Microsoft has quietly unlocked a free safety net for the millions of users who aren’t ready to leave Windows 10—but the clock is ticking. With the October 14, 2025 end-of-support date now fixed, the company is making its Extended Security Updates (ESU) program available to consumers through two no-cost routes and a low-priced paid option. The catch: you must enroll before the cutoff to ensure your PC stays patched against emerging threats.

This isn’t a drill. If you’re still running Windows 10 on your home machine, your family’s laptops, or a small office fleet, you have a narrow window to lock in one additional year of critical security fixes. Ignore the deadline and you’ll be running an unpatched operating system ripe for exploitation. Here’s exactly what you need to know—and do—to keep Windows 10 secure through October 13, 2026.

The Final Countdown for Windows 10

When Microsoft pulls the plug on October 14, 2025, the steady stream of free security and quality updates that has protected Windows 10 for a decade will stop. No more Patch Tuesday fixes. No more emergency out-of-band patches. For the majority of consumers and small businesses who haven’t yet migrated to Windows 11, that creates a critical exposure window.

Recognizing the scale of the problem—hundreds of millions of devices still run Windows 10, many blocked by Windows 11’s strict hardware requirements—Microsoft created a consumer ESU program. It delivers only security updates (rated Critical and Important) for one year, but it does not include new features, design changes, or general technical support. Think of it as a security-only bridge, not a new lease on life.

The Three Enrollment Paths

Microsoft is offering three distinct ways to enroll, and two of them are free—if you’re willing to accept certain conditions.

1. Microsoft Rewards Redemption (Free)
If you collect Microsoft Rewards points, 1,000 points gets you ESU coverage. That’s roughly the equivalent of a few days of Bing searches or completing a handful of tasks in the Rewards dashboard. For many users, this is the quickest path with no additional cost or cloud tie-in beyond the existing Microsoft Account.

2. Windows Backup Sync to OneDrive (Free)
This option requires you to turn on Windows Backup and sync your settings and files to Microsoft OneDrive. While no cash changes hands, it does increase your dependency on Microsoft’s cloud ecosystem. You get 5 GB of OneDrive storage free, but if your backup exceeds that, you’ll need a paid storage plan. Privacy-conscious users should weigh this trade-off carefully.

3. One-Time $30 Payment (Paid)
The original plan: pay $30 and cover up to 10 devices linked to a single Microsoft Account. For families or power users with multiple older PCs, this is often the simplest and most cost-effective option—no need to mess with Rewards points or cloud backups. The payment is a one-time fee, not a subscription, and coverage runs through October 13, 2026.

All three paths require a Microsoft Account. Local-only accounts won’t qualify for the free routes and must convert or use the paid option. Enterprise and domain-joined machines are generally excluded from the consumer program and must use volume‑licensing ESU, which is significantly more expensive (reported starting prices around $61 per device for year one, doubling for subsequent years).

How to Enroll: A Step-by‑Step Walkthrough

Enrollment is handled through the Settings app, but Microsoft is rolling it out in stages. To maximize your chances of seeing the wizard and completing enrollment smoothly, follow this checklist now:

1. Update to Windows 10 22H2
If you’re on an older version, upgrade to the latest feature update. Then install every pending cumulative update. Specifically, Microsoft has released a servicing stack update (look for August 2025 patches) that enables the enrollment wizard to appear reliably.

2. Back Up Your Entire System
Before making any major changes, create a full system image and a separate copy of your personal files. Use an external drive or a cloud service. A rollback path is essential if something goes wrong during enrollment—you don’t want to be stuck without a working system.

3. Sign in with a Microsoft Account
If you’re using a local account, now is the time to switch. Go to Settings > Accounts > Your info and sign in with a Microsoft Account. Enable Windows Backup and OneDrive if you plan to use the free sync route.

4. Find the Enrollment Wizard
Navigate to Settings > Update & Security > Windows Update. Look for a banner or a link that says “Enroll now” under the Extended Security Updates section. If it’s not there, check for more updates and restart. The rollout is staged, so it may take a few days or a couple of patch cycles to appear.

5. Choose Your Path and Complete Enrollment
Select your preferred option—Rewards, OneDrive sync, or the $30 payment—and follow the on‑screen instructions. The wizard will verify your eligibility and tie the ESU license to your device and Microsoft Account.

