Windows 10 ESU 2026: How to Extend Security Updates for One Year

Microsoft has cut the ribbon on a formal end to Windows 10 support — but for most home users Microsoft has also opened a short, tightly scoped lifeline: the consumer Extended Security Updates (ESU) program that can keep eligible Windows 10 PCs receiving security-only patches through October 13, 2026, with several free enrollment paths alongside a one-time paid option.

Background / Overview​

Windows 10’s mainstream servicing window closed on October 14, 2025. That date marks the end of routine feature, quality, and security updates for ordinary consumer Windows 10 Home/Pro devices unless a device is enrolled in an Extended Security Updates plan or falls into a qualifying cloud/enterprise scenario. The change is a lifecycle milestone — your PC won’t stop working — but it does mean that, left unpatched, Windows 10 devices will become progressively more vulnerable to newly discovered threats.
Microsoft designed a consumer ESU pathway as a one‑year bridge to give households and small operations time to migrate. ESU is explicitly narrow: it provides only security updates classified as Critical and Important by Microsoft’s security teams. ESU does not include new features, non‑security fixes, or full technical support. Coverage for consumer ESU extends until October 13, 2026.
This article summarizes the enrollment options, verifies key claims and dates with Microsoft’s documentation and independent reporting, and analyzes the benefits, technical prerequisites, privacy trade‑offs, and migration choices Windows 10 users now face. It includes step‑by‑step guidance for enrolling, practical caveats about the free options, and a realistic plan for what to do during the one‑year runway.

---

What ESU actually covers — and what it does not​

• What ESU provides: monthly security patches for vulnerabilities Microsoft deems Critical or Important for eligible Windows 10, version 22H2 devices. These updates are delivered through Windows Update once a device is enrolled.
• What ESU does not provide: feature updates, performance enhancements, normal quality/bug fixes outside security bulletins, or standard Microsoft phone/chat support for Windows 10 itself. ESU is a stopgap, not a substitute for ongoing platform servicing.
• Coverage window: consumer ESU runs through October 13, 2026; Microsoft 365 Apps (Office) will receive security updates on Windows 10 through October 10, 2028, but feature updates to Microsoft 365 Apps will stop sooner depending on update channel. These app‑support dates are separate from OS servicing and do not replace OS patches.

These are the load‑bearing facts every user must understand before deciding whether to enroll: ESU only buys time to prepare for a migration; it does not restore full vendor support.

---

Who is eligible (technical prerequisites)​

To enroll a consumer device, Microsoft’s published requirements are strict:

• The device must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Pro for Workstations). Older Windows 10 branches are not eligible.
• The device must have the latest servicing/cumulative updates applied (Microsoft pushed preparatory updates to enable the enrollment flow).
• The enrollment flow associates the ESU entitlement with a Microsoft Account (MSA). For consumer enrollment, you must sign into the PC with an MSA (local accounts are not eligible for the free account‑linked paths).
• Consumer ESU is not intended for domain‑joined, MDM‑enrolled corporate devices, or kiosk configurations (those should use commercial ESU channels through volume licensing).

If your device fails any of these checks, the in‑Windows “Enroll now” wizard will not appear. Microsoft staged the rollout (Insiders first), so the enrollment option may appear at different times on different machines.

---

How to enroll right now — step by step​

• Confirm your version: open Settings → System → About and verify you’re on Windows 10, version 22H2. Install all pending updates via Settings → Update & Security → Windows Update.
• Sign in with a Microsoft Account (MSA) that you control and make sure you’re an administrator on the device; if you use a local account, you’ll be prompted to sign in with an MSA during enrollment.
• Open Settings → Update & Security → Windows Update and look for the “Enroll now” or ESU enrollment prompt. Microsoft rolled this enrollment wizard out gradually; if you don’t see it immediately, check again after installing the required servicing updates.
• Choose your enrollment path from the three options presented (details below). Once enrolled, ESU security updates will be delivered through Windows Update. You can enroll up to 10 eligible devices per ESU license mapped to the same Microsoft Account.

This enrollment flow and those exact steps are described on Microsoft’s ESU documentation and support pages; they are the authoritative source for eligibility and how the entitlement is assigned.

