Microsoft has opened a narrow window for the hundreds of millions of users still clinging to Windows 10. A new consumer Extended Security Updates (ESU) program, uncharacteristically offered with a free enrollment path, will keep security patches flowing for one more year—but only if you claim it before the October 14, 2025, end-of-support deadline. The catch: the “Enroll now” button that unlocks this lifeline is rolling out in waves, and without it, you’re stuck with no path to continued protection.

This surprise move, detailed in a support document and confirmed by a swarm of community reports, gives Windows 10 users three ways to buy themselves 12 months of critical and important security updates: pay $30 for a license covering up to 10 devices, redeem 1,000 Microsoft Rewards points, or—most notably—enroll for free by enabling Windows Backup to OneDrive and signing in with a Microsoft Account. The free option ties your safety to the cloud, a trade‑off that has already sparked privacy debates among enthusiasts.

The clock is ticking loudly. After October 14, unprotected Windows 10 machines will stop receiving any security updates, leaving them exposed to newly discovered vulnerabilities. To avoid a gap, you must enroll before that date, and Microsoft’s phased rollout means you may need to check repeatedly, apply recent patches, and act the moment the button appears.

The end of an era: why Windows 10 support is ending

Windows 10’s formal end-of-support date, October 14, 2025, has been circled on IT calendars for years. Originally, Microsoft planned to halt all updates—security and otherwise—for the aging OS. The company wanted users to migrate to Windows 11 or buy new hardware, especially Copilot+ PCs that leverage AI features requiring a neural processing unit. But the transition hasn’t been smooth.

Statcounter data from July 2025 showed Windows 11 finally overtaking Windows 10 in global market share, but August numbers slipped back, with Windows 10 regaining ground. Over 700 million devices remain on the older OS, and many cannot upgrade because of hardware requirements like TPM 2.0, Secure Boot, or a supported processor. Others simply refuse to leave. Faced with a potential security disaster—hundreds of millions of vulnerable PCs—Microsoft reversed course and crafted the consumer ESU, a program previously reserved for enterprise customers.

What the consumer ESU actually gives you

Microsoft’s consumer ESU is a stopgap, not a permanent fix. It delivers only security updates rated critical or important by the Microsoft Security Response Center (MSRC). No new features, no non-security bug fixes, no technical support. The coverage runs from October 14, 2025, through October 13, 2026—a single, non-renewable year.

Eligible devices must run Windows 10, version 22H2 (Home, Pro, Pro Education, or Pro for Workstations) with all latest cumulative updates installed. The enrolling user must be a device administrator signed in with a Microsoft Account. Child accounts, domain-joined PCs, MDM-managed machines, and kiosk-mode devices are excluded.

Enrollment happens exclusively through Settings → Update & Security → Windows Update, where an “Enroll now” link appears once the rollout reaches your device. Three payment paths exist:

  • Free: Sync your PC settings via Windows Backup to OneDrive. This requires a Microsoft Account and permanently binds the license to that account.
  • Microsoft Rewards: Redeem 1,000 Rewards points.
  • Paid: A one-time $30 purchase valid for up to 10 devices using the same Microsoft Account. Prices may vary by region.

After enrolling, updates will download automatically through Windows Update, just as they do today—but only while the ESU remains active.

The enrollment button problem and why you must act now

Microsoft is deploying the “Enroll now” button in phases. Many users report the option missing even after installing the latest updates. Support forums are filled with complaints that the button simply isn’t there, and Microsoft’s response—"it’s rolling out in waves”—has done little to calm nerves.

The August 2025 cumulative update, KB5063709, was specifically designed to fix early enrollment bugs and make the button visible for more devices. If you haven’t installed it yet, do so immediately. Some users found that the button appeared only after applying that patch and rebooting. Others still see nothing, and Microsoft advises patience, promising everyone will get the option before October 14. But the risk is real: if you wait until the last minute and the button hasn’t materialized, you could be caught without updates when support expires.

Practically, you should treat early September as your critical action window. Install all pending updates, check Windows Update daily, and enroll the instant the option appears. A Forbes report emphasized that the “last update” for non-ESU Windows 10 machines will ship in October—after that, silence.

Step-by-step: how to prepare and enroll

Follow these steps to maximize your chance of a smooth enrollment and avoid being left unprotected on October 14:

  1. Verify your Windows 10 version: Go to Settings → System → About. You must be on version 22H2. If not, upgrade first.
  2. Install all pending updates, especially KB5063709: This August 2025 cumulative update fixes enrollment visibility issues. It may not appear automatically; check for updates manually.
  3. Create a full disk image backup: Use trusted tools like Macrium Reflect, Acronis True Image, or the built-in Windows backup utility. ESU is a security bandage, not a cure for a failed upgrade or update conflict.
  4. Sign in with an administrator Microsoft Account: The free ESU requires this, and the license is tied to that account. If you use a local account, be prepared to convert or add a Microsoft Account to your PC.
  5. Open Settings → Update & Security → Windows Update and look for the “Enroll now” link. It may be a button or a text link, and its placement could vary.
  6. Choose your enrollment path: Select the free option (Windows Backup required), redeem Rewards points, or pay $30. Follow the on-screen wizard; it will link up to 10 devices if you choose the paid route.
  7. Confirm enrollment: Once completed, you should see a confirmation message. Mark your calendar: you now have updates through October 13, 2026.

