Support for Windows 10 officially ends on 14 October, 2025, meaning Microsoft will stop providing free security updates and patches.
However, for those who find themselves hesitant or unable to transition to Windows 11, there exists a pathway to maintain security for an additional year: the Windows 10 Extended Security Updates (ESU).
Here’s what you need to know about safeguarding your PC after the cessation of support for Windows 10.
What is the Windows 10 ESU?
The Extended Security Updates (ESU) program allows consumers to continue receiving critical and important security updates through 13 October, 2026.
This initiative serves as a temporary bridge for users transitioning to Windows 11, focusing solely on essential updates that protect against significant vulnerabilities, without introducing new features, fixes, or technical support.
Who can enroll
To qualify for ESU, your PC must meet the following criteria:
- Run Windows 10, version 22H2
- Be using one of these editions: Home, Pro, Pro Education, or Workstations
- Have the latest updates installed
- Be signed in with a Microsoft account that has administrator rights
This program is intended for personal devices and does not extend to commercial setups, such as those joined to corporate domains or managed by Mobile Device Management (MDM).
How to get Windows 10 ESU
Consumers can enroll in one of three ways:
- At no cost if your PC settings are synced with your Microsoft account.
- By redeeming 1,000 Microsoft Rewards points.
- With a one-time purchase of USD (or equivalent in local currency).
To enroll, follow these steps:
- Navigate to Settings → Update & Security → Windows Update.
- If eligible, you will see an “Enroll now” option.
- Follow the prompts to select your preferred enrollment method—via backup sync, Rewards points, or purchase.
Each ESU license can cover up to 10 devices linked to the same Microsoft account.
What if you don’t—or can’t—enroll in ESU?
If you opt not to enroll, your PC will cease to receive security updates, leaving it vulnerable to new malware or ransomware threats that could exploit unpatched vulnerabilities.
Nevertheless, you can still take proactive measures to mitigate your risk:
- Utilize a modern, reputable antivirus program with real-time protection.
- Avoid outdated browsers; consider using Edge, Chrome, or Firefox, which are likely to continue supporting Windows 10 for the foreseeable future.
- Keep essential software updated, particularly browsers, document readers, and email clients.
- Limit internet exposure by refraining from using your old PC for online banking or sensitive tasks.
- Regularly back up important files to an external drive or cloud storage.
While these measures cannot replace the security patches provided by ESU, they can help reduce your exposure to potential threats.
What about upgrading to Windows 11?
Upgrading to Windows 11 remains the long-term solution for enhanced security and functionality.
However, many older PCs may not meet the necessary hardware requirements, such as TPM 2.0 and Secure Boot.
While it is technically feasible to force-install Windows 11 on unsupported hardware, this process involves registry edits and manual installation steps that carry inherent risks. Unsupported systems may encounter stability or driver issues and could miss out on future updates. Microsoft does not officially endorse this approach unless users are comfortable with technical troubleshooting.
The Windows 10 ESU program provides users with an additional year of protection, allowing more time to upgrade or replace devices.
However, after October 2026, even those enrolled in ESU will lose official security support, making the transition to newer hardware and Windows 11 an unavoidable step for long-term safety.