6. Verify That Updates Keep Arriving
After October 14, 2025, your Windows Update history should show security-only updates installing. Keep an eye on the Update Catalog if you suspect any gaps. Also, regularly check for firmware and driver updates from your PC manufacturer; ESU doesn’t cover those, and stale firmware can undermine your security posture.

Technical Caveats and Hidden Risks

Consumer ESU is a stopgap, not a long-term strategy. Here’s what it won’t do for you:

  • No Feature Updates: You’ll remain on Windows 10 22H2 forever. Any user interface improvements, new apps, or performance boosters are off the table.
  • No Technical Support: If something breaks, Microsoft won’t help unless you have a separate support contract.
  • Firmware and Driver Neglect: Your UEFI/BIOS, chipset drivers, and other low-level firmware will stop receiving updates from many OEMs. Over time, this can introduce instability or security holes that ESU can’t patch.
  • Unsupported Windows 11 Upgrades: Some users try to bypass Windows 11 hardware requirements with registry hacks or modified ISOs. Microsoft has warned that unsupported devices may be denied future updates. Don’t rely on these tricks for a production machine.

The enrollment process itself has a few pitfalls. The staged rollout means you could be waiting weeks for the wizard to appear if you start late. And Microsoft has cautioned that the August 2025 prerequisite update is mandatory—skip it and you won’t see the “Enroll now” option at all. Early action is the only way to avoid a last‑minute scramble.

The Privacy Equation: What You Trade for Free Patches

The two free enrollment paths explicitly tie ESU to Microsoft Account usage and, in one case, to OneDrive sync. For users who have long avoided cloud entanglement, this is a significant nudge. By enrolling via the OneDrive backup route, you’re essentially bartering some data sovereignty for security. Even the Rewards path requires an MSA and encourages deeper use of Microsoft’s ecosystem.

If privacy is paramount, the $30 fee might be the better deal. It avoids the nudge toward permanent cloud linkage while still getting the patches. But for many, the convenience of free will outweigh the privacy cost—especially when the alternative is an insecure PC.

Alternatives: What If You Don’t Want to Stay on Windows 10?

ESU buys time, not a permanent solution. Use the coming year to evaluate your options:

  • Upgrade to Windows 11 on Supported Hardware: The gold standard. Run Microsoft’s PC Health Check tool to see if your machine qualifies. A clean install often performs better than an in‑place upgrade. If your PC meets the requirements, this is the path of least resistance.
  • Buy a New Windows 11 PC: For aging hardware, a new device ensures years of support, better performance, and modern security features like TPM 2.0. Budget models start around $400.
  • Switch to Linux or ChromeOS Flex: Lightweight distributions like Linux Mint or ChromeOS Flex can breathe life into old laptops for basic tasks. Expect a learning curve and compatibility gaps with Windows software.
  • Cloud‑Hosted Windows: Services like Windows 365 or Azure Virtual Desktop let you stream a fully supported Windows environment to an older endpoint. This shifts the cost to a monthly subscription but offloads hardware concerns.

The Enterprise Angle

Businesses with domain‑joined devices face a different calculus. Consumer ESU isn’t available for managed endpoints. Instead, they must purchase ESU through volume licensing, with reported costs starting at $61 per device for year one and doubling each subsequent year. IT teams should inventory their fleets now, identify machines that can’t be upgraded, and budget accordingly. Also, coordinate with OEMs for firmware updates—many enterprise PCs will need UEFI/BIOS patches to remain stable through the ESU period.

Your Deadline Action Plan

The weeks before October 14, 2025 will be chaotic as millions of users try to enroll simultaneously. Avoid the rush:

  1. Check your Windows 10 version (must be 22H2).
  2. Install all pending updates, including the August 2025 cumulative.
  3. Create a full backup.
  4. Sign in with a Microsoft Account if you haven’t already.
  5. Look for the “Enroll now” banner in Windows Update and complete the wizard.
  6. Mark your calendar for October 2026 to reassess your migration progress.

Microsoft’s consumer ESU is a pragmatic and affordable lifeline, but the terms are final. No enrollment means no patches, and that’s a gamble no security-conscious user should take. Act now, plan your migration, and treat this extra year as a runway—not a permanent address.