Windows 10 ESU: Free One-Year Security Updates Through Oct 2026

Background / Overview​

• End of standard Windows 10 consumer support: October 14, 2025.
• Consumer ESU coverage window (if enrolled): through October 13, 2026.
• Eligibility baseline: device must run Windows 10, version 22H2 and have required cumulative and servicing stack updates installed.
• Enrollment options: free (cloud‑backed via Windows Backup and a Microsoft Account), 1,000 Microsoft Rewards points, or a one‑time paid purchase (≈ $30 USD) that can cover multiple devices tied to the same Microsoft Account.

What “extend Windows 10 support for free instantly” actually means​

• “Instant” applies when a PC already meets every prerequisite: it’s running 22H2, has the required cumulative/servicing updates applied, an administrator is signed in with a Microsoft Account (MSA), and Windows Backup (settings sync) is enabled in markets where Microsoft requires it. Under those conditions the in‑OS wizard often enrolls the device in minutes.
• If any prerequisite is missing, the wizard may not appear until updates are applied or the staged rollout reaches the device. Early rollout notes explicitly called out an August 2025 cumulative update that prepares systems for enrollment; without it you may not see the option.

Step‑by‑step: Claim the free ESU pathway (what to check and how to enroll)​

• Confirm your Windows 10 build
• Open Settings → System → About and verify you are on Windows 10, version 22H2. Devices on older Windows 10 feature updates are not eligible until upgraded to 22H2.
• Install all pending Windows updates (LCUs and SSUs)
• Open Settings → Update & Security → Windows Update and install outstanding cumulative and servicing stack updates. Microsoft’s enrollment flow requires specific updates to be present for the wizard to appear reliably (reports referenced an August 2025 cumulative update that shipped preparatory fixes).
• Sign in with a Microsoft Account (MSA)
• If you use a local Windows account, either add a Microsoft Account as an administrator or sign in temporarily with an MSA. The free cloud‑backed path ties the ESU entitlement to an MSA. Note: the MSA used for enrollment must have administrator privileges on the device.
• Enable Windows Backup / Sync your settings (in most markets)
• Open Settings → Accounts → Windows backup (or Sync your settings) and enable the toggle to sync to OneDrive. In many regions Microsoft uses this linkage as the free trigger for consumer ESU. If you’re in the European Economic Area (EEA), Microsoft relaxed this requirement after regulatory pressure; EEA residents may be able to enroll without enabling backup, but still must authenticate with an MSA periodically.
• Open Windows Update and follow the enrollment flow
• Go to Settings → Update & Security → Windows Update. If prerequisites are satisfied and your PC has reached the staged rollout, you should see an “Enroll now” option. Follow the wizard and choose the free backup option. The wizard completes online and maps the ESU entitlement to your Microsoft Account.
• Verify entitlement after enrollment
• Confirm your device appears under your Microsoft Account’s registered devices and that Windows Update shows ESU eligibility. Test that a subsequent security update installs by checking Update History. Keep the Microsoft Account signed in periodically where required to maintain the entitlement.

Technical prerequisites and a brief verification of key numbers​

• Required OS: Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation). Devices on other versions are ineligible until upgraded.
• Coverage period if enrolled: security updates through October 13, 2026.
• Enrollment options: free via Windows Backup + MSA, Microsoft Rewards (1,000 points), or paid one‑time purchase (~$30 USD). Each route yields the same security‑only coverage for the ESU window.
• Important update referenced during rollout: an August 2025 cumulative (commonly referenced as KB5063709 in reporting) was highlighted as required or strongly recommended to ensure the enrollment prompt appears reliably; confirm that applicable cumulative and servicing stack updates from mid‑2025 are applied. If your machine lacks the relevant cumulative/SSU it may not see the enrollment option.

Regional differences and account / privacy implications​

• The free route commonly requires enabling cloud settings sync to OneDrive, which will store some device settings and metadata in Microsoft’s cloud. For users who avoid cloud accounts for privacy reasons, redeeming Microsoft Rewards points or paying the one‑time purchase are alternatives, but both require a Microsoft Account.
• Microsoft has stated that periodic sign‑in checks may be required to maintain ESU entitlements in some regions; an inactive MSA could cause loss of entitlement until re‑authentication. Keep that in mind if you enroll and later stop using the account frequently.

What ESU does — and crucially, what it does not do​

• Security‑only updates classified as Critical and Important. It mitigates newly discovered vulnerabilities during the ESU window.

• No feature updates or new functionality.
• No non‑security quality fixes or general technical support.
• No permanent solution; consumer ESU coverage is time‑boxed to one year (through Oct. 13, 2026).

Practical risks, limitations, and reasons to proceed cautiously​

• Account‑and‑cloud tie‑ins: the no‑cost path normally requires a Microsoft Account and enabling cloud sync. For privacy‑conscious users, this is a meaningful trade‑off; for others, it’s acceptable. The EEA concession reduces that pain for some users but does not remove MSA authentication entirely.
• Short window and one‑year limit: the consumer ESU is explicitly a one‑year lifeline. Planning to rely on ESU repeatedly is neither intended nor practical. Use the time to migrate to Windows 11 (if possible), replace hardware, or move to an alternative.
• Staged rollout and enrollment bugs: early reports highlighted phased availability and occasional enrollment wizard bugs. Don’t wait until the last minute — enroll early once you meet prerequisites to avoid rollout delays.
• Unsupported hardware and compatibility: ESU doesn’t change Windows 11 hardware requirements. If your PC is blocked from upgrading to Windows 11 by CPU/TPM restrictions, ESU keeps the device secure for one year but doesn’t address the longer‑term compatibility and app compatibility question. Consider whether replacement hardware or alternative OS options are better for your use case.
• Operational overhead for multi‑device households and small offices: while the paid ESU license can cover multiple devices tied to the same MSA, tracking which machines are enrolled versus which will be upgraded or retired requires an operational plan. Document enrollments and test that updates actually install post‑enrollment.

