Microsoft has confirmed what many household and small-business PC owners have been bracing for: the October 2025 Patch Tuesday release will be the last free monthly security update for mainstream Windows 10; after October 14, 2025, Windows 10 devices that are not enrolled in an Extended Security Updates (ESU) plan will stop receiving Microsoft’s routine security patches and feature servicing. (support.microsoft.com)
Windows 10 launched in 2015 and has been one of Microsoft’s longest‑running consumer operating systems. Microsoft’s lifecycle policy set a firm end‑of‑servicing date for Windows 10 (version 22H2 and applicable editions): October 14, 2025. On that date Microsoft will cease routine security, quality, and feature updates for those editions; devices will continue to boot and run, but without vendor‑supplied patches for newly discovered vulnerabilities. (support.microsoft.com)
Two important additions to that baseline are worth highlighting up front:
Caveats and considerations
Microsoft’s October 14, 2025 deadline is a hard lifecycle milestone. The company has provided a narrowly scoped consumer lifeline and more granular guidance than many past sunsets, but the tradeoffs are clear: you must either upgrade to a supported platform, accept temporary (paid or cloud‑tied) security coverage, or take on increasing risk. Plan now, back up everything, and use the ESU window or a staged Windows 11 migration to avoid being exposed by an unpatched zero‑day after the cutoff. (support.microsoft.com)
Source: GB News Microsoft confirms when final ever update is coming to your Windows 10 PC — what you need to do next
Background / Overview
Windows 10 launched in 2015 and has been one of Microsoft’s longest‑running consumer operating systems. Microsoft’s lifecycle policy set a firm end‑of‑servicing date for Windows 10 (version 22H2 and applicable editions): October 14, 2025. On that date Microsoft will cease routine security, quality, and feature updates for those editions; devices will continue to boot and run, but without vendor‑supplied patches for newly discovered vulnerabilities. (support.microsoft.com)Two important additions to that baseline are worth highlighting up front:
- Microsoft has published a consumer‑facing ESU (Extended Security Updates) option that can extend security coverage for enrolled Windows 10 devices for one year — through October 13, 2026. This consumer ESU is being offered with multiple enrollment paths (including a no‑cash path that requires cloud sync) and a modest paid option. (blogs.windows.com)
- Microsoft is decoupling some app lifecycles from the OS lifecycle: Microsoft 365 Apps (Office) will continue to receive security updates on Windows 10 for three years after the OS’s EOL (security updates through October 10, 2028), and Microsoft Edge / WebView2 servicing is being continued under separate policies. Those exceptions reduce—but do not eliminate—the security exposure that comes from losing OS‑level patches. (learn.microsoft.com) (gs.statcounter.com)
What Microsoft actually confirmed (the precise, verifiable facts)
- End of servicing for Windows 10, version 22H2 (all editions listed) is October 14, 2025; October’s Patch Tuesday will be the final monthly security rollup for those builds unless a device is enrolled in ESU. (support.microsoft.com)
- The consumer ESU option covers enrolled Windows 10 devices from October 15, 2025 through October 13, 2026. It is explicitly security‑only (no feature updates, no new functionality, limited support). (blogs.windows.com)
- Enrollment mechanics: Microsoft has introduced an Enrollment Wizard surfaced in Settings → Update & Security → Windows Update (the enrollment flow was rolled out to Insiders and began rolling to consumers in July 2025; a phased rollout has continued). A cumulative update published in August 2025 (KB5063709) fixed an enrollment bug and widened availability of that enrollment experience. Eligible devices must be on Windows 10, version 22H2 and have current updates. (support.microsoft.com)
- Consumer enrollment options for ESU (three routes):
- Free if you enable Windows Backup to sync your PC settings and data to a Microsoft Account / OneDrive (ties the ESU entitlement to the Microsoft Account).
- Free by redeeming 1,000 Microsoft Rewards points per device.
