The clock is ticking for the hundreds of millions of PCs still running Windows 10. Microsoft has confirmed the operating system's end-of-support date: October 14, 2025. After that day, the company will no longer deliver routine security updates, feature enhancements, or quality fixes unless users take specific action. For the first time, Microsoft is offering consumers a direct path to purchase one additional year of critical patches through a new Extended Security Updates (ESU) program. The cost: $30, or free if you're willing to sync settings to a Microsoft account or redeem 1,000 Rewards points.

A decade of Windows 10 draws to a close

Windows 10 launched in July 2015 and rapidly became the world's most-used desktop operating system. Microsoft's fixed lifecycle policy guarantees a minimum of ten years of support for each major release. For version 22H2, the final consumer build, that promise expires on October 14, 2025. After that date, any PC running Windows 10 without an ESU license will stop receiving security patches, leaving newly discovered vulnerabilities unaddressed. The company estimates that 43% of all Windows devices worldwide still run the aging OS, creating a massive security risk.

The consumer ESU represents a significant departure from past practice. Historically, extended security updates were sold only to enterprise customers through volume licensing contracts, at prices that scaled rapidly each year. Now, individual users can buy a one-year bridge directly from Microsoft for a flat $30 fee – a move that acknowledges the enormous installed base and the practical reality that many households are not ready to upgrade.

What the consumer ESU actually provides

Microsoft's consumer ESU is a narrowly focused service. It delivers only patches classified as Critical or Important under the company's Security Response Center guidelines. These are the fixes that address actively exploited vulnerabilities, remote code execution flaws, and other high-severity threats. The program does not include:

  • Non-security quality or reliability updates
  • Feature improvements or new capabilities
  • Technical support beyond activation and enrollment assistance
  • Updates for any software beyond the core operating system

Coverage runs from October 15, 2025 through October 13, 2026. Once enrolled, security updates arrive through Windows Update exactly as they do today. The license is tied to a Microsoft account and can be used on up to ten devices associated with that same account, making it highly cost-effective for multi-PC households.

Who qualifies – and who doesn't

The consumer ESU is not a universal safety net. Eligibility is limited to specific editions and configurations:

  • Supported editions: Windows 10 Home, Pro, Pro Education, and Workstation. Enterprise and Education editions must use commercial ESU channels.
  • Version requirement: The device must be running Windows 10 version 22H2 with all latest cumulative updates installed.
  • Account requirement: Enrollment requires a Microsoft account with administrative privileges on the device. Child accounts are not permitted.
  • Domain disconnection: Devices joined to Active Directory, Microsoft Entra ID (Azure AD), or managed through mobile device management (MDM) are excluded. Kiosk-mode devices are also ineligible.

For business and education environments, separate enterprise ESU agreements are available through volume licensing or cloud service providers. Those subscriptions typically cost more and are priced per device. Organizations should not attempt to use the consumer program for managed PCs.

How to enroll before the deadline

Microsoft has begun rolling out a dedicated enrollment wizard accessible through the Windows Update settings page. The rollout is staged, appearing first to Windows Insiders before becoming broadly available. To check eligibility:

  1. Open Settings > System > About and confirm the OS version is 22H2.
  2. Navigate to Settings > Update & Security > Windows Update.
  3. Look for a new “Enroll now” link. If absent, install all pending updates and check again.

When the wizard appears, users choose one of three enrollment options:

  • Free via settings sync: Enable Windows Backup to sync your PC's settings to a Microsoft account. This ties the ESU license to that account at no charge.
  • Microsoft Rewards: Redeem 1,000 Rewards points if you have accumulated them.
  • Paid purchase: A one-time $30 transaction through the Microsoft Store or account payment method.

All three paths deliver the same set of Critical and Important updates. The system will not prompt for payment or redemption until after the enrollment commitment.

Some users have reported delays in seeing the enrollment prompt during the staged rollout. Microsoft advises patience and ensuring the device is fully updated. Waiting until the last minute before the October cutoff risks missing the window if the wizard has not yet appeared.

Microsoft's official recommendation remains upgrading to Windows 11. The newer OS runs on modern hardware with enhanced security architectures and will receive feature and security updates well beyond 2026. For PCs that meet the minimum requirements, the in-place upgrade from Windows 10 22H2 is free.

Windows 11's hardware requirements are the primary reason millions of devices cannot upgrade. The blockers are well-known:

  • Trusted Platform Module (TPM) 2.0: Many older systems lack a physical TPM chip or a compatible firmware TPM.
  • Secure Boot: UEFI firmware with Secure Boot capability is mandatory.
  • Processor generation: Only CPUs from Intel's 8th generation or AMD's Ryzen 2000 series and later are officially supported.

Microsoft's PC Health Check app can quickly assess compatibility. Some users have successfully enabled firmware TPM in their UEFI settings, but if the hardware is not on the approved list, Windows 11 will not install through official channels. For those devices, the consumer ESU is the only way to maintain security coverage without replacing hardware.

Alternative paths for holdouts

Users who cannot or will not upgrade to Windows 11 have several options beyond ESU:

  • Migrate to Linux: Lightweight distributions such as Ubuntu, Linux Mint, or Zorin OS can breathe new life into older hardware. They receive regular security updates and support a wide range of software for web browsing, office productivity, and media.
  • Windows 365 Cloud PC: Microsoft's cloud-hosted Windows 11 environment streams a full desktop to any device, bypassing local hardware limitations entirely. Licensing costs apply, but performance depends on internet connectivity.
  • Buy a new PC: The newest Copilot+ PCs come with Windows 11 and dedicated AI hardware. For users whose machines are beyond their service life, a hardware refresh may offer the best long-term value.

