Microsoft has quietly inserted a blunt new prompt into Windows Update: “Learn about options to trade-in or recycle your PC.” It’s a direct, no-nonsense message that appears when the operating system detects a device that can’t meet Windows 11’s hardware requirements. With the October 14, 2025 end-of-support deadline now just weeks away, the company is also rolling out the final enrollment mechanism for its consumer Extended Security Updates (ESU) program — a $30 lifeline that buys one more year of security patches.
The new trade-in link, first reported by Windows Latest and confirmed by Forbes, is visible in the Windows Update settings page on affected Windows 10 machines. It opens the Microsoft Store Online Trade-in Program, where users can get a cash quote for their old device or choose to “recycle for good” if no trade-in value is offered. In regions where the program isn’t available, the link still appears, but it simply directs users to find a local recycling service. The message is clear: Microsoft wants you off unsupported hardware, one way or another.
At the same time, the consumer ESU is now live for eligible devices. This program extends critical and important security updates for Windows 10 through October 13, 2026. Enrollment costs $30 per Microsoft account, but that single payment covers up to 10 devices linked to the same account. Users can also enroll for free by syncing their settings and backup data with a Microsoft account, or by redeeming 1,000 Microsoft Rewards points. The catch: the device must be running Windows 10 version 22H2 with the latest cumulative updates installed, and ESU does not include new features, design changes, or technical support.
A Firm Line on Hardware Requirements
Microsoft has not budged on the hardware gates it set with Windows 11’s original launch. The PC Health Check app remains the official arbiter of eligibility. If your system lacks a supported 64-bit processor, TPM 2.0, Secure Boot, or sufficient RAM and storage, the upgrade path is officially closed. The company explicitly warns that installing Windows 11 on unsupported hardware may lead to malfunctions and will not guarantee future updates — including security patches. As Forbes notes, Microsoft even removed earlier documentation that detailed a registry workaround to bypass the hardware checks, closing that loophole entirely.
The rationale is security. TPM 2.0, virtualization-based security, and modern CPU features are not optional extras — they form the backbone of Windows 11’s defense against firmware attacks, credential theft, and kernel-level exploits. “These are foundational elements of the platform’s security model,” Microsoft has stated, and running on older hardware undermines that model.
What It Means for You
For the typical home user, the math is straightforward. If your PC passes the PC Health Check, you should back up your files and upgrade to Windows 11 before October 14. The upgrade remains free, and most applications and peripherals from the past few years work without issue. Check your critical software — especially small business or niche tools — for compatibility, but for the vast majority, the transition is smooth.
If your device fails the check, you have three realistic paths:
-
Enroll in ESU: Pay $30 (or use the free alternative) to keep receiving security patches for one year. This buys time to plan a hardware purchase, but it’s a short-term fix. You’ll need a Microsoft account if you don’t already use one, which is a hurdle for privacy-conscious users who rely on local accounts. The enrollment prompt appears in Windows Update under “Stay protected with Windows 10 Extended Security Updates.” If you don’t see it yet, make sure you’re on version 22H2 and fully patched.
-
Trade in or recycle: The new link in Windows Update makes this path convenient. You can get a quote for your current machine and put that money toward a Windows 11-compatible device. Even if the trade-in value is nominal, the program ensures responsible recycling. For those on extremely tight budgets, certified refurbished PCs with TPM 2.0 can be a cost-effective alternative.
-
Stick with an unsupported system: This is the riskiest option. Without security updates, your PC becomes a sitting duck for newly discovered vulnerabilities. Browsers and antivirus software can only do so much when the underlying OS has unpatched holes. If you go this route, limit sensitive activities like banking or email, keep all applications updated, and use a dedicated, up-to-date security suite.
For businesses, the calculus is more complex. The consumer ESU is not intended for domain-joined or enterprise-managed devices. Organizations must look to commercial ESU plans, which extend Windows 10 support for up to three years but with increasing per-device costs each year. IT managers should immediately inventory their fleet, identify machines that lack TPM 2.0 or supported CPUs, and prioritize high-risk endpoints for replacement or isolation behind stronger network protections. Budgeting for a phased refresh over the next 12 months is the responsible play.
How We Got Here
Microsoft first announced Windows 11’s strict hardware requirements in June 2021, surprising many with the inclusion of TPM 2.0 as a non-negotiable. At the time, millions of perfectly functional PCs built as recently as 2018 lacked the required security chip. The company briefly experimented with a soft floor for CPUs, but quickly reverted to the original, tighter list. A public outcry ensued, yet Microsoft held firm.
The consumer ESU option emerged in late 2023, marking the first time such a program was offered to individuals. Historically, ESU was a volume-licensing stopgap for enterprises slow to migrate. The $30 pricing — and the free enrollment paths — were seen as a olive branch, but consumer advocates quickly noted that a single year isn’t enough for many households to afford new hardware. The Consumer Reports warning cited in the Forbes article pegged the population of stranded devices at between 200 million and 400 million, a number derived from readiness studies and global Windows 10 install base estimates.
The new trade-in prompt is the latest chapter. It appears not just as a helpful suggestion but as an integral piece of the Windows Update interface — putting hardware replacement on equal footing with the ESU enrollment button. Critics argue this combination of firm requirements, a paid short-term patch, and a direct link to recycling creates undue pressure to buy new PCs, especially given the environmental toll of accelerating device churn.
What to Do Now: A Step-by-Step Guide
-
Run the PC Health Check app immediately. It’s available from Microsoft’s website and provides a definitive yes/no on Windows 11 compatibility. If you’re running an older version of Windows 10, update to 22H2 first.
-
If you’re eligible for Windows 11: Start the upgrade via Windows Update or the Installation Assistant. Back up critical files first. Test your essential apps on a different PC if you’re unsure about compatibility. The upgrade is free and can be initiated at any time before October 14.
-
If you’re not eligible:
- To enroll in ESU, open Settings > Update & Security > Windows Update. You should see an “Enroll now” button if your device qualifies. Choose your payment method: the $30 card purchase, Microsoft Rewards points, or the free sync/backup option. You’ll need to sign in with a Microsoft account, so do that now if you haven’t already.
- To trade in, click the “Learn about options to trade-in or recycle your PC” link. You’ll be directed to the Microsoft Store portal. If the online program isn’t offered in your region, the page will suggest local e-waste recyclers.
- If you decide to buy a new device, look for Windows 11-branded PCs that include TPM 2.0 by default. Refurbished business laptops from the past three years are often a bargain and will meet the requirements. -
If you choose to remain on Windows 10 without ESU:
- Install a robust, third-party security suite and keep it updated.
- Use a modern browser like Edge or Chrome with automatic updates enabled.
- Avoid opening attachments from unknown senders and practice general cyber hygiene.
- Consider moving sensitive tasks to a supported device, even if it’s a tablet or phone, for critical transactions.
Outlook: The Clock Is Ticking
There is no sign that Microsoft will extend the October 14 deadline or relax the hardware requirements for Windows 11. The company’s messaging — from the enforced security baseline to the trade-in prompt — reflects a strategic bet that the security benefits of modern hardware outweigh the economic and environmental costs of leaving millions of PCs behind. For users, the window to act is closing. The consumer ESU program offers a year of breathing room, but it is not a permanent solution. Whether the massive fleet of stranded Windows 10 machines becomes a manageable transition or a security crisis depends on how quickly and decisively individuals and organizations act now.