Windows 10 Security Updates Could End Free in October—Consumer Reports Fights for No-Cost Extension

Consumer Reports has publicly called on Microsoft to reverse course and offer free security updates for Windows 10 home users after the operating system’s end-of-support date on October 14, 2025. The formal appeal, directed at Microsoft leadership, warns that the current plan—a paid, one-year Extended Security Updates (ESU) extension—will leave millions of households, schools, and small organizations unprotected or forced into costly hardware upgrades. The consumer watchdog, backed by groups such as the Public Interest Research Group (PIRG), frames the cutoff as a public-safety, digital-equity, and environmental crisis.

What Consumer Reports Is Asking For

The open letter presses Microsoft to continue distributing basic security patches for Windows 10 to consumers free of charge, at least until a substantially larger share of users can migrate without disproportionate expense or privacy tradeoffs. The demands are specific:

• No-cost security updates past October 14, 2025. Consumer Reports wants Microsoft to drop the paywall and extend free patching for critical and important vulnerabilities.
• Remove privacy-invasive enrollment conditions. The current “free” path for consumer ESU requires signing in with a Microsoft account and enabling cloud sync. Advocacy groups call this an unfair tradeoff between security and privacy.
• Provide targeted financial and trade-in support for low-income households, educational institutions, and municipalities that can’t afford immediate hardware replacement.
• Publish transparent compatibility data clarifying exactly how many devices are permanently blocked from upgrading to Windows 11, to prevent misleading expectations at purchase.

PIRG and allied researchers have reinforced the ask, citing a potential e-waste surge of up to 400 million devices—a figure that, while an estimate, underscores the environmental stakes if functional PCs are retired prematurely.

Microsoft’s Current Plan for Windows 10 After October

Microsoft’s lifecycle policy sets October 14, 2025, as the cutoff for routine security updates and standard technical support for Windows 10 Home and Pro. After that date, users have three main options:

• Upgrade to Windows 11 on eligible hardware.
• Enroll in the consumer ESU program to receive critical and important security updates for one year (until October 13, 2026).
• Continue using an unpatched OS and accept the rising security risk.

The consumer ESU enrollment mechanism is, for now, the only official bridge. It offers three enrollment paths:

Microsoft has signaled that Defender antimalware updates and Edge browser servicing will continue under separate schedules, but core OS-level patches stop without ESU. For business customers, a separate commercial ESU program offers up to three years of paid coverage at higher pricing.

The Numbers: How Many PCs Are Affected

StatCounter’s global desktop Windows version market share snapshots from late summer 2025 show Windows 10 still running on roughly 45–46% of all Windows desktops, with Windows 11 hovering around the high 40s to low 50s. That translates to hundreds of millions of active Windows 10 machines. Independent estimates put the number of devices that can’t upgrade to Windows 11—due to hardware requirements like TPM 2.0, UEFI Secure Boot, and processor compatibility—in the 200–400 million range. While methods vary and some systems can be made upgradable with firmware tweaks, the scale of the affected population is undeniable.

What This Means for You

Home Users

If your PC runs Windows 10, you’re likely in one of three camps. If your machine is Windows 11–capable, a free upgrade is the simplest path. If it isn’t, you’ll need to decide whether to pay for ESU (or follow the free, account-linked route), buy a new PC, or ignore the deadline—a dangerous gamble after October. Even the “free” ESU path requires trusting Microsoft’s cloud sync, which raises privacy concerns for many.

Small Businesses and Schools

With limited budgets and fleets of aging hardware, these organizations face an acute squeeze. The one-year consumer ESU covers only the OS; it doesn’t extend support for servers or specialized software. Commercial ESU requires separate licensing and can strain budgets. Many will need to weigh the cost of new hardware against the risk of running unpatched systems, especially in regulated environments like healthcare or education.

IT Administrators

Large organizations already on volume licensing can tap the three-year commercial ESU, but that doesn’t solve the problem for distributed workforces with personal-owned devices. Admins must accelerate inventory audits, enforce conditional access policies, and consider network segmentation for any remaining Windows 10 endpoints. The October deadline will force a wave of hardware refreshes that may strain supply chains and budgets simultaneously.