---

The three consumer ESU enrollment options — verified​

Microsoft lists three distinct enrollment methods; each yields the same security entitlement but has different trade‑offs:

• Free cloud‑backed option: Sign in with an MSA and enable Windows Backup / “Sync your settings” (this uses OneDrive to back up settings). Microsoft maps the ESU entitlement to that MSA at no extra cash cost. This is the path many consumers will use. Caveat: if your OneDrive storage is insufficient you might need to buy more space to store backups; the free OneDrive tier is 5 GB.
• Microsoft Rewards option: Redeem 1,000 Microsoft Rewards points inside the ESU enrollment UI to claim ESU for the linked MSA. Points are earned by using Microsoft services (Bing searches, Microsoft Edge activities, Xbox/Store purchases, promotions). The enrollment flow handles redemption — you cannot redeem ESU points from the Rewards website directly. Expect this path to take time if you don’t already have points.
• Paid one‑time purchase: Pay a one‑time fee of $30 USD (or local currency equivalent, plus tax) to attach an ESU license to your MSA; that license can cover up to 10 eligible devices on that account. This is meant as a low‑cost insurance option for households that won’t use OneDrive or Rewards. Pricing may vary by market.

All three options provide the same security updates through October 13, 2026, and the enrollment choices are surfaced in the same in‑Windows wizard. Microsoft’s official pages and its Q&A threads confirm these mechanics.

---

Practical caveats: privacy, storage, and account lock‑ins​

• Microsoft Account requirement: The consumer ESU model ties entitlements to an MSA. If you avoid Microsoft accounts for privacy reasons, the consumer path will feel intrusive: free enrollment methods require an MSA and, in some territories, periodic sign‑ins to remain active. If you choose the paid route, you still must sign in with an MSA to enroll initially.
• OneDrive storage limits: The free backup method uses your OneDrive allocation. Microsoft’s basic free tier is 5 GB shared across OneDrive and other cloud needs; depending on what you choose to back up, that space can be insufficient and may trigger a paid OneDrive plan purchase. If you rely on the free path, check storage usage and plan accordingly.
• Microsoft Rewards practicality: Redeeming 1,000 points is a viable no‑cash option if you already use Microsoft services and have accumulated points. But Microsoft Rewards is not a quick cash substitute for everyone; earning the necessary points from scratch can take weeks or months depending on usage patterns. The rewards rate is modest.
• EEA / regional differences: In the European Economic Area some conditional requirements were relaxed following consumer‑rights pressure; Microsoft’s consumer pages and regional communications show minor variations in UI and the role of backups/Rewards in certain territories. Expect differences in how prompts are presented and whether OneDrive or Rewards are required in your region. Check your local Microsoft support page for exact language.

---

Microsoft 365 (Office) and other carve‑outs — what continues after Oct 14, 2025​

The OS and app lifecycles are separate. Microsoft confirmed that Microsoft 365 Apps running on Windows 10 will continue to receive security updates for three years after Windows 10’s end of support — through October 10, 2028 — but feature updates to Microsoft 365 Apps will be limited and tied to update channels with different cutoffs. In short: Office will keep getting security patches longer than the OS, but app updates and feature delivery are constrained and Microsoft will push Windows 11 for the full experience. These dates and behavior are spelled out on Microsoft’s support and Microsoft 365 pages.
That carve‑out helps reduce immediate risk for productivity tools, but it is not a substitute for OS‑level patches; unpatched OS primitives still matter for exploits that target kernel or driver vulnerabilities.

---

Can you upgrade to Windows 11 on older PCs — and should you attempt the workaround?​

Windows 11’s stricter hardware requirements (TPM 2.0, Secure Boot, minimum CPU lists) have left many otherwise serviceable PCs ineligible for an “official” upgrade. The community discovered and Microsoft documented a limited registry workaround (e.g., creating a MoSetup key like AllowUpgradesWithUnsupportedTPMOrCPU) that bypasses some compatibility checks for upgrades in place — but Microsoft’s stance is clear: such methods are unsupported, may block future updates, and can introduce stability or security risks. Independent outlets and community threads show the workaround exists and is used, but they also document that Microsoft may remove such guidance or refuse support for devices updated this way. If your device is eligible for a supported Windows 11 upgrade, that is the recommended path; if not, weigh ESU plus a planned hardware refresh against unsupported hacks.
In short: yes, people can and do install Windows 11 on unsupported systems, but Microsoft does not guarantee updates or support for those installs. Treat that route as experimental and risky for long‑term security.

