Windows 10 End-of-Support 2025: How to Secure Free Security Updates with ESU

As Microsoft nears the end of mainstream support for Windows 10, a wave of uncertainty has swept across the vast user base still relying on the OS for daily computing. Despite the launch of Windows 11 and the company's push to drive users toward more modern hardware and software platforms, Windows 10 remains deeply entrenched in homes and businesses worldwide. The approach of the October 2025 end-of-support deadline has left many scrambling for alternatives—fortunately, a new solution has emerged: the Extended Security Updates (ESU) program. This initiative not only provides a clear path for users keen on staying put with their current setups but also offers a surprising opportunity to secure another full year of updates at no cost.

Understanding the Extended Security Updates Program​

Microsoft’s ESU initiative isn’t a new concept. Traditionally, this program was designed for enterprise customers willing to pay extra for continued updates on older platforms. However, in a notable pivot, Microsoft has extended ESU accessibility to all qualifying Windows 10 users, adding consumer-friendly enrollment methods that don’t require business affiliations or IT expertise. This article dissects the specifics of the ESU offer as reported by Ars Technica and confirms details through multiple independent sources, ensuring readers are equipped with actionable, trustworthy information.

Who Qualifies for the ESU Offer?​

Not every Windows 10 PC will be eligible for the free year of updates. Based on Microsoft’s documentation and firsthand reports:

• Devices must be running a supported edition of Windows 10 (primarily Home and Pro).
• The device needs to be updated to the latest available security and feature updates prior to the ESU enrollment deadline.
• Hardware must still meet minimum Windows 10 specifications and be capable of running current updates.

When the Windows 10 end-of-support nears, eligible users will automatically receive a prompt within the Windows Update section of Settings, stating that updates are ending soon and providing a direct "enroll now" link. Cross-verification with Microsoft’s official FAQ and multiple tech news outlets—including Tom’s Hardware and The Verge—confirms these conditions.

Step-by-Step: Enrolling in the ESU Program​

Navigating to Enrollment​

Upon opening the Windows Update settings, users on eligible PCs will be greeted by a status message. It explicitly highlights the approaching end-of-support date in October 2025, coupled with the actionable enrollment link. Clicking the link initiates the ESU enrollment workflow.

Microsoft Account Requirement​

A critical juncture in the process is authentication. Microsoft requires that every enrollment be tied to a Microsoft account. This isn’t just for tracking; it also enables backup and restoration features, should a PC be wiped or replaced.

• If you aren’t already signed in, the system will prompt for Microsoft account credentials.
• Signing in can be temporary: once the PC is successfully enrolled, users may sign back out if desired. However, each new PC or fresh installation mandates this authentication step anew.
• This applies across all three enrollment methods—free backup, points redemption, or one-time payment.

Multiple testers, including Ars Technica’s Andrew Cunningham, have confirmed this requirement, and Microsoft’s own guidance corroborates the process.

Three Ways to Get an ESU License​

Microsoft offers three distinct pathways to join the ESU program:

• Windows Backup App — The most seamless approach. By leveraging the Windows Backup app, users can enroll at no cost provided they allow the app to back up select settings, Windows app data, and user-designated folders to their Microsoft account. While Microsoft gifts every account 5GB of OneDrive storage for free, this cap only limits how much data can be backed up, not eligibility for ESUs.
• Microsoft Rewards Points — For those who actively participate in Microsoft’s rewards ecosystem, redeeming 1,000 points covers the ESU enrollment. Points are accumulated through Bing searches, Xbox purchases, or using Microsoft services.
• One-Time Fee — For maximum simplicity, a $30 payment (as of July 2025) unlocks another year of critical security updates for the device. Payment is swift and tied directly to the Microsoft account used at enrollment.

Firsthand accounts verify that previously using the Windows Backup app with a specific Microsoft account may restrict the user to only that method for subsequent enrollments. This detail is crucial for those hoping to toggle between free and paid options.

Completing Enrollment​

No matter the method chosen, clicking “Enroll” finalizes the process. Moments later, confirmation appears within Windows Update—officially stating that the PC is enrolled in the ESU program and will continue to receive vital security patches until at least October 2026.

What’s Really Included in Windows 10 ESU?​

It’s essential to clarify the scope and limitations of ESU. Here’s what is and isn’t part of the package:

Included:​

• Windows 10 Security Updates: Continued delivery of critical and important security patches, akin to what is currently received in regular "Patch Tuesday" updates.
• Microsoft Defender Antivirus Updates: Microsoft has publicly committed to providing antivirus definitions through Defender until at least 2028—a notable grace period well beyond the OS update window.
• Supported Microsoft Office Security Updates: Machines running supported versions of Microsoft Office (notably Office 2019 and O365) will continue to receive security patches until at least 2028.

All these claims have been substantiated via Microsoft’s lifecycle policy pages and reinforced by Windows Central’s reporting.

Not Included:​

• Feature Updates: No new features will debut for Windows 10. The platform remains static except for security and stability improvements.
• Non-Security Hotfixes: Only fixes for critical vulnerabilities will be distributed. Quality-of-life patches or minor bug fixes may be omitted.
• Non-Windows First-Party and Third-Party App Support: Third-party applications, especially browsers and productivity software, have their own support lifecycles. For instance, Google Chrome and Mozilla Firefox typically support OSes for up to a year after Microsoft ends support, but this isn’t guaranteed.

Strengths of the ESU Program​

Unprecedented Accessibility for Consumers​

Historically reserved for enterprise clients, ESU’s expansion to the general public marks a significant win for privacy-conscious and resource-constrained users. This democratized approach especially benefits:

• Individuals unable or unwilling to upgrade due to hardware incompatibilities with Windows 11.
• Organizations and educational bodies navigating budgetary or logistical barriers to upgrading thousands of machines.
• Technical enthusiasts or legacy software users needing prolonged stability for critical workflows.

