Microsoft’s final extension for Windows 10 has arrived. Starting on October 14, 2025, the operating system that still powers hundreds of millions of PCs will officially exit mainstream support—but not entirely. A new consumer Extended Security Updates (ESU) program grants one additional year of critical security patches, pushing the real end-of-life date to October 13, 2026. The catch: users must actively enroll before the October 14, 2025 cutoff and meet a handful of freshly imposed requirements that tie the process to a Microsoft Account and accept either a modest fee or a deeper integration with the company’s cloud services.

After months of signaling that Windows 10 would receive zero further updates without payment, Microsoft backpedaled following user pushback. The company now offers two no-cost enrollment routes alongside the original $30 one-time fee. This guide details every step, limitation, and hidden trade-off of the consumer ESU—and what you must do immediately to protect your PC for another year.

The Hard Deadline and the ESU Bridge

Windows 10 version 22H2 will receive its last free security update on October 14, 2025. After that, no new features, quality improvements, or standard patches will ship unless users opt into the Extended Security Updates program. Microsoft designed this consumer ESU as a one-year bridge, allowing individuals to keep receiving critical and important security fixes while they plan a migration to Windows 11 or a new device. The program runs through October 13, 2026, and then support ends entirely.

The initiative is a direct response to the enormous installed base of PCs that cannot meet Windows 11’s stricter hardware requirements—TPM 2.0, compatible CPUs, Secure Boot, and increasingly, on-device AI NPUs. By offering a paid (or free) security net, Microsoft avoids an overnight security cliff while still nudging users toward modern hardware.

What the ESU Delivers—and What It Leaves Out

The consumer ESU is a security-only lifeline. It delivers Critical and Important security updates as defined by Microsoft’s Security Response Center. That means patches for actively exploited vulnerabilities, zero-days, and other severe flaws will continue to arrive via Windows Update. However, the program explicitly excludes new features, non-security reliability fixes, and general technical support beyond activation and installation assistance for ESU itself.

Microsoft 365 and Office apps follow separate support timelines, so even with ESU, Office 2016 or 2019 may lose compatibility or stop receiving patches. Users should check Microsoft’s lifecycle documentation for their specific Office versions. The ESU also does not address aging drivers, firmware vulnerabilities, or compatibility regressions that would normally be resolved through quality updates.

Who Qualifies for the Consumer ESU?

Before attempting enrollment, verify your device meets these prerequisites:
- Windows 10 version 22H2 (Home, Pro, Pro Education, or Workstation editions).
- The device must be activated with a genuine license and fully up to date, including the August 2025 cumulative updates (KB5063709) that enable the enrollment interface.
- A Microsoft Account (MSA) is mandatory; local accounts are not eligible. The ESU license ties directly to the MSA used during enrollment.
- Child accounts are excluded.
- Domain-joined, enterprise-managed, or kiosk-configured machines do not qualify. However, Entra-registered (but not joined) personal devices may be eligible.

If the Enroll option doesn’t appear in Windows Update after meeting these conditions, apply all pending updates, reboot, and try again—Microsoft rolled the feature out gradually and patched early wizard bugs in August 2025.

Three Ways to Pay (Or Not): Cash, Points, and OneDrive

Microsoft originally planned a flat $30 fee for consumer ESU, but after community backlash, it added two free alternatives. Today, users choose from:

  1. $30 USD (one-time payment) – Pay through the enrollment wizard. One license can cover up to 10 devices tied to the same Microsoft Account.
  2. Microsoft Rewards redemption – Redeem 1,000 Microsoft Rewards points. For users who already participate in the Rewards program, this is often the quickest no-cash route.
  3. OneDrive / Windows Backup sync – Enable Windows Backup and sync your PC settings to OneDrive. This provides ESU at no monetary cost, but it may require purchasing extra OneDrive storage if your current quota is insufficient for a full backup.

All three routes require signing into a Microsoft Account during enrollment. Microsoft emphasizes that the free OneDrive path integrates your backup settings into its cloud ecosystem, which some privacy advocates view as a trade-off.

How to Enroll in Under Two Minutes

  1. Open Settings → Update & Security → Windows Update.
  2. Look for the new header stating that Windows 10 support ends on October 14, 2025, and click the Enroll now link beneath it.
  3. Sign in with the Microsoft Account you want to tie to the ESU (the account must have administrator privileges on the device).
  4. Choose one of the three enrollment options: pay $30, redeem Rewards points, or enable OneDrive backup.
  5. Follow the wizard to complete enrollment.

If the link is missing, ensure Windows is fully updated—specifically, install the August 2025 cumulative update (KB5063709), which both enables the enrollment UI and resolves an early crash bug. Microsoft confirmed the rollout was staggered, so some devices may need a reboot after updating.