If the button is absent after installing KB5063709, reboot and check again. If it’s still missing, wait a few days—the rollout is ongoing. Microsoft has stated that everyone will get the option, but the lack of a guaranteed date for each device makes this a tense waiting game.

Rollout headaches and other update troubles

The road to ESU enrollment hasn’t been smooth. In addition to the missing button, some early adopters reported crashes of the enrollment wizard itself. Microsoft’s August updates aimed to fix these glitches, and community reports suggest the situation has improved, but isolated failures persist.

A separate, higher-profile scare involved August Windows 11 updates that allegedly caused SSDs to “disappear” under heavy write loads. While the initial alarm bells rang loudly on social media, joint investigations by Microsoft and SSD controller maker Phison concluded that no systemic fault existed. However, some users claimed reproducible issues, and the conflicting reports have left a residue of caution. The consensus among cautious enthusiasts: back up everything before applying any major update, and avoid sustained large file writes immediately after patching.

Market dynamics: why Microsoft changed course

Microsoft’s consumer ESU is a pragmatic concession, not a gift. The company faces a dual challenge: prevent a massive security vacuum that would tarnish its reputation and potentially cause widespread cyber incidents, and maintain momentum toward Windows 11 and the Copilot+ PC ecosystem.

By giving Windows 10 users a one-year safety net, Microsoft buys time for the hardware market to mature and for holdouts to eventually upgrade. The $30 paid option and OneDrive tie-in also gently nudge users toward Microsoft’s account and cloud services, a strategic move that aligns with the company’s broader direction. The free path—requiring Windows Backup—increases OneDrive engagement, while the Rewards option deepens loyalty to the Microsoft ecosystem.

The market is responding in real time. Statcounter’s month-by-month fluctuations show a tug-of-war between Windows 10 and 11, and Microsoft needs both to keep the security story intact while steering users to newer platforms. The consumer ESU is the balancing act.

Privacy and account trade-offs: the cost of “free”

The free ESU path comes with strings attached. To claim it, you must enable Windows Backup to OneDrive, which syncs your device settings, app list, and some personalization data to Microsoft’s cloud. For privacy-conscious users, this is a sticking point. The alternative is to pay $30 or spend Rewards points, but those options still require a Microsoft Account—just no forced cloud sync.

Community threads have lit up with debates over this requirement. Some see it as a fair exchange; others view it as a coercive nudge into Microsoft’s account ecosystem. If you’re already using a local account and have no desire for cloud integration, the paid route offers a way out without sacrificing privacy. But the fact remains: ESU is designed to keep you inside Microsoft’s walls, even as it patches security holes.

Who should enroll—and who should think twice

Enroll immediately if…
- Your PC cannot upgrade to Windows 11 due to hardware limitations, and you plan to keep using it beyond October 14.
- You need a low-cost, low-effort way to secure a handful of home devices. The $30 plan covering up to 10 devices is a bargain.
- You’re waiting for Windows 11’s feature set to mature or for specific software compatibility to lock in, and you need a bridge.

Be cautious or avoid enrollment if…
- Your device is domain-joined or managed through MDM—the consumer ESU doesn’t apply; use commercial ESU channels instead.
- You’re unwilling to use a Microsoft Account or sync data to OneDrive. The privacy cost may outweigh the security benefit for you.
- You see ESU as a permanent solution. It is explicitly limited to one year and covers only security fixes. When it ends, your Windows 10 installation will be officially unsupported and increasingly dangerous to use.

The checklist every Windows 10 user should run today

  1. Update Windows 10 to the latest cumulative version: Prioritize KB5063709 and any subsequent patches.
  2. Create a full disk image and verify your recovery plan. Don’t rely on file-level backups alone.
  3. Sign into Windows with an admin Microsoft Account if you intend to use the free ESU path. If you’re paying, still prepare that account.
  4. Check for the ESU enrollment button under Settings → Update & Security → Windows Update. Check again after each update and reboot.
  5. Enroll as soon as the button appears, choosing the path that fits your budget and privacy comfort level.
  6. Plan your long-term migration: Use the next 12 months to research a Windows 11 upgrade, a new PC, or an alternative operating system. ESU is a bridge, not a destination.

The risks of relying on ESU alone

Extended Security Updates are a lifeline, but they come with significant limitations:

  • No functional updates: Bugs unrelated to security won’t be fixed. If a driver or app breaks due to a Windows 10 oddity, you’re on your own.
  • Third-party support erosion: Software vendors will increasingly target Windows 11. Adobe, browsers, and other critical apps may drop Windows 10 support even during the ESU year.
  • Rollout fragility: The enrollment system itself has proven unreliable. A server hiccup, a missing button, or a wizard crash could leave you stranded if you wait too long.
  • Privacy creep: The free option’s mandatory cloud sync may erode your privacy stance, and once your account is tied to the license, switching later is cumbersome.

The bottom line

Microsoft’s consumer ESU is a rare, time-limited offer that addresses a genuine need: it keeps security patches flowing for one more year on an OS that hundreds of millions refuse to leave. Its three enrollment paths—free via OneDrive, Rewards, or $30—cover a spectrum of user preferences, but they all require a Microsoft Account and proactive action.

The urgency cannot be overstated. The “Enroll now” button is appearing slowly, and October 14 is approaching fast. Install KB5063709, back up your system, and check Windows Update daily. If you see the button, click it immediately. Use the year wisely to migrate to a supported platform, because when the ESU clock runs out, Windows 10 will finally be obsolete—and unprotected.

This is your one shot to buy time. Don’t miss it.