Windows 10 Security Updates Extended to October 2027: How to Get Free ESU
Microsoft has extended its consumer Extended Security Updates (ESU) programme for Windows 10, so home users can keep receiving critical security fixes until 12 October 2027. Mainstream support for Windows 10 ended on 14 October 2025. Since then, the only way to get security patches on a Windows 10 PC has been to enrol in ESU, upgrade to Windows 11 or replace the computer. This guide explains what has changed, how to enrol for free, what ESU does not cover and how to decide what to do next.
What Has Microsoft Announced?
Microsoft’s Windows ESU page now states that consumer ESU coverage runs until 12 October 2027, a year later than the October 2026 end date originally set for home users. Key points:
- Enrolment window: you can enrol at any time until 12 October 2027
- Existing enrolments: PCs already in the programme continue automatically, with no need to re-enrol
- Coverage: security updates rated critical and important by Microsoft
- Devices: one enrolment can cover up to ten devices linked to the same Microsoft account
The move gives the hundreds of millions of people still on Windows 10 more time to upgrade, and comes as many older PCs cannot meet Windows 11’s hardware requirements, such as TPM 2.0 and a supported processor.
How Much Does Windows 10 ESU Cost?
For home users there are three ways to qualify, according to Microsoft:
- Free: by backing up your PC settings to OneDrive using the Windows Backup app (in some regions, including the European Economic Area, Microsoft has offered free enrolment with fewer conditions)
- 1,000 Microsoft Rewards points: earned through Bing searches and other Microsoft activities
- $30 one-off payment: or the local equivalent, plus any tax
Businesses and schools buy ESU through separate commercial licensing, priced per device per year, with prices that rise each year they remain enrolled.
How Do I Enrol in Windows 10 ESU?
Before you start, Microsoft says your PC must be running Windows 10 version 22H2 with the latest updates installed, and you must sign in with a Microsoft account that has administrator rights. Local accounts must be linked to a Microsoft account to enrol.
- Step 1: open Settings and go to Update & Security, then Windows Update
- Step 2: install any pending updates and restart if prompted
- Step 3: look for the “Enroll now” link under the Windows 10 end-of-support message
- Step 4: follow the wizard and pick one of the three options above
- Step 5: check Windows Update afterwards to confirm your device is enrolled
If you do not see the enrolment link, Microsoft advises making sure your device has the latest cumulative update installed and is running version 22H2. Some devices, such as those managed by an employer or school, may not show the option because their administrators control updates.
What Does ESU Not Cover?
ESU is a safety net, not a full support plan. Microsoft is clear that it does not include:
- New features: Windows 10 is frozen at version 22H2
- Non-security fixes: bugs that are not security-related will not be patched
- Technical support: Microsoft support will not help with Windows 10 problems beyond ESU enrolment and installation
- App guarantees: third-party developers may drop Windows 10 support over time
Microsoft 365 apps and Microsoft Defender antivirus definitions have their own timelines. Defender security intelligence updates are expected to continue for some time, but you should check the dates on Microsoft’s own support pages rather than assume they match ESU.
Is It Safe to Keep Using Windows 10?
With ESU, Windows 10 remains a reasonably safe choice for everyday tasks, as long as you install updates promptly and use a modern browser. Without ESU, an unpatched Windows 10 PC becomes steadily more exposed: attackers routinely study patches released for Windows 11 to find the same flaws in unsupported versions.
Whatever version you run, the basics matter more than the operating system:
- Keep your browser updated: Chrome, Edge and Firefox support on Windows 10 follows their own schedules
- Use built-in protection: our guide on whether you still need antivirus explains what Microsoft Defender covers
- Secure your accounts: turn on two-factor authentication and consider passkeys, as explained in our guide to passwords, passkeys and two-factor authentication
- Watch for scams: fake “your Windows has expired” pop-ups and support calls are common; learn how to spot a phishing email
Will My Windows 10 PC Stop Working?
No. Windows 10 does not switch off when support or ESU ends. Your computer will keep starting up, running programs and connecting to the internet. What stops is the flow of security fixes, which means newly discovered vulnerabilities stay open. Over time, some software makers will also stop supporting Windows 10, so new versions of apps, games and drivers may refuse to install.
That gradual decline is why security agencies and Microsoft recommend moving off an unsupported system rather than relying on it indefinitely. Online banking, shopping and email are the riskiest activities on an unpatched machine, because they involve passwords and payment details. If you have to keep an old PC running for a specific program, such as software for a piece of hardware, consider disconnecting it from the internet and using a supported device for everything else.
Should I Upgrade to Windows 11 Instead?
If your PC is compatible, upgrading is free and the simplest long-term option. You can check compatibility with Microsoft’s PC Health Check app or under Settings, Windows Update, where an eligible device will show a Windows 11 upgrade offer. Back up your files first. Microsoft’s own upgrade keeps your files and most apps in place, but a backup to an external drive or cloud storage protects you if anything goes wrong.
If your PC is not compatible, your options are:
- Enrol in ESU: buys you time until October 2027 at little or no cost
- Replace the PC: many Windows 11 laptops are discounted around Black Friday, which falls on 27 November in 2026
- Switch operating system: ChromeOS Flex or a Linux distribution such as Ubuntu or Linux Mint can give older hardware a second life, but check that your apps and printers will work
- Buy a Mac: a bigger change, but an option if you are replacing hardware anyway
Microsoft does not support installing Windows 11 on unsupported hardware through workarounds, and such devices may not receive updates.
What Should Businesses Do?
Organisations should treat the consumer extension as a signal rather than a plan. Commercial ESU is available for up to three years after end of support, but costs rise each year. IT teams should keep an inventory of Windows 10 devices, prioritise those handling sensitive data and plan replacements in their 2027 budgets.
What Is the Bottom Line?
If you are still on Windows 10, enrol in ESU now, ideally using the free OneDrive backup route or Rewards points. That keeps your PC patched until 12 October 2027. Use the extra year to plan an upgrade to Windows 11, a new computer or an alternative operating system, rather than running an unsupported PC once ESU ends.
Featured image: Illustrative AI-generated scene created for MediaPavilion; it does not depict a real person or event. Combined with MediaPavilion branding.
Sources
- Microsoft — Windows 10 Extended Security Updates (ESU) programme (2026).
- Microsoft Learn — Extended Security Updates (ESU) program for Windows 10 (2026).
- Microsoft Support — Windows 10 support has ended (2025).