---

Risk analysis — strengths and weaknesses of the consumer ESU approach​

Strengths​

• Real, time‑boxed protection: ESU gives a predictable one‑year security runway so individuals can plan upgrades, test Windows 11 compatibility, or budget hardware replacements — a pragmatic, low‑friction option for many households.
• Multiple enrollment paths: Microsoft’s inclusion of free routes (OneDrive backup or 1,000 Rewards points) reduces the immediate financial burden and broadens access.
• Simple UI flow: Enrollment appears in Settings → Windows Update, which minimizes technical barriers for typical users.

Weaknesses / risks​

• One‑year limit: ESU is not a long‑term support program for consumers. After Oct 13, 2026, devices not migrated to a supported OS will be exposed. Treat ESU as a runway, not a destination.
• Account and cloud trade‑offs: The free path requires an MSA and backing up settings to Microsoft cloud services — a real privacy and lock‑in concern for some users. If you rely on the free route, you must keep the same MSA signed in per Microsoft’s rules (and in some territories maintain sign‑ins on a scheduled cadence).
• Storage and cost surprises: OneDrive’s free 5 GB can be insufficient; users may find themselves paying for storage to satisfy the backup requirement if they want the free path.
• Inconsistent regional behavior: Regulatory pressure in the EEA produced concessions; other markets may see different UI flows or requirements, creating confusion. Confirm the process in your country before deciding.

---

A practical migration strategy — what to do during the ESU year​

• Enroll if you need time. If your device is ineligible for Windows 11 and you want to retain vendor security patches for another year, enroll promptly using the path that fits your privacy and cost tolerance. ESU delays exposure and buys deterministic planning time.
• Back up everything independently. Create a full disk image and offline backups (external drive or alternate cloud) before you change accounts or perform upgrades. OneDrive backups are convenient, but do not rely on a single cloud copy.
• Test upgrade paths. Use the ESU year to:
• Test Windows 11 compatibility (Windows PC Health Check and vendor driver updates).
• Try clean installs or migration to a fresh PC if hardware prevents supported upgrades.
• Evaluate alternative OSes (Linux distributions, ChromeOS Flex) if a Windows 11 upgrade is impractical.
• Plan hardware refreshes deliberately. Use the one‑year window to compare refurbished Windows 11‑compatible devices, manufacturer trade‑ins, and vendor discounts; the ESU year is the budgetary breathing room to avoid rushed, wasteful replacements.
• Review privacy posture. If the MSA/OneDrive path is a non‑starter for you, either accept the $30 route (which still requires an MSA to enroll) or consider non‑Windows options before ESU expires.

---

Quick technical checklist (copy/paste)​

• Confirm Windows 10 version: 22H2.
• Install all pending cumulative and servicing updates.
• Sign in with a Microsoft Account (MSA) and ensure device administrator rights.
• Open Settings → Update & Security → Windows Update and click Enroll now when the ESU prompt appears.
• Choose one enrollment path: Windows Backup (free), Redeem 1,000 Microsoft Rewards points (free if you have points), or pay $30 one‑time.
• Verify ESU enrollment status and ensure Windows Update is delivering security updates.
• Make offline backups and start migration planning immediately.

---

What reporters and outlets are saying — short verification note​

Independent outlets and major tech press confirmed Microsoft’s dates and the ESU enrollment mechanics. Publications noted the MSA requirement, the OneDrive free‑storage caveat, the Rewards redemption option, and that ESU is security‑only and limited to one year — all claims that match Microsoft’s own documentation. The PCMag coverage that circulated the free‑option headlines is consistent with Microsoft’s published ESU guidance and rollout messaging.

---

Final verdict — who should enroll, and why​

• You should enroll if your PC cannot legally or practically upgrade to Windows 11 (TPM/CPU restrictions) and you need a predictable security window to migrate. ESU is inexpensive and lowers immediate attack surface risk.
• Consider paying $30 if you cannot or will not keep a Microsoft Account sign‑in or if the OneDrive free tier is not acceptable and you don’t have Rewards points. The paid option still maps to an MSA but removes the need to keep certain cloud‑sync settings active afterward.
• Reconsider remaining on Windows 10 long term. ESU buys a year. Use it to upgrade, migrate, or replace hardware — don’t treat it as a license to procrastinate indefinitely. The security and compliance risks increase with time.

---

Microsoft closed a chapter by ending Windows 10 mainstream updates, but it quietly shipped a time‑boxed consumer safety net that is practical, low cost, and in many cases free — provided you accept the account and cloud trade‑offs. The choice now is pragmatic: enroll to buy time and migrate deliberately, or accept increasing exposure. The clock is running; if you plan to stay on Windows 10 for a while longer, the measured, documented path is to enroll in ESU and use the year to move to a supported platform.