- Paid one‑time purchase at roughly $30 USD for consumer ESU coverage (local pricing and taxes may vary). A single paid license covers up to 10 devices linked to the same Microsoft Account. (blogs.windows.com) (windowscentral.com)
- Enterprise/commercial ESU pricing is the traditional graduated model (roughly $61 USD per device in year one, doubling each subsequent year), whereas the consumer ESU is explicitly designed as a one‑year stopgap. Enterprises can extend for additional years under standard terms. (techcommunity.microsoft.com)
- Windows 11 upgrade requirements: to upgrade for free (where offered via Windows Update) your device must meet Windows 11 minimum specs — 64‑bit compatible CPU (approved list), 1 GHz+ and 2+ cores, 4 GB RAM, 64 GB storage, UEFI with Secure Boot, and TPM 2.0 — and Microsoft’s compatibility checks (PC Health Check) will determine eligibility. There are unsupported workarounds, but Microsoft warns these may cause future update or reliability problems. (support.microsoft.com)
- Market‑share context: independent telemetry (StatCounter) shows Windows 10 still running on tens of percent of Windows desktops; numbers vary by month and region, so treat exact percentages as estimates rather than audited counts. Using StatCounter’s July 2025 snapshot, Windows 10 remains a large, material portion of the installed base. This variability in tracking data is normal; use the official lifecycle dates above to plan migration. (gs.statcounter.com)
Why the difference between “no updates” and “still works” matters
Stopping OS servicing does not remotely mean the computers instantly stop working. But it does mean:- No kernel or system‑component security patches for newly discovered vulnerabilities.
- No driver or component updates delivered through Windows Update for platform vulnerabilities.
- No guaranteed mitigations for serious zero‑day problems discovered after October 14, 2025 for non‑ESU devices.
- Less technical support and a rising chance that ISVs and hardware vendors will stop testing and certifying their software and drivers for older OS builds.
Deep dive: Extended Security Updates (ESU) — what’s in, what’s out
What ESU delivers- Monthly security updates for critical and important severity issues as defined by Microsoft’s Security Response Center.
- Delivery through Windows Update for enrolled devices.
- A one‑year consumer ESU window through October 13, 2026. (blogs.windows.com)
- New features, design changes, performance improvements, or customer support beyond activation/installation troubleshooting.
- Long‑term technical support for OS feature issues unrelated to ESU updates.
- Guarantees against application compatibility problems that predate or postdate the OS lifecycle. (techcommunity.microsoft.com)
- Microsoft account requirement. Enrollment is tied to a Microsoft Account; local accounts will not be eligible for consumer ESU enrollment. That has practical privacy and administrative implications for users who prefer local‑only sign‑in. (windowscentral.com)
- Device prerequisites. Only Windows 10 devices at or upgraded to version 22H2 and with certain cumulative updates installed will be eligible for the enrollment flow. The August 2025 cumulative update (KB5063709) is key to enabling a reliable enrollment wizard. (support.microsoft.com)
- Per‑device licensing assumptions. The paid $30 consumer license can cover up to 10 devices tied to the same Microsoft Account, but each physical machine must still be enrolled. Large households or small businesses should carefully plan how they link devices to accounts. (windowscentral.com)
Step‑by‑step: How to check your PC and enroll in ESU (practical checklist)
- Inventory: make a list of all Windows 10 PCs you own — model, CPU, RAM, storage, and whether they use local or Microsoft accounts.
- Check Windows 11 eligibility:
- Open PC Health Check or go to Settings → Update & Security → Windows Update → Check for updates; Microsoft will report upgrade eligibility. If you prefer, consult the official requirements (TPM 2.0, Secure Boot, 4 GB RAM, 64 GB storage). (support.microsoft.com)
- Update Windows 10 to the latest cumulative updates (install KB5063709 and other pending updates). The August 2025 update fixed enrollment issues; without it you may not see the ESU enrollment option. (support.microsoft.com)
- If you plan to use the free ESU enrollment via OneDrive:
- Sign in with a Microsoft Account that will be used for enrollment (administrator privileges required).
