Microsoft has stretched the lifespan of Windows 10 security patches until October 12, 2027, and is actively guiding users toward multiple enrollment avenues — two of which cost nothing at all. The updated support document, spotted by community members, supersedes earlier announcements that limited the consumer Extended Security Updates (ESU) program to just one year after the October 14, 2025 end-of-support date. That extra year fundamentally redefines the retirement strategy for hundreds of millions of PCs that cannot — or will not — jump to Windows 11.

The new timeline: two years of critical patches

When Windows 10 exits mainstream support on October 14, 2025, machines running it will continue to function but will receive no feature updates, security fixes, or technical assistance. The ESU program fills the gap for consumers: it delivers only “critical” and “important” security updates, not feature pack drops or driver updates. Originally, Microsoft stated this paid-for patch stream would last until October 13, 2026. However, a quiet update to the official support page now reads: “the consumer Extended Security Updates (ESU) program can protect your Windows 10 device till October 12, 2027.”

This two-year window changes the decision-making timeline for small businesses, home users, and organizations slow to migrate. It also aligns with the extended support provided for Microsoft 365 Apps on Windows 10; the company will continue issuing security updates for Office on Windows 10 through October 10, 2028, ensuring that productivity software remains safely usable on the aging OS.

What you need to enroll

Before diving into the free and paid routes, you must meet a few prerequisites. Microsoft requires a genuine, activated copy of Windows 10 (version 22H2 with the latest cumulative updates) and a Microsoft Account with administrator privileges on the device. This account requirement has drawn community ire, as some users prefer local accounts, but it is non-negotiable for ESU enrollment. Additionally, you’ll need to have Windows Update fully patched — Microsoft pushed a bug-fixing update in mid-2025 that resolved an issue where the enrollment wizard failed to appear.

The three enrollment options, dissected

The enrollment wizard lives inside Settings > Update & Security > Windows Update. If your device is eligible and fully updated, you’ll see an “Enroll now” prompt. Clicking it presents the following choices:

Option 1: Sync with OneDrive (free)

This path requires you to use Windows Backup to sync your settings, files, and folders to OneDrive. If you’ve already enabled backup, enrollment completes instantly. If not, the wizard will walk you through turning it on. The process takes only a few clicks, but it ties your device’s security maintenance to your OneDrive storage quota. The free tier includes just 5 GB, and a full backup of documents, photos, and settings can easily exceed that. When you hit the limit, OneDrive will prompt you to buy additional storage — plans start at $1.99/month for 100 GB. Over two years, that’s nearly $48, making the “free” path potentially more expensive than the $30 purchase. Still, for users already invested in Microsoft 365, this is a seamless, zero-cost option.

Option 2: Redeem Microsoft Rewards (free if you have points)

For those who participate in the Microsoft Rewards program, 1,000 points can be exchanged for a one-year ESU enrollment. The wizard integrates with your Rewards account; if you have enough points, you can redeem them directly. However, forum threads on Microsoft Learn Q&A and Tom’s Guide documented early redemption errors. Some users saw a failure message despite having sufficient points. Troubleshooting steps included signing out of the Rewards program and signing back in, checking the region settings, or simply waiting a day. Microsoft has not officially commented on the root cause, but the community suspects it relates to backend syncing of point balances with the ESU enrollment service. If the method works for you, it’s genuinely free — you’re trading your engagement with Bing and other Rewards-earning activities for your PC’s security.

Option 3: $30 one-time purchase

The pay-up-front route is the most straightforward. Select the payment option in the wizard, complete the transaction via the Microsoft Store, and your device is enrolled. Microsoft’s enrollment interface indicates that a single $30 purchase may cover up to 10 devices linked to the same Microsoft Account, though this has not been explicitly detailed in all documentation. If you have a household with multiple Windows 10 PCs, this could be the cheapest per-device cost. There’s no recurring fee, no storage limit to worry about, and no need to keep a Rewards account active.