One License, Up to 10 Devices: The Fine Print

A single consumer ESU license tied to your Microsoft Account can be used on up to 10 Windows 10 PCs. Each device must enroll individually through Settings > Windows Update, but additional enrollments under the same account will not require a new payment or extra Rewards points—up to that 10-device limit. This makes the $30 option particularly attractive for households with multiple aging laptops.

If you enroll late during the ESU year (for example, mid-2026), the system retroactively applies all previous ESU patches, so you won’t miss any earlier fixes. However, the license itself remains valid only until October 13, 2026.

The KB5063709 Requirement and Early Glitches

Microsoft shipped KB5063709 in August 2025 as a cumulative update for Windows 10 22H2. It serves two critical purposes: it merges all prior security and quality fixes, and it activates the “Enroll now” interface within Windows Update. Many early adopters reported that the enrollment wizard crashed or failed to load until this update was installed. After applying KB5063709 and rebooting, the option appeared reliably.

For users who still cannot see the enrollment link, the update can be downloaded manually from the Microsoft Update Catalog. The company recommends installing all optional updates as well, as some prerequisites are delivered through non-security patches.

The Hidden Cost: Privacy and Ecosystem Lock-In

While the free enrollment paths save money, they introduce dependencies that some users may find uncomfortable:

  • Microsoft Account requirement: All enrollment methods necessitate an MSA. Local account diehards must either convert or create a new account, linking their device’s security to a Microsoft-controlled identity.
  • OneDrive coupling: The zero-cash route demands that you sync Windows Backup with OneDrive. Even if you don’t upload large files, the metadata and sync signals create a deeper tie to Microsoft’s cloud. Free OneDrive storage (5 GB) is often insufficient for a full PC backup, so additional costs may arise.
  • Vendor lock-in: The ESU policy nudges consumers toward Microsoft’s ecosystem in exchange for a short-term security benefit. Critics argue this strategy pressures users away from local accounts and toward subscription-based services.

For many households, these trade-offs are acceptable given the alternative (running an unpatched Windows 10). But privacy-conscious users should weigh the implications before clicking Enroll.

Risks and Practical Advice for Home Users

ESU is not an indefinite safety net. The updates stop permanently on October 13, 2026, and no further extensions have been announced. Treat the ESU year as a planned migration window—not a reason to postpone indefinitely. During that year, consider these points:

  • Security posture still degrades without feature or driver updates. ESU patches only the OS kernel and core components; it won’t fix a vulnerable printer driver or BIOS flaw.
  • For devices used with sensitive data (banking, remote work), migrating to Windows 11 or a supported alternative is the only long-term option.
  • Before enrolling, make a full disk image backup. ESU enrollment ties to account settings; if something goes wrong, a reliable backup ensures you can roll back.
  • If your device meets Windows 11 requirements, use the free upgrade. Windows 11 receives full feature and security updates, plus better performance and future-proofing for AI-driven features.

The Bigger Picture: AI PCs and the Windows 11 Imperative

Windows 11’s evolution toward on-device AI (Copilot+ PCs) has hardened hardware expectations: Copilot+ requirements include an NPU with 40+ TOPS, 16 GB RAM, and 256 GB storage. For users interested in local AI experiences, that usually means buying a new machine, not just upgrading the OS. Microsoft’s decision to limit long-term Windows 10 support partly reflects this hardware shift—keeping an older codebase alive indefinitely would hold back the adoption of AI-capable devices.

The ESU bridge thus serves a dual purpose: securing older PCs while gently phasing them out. If on-device AI matters to your workflow, use the ESU year to budget and migrate to a Copilot+ or Windows 11-compatible system.

Your Windows 10 ESU Checklist

If you plan to stay on Windows 10, act now using this checklist:

  1. Update Windows to the latest cumulative release—install KB5063709 and any pending optional updates. Reboot.
  2. Verify edition and activation: Ensure you’re on Windows 10 version 22H2 and that activation is valid.
  3. Create a full image backup and verify recovery media.
  4. Decide your ESU route: Enable OneDrive backup (free but may require storage purchase), redeem 1,000 Rewards points, or pay $30. Prepare a Microsoft Account.
  5. Open Settings → Update & Security → Windows Update, find the Enroll now link, and follow the wizard. If it’s missing, install all updates and retry.
  6. Note your coverage: After enrollment, your device will receive security-only updates through October 13, 2026.

The Bottom Line

Microsoft’s consumer ESU is a narrowly focused but effective safety valve. It delivers one more year of security updates in a way that minimizes friction for most home users while steering them toward Microsoft accounts and cloud backups. The program’s strengths—two free enrollment routes, clear one-year window, and cost efficiency for multi-PC households—are offset by its limited scope, account lock-in, and hard deadline.

The October 14, 2025 enrollment cutoff is absolute. If you miss it, your Windows 10 PC will face a future without patches, exposing it to increasingly severe vulnerabilities. Treat the ESU period as exactly what it is: time to plan and complete a migration, not a chance to delay forever. Use it deliberately: patch, back up, enroll, and then use the year to move to a supported, secure platform.