- Enable Windows Backup (Settings → Update & Security → Backup) and confirm that your settings and data are syncing to OneDrive. Follow the Enrollment Wizard when it appears in Windows Update. (blogs.windows.com)
- If you prefer the paid route:
- Be ready to sign in with a Microsoft Account, buy the consumer ESU license (Microsoft’s in‑OS wizard will guide the purchase), and enroll each device that you want covered (up to 10 devices per paid license). (windowscentral.com)
- Alternate free route: redeem 1,000 Microsoft Rewards points per ESU license if you have points available; the wizard will permit redemption as an option. (blogs.windows.com)
- Domain‑joined or MDM‑managed commercial devices have different enrollment paths — businesses should use volume licensing or CSP channels. The consumer ESU flow is aimed at personal devices. (techcommunity.microsoft.com)
- Enroll early if you need the extra time — ESU is a bridge, not a destination. The program is limited in duration and scope. (blogs.windows.com)
Upgrade to Windows 11: the fastest long‑term fix (but not a universal one)
If your hardware meets Microsoft’s Windows 11 requirements (a compatible 64‑bit CPU on Microsoft’s approved list, TPM 2.0, UEFI+Secure Boot, 4 GB RAM, 64 GB storage), the upgrade path is free and the recommended long‑term solution. Windows 11 brings additional security features (VBS, improved driver and kernel protections) that Microsoft argues require newer platform features such as TPM 2.0 and Secure Boot. (support.microsoft.com)Caveats and considerations
- Many older but perfectly functional PCs lack TPM 2.0 or have CPUs not on Microsoft’s “approved” list; enabling firmware TPM or Secure Boot sometimes helps, but not always. (wired.com)
- Unsupported bypasses exist (registry workarounds, third‑party tools) to install Windows 11 on ineligible hardware, but these come with caveats: Microsoft reserves the right to block updates or to not guarantee stability for those installs. Use at your own risk.
- For users tied to specialized software or hardware (lab equipment, old peripherals), the compatibility review before upgrading is essential.
Alternatives to upgrading or ESU
- Buy a new Windows 11 PC: often the most reliable path for long‑term security and feature support. Microsoft and OEMs have trade‑in and recycling programs to reduce waste. (support.microsoft.com)
- Migrate to another OS (Linux distributions, macOS if you switch hardware, or Chrome OS for lightweight tasks): viable for many users, but requires application compatibility planning (document, backup, and test). Linux distros can rejuvenate older hardware and are often supported long after the Windows lifecycle ends.
- Use cloud PCs / Windows 365: devices using Windows 11 Cloud PCs or Windows 365 virtual machines may receive ESU entitlements differently (some cloud/virtual environments are entitled to ESU at no extra charge). Microsoft’s guidance includes cloud and virtual environment options as part of a migration strategy. (blogs.windows.com)
- Continue running Windows 10 unprotected: technically possible, but increasingly risky as new vulnerabilities are discovered and weaponized. This is a choice with long‑term security and compliance consequences. (support.microsoft.com)
Cost analysis — what staying on Windows 10 might really cost
- Consumer ESU: $30 USD one‑time for a one‑year security window (or free via OneDrive backup or Microsoft Rewards redemption). A single paid license covers up to 10 devices linked to the same Microsoft Account, which can be cost‑effective for multi‑device households. (blogs.windows.com)
- Enterprise ESU: typically $61 USD per device in year one, $122 in year two, and $244 in year three (prices double each year for enterprise classification). Those costs scale quickly for fleets of devices. (techcommunity.microsoft.com)
- New hardware: variable — midrange Windows 11 laptops or desktops will cost more than the consumer ESU in many cases, but offer long‑term support and better performance/security. Consider trade‑in programs and used/refurbished options.
- Hidden costs: lost productivity from compatibility issues, management overhead for continued legacy support, and potential remediation costs if an exploited vulnerability leads to data loss or breach.
Practical migration playbook (recommended timeline)
The calendar is tight. Today’s starting point should be damage‑free preparation and staged migration:- Immediately (within 1 week)
- Inventory devices, record Windows 10 build (must be 22H2 for ESU), determine local vs Microsoft account use. Back up everything — files, photos, app settings.
- Install all pending Windows 10 updates, including KB5063709 (August 2025 cumulative patch), to enable ESU enrollment when needed. (support.microsoft.com)
- Short term (2–6 weeks)
- Check Windows 11 eligibility for each device (PC Health Check or Settings → Update & Security → Windows Update). Plan upgrades for eligible machines.
- Encourage family/household members to sign‑in with Microsoft Accounts if they intend to use the free ESU route (enable Windows Backup/OneDrive). Document Microsoft Account linkage. (blogs.windows.com)
- Before October 14, 2025
- Complete in‑place Windows 11 upgrades for compatible devices or migrate data to new Windows 11 PCs.
- For any devices that must remain on Windows 10, enroll them in ESU before or at the cutoff (enrollment wizard is expected to be present and usable by mid‑August rollouts, but don’t assume full availability will be instantaneous for everyone). (blogs.windows.com)
- After October 14, 2025
- Devices not enrolled in ESU will no longer receive monthly security updates; treat them as high‑risk systems. Prioritize migrating any such device handling sensitive data.
