free account-tied option, and a push toward Windows 11 or Cloud PC—but each comes with strings. The free lunch of evergreen Windows security is ending, and the paths forward all require some form of change, whether it’s a hardware investment, a subscription payment, or a concession on privacy.

The most critical action is to start now. Back up data, check compatibility, and choose a strategy. For the majority, migrating to Windows 11 remains the most robust and cost-effective answer. For those stuck on old hardware, the $30 ESU buys one more year—just enough time to plan a proper upgrade. And for enterprises, the combination of commercial ESU, Cloud PCs, and phased rollouts can turn a daunting deadline into a manageable project.

One thing is certain: running an unpatched Windows 10 machine in 2026 is a gamble no one should take lightly. The tools to avoid that risk are on the table. Now it’s up to users and IT managers to pick them up.