Windows 10’s formal retirement is no longer a distant calendar item. As of October 14, 2025, Microsoft has ended free security updates and technical support for the operating system that still runs on hundreds of millions of devices worldwide. In a final push to move users forward, the company has launched the Windows 10 Consumer Extended Security Updates (ESU) program—a paid lifeline that grants Critical and Important security patches through October 12, 2027, according to the official Microsoft Support page. This creates a two-year bridge for households and small users who cannot immediately transition to Windows 11, and it comes with a surprisingly low price tag: $30 for up to ten devices linked to a single Microsoft account.
End of an Era: What October 14, 2025 Actually Means
After October 14, 2025, any Windows 10 device not enrolled in an ESU program will no longer receive routine quality updates, feature improvements, or the monthly cumulative security fixes that previously arrived via Windows Update. The operating system itself will continue to boot and run applications, but without further patching, it will become an increasingly attractive target for malware and exploitation. Microsoft’s official advisory is blunt: “Your PC will be at a greater risk for viruses and malware.”
This cutoff applies to all editions of Windows 10, version 22H2—the final feature release. Support for earlier Windows 10 builds ended years ago, so only machines running the 22H2 update are eligible for any post-retirement security coverage. The end-of-life milestone also affects Microsoft 365 Apps; Office 2016 and Office 2019 lose all support on the same date, while Office 2021 and 2024 will no longer receive security updates when running on Windows 10 after October 14, 2025.
Consumer ESU: A $30 Stopgap That Covers Up to 10 PCs
The Consumer ESU program is a sharp departure from Microsoft’s traditional approach. Historically, Extended Security Updates were only available to enterprise customers with volume licensing agreements, at a steep per-device cost that increased each year. This time, Microsoft has crafted a consumer-friendly path that includes free routes and a low-cost paid option. The key details:
- Coverage window: Enrolled Windows 10, version 22H2 devices receive Critical and Important security updates through October 12, 2027—a full two-year extension beyond the original end-of-support date. (Note: earlier documentation and some community sources cited an end date of October 13, 2026, but the official Microsoft Support page now confirms the 2027 date, suggesting the program was extended or clarified during its rollout.)
- Eligible editions: Home, Pro, Pro Education, and Workstation versions of Windows 10, version 22H2. Enterprise and education SKUs must use separate volume-licensing ESU programs.
- Enrollment methods: From the Windows Update page in Settings, users can choose one of three paths:
1. Free via Windows Backup – Sync PC settings and files to a Microsoft account and OneDrive.
2. Redeem 1,000 Microsoft Rewards points – Existing Rewards members can cash in points for a free year of ESU coverage.
3. One‑time $30 payment – This single purchase licenses up to ten devices tied to the same Microsoft account, making it the most cost-effective option for households with multiple older PCs. - Delivery: Security-only patches are delivered through Windows Update; no new features, non-security fixes, or general technical support are included.
- Microsoft account requirement: All enrollment routes—including the paid option—require signing in with a Microsoft account that has administrator privileges on the device. Local account users must create or link a Microsoft account to proceed, a friction point that has drawn criticism from privacy advocates.
Why the Two-Year Extension Matters
Microsoft’s own hardware requirements for Windows 11—TPM 2.0, Secure Boot, and relatively modern CPU families—have locked out a significant portion of existing Windows 10 hardware. While the free upgrade to Windows 11 remains available for compatible PCs, millions of perfectly functional laptops and desktops simply cannot make the jump. The Consumer ESU program buys those households two years of security coverage, during which they can plan a hardware refresh, explore cloud PC options, or evaluate alternative operating systems. It also alleviates the short-term pressure on businesses and organizations that cannot immediately replace large fleets.
The program does not, however, restore feature updates, driver support, or application compatibility. Software vendors and OEMs will progressively stop certifying new peripherals and apps for Windows 10, so the experience will degrade over time even with security patches installed.
What Remains Supported After October 2025
Several ancillary products will continue to receive updates on Windows 10 for a limited period:
- Microsoft 365 Apps: Security updates will be provided for Microsoft 365 on Windows 10 until October 10, 2028—three years after OS support ends. Performance and reliability fixes, however, will cease after the OS retirement date.