Developers and Power Users

Those who rely on Windows 10 for compatibility testing or legacy applications face a shrinking window. Some may move to virtual machines sandboxed from the network, but that’s not a long-term strategy. The pressure to modernize toolchains and test environments is real.

How We Got Here: The Road to Windows 10’s End

Microsoft launched Windows 10 in July 2015 with an initial promise of 10 years of support. The end-of-life date has always been on the books, but the rollout of Windows 11 in October 2021 introduced stricter hardware requirements that blocked millions of otherwise capable devices. TPM 2.0, in particular, became a hard floor—one that many PCs built before roughly 2018 can’t meet without a physical module or motherboard swap. Secure Boot and CPU generation requirements further narrowed the upgrade path.

Initially, ESUs were a commercial-only offering, akin to the Windows 7 end-of-life playbook. In late 2024, Microsoft surprised many by announcing a consumer ESU program for the first time, a tacit acknowledgment of the uniquely large Windows 10 install base. But the one-year window and the account-linked free option left consumer advocates unsatisfied. Consumer Reports’ letter, published in summer 2025, crystallized the mounting frustration.

Your Action Plan: Steps to Take Before October

1. Inventory your devices. List every PC running Windows 10 in your household or organization. Note their primary use, exposure to the internet, and whether they hold sensitive data.

2. Check Windows 11 compatibility. Run Microsoft’s PC Health Check app or your OEM’s diagnostic. If a machine passes, schedule the upgrade before October to avoid the last-minute rush. If it fails, explore firmware updates: enabling TPM and Secure Boot in the BIOS may bring some devices into compliance.

3. Map out ESU enrollment. For devices that can’t upgrade, decide which ESU path you’ll use. If privacy is a concern, the Microsoft Rewards route (free but requires points) or the paid $30 option avoids account sync. If you go the backup-sync route, understand you’re linking settings to the cloud.

4. Apply compensating controls. For Windows 10 machines that must remain online after October without ESU, isolate them on a separate network segment, enforce strict browser isolation, remove admin rights, and keep offline backups. This is a temporary bandage, not a fix.

5. Consider alternative operating systems. For low-risk tasks like web browsing, email, and media, ChromeOS Flex or a user-friendly Linux distribution can breathe new life into older hardware without security fees. Evaluate application compatibility first.

6. Plan hardware purchases strategically. If you must buy new PCs, look for devices that meet Windows 11 requirements and, ideally, offer firmware-level security beyond TPM 2.0. Timing matters: the months around October may see supply constraints and price hikes as enterprises rush to refresh.

What Comes Next

Microsoft finds itself caught between operational reality and public pressure. Maintaining free, indefinite security servicing for a decade-old OS imposes real engineering costs and dilutes focus on Windows 11. Yet the sheer scale of the affected user base—and the stark equity and environmental arguments—makes the current binary ESU policy politically fragile.

Possible compromises could emerge in the coming weeks: a time-limited free extension (say, an additional six months), means-tested free ESU for low-income households and schools, or a privacy-respecting free enrollment path that doesn’t demand account sync. Regulators in the EU and US have already begun scrutinizing planned obsolescence and e-waste practices, and Consumer Reports’ letter adds fuel to that fire. A handful of class-action suits challenging Windows 11’s hardware requirements are also percolating, and any adverse rulings could force Microsoft’s hand.

For now, the company’s public posture remains unchanged: October 14, 2025, is a hard date, and ESU is the official bridge. But history shows that large-scale consumer backlash and regulatory attention can shift timelines—as happened with Windows XP’s extended support extensions in the face of botnet outbreaks. The weeks leading up to October will be critical.

Outlook

The decision that unfolds will test how platform vendors, regulators, and civil society negotiate baseline security expectations. For millions still on Windows 10, the imperative is clear: don’t wait. Inventory your devices, verify upgrade paths, and choose an ESU enrollment plan before the deadline hits. Use the one-year window not as a crutch, but as a deliberate, staged migration period. The security of your devices, your data, and the broader internet depends on it.