---

Source: PCMag Australia Microsoft Killed Off Windows 10 Support. Here's How to Get It Free for Another Year

 

[ChatGPT]

Microsoft’s decade-long maintenance cycle for Windows 10 has reached a formal endpoint — but Microsoft has provided a narrowly scoped, one‑year lifeline that lets eligible consumer machines receive security‑only updates through October 13, 2026, and for many home users that extra year can be claimed without spending cash by enrolling through Windows itself using OneDrive backup or Microsoft Rewards points (a paid one‑time purchase is also available).

Background / Overview​

Windows 10’s official end‑of‑support (EOL) date for mainstream consumer servicing was set by Microsoft as October 14, 2025. After that date standard monthly cumulative updates, non‑security quality fixes, new features, and routine Microsoft technical support for consumer editions stopped unless a device is enrolled in an approved Extended Security Updates (ESU) program. That hard lifecycle cutoff does not “brick” existing installations — devices continue to run — but it does remove the vendor patch stream that closes newly discovered kernel, driver and other platform vulnerabilities.
To blunt immediate exposure, Microsoft published a consumer ESU pathway that is intentionally narrow in scope: it provides security‑only updates classified by Microsoft as Critical or Important for eligible Windows 10 versions through October 13, 2026. The consumer ESU is a single‑year bridge, not an open‑ended support program. It’s designed to buy time for households and individuals to migrate to Windows 11, replace older hardware, or move to alternate platforms.
Why this matters: many homes and small organizations still run Windows 10 and cannot or will not move immediately to Windows 11 — frequently because hardware doesn’t meet Windows 11’s TPM, Secure Boot, or CPU requirements — and an unsupported OS substantially raises the risk of ransomware and other high‑severity attacks. Security agencies and industry trackers repeatedly warn that unsupported platforms become attractive targets over time as unpatched vulnerabilities accumulate.

---

What Microsoft is offering: the consumer ESU options explained​

Microsoft designed three consumer enrollment methods that provide the identical ESU entitlement (security updates through Oct 13, 2026). The choice you make affects privacy, convenience, and whether you pay money.

• Free via Windows Backup (OneDrive): Sign into Windows with a Microsoft Account (MSA) and enable Windows Backup / “Sync your settings” so the device’s backup and settings are linked to the MSA. Microsoft maps the ESU entitlement to that account at no cash cost. This is the most commonly cited free route.
• Free via Microsoft Rewards: Redeem 1,000 Microsoft Rewards points and apply them to the Microsoft Account used on the device. If you already have points or can earn them quickly (Bing searches, daily sets, Edge/Bing use), this can also be a no‑cash option.
• Paid one‑time purchase: Buy an ESU license for approximately $30 USD (local equivalents apply) that ties the entitlement to your Microsoft Account. The paid license is convenient for people who don’t want to enable cloud backup or who prefer an outright purchase; Microsoft’s consumer guidance shows the purchase can apply to multiple devices tied to the same MSA within published limits.

All three methods yield the same outcome: enrolled devices will receive security‑only updates (no feature updates, non‑security bug fixes, or regular tech support) through October 13, 2026. Treat ESU as a short planning window rather than a new long‑term servicing model.

---

Who is eligible and how to enroll — a step‑by‑step checklist​

Eligibility is deliberately specific. Confirm these “load‑bearing” items before attempting enrollment:

• Windows edition and version: Device must be running Windows 10, version 22H2 (consumer SKUs such as Home, Pro, Pro Education, and Pro for Workstations are in scope). Machines on earlier Windows 10 feature updates must first upgrade to 22H2.
• Fully patched servicing state: Install all pending cumulative and servicing‑stack updates — Microsoft released preparatory updates in mid‑2025 to enable the enrollment flow, and a fix in the August 2025 cumulative (KB5063709) patched enrollment wizard issues for some users. If you have outstanding updates, the enrollment link may not appear.
• Microsoft Account: Enrollment — even if you choose to pay — is tied to a Microsoft Account. Local/offline Windows accounts are not eligible for consumer ESU enrollment. Administrator privileges are required on the device at enrollment.
• Not enterprise‑managed: Domain‑joined, MDM‑managed, kiosk, and enterprise images should use commercial ESU channels (volume licensing) rather than the consumer path. The consumer ESU is intended for individuals and households.

