Microsoft has quietly added a second year to its consumer Windows 10 Extended Security Updates (ESU) program, pushing the final patch deadline to October 12, 2027. The move gives home users and small businesses who refuse—or cannot—move to Windows 11 a longer window of critical and important updates, but it also reshapes upgrade timelines and IT budgets for millions of PCs.

The late-breaking add-on that few saw coming

When Microsoft first sketched out the ESU roadmap for Windows 10’s October 14, 2025 end-of-support, consumers got a single, $30 lifeline: security patches through October 13, 2026. Businesses, as usual, were thrown a three-year rope, with a per-device, per-year price that escalates steeply. The consumer plan was pitched as a one-time, “last resort” cushion for folks who needed an extra 12 months to replace a PC or migrate to Windows 11.

That has now changed. Without a dedicated press release or a splashy announcement, Microsoft updated its support documentation to show consumer ESU enrollment will cover a second year—from October 14, 2026 to October 12, 2027—for personal devices. The exact mechanism is still a bit fuzzy: whether existing $30 subscribers will need to pay again or whether a single payment now stretches across both years is not yet detailed in the company’s public FAQ. However, the program’s description now explicitly lists the extended endpoint, and language about “one year” has been scrubbed from several Microsoft Learn pages.

The update surfaced first in community forums and was quickly corroborated by Windows watchers who noticed the date change in the official ESU FAQ. At press time, Microsoft had not issued a statement explaining the rationale, but the timing—just as the first wave of consumer enrollments approaches the 2026 cutoff—suggests a recognition that the Windows 11 hardware barrier is still blocking a significant slice of users.

What the extra year actually gets you—and what it doesn’t

The ESU program isn’t a full-service contract. It covers only “critical” and “important” security bulletins rated by the Microsoft Security Response Center. That means no new features, no design updates, no driver enhancements, and—crucially—no technical support beyond the patches themselves. If something breaks, Microsoft won’t help unless you have a separate support agreement.

For home users, the patch pipeline will now run:

  • Year 1: October 14, 2025 – October 13, 2026 (the original ESU period)
  • Year 2: October 14, 2026 – October 12, 2027 (the newly added stretch)

Businesses and education customers still operate on the three-year model, with year assignments that follow the same date boundaries. But for the first time, the consumer path mirrors the business timeline in duration—two full years from end-of-life—if not in price. Commercial year-two ESU costs roughly $25–$100 per device depending on licensing (Enterprise vs. E3/E5), while consumers pay a flat $30. Whether the second consumer year will require another $30 payment remains unconfirmed, though industry patterns suggest a separate transaction is likely.

Who stands to gain—and who should still plan an exit

The move buys time for three distinct groups.

Households with older hardware. The Windows 11 compatibility checker still blocks millions of perfectly functional PCs that lack TPM 2.0, a supported CPU, or Secure Boot. For a family running a 7th-gen Intel Core i5 desktop or an AMD Ryzen 1000 rig, the $30-a-year ESU is far cheaper than a new $600 tower. This extension means those machines can stay patched until late 2027, aligning with the typical 5–6-year lifecycle of a mid-range PC purchased around 2019–2020.

Small businesses caught in the migration gap. Many small offices run Windows 10 Pro on hardware that meets the Windows 11 spec but requires manual upgrades their IT person—often the owner—hasn’t had time to schedule. The consumer ESU, which applies to Windows 10 Pro as well as Home, gives them two years to plan a cautious rollout instead of one hurried weekend.

Stubborn power users and tinkerers. A vocal subset of Windows enthusiasts insists on stickiness with 10 for interface or workflow reasons. While security purists rightly warn about running an EOL OS, the extended patches reduce the gamble for someone who wants to eke out a few more years before jumping to Windows 11 24H2 or even Windows 12, which rumors place in late 2025.

But the extension is not a license to ignore the inevitable. By October 2027, the average Windows 10 machine will be seven to eight years old, and hardware failures will become more common. Furthermore, third-party software vendors have already started dropping Windows 10 support. Adobe, for example, tied some new Creative Cloud features to Windows 11 in 2024, and more ISVs will follow. The security patch cushion doesn’t insulate against application abandonment.