- Microsoft Edge and WebView2: These components have their own servicing schedules that extend beyond the Windows 10 lifecycle, but relying on browser patches alone is not sufficient protection when the underlying OS kernel is unpatched.
- Enterprise ESU: Organizations that purchase volume‑licensing ESU for Windows 10 can receive security updates through October 10, 2028, with escalating per-device costs each year to discourage perpetual deferral of migration.
A Practical Migration Checklist
For Windows 10 users, the clock is now ticking. Here is a step-by-step action plan:
- Verify your build and edition – Go to Settings > System > About. You must be running Windows 10, version 22H2. If you are on an earlier build, update immediately.
- Check Windows 11 compatibility – Run the PC Health Check tool. If your device meets the requirements (TPM 2.0, Secure Boot, supported CPU), plan to upgrade to Windows 11 for free.
- Back up your data – Use Windows Backup to sync settings and files to a Microsoft account, and create a full system image on an external drive. This protects against failure during upgrade or hardware replacement.
- Choose your path before October 14 – If your PC is compatible, initiate the Windows 11 upgrade. If not, enroll in ESU via Windows Update. The $30 license for up to 10 devices is the most economical for multi-PC households. Alternatively, redeem Rewards points or use the free Backup enrollment.
- For organizations – Inventory all Windows 10 endpoints, map compatibility, and budget for hardware refreshes. Explore Windows 365 Cloud PCs or Azure Virtual Desktop for immediate remediation of incompatible hardware. Enterprise ESU pricing starts at approximately $61 per device for Year 1 and increases substantially thereafter.
Cost Comparison: Households vs. Enterprises
| Scenario | Consumer ESU | Enterprise ESU (via Volume Licensing) |
|---|---|---|
| Cost | $30 one‑time, covers up to 10 devices tied to one Microsoft account | ~$61/device for Year 1, ~$122/device for Year 2, ~$244/device for Year 3 |
| Coverage | Critical + Important security patches | All security updates, no feature updates |
| Enrollment | Via Windows Update; requires Microsoft account | Through Volume Licensing Service Center; requires active SA or E‑SUS subscription |
| Duration | Through October 12, 2027 | Through October 10, 2028 |
For a family with four older PCs, the consumer ESU would cost just $30 total—not $120—because a single license covers ten devices. This aggressive pricing underscores Microsoft’s goal of keeping Windows 10 users in the ecosystem rather than losing them to competing platforms or unpatched states.
Controversies and Operational Risks
Microsoft account mandate – The requirement to sign in with a Microsoft account, even for paid ESU, has frustrated users who prefer local accounts for privacy or administrative simplicity. Some third‑party workarounds exist, but they are unsupported and may break with future updates.
Environmental and legal pushback – Advocacy groups have raised alarms about e‑waste generated by forced hardware upgrades. A public complaint has been filed challenging Microsoft’s decision to end free Windows 10 support, arguing consumer harm and environmental impact. While the legal process may influence future policy, as of now the published lifecycle dates remain in effect.
Secure Boot certificate rollover – Microsoft has warned that a Secure Boot certificate update beginning in June 2026 may require firmware patches from OEMs to maintain seamless boot operations. Devices stuck on Windows 10 could face additional friction if their manufacturers do not provide updated firmware, potentially complicating ESU’s value proposition.
Enrollment glitches – Early adopters reported wizard bugs that prevented ESU enrollment. A subsequent cumulative update (KB5063709, released August 12, 2025) addressed these issues, but users should ensure they have the latest patches before attempting to enroll.
The Look Ahead
The Consumer ESU program is a pragmatic stopgap, not a permanent solution. For most users, it buys two years to plan an orderly transition. During that window, hardware prices will continue to fall, Windows 11 on ARM devices will mature, and cloud streaming options will improve. Microsoft is clearly steering the ecosystem toward Windows 11 and Copilot+ PCs, but the sheer scale of the Windows 10 installed base forced the company to offer a low‑friction bridge.
Treat ESU as a time‑limited insurance policy. Use the extra months to verify hardware compatibility, back up critical data, and either move to a supported operating system or replace aging hardware. The October 2025 deadline is not just a date on a calendar—it is the start of a countdown that will reshape the Windows landscape.
For official details, visit the Microsoft Support page: Windows 10 support ends on October 14, 2025 and the Consumer ESU program FAQ.