How to enroll (practical steps):

• Update Windows: Settings → Update & Security → Windows Update → Check for updates. Install any offered updates and confirm the system build matches the expected 22H2 servicing level (install KB5063709 if offered).
• Sign in with a Microsoft Account: If your device uses a local account, switch to an MSA (Settings → Accounts → Sign in with a Microsoft account). Administrator rights are required for enrollment.
• Find the Enrollment UI: In Settings → Update & Security → Windows Update look for an “Enroll now” link or an “Enroll in Extended Security Updates” notice in the right‑hand pane. The rollout was staged; if you don’t see it immediately, make sure updates are installed and check again after a reboot.
• Choose your method: Follow the in‑product wizard to enable Windows Backup (OneDrive), to redeem Microsoft Rewards points, or to purchase the one‑time ESU license. Once the MSA is assigned an ESU entitlement, eligible devices linked to that account will receive the security updates.

If the enrollment wizard crashes or the UI does not appear, Microsoft and multiple outlets flagged KB5063709 as the fix; installing that cumulative update (and the latest SSU) usually resolves enrollment glitches. If you’ve installed the update and still don’t see the wizard, the staged rollout may not have reached your device yet.

---

Practical trade‑offs: what ESU does and does not give you​

ESU is explicitly security‑only. It covers critical and important CVEs that Microsoft decides to patch for covered platforms but excludes:

• New feature development or functional enhancements
• Non‑security quality fixes and usability improvements
• General technical support and troubleshooting from Microsoft

This means ESU reduces immediate exposure to newly discovered, high‑severity threats — exactly the kind of fixes that often prevent ransomware and kernel‑level exploits — but it does not stop a device from gradually falling behind in compatibility, driver support, or feature parity. Use the ESU year as a planning runway, not a reason to delay indefinitely.
Privacy and storage trade‑offs for the free OneDrive path

• The free OneDrive enrollment route requires you to enable Windows Backup and sync settings to a Microsoft Account. Microsoft ties the ESU entitlement to that account. OneDrive includes a 5 GB free tier; if your backup needs exceed that, you may face additional storage charges. Consider local backups and selective cloud sync to limit storage use and exposure.
• If you prefer privacy or refuse cloud‑backups, the paid purchase or Rewards redemption are alternatives — but both still require a Microsoft Account. Be wary of third‑party resellers offering to sell ESU unlocks or point redemptions; use official Microsoft channels only.

Technical stability and future updates

• Using unofficial workarounds to install Windows 11 (tools that bypass secure‑boot/TPM checks) may temporarily allow Windows 11 upgrades on older hardware, but Microsoft does not support those configurations and future updates may fail or produce unpredictable stability problems. ESU avoids those support and stability risks by keeping the device on a supported Windows 10 security track for one year.

---

Regional nuance and regulatory pushback​

Microsoft adjusted the consumer flow in some regions after feedback. European Economic Area (EEA) consumers, for example, received modified options to address privacy concerns: EEA users can obtain ESU with fewer cloud‑tie constraints by periodically re‑authenticating their Microsoft Account rather than continuously using Windows Backup, according to reporting and regional guidance. This produced a practical two‑tier experience for consumers around the world, driven partly by local privacy rules. If you live in the EEA check your regional Microsoft documentation and the Settings wizard for the exact enrollment prompts you’ll see.

---

What this means for Microsoft 365 and Office users​

Microsoft clarified that Microsoft 365 Apps (Office) and certain application‑level security components (for example, Microsoft Defender security intelligence updates) will receive separate servicing for a limited period beyond Windows 10’s EOL. That continuity helps preserve functionality for productivity apps, but it is not a substitute for OS‑level fixes — a vulnerable kernel or driver remains exploitable even if Office apps and Defender definitions continue to receive updates. Organizations and households relying on Windows 10 should therefore treat app servicing as partial mitigation only.

---

Enterprise vs. consumer ESU: different channels and durations​

Businesses have long had ESU as a managed option available through Volume Licensing or Cloud Service Providers, where it can be bought and renewed for up to three years with tiered pricing. The consumer ESU is intentionally different: it is an account‑centric, one‑year program that Microsoft structured to be simple to access for households and individuals — but with explicit exclusions for domain‑joined and MDM‑managed devices. If you manage a fleet, the enterprise ESU channels remain the correct route, and pricing/renewal terms differ.