How we got to a two-year consumer safety net

Microsoft’s ESU dance started long before Windows 10. The company first introduced post-retirement patches with Windows 7, but only for volume-license business customers. That program cost so much for year three that it became infamous; the UK’s NHS famously spent millions to keep aging PCs alive during the pandemic.

When Windows 10’s retirement date neared, the company took an unprecedented step: opening ESU to individuals for the first time. In December 2024, a support article appeared, detailing a $30 one-year plan. The original wording emphasized “one year” and offered no hint of renewal. Reaction was mixed: applauded for transparency, derided for charging at all after a decade of “Windows as a Service.”

Behind the scenes, pressure likely came from both sides. Enterprise customers, already committed to multi-year ESU agreements, wanted consumer consistency so their hybrid-work employees wouldn’t bring unpatched home PCs onto corporate VPNs. Meanwhile, regulators in the EU and elsewhere had been scrutinizing e-waste implications of forced hardware upgrades. Extending the program dampens that criticism.

By February 2025, rumors of a second consumer year surfaced when community members spotted ESU registration fields that allowed a 2027 expiration date. Microsoft remained silent until the documentation quietly flipped. The October 12, 2027 date is precise: it’s a Tuesday, the traditional Patch Tuesday, indicating the final set of updates will drop on that day and coverage ends immediately after.

What you should do right now

If you’re running Windows 10 and haven’t yet enrolled in ESU, the clock is ticking with two tiers of action.

  1. Verify your Windows 10 edition. The consumer ESU applies to Windows 10 Home, Pro, Pro for Workstations, and Pro Education—any edition a user can buy at retail or preinstalled on a consumer PC. Enterprise and Education customers must go through volume licensing.

  2. Check activation status. ESU requires a valid digital license. If your PC was upgraded from Windows 7 or 8 during the free period and you’ve since rebuilt it without linking the license to a Microsoft account, do that now. ESU enrollment verifies activation.

  3. Decide on the first year. Enrollment for the initial ESU (through Oct 2026) will become available closer to the October 14, 2025 end date—likely via the Microsoft Store or a dedicated ESU portal. The cost is $30. Microsoft has said there will be no recurring automatic billing; you must explicitly purchase each year.

  4. Watch for year-two purchase details. If the pattern holds, you’ll be able to buy the second year (2026–2027) sometime in mid-2026. Plan for another $30, but don’t prepay yet; the store page hasn’t materialized.

  5. For businesses using consumer ESU: A small business with fewer than 10 PCs might be tempted to buy consumer ESU for each machine. That’s technically allowed if the devices are genuine consumer licenses, but it creates a compliance gray area. Under Microsoft’s terms, a device used primarily for business should have a commercial license, and ESU for business is sold through the Cloud Solution Provider program. If audited, you could be asked to true-up. Consult a licensing expert if you’re unsure.

  6. Prepare your exit regardless. Treat the extended deadline as a hard stop. Back up your files, inventory your software licenses, and test Windows 11 on a spare drive. The upgrade assistant has improved, and many “incompatible” PCs can now run Windows 11 with a clean install—just without official support. Come October 2027, there will be no reprieve; the only options will be Windows 11, a different OS, or retirement.

The bigger picture: what this says about Microsoft’s upgrade gamble

Rolling out a second consumer ESU year is both a customer-friendly gesture and a tacit admission that the Windows 11 hardware requirements, originally framed as non-negotiable security fundamentals, have created a bifurcated ecosystem. Microsoft cannot claim TPM 2.0 and 8th-gen CPUs are essential for safety while simultaneously offering patches to millions of excluded machines through 2027. The logic is in tension.

Industry watchers expect this tension to resolve in one of two ways. Either Microsoft extends ESU even further—perhaps to a third year—if Windows 12 fails to land quickly and users continue to cling to Windows 10. Or the company uses the 2027 deadline to force a final migration, potentially sweetening the deal with heavily discounted Surface hardware or a free year of Microsoft 365.

For now, the immediate takeaway is clear: Windows 10’s sunset just got a little less scary. But the reprieve comes with an expiration date, and it’s still measured in months, not years. Use the time wisely.