- Use the ESU‑covered period (if you paid/used rewards/backed up) as a final buffer to move remaining workloads. ESU runs through October 13, 2026 for the consumer pathway. (blogs.windows.com)
Security and privacy considerations
- The consumer ESU’s Microsoft Account requirement changes the privacy calculus for users who have purposely used local accounts. Tying ESU to cloud backup may be acceptable to many, but others will view it as a forced cloud onboarding. That’s a legitimate tradeoff to weigh. (windowscentral.com)
- Back up before any major OS upgrade or ESU enrollment; use at least two copies (local external drive + cloud) and verify backups by restoring sample files.
- Maintain anti‑malware defenses and consider using application sandboxes or virtualization for legacy or risky tasks if you must keep an older machine online. ESU covers OS security updates but will not substitute for layered security practices.
Strengths of Microsoft’s approach — and where it falls short
Strengths- A pragmatic bridge: The consumer ESU program and the enrollment wizard represent a clear, well‑scoped way for everyday users to buy time rather than face immediate forced upgrades. Microsoft’s allowance for free enrollment via OneDrive or rewards is unusually consumer‑friendly for a product lifecycle extension. (blogs.windows.com)
- Transparency in dates: Microsoft has been explicit about the cutoff (October 14, 2025) and the ESU window (through October 13, 2026), which helps planning. (support.microsoft.com)
- Microsoft Account requirement: this shifts the enrollment model to cloud‑tied identities and may be a non‑starter for privacy‑minded users or those without internet access. (windowscentral.com)
- Short duration and cost: a one‑year ESU is useful, but it’s a temporary fix; businesses and households with many devices face escalating costs if they delay migration.
- Potential for confusion and patching delays: the phased rollout of the enrollment wizard and the initial enrollment bugs (fixed in KB5063709) show that some users may face friction and need direct support to enroll. (support.microsoft.com)
- E‑waste and forced hardware replacement pressure: the combination of strict Windows 11 requirements and Microsoft’s push to refresh hardware has drawn criticism and legal challenges in some jurisdictions, and will create disposal and cost issues for many users. Independent reporting and commentary have already flagged these consequences. (techradar.com)
What to watch next (monitoring checklist)
- Confirmation that the ESU Enrollment Wizard appears and works on your target devices (install KB5063709 and check Windows Update). (support.microsoft.com)
- Your StatCounter / telemetry of choice to understand when large portions of the population have moved. StatCounter shows Windows 11 overtaking Windows 10 in mid‑2025, but these snapshots change monthly — use them as context, not as a substitute for your own migration plan. (gs.statcounter.com)
- Any legal or regulatory developments (lawsuits or rulings) that could change Microsoft’s lifecycle commitments. Coverage of litigation and policy challenges is already active. (techradar.com)
Final recommendations — clear, actionable priorities
- Start now. Inventory, back up, and update. Install the August 2025 cumulative update (KB5063709) so your device can see the ESU enrollment wizard if needed. (support.microsoft.com)
- Prioritize eligible Windows 11 upgrades for devices that meet Microsoft’s requirements. These are the lowest‑risk, longest‑term path for mainstream users. (support.microsoft.com)
- Use ESU as a bridge, not a destination. If migration isn’t immediately feasible, ESU buys time — especially via the free OneDrive/Windows Backup or Microsoft Rewards options — but plan the transition within the ESU year. (blogs.windows.com)
- Consider non‑Windows options for older hardware (Linux or cloud solutions) when upgrading hardware is not cost‑effective or desirable.
- Protect sensitive data immediately. Wherever a device sits in your home or small office, ensure backups exist and multi‑factor authentication protects accounts.
Microsoft’s October 14, 2025 deadline is a hard lifecycle milestone. The company has provided a narrowly scoped consumer lifeline and more granular guidance than many past sunsets, but the tradeoffs are clear: you must either upgrade to a supported platform, accept temporary (paid or cloud‑tied) security coverage, or take on increasing risk. Plan now, back up everything, and use the ESU window or a staged Windows 11 migration to avoid being exposed by an unpatched zero‑day after the cutoff. (support.microsoft.com)
Source: GB News Microsoft confirms when final ever update is coming to your Windows 10 PC — what you need to do next