---

Security recommendations and a migration plan (what to do now)​

Treat ESU as a planning window and use the time to migrate safely. Practical steps, in priority order:

• Back up everything: Full disk image plus separate copies of irreplaceable files. Store at least one local copy (external drive) and one cloud copy if you choose. Don’t rely on ESU or OneDrive alone for disaster recovery.
• Confirm eligibility and enroll if you plan to stay on Windows 10 during the ESU year: Verify you’re on Windows 10 version 22H2, install all pending cumulative updates (including KB5063709 if applicable), sign in with a Microsoft Account, then check Settings → Update & Security → Windows Update for the “Enroll now” flow.
• Use the ESU year to migrate: Evaluate whether your device can upgrade to Windows 11 (TPM 2.0, Secure Boot, CPU requirements) or whether a hardware refresh makes more sense. For older devices, budget replacements over the ESU year to avoid being unsupported after Oct 13, 2026.
• Harden the device: Use layered defenses — modern browsers, strong antimalware, enable firewall rules, remove unneeded services, and minimize administrative usage. Patch third‑party apps aggressively; many breaches exploit application vulnerabilities, not just OS holes.
• Consider alternatives: If hardware or policy prevents upgrading, investigate Linux distributions, Chromebooks, or cloud‑hosted Windows (Windows 365) for longer‑term options. ESU gives you the breathing room to test and implement an alternative safely.

---

Notable strengths of Microsoft’s consumer ESU approach — and the risks​

Strengths

• Rapid, in‑product enrollment lowers the bar for non‑technical users to obtain critical security updates for a year. The OneDrive and Rewards routes give flexible no‑cash options for households.
• The single‑year limit aligns incentives: ESU is priced and structured to be a bridge, encouraging migration rather than indefinite extension. This benefits ecosystem evolution while managing Microsoft’s security investment.
• The staged rollout and preparatory fixes (e.g., KB5063709) show Microsoft responded to early deployment bugs and aimed to stabilize the consumer enrollment experience.

Risks and caveats

• Privacy trade‑offs: the free OneDrive route requires account linkage and cloud backup. For privacy‑sensitive users or those who cannot or will not create an MSA, the options are constrained — and even paid enrollment requires an MSA.
• Single year only: ESU is strictly time‑boxed to October 13, 2026 for consumers. Households that treat ESU as a permanent fix will face unsupported systems and rising security and compatibility risk after that date.
• Coverage limits: ESU does not include non‑security fixes or technical support. Some stability and compatibility issues that appear during the ESU year may lack vendor fixes if Microsoft classifies them as non‑security.
• Rollout inconsistency: Some users reported enrollment glitchiness despite meeting prerequisites — Microsoft fixed many of those issues but the staged rollout meant some experienced delays. If the enrollment link is not visible, ensure updates are current, then wait; don’t resort to unofficial workarounds.

---

Frequently asked practical questions (short answers)​

• If I enable Windows Backup / OneDrive for ESU, do I have to pay for OneDrive storage?
  You only need to enable settings sync; OneDrive’s free 5 GB tier may be enough for settings and small file backups, but if you back up large profiles or folders you may hit the 5 GB limit and need paid storage. Plan local backups to avoid surprise costs.
• Can I use ESU on domain‑joined PCs or corporate devices?
  No. Domain‑joined, MDM‑managed, or enterprise fleets should use the commercial ESU channels through Volume Licensing; the consumer flow is for personal devices.
• What if I don’t see “Enroll now” in Windows Update?
  Install all pending cumulative and servicing‑stack updates (KB5063709 addressed reported enrollment crashes), confirm you’re on 22H2 and signed in with an MSA, then wait: Microsoft’s rollout is staged. If problems persist, use Microsoft’s support channels or the Microsoft Update Catalog to manually apply missing updates.

---

Bottom line: how to use the ESU year responsibly​

The consumer Extended Security Updates program is a pragmatic, time‑boxed concession: Microsoft gives many households an extra year of vendor‑issued security patches to avoid an immediate security cliff after October 14, 2025. If you qualify and aren’t ready to upgrade, enroll via the in‑Windows wizard and pick the option that matches your privacy and cost preferences — Windows Backup/OneDrive for no cash, Microsoft Rewards if you have points, or the modest paid one‑time license. Use the extra year to back up your data, evaluate upgrade or replacement options, and execute a migration plan so you are not left on an unsupported platform when the ESU window closes on October 13, 2026.
This lifeline is real and useful — but it is not a permanent fix. Plan, patch, and migrate deliberately: ESU buys planning time, not permanence.

---

Source: findarticles.com Windows 10 Support Has Ended: How to Get a Free Year