On October 14, 2025, Microsoft will stop issuing routine security patches, quality fixes, and technical support for Windows 10, pushing hundreds of millions of PCs toward an upgrade or a $30-a-year safety net. The company has, for the first time, extended its Extended Security Updates program to consumers, offering a one-year bridge of critical patches until October 13, 2026—but the path to eligibility involves a Microsoft account and a deliberate choice among three enrollment tracks.

The Deadline: What Stops and When

After October 14, 2025, Windows 10 version 22H2—the final feature update of the OS—will no longer receive monthly security rollups, quality fixes, or official Microsoft technical support. No more Patch Tuesday shipments. No new feature improvements. The end applies to Home, Pro, Enterprise, Education, and most IoT editions.

Microsoft will still push anti-malware signatures and intelligence updates for Microsoft Defender for a while longer, but that does not patch the underlying operating system. Without vendor patches, any new vulnerability becomes a permanent exposure for devices that stay on Windows 10.

The Consumer ESU Program: A Closer Look

In a departure from past practice, Microsoft has built a consumer-grade Extended Security Updates plan. Previously reserved for enterprise volume licensing customers, ESUs now come in a consumer-friendly flavor aimed at home users, small offices, and anyone who cannot immediately replace or upgrade a Windows 10 PC.

The consumer ESU covers exactly one year: from October 15, 2025, through October 13, 2026. It delivers only security updates classified as Critical or Important. No feature updates, no non-security hotfixes, and no assisted support. It is a safety net, not a paraglider.

How You Get It

Microsoft has outlined three enrollment paths, all requiring the device to be linked to a Microsoft account:

  • Free pathway: Turn on Windows Backup or sync your PC settings to your Microsoft account, and you qualify for a no-cost ESU enrollment. This is the simplest route for many users, though it means embracing Microsoft’s cloud sync.
  • Rewards pathway: Redeem 1,000 Microsoft Rewards points through the Microsoft Rewards dashboard. If you already accumulate points from Bing searches or Xbox activities, this essentially costs you nothing.
  • Paid pathway: A one-time payment of $30 (USD) buys a consumer ESU license that covers up to 10 devices tied to the same Microsoft account. The purchase is made through the Microsoft Store on the device itself during enrollment.

All three routes funnel into the same security-only update stream. Enroll via Settings > Update & Security > Windows Update, where a dedicated ESU enrollment wizard appears once the device is fully patched with preparatory updates released in mid-2025.

The Fine Print

  • The device must be running Windows 10 version 22H2 with all latest cumulative updates installed. Microsoft has issued specific servicing stack updates to enable the ESU enrollment experience; if the option doesn’t appear, re-check Windows Update for any pending KB patches.
  • Enrollment requires administrator privileges and a Microsoft account. Local accounts must be converted or linked to a Microsoft account—the free and paid tracks won’t work otherwise. Child accounts are excluded.
  • Domain-joined or MDM-managed devices do not qualify for consumer ESU. Businesses should use the commercial ESU channel, which costs more but permits longer coverage.

As first reported by Moneycontrol, the $30 price and 10-device cap make the paid consumer track an affordable stopgap for a family with a few older laptops, but it’s strictly a one-year deal. Microsoft has not announced any extension pathway for consumer ESU beyond October 2026.

Your Options: Upgrade, Pay, or Move On

Windows 10 users face four broad paths, and the right one depends on hardware, budget, and tolerance for risk.

If your PC meets Windows 11’s hardware requirements—a 64-bit CPU with at least two cores running at 1 GHz or faster, 4 GB of RAM, 64 GB of storage, TPM 2.0, and UEFI firmware with Secure Boot—the free in-place upgrade remains the cleanest route. It restores full vendor servicing, delivers modern security features, and aligns you with Microsoft’s forward-looking support lifecycle. Run the PC Health Check tool (available from Microsoft) to confirm compatibility.

2. Enroll in Consumer ESU as a Bridge

For devices that cannot run Windows 11—perhaps because the CPU is not on Microsoft’s approved list or the motherboard lacks TPM 2.0—the $30 ESU buys a year of breathing room. This is a tactical move, not a strategy. Use that year to plan a hardware refresh, migration to another OS, or retirement of the device.

3. Buy a New Windows 11 PC

Replacing aging hardware outright may be more cost-effective than wrestling with compatibility issues. Modern laptops and desktops now ship with Windows 11 and often include improved battery life, faster storage, and integrated TPM chips.

4. Switch to an Alternative Platform

Linux distributions such as Ubuntu, Linux Mint, or ChromeOS Flex can repurpose older hardware into functional endpoints with active security support. This path demands testing: verify that your critical applications and peripherals work, and be prepared for a learning curve. For users deeply tied to Windows-only software, cloud-hosted virtual desktops (like Windows 365) offer another escape route.

Act Now: A Practical Checklist

Procrastination is the biggest risk. Here’s what to do this month, before the October 14 deadline arrives.

  1. Check your Windows 10 version: Press Windows key + R, type winver, and hit Enter. If the version shown is anything other than 22H2, navigate to Settings > Update & Security > Windows Update and install the latest feature update. Only 22H2 is eligible for ESU enrollment.

  2. Back up everything: Create a full system image (using the built-in Backup and Restore tool or a third-party utility) and sync critical files to OneDrive or an external drive. A failed upgrade or enrollment attempt can leave data inaccessible.

  3. Run PC Health Check: Download Microsoft’s official compatibility checker and see if your PC qualifies for Windows 11. Note any missing requirements, especially TPM 2.0, which can sometimes be enabled in the BIOS on newer systems.

  4. Decide your path:
    - If Windows 11 is possible and you want to stay under Microsoft’s servicing umbrella, schedule the upgrade for a quiet weekend.
    - If Windows 11 isn’t possible, plan to enroll in consumer ESU. Link a Microsoft account to your device now if you haven’t already, and install all pending updates so the enrollment wizard appears.
    - If you plan to replace the PC, start researching models now; back-to-school and holiday seasons often bring deals, but supply can tighten near the deadline.

  5. For business users: Contact your IT department immediately if you’re running Windows 10 on a managed laptop. Do not try to install consumer ESU on a domain-joined machine—it will not work. Commercial ESU enrollment is handled through your organization’s licensing agreement.

  6. Test before you commit: If you are moving to Linux or a cloud desktop, set up a dual-boot environment or a virtual machine to trial your workflow before wiping Windows 10 entirely.

The Bigger Picture: What Comes After

The end of Windows 10 support marks a deliberate shift in Microsoft’s engineering priorities. The company is betting that hardware-enforced security—anchored by TPM 2.0 and virtualization-based security—is necessary for the next decade of threats. By sunsetting Windows 10 broadly, Microsoft nudges the ecosystem toward stronger defaults.

But the transition will not be seamless. Hundreds of millions of PCs still run Windows 10, and many perfectly functional devices will be decommissioned or repurposed. The consumer ESU program softens the blow for households, but its one-year leash raises questions: Will Microsoft extend it again if Windows 11 adoption lags? Could a second paid year emerge? So far, the company has given no such signals.

Meanwhile, app support may outlast the OS. Microsoft has committed to providing security updates for Microsoft 365 Apps on Windows 10 through at least 2028. Microsoft Edge and WebView2 will also see updates on the old platform. But these piecemeal patches won’t close kernel-level holes. As known vulnerabilities pile up after October 2025, threat actors will inevitably target unpatched Windows 10 devices en masse.

For now, the roadmap is clear: move to Windows 11 if you can, pay $30 for a year of ESU if you can’t, and start planning for life after October 2026. The countdown has begun.