Community experiences: bugs and workarounds

The ESU rollout has not been entirely smooth. TechRadar reported in late June 2025 that a missing enrollment prompt plagued many eligible machines, and Microsoft had to issue a patch to fix the problem. Community members on various forums also noted that the sync method sometimes failed if OneDrive was not signed in with the same Microsoft Account used for the ESU enrollment, causing a confusing error loop. The patch largely resolved these UI issues, but users are advised to install the very latest Windows Updates before attempting enrollment.

Rewards redemption, in particular, remains a hit-or-miss affair. One Microsoft Answers thread titled “Rewards points cannot be redeemed for registration” gathered multiple reports of errors. Users who encountered this eventually found success either by using an alternate method or by contacting Microsoft support. This dependency on cloud backend services means that a temporary glitch can delay your security coverage.

The privacy and ecosystem cost

Both free methods nudge users deeper into Microsoft’s ecosystem. Syncing to OneDrive means your folder structure, Desktop, and settings are mirrored on Microsoft servers, making you more reliant on the company’s cloud infrastructure. Telemetry, already baked into Windows 10, becomes even more tightly coupled with your account. For privacy-conscious users, this is a significant trade-off. The $30 purchase still requires a Microsoft Account for license association, but it does not force cloud data sync. If you prefer to keep your data local, that $30 may be worth the peace of mind.

Beyond ESU: other paths off Windows 10

While ESU provides a temporary shield, it’s crucial to view it as a bridge, not a destination. Here are the alternatives:

  • Free upgrade to Windows 11: If your PC has TPM 2.0, Secure Boot, and a supported Intel (8th gen or newer) or AMD Ryzen (2000 series or newer) processor, you can upgrade for free. Microsoft’s PC Health Check app will verify. Windows 11 offers modern security by design and support through at least 2031 for current releases.
  • Purchase a new Windows 11 PC: Many manufacturers are offering trade-in deals. Microsoft’s own trade-in program provides cash back for eligible devices and ensures responsible recycling.
  • Windows 365 Cloud PC: Stream a full Windows 11 desktop from the cloud to your existing hardware. This service automatically entitles you to ESU-equivalent patches, and Microsoft’s blog emphasizes it as a pathway for those stuck on legacy hardware.
  • Switch to a Linux distribution: Canonical’s Ubuntu, Linux Mint, or other distros can breathe new life into old hardware and provide up-to-date security patches. However, you’ll lose access to Windows-only applications and may face a learning curve.

A step-by-step checklist for enrollment

For users ready to act now, here’s a condensed checklist:

  1. Update Windows 10 to the latest available build (check Settings > Update & Security > Windows Update).
  2. Back up your critical files to an external drive (in addition to any cloud sync you might enable).
  3. Sign in with your Microsoft Account (Settings > Accounts) and ensure it has administrator rights.
  4. Navigate to Windows Update and look for the “Enroll now” link under the end-of-support notification.
  5. Select your preferred enrollment method: sync, Rewards, or purchase.
  6. If syncing, verify your OneDrive storage before proceeding.
  7. Follow the on-screen prompts to completion, and confirm that the Windows Update page shows “ESU enrolled.”

Final assessment

Microsoft’s move to extend ESU until 2027 and provide zero-cost enrollment paths is a pragmatic concession to the massive Windows 10 installed base. It defends millions from emerging vulnerabilities without forcing an abrupt hardware refresh. Yet the strategy is unmistakably designed to accelerate Microsoft Account adoption, boost OneDrive usage, and keep users within the Microsoft service ecosystem. For the average home user who simply wants to keep an old laptop safe, the free sync method is a no-brainer — provided they can stomach the cloud linkage. Businesses and privacy advocates may prefer to eat the $30 one-time fee and avoid data synchronization requirements.

Time is on your side, but not infinite. The enrollment wizard is live now for most users, and Microsoft encourages signing up well before the October 2025 support cutoff. Once enrolled, you can rest easier knowing that Windows 10’s final years will be as secure as they can be — until the countdown to 2027 begins.