Multiple, Flexible Pathways for Enrollment​

The trio of enrollment avenues—free, points-based, and paid—caters to a wide array of preferences and financial circumstances:

• The free Windows Backup method is virtually frictionless for those who have already engaged with Microsoft’s ecosystem.
• Redemption of Microsoft Rewards points offers value for those who consistently use Microsoft products and services.
• For small businesses or individuals preferring to avoid data backup, a reasonable flat payment is a minor cost in exchange for prolonged security.

Transparent and User-Friendly Process​

Unlike previous iterations of ESU for Windows 7, Win10’s program is deeply integrated into the OS. Users aren’t forced to navigate complex licensing portals or deploy cumbersome update scripts—enrollment is handled with a few clicks inside Settings. The real-time status indicator within Windows Update further bolsters confidence by confirming a successful registration.
These usability improvements are noted unanimously across reviews from Ars Technica, How-To Geek, and official Microsoft support documentation.

Extended Microsoft Defender and Office Support​

By pledging ongoing Defender antivirus updates and continued security for modern Office suites, Microsoft ensures the basic pillars of PC security and productivity remain intact for years beyond the OS’s official death date.

Potential Risks and Caveats​

Limited Guarantee Beyond Year One​

The biggest risk: the free ESU period explicitly covers only one additional year. Microsoft has made no public commitments regarding free support beyond October 2026. Users could find themselves facing a recurring annual fee, steeper licensing costs, or a sudden discontinuation of the ESU program altogether. Several analysts speculate that Microsoft may extend similar offers again, particularly if Windows 10’s installed base remains substantial, but this is speculative and unconfirmed.

Patch Quality and Compatibility​

Windows 10 patches released during ESU will be limited in number and scope. While security fixes are a lifeline, they may not address minor but disruptive bugs discovered after October 2025. Should significant compatibility issues arise—such as newly discovered hardware incompatibilities or emergent third-party vulnerabilities—affected users could be left with no recourse other than an OS upgrade.

Potential Privacy Trade-Offs for Free Backup Enrollment​

The free option relies on Microsoft’s Windows Backup app, which syncs select settings, credentials, and apps to a Microsoft account and OneDrive. For privacy-conscious users, this mandates careful scrutiny of what data is copied to the cloud. Microsoft asserts that only approved settings and folders are included, and these can be customized, but any cloud backup system carries inherent privacy risks. Users should review OneDrive’s privacy statement and manage settings to minimize data exposure.

Uncertain Third-Party Software Support​

Browser vendors, hardware manufacturers, and critical software developers rarely commit to indefinite Windows 10 compatibility. For example:

• Google Chrome has typically supported older versions of Windows for up to a year after Microsoft ends support, but final end dates vary.
• Adobe and other productivity tools may quietly deprecate support, leaving users exposed to unpatched vulnerabilities.

Maintaining security and usability on an out-of-support operating system still requires vigilance in monitoring and updating key third-party apps.

Microsoft Account Dependency​

Even with the “sign-out after enrolling” option, the ESU program essentially locks extended security into the Microsoft account ecosystem. Users opposed to cloud integration or those with strict anonymity requirements must weigh this carefully.

How to Check If Your Device Qualifies​

To confirm eligibility:

• Open the Settings app and navigate to Update & Security > Windows Update.
• Watch for a banner or alert regarding the end-of-support and ESU enrollment.
• If prompted, sign in with a Microsoft account.

If you see no ESU prompt, ensure your system is up to date. In rare cases, region or hardware-based rollout schedules may require patience; Microsoft is known to stagger major feature deployments.

Is Sticking With Windows 10 Worth It?​

For households and organizations heavily invested in existing Windows 10 setups, the ESU program offers significant breathing room. It buys extra time for budgeting and planning, defers costly hardware refreshes, and extends support for legacy apps that may not run smoothly on Windows 11.
However, the future remains uncertain. Windows 10 will not see further innovation, and the perennial security arms race with cybercriminals will only intensify as the OS ages. Users leveraging ESU must also commit to aggressive patching of non-Windows software and maintain robust backup regimens.

Alternatives: Exploring Other Paths​

As mainstream support recedes, some non-Microsoft options also warrant consideration:

• Linux distributions such as Ubuntu LTS or Linux Mint have become viable, user-friendly alternatives for those seeking ongoing updates without licensing costs.
• Chromebooks and other web-based platforms can serve as suitable replacements for simpler daily computing tasks.

For organizations, cloud-based Windows Virtual Desktops may offer a supported, secure off-ramp from local Windows 10 environments.

Conclusion: A Pragmatic Path with Eyes Open​

Microsoft’s consumer-friendly ESU program for Windows 10 represents a marked improvement in transparency and accessibility over previous support wind-downs. It provides a simple, low-friction option for staving off obsolescence, with a variety of enrollment methods catering to different needs. Still, users must understand its strict limitations: a finite support window, the absence of feature evolution, and ongoing third-party software headwinds.
Ultimately, for those who cannot—or choose not to—upgrade, leveraging the ESU program is a smart, cost-effective bridge. But prudent users should treat it as a temporary reprieve: time gained for planning a thoughtful, future-proof migration to a fully supported platform. Security, privacy, and adaptability must remain at the forefront, ensuring that when Windows 10’s sunset finally arrives, transitions are confident, deliberate, and disruption-free.

---

Source: Ars Technica How to get another free year of updates for your Windows 10 PC