Each alternative carries trade-offs in cost, learning curve, and software compatibility. ESU is a temporary measure, not a long-term solution. By October 2026, all remaining Windows 10 users will again face an unsupported OS unless Microsoft extends the program further – something the company has not indicated it will do.

Risks of riding the unsupported wave

Operating a PC without security updates after October 14, 2025 is dangerous. Unpatched vulnerabilities become permanent exposures. History shows that attackers specifically target end-of-life software, reverse-engineering updates for supported platforms to find gaps on older ones. The consequences include:

  • Ransomware encrypting personal files
  • Banking trojans stealing credentials
  • Remote code execution enabling full system compromise
  • Botnet recruitment for distributed attacks

Beyond direct security risks, regulatory or contractual obligations may require individuals handling sensitive data to use supported systems. Third-party software vendors will also begin dropping Windows 10 support, leaving users with outdated browsers, productivity suites, and device drivers.

ESU reduces the threat surface by closing Critical and Important vulnerabilities, but it does not cover every flaw. Moderate- and low-severity issues go unpatched, and zero-day exploits may still succeed. Think of ESU as life support, not a cure.

The Microsoft account trade-off

Microsoft's free enrollment path links the ESU license to a Microsoft account and requires enabling Windows Backup syncing. That choice embeds device entitlement deeper into the company's cloud ecosystem. Privacy-conscious users should understand what data moves to Microsoft servers:

  • System settings and preferences
  • App lists and pinned items
  • Edge browser favorites and passwords (if synced)

For many home users, this is a minor concern. The paid $30 option avoids the sync requirement entirely, as does the Rewards redemption route. All three methods are functionally identical after enrollment. The account binding, however, is universal: the ESU license follows the Microsoft account, not the device. Selling a PC after enrollment may require transferring the license by changing the associated account, which Microsoft's documentation does not fully clarify.

Household cost analysis

The consumer ESU pricing model favors families. A single $30 license covers up to ten devices signed into the same Microsoft account. For a household with multiple aging laptops and desktops, that translates to as little as $3 per machine for a year of security patches.

  • Single PC: $30 for one year bridges the gap to a planned upgrade or replacement.
  • Multi-PC household: One payment secures all eligible devices, making ESU far cheaper than immediately replacing multiple computers.
  • Enterprise users: Commercial ESU pricing is substantially higher and requires per-device licensing through volume channels. Businesses should not attempt the consumer route.

Rewards points provide a no-cost entry for those who have accidentally accumulated enough points through daily Bing searches or Microsoft Store purchases. The sync-based free option adds no financial burden but carries the privacy implications outlined above.

A practical checklist before October

With the deadline approaching, every Windows 10 user should act now:

  1. Verify your build: Update to Windows 10 version 22H2 if you haven't already. The System > About page shows your current version.
  2. Back up your data: Use a reliable cloud or local backup solution. Image backups are ideal for complete system restoration.
  3. Check Windows 11 eligibility: Run the PC Health Check app. If your device qualifies and you want long-term support, schedule the free upgrade.
  4. Decide on ESU enrollment: Choose the option—free sync, Rewards, or $30—and enroll as soon as the wizard appears. Don't wait until October.
  5. Research alternatives: If ESU is only a stopgap, explore Linux distributions, cloud PC services, or new hardware purchases.
  6. Review software compatibility: Confirm that critical applications will function on your chosen path for the next 12–18 months.

Procrastination is the enemy. Staged rollouts of the enrollment wizard and potential last-minute surges in support requests could delay access if you wait too long.

Strengths, shortcomings, and the bigger picture

Microsoft's consumer ESU is a pragmatic move that reduces e-waste and gives households breathing room. The free options via sync or Rewards lower the barrier to zero for many. Yet the program's shortcomings are equally clear:

  • Temporary reprieve: Twelve months pass quickly. Users who do not plan their next step during that window will be right back where they started, but with an even more vulnerable OS.
  • Patch scope: Critical and Important patches plug the worst holes, but moderate flaws and zero-day exploits may remain open. This is not a full support contract.
  • Account lock-in: Enrolling ties your OS security to your Microsoft account, deepening platform dependence. For some, that's an acceptable trade-off; for others, it's a step too far.
  • Staged rollout friction: Not all eligible PCs will see the enrollment wizard simultaneously. Communication around timing has been vague, risking user confusion.

Critics argue that Microsoft could simply extend Windows 10's mainstream support at no charge, given the OS's continued market share. Instead, the company uses ESU as a nudge toward Windows 11 and its associated services. The approach is not unique – Apple, Google, and Linux vendors all enforce rigid support lifecycles – but the scale of Windows 10's installed base makes this transition particularly consequential.

The bottom line

October 14, 2025 is not a drill. Windows 10's retirement will leave millions of devices exposed unless their owners take deliberate action. The consumer ESU offers a one-year safety net at a modest price, but it is a bridge, not a destination. Users with compatible hardware should upgrade to Windows 11 now for free, ensuring years of fully supported use. Those stuck on older machines can lock in ESU to buy time, then explore hardware upgrades or alternative operating systems before the 2026 cutoff.

Ignoring the deadline is not an option. The security landscape punishes inaction. Whether you pay $30, sync your settings, or move to Windows 11, the time to decide is right now.