• Some early online claims described unofficial registry hacks or “workarounds” that let unsupported machines keep receiving updates indefinitely. Those approaches are not sanctioned, may break Windows Update, and carry security and stability risks; they are not a substitute for ESU or migration. Treat such claims with caution and do not rely on them. This reporting is separate from Microsoft’s official ESU options and should be considered unverifiable and risky.

Troubleshooting: The enrollment wizard didn’t appear — what to do​

• Confirm you are on Windows 10, version 22H2. If not, run the Feature Update to move to 22H2.
• Run Windows Update repeatedly until no pending LCUs/SSUs remain; look for the mid‑2025 cumulative that rollout notes referenced. Reboot after installing updates.
• Ensure an administrator is signed in with a Microsoft Account. For free enrollment in most markets you must enable Windows Backup (Settings → Accounts → Windows backup). In the EEA the backup requirement may be relaxed, but an MSA still matters.
• If the in‑OS wizard still never appears, consider redeeming 1,000 Microsoft Rewards points if you have them, or purchase the one‑time license inside Settings to assign ESU to your MSA. Doing so avoids waiting for the staged rollout to reach your device.
• After enrollment, verify Update History to ensure recent security updates installed. If updates fail to install post‑enrollment, check known Windows Update troubleshooting steps (SSU/cumulative reinstall, DISM, SFC) and retry enrollment steps if necessary.

Alternatives and migration options to plan during the ESU year​

• Upgrade eligible machines to Windows 11 if hardware is compatible. Use the PC Health Check and test mission‑critical apps on Windows 11 before migration.
• Replace aging or incompatible hardware. Trade‑in and mid‑cycle refresh programs can reduce net costs for households and small businesses.
• Migrate to an alternative OS such as Linux or ChromeOS Flex on older hardware; for web‑centric use cases these are viable and secure long‑term choices.
• Virtualize legacy workloads in the cloud (Windows 365, Azure Virtual Desktop) to preserve compatibility while standardizing endpoint OS images on modern platforms.
• For small businesses, evaluate commercial ESU/licensing options that may extend coverage for multiple years through enterprise channels (pricing and terms differ from consumer ESU).

Recommended checklist: act now, use ESU wisely​

• Confirm Windows build = 22H2.
• Fully install pending cumulative and servicing stack updates (reboot afterward).
• Sign in with an administrator Microsoft Account.
• Enable Windows Backup / Sync (unless you’re in an EEA jurisdiction where backup isn’t required for free enrollment).
• Open Settings → Update & Security → Windows Update and enroll when the prompt appears.
• Verify that security updates install post‑enrollment by checking Update History.
• Use the ESU year to plan and complete migration to a modern, supported platform — ESU is a bridge, not a destination.

Final analysis: strengths, trade‑offs, and the practical bottom line​

• It ties short‑term support to a Microsoft Account and — in many markets — to cloud backup, prompting privacy and lock‑in questions.
• It is explicitly time‑boxed to one year for consumers, compelling users to plan migration rather than delay indefinitely.
• The rollout was staged and not instantaneous for every eligible PC; housekeeping (updates, SSUs) must be current to see the prompt.

Background / Overview​

What the consumer ESU program actually is​

The essentials, clarified​

• Coverage window for consumer ESU: security updates through October 13, 2026 for devices successfully enrolled.
• What ESU delivers: Critical and Important security fixes as classified by Microsoft — no feature packs, no general support.
• How Microsoft surfaces enrollment: a staged in‑OS enrollment wizard appears under Settings → Update & Security → Windows Update (look for an Enroll now link). The wizard checks eligibility and walks you through enrollment.

Three consumer enrollment routes​

• Free cloud‑backed route — sign in with a Microsoft Account (MSA) and enable Windows Backup / Sync your settings (OneDrive) on the device. This is the most common free pathway.
• Microsoft Rewards route — redeem 1,000 Microsoft Rewards points to claim ESU for the account.
• Paid route — a one‑time purchase (reported at roughly $30 USD or local equivalent) that ties ESU to a Microsoft Account and may cover multiple devices linked to that account. Local pricing and taxation can vary.

Who is eligible (technical prerequisites)​

• The device is running Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation). Devices on older Windows 10 feature updates are not eligible until they are updated to 22H2.
• All required cumulative updates and servicing stack updates (SSUs) are installed. Early rollout notes pointed to specific mid‑2025 cumulative fixes that prepare systems for enrollment — if those updates are missing, the wizard may not appear. Reported preparatory patch references include the August 2025 cumulative (some reports referenced KB identifiers in rollout notes).
• You must sign into the device with a Microsoft Account (MSA) for the free/cloud or Rewards routes; a local account alone will not enroll. The account used should have administrator privileges on the PC.
• This consumer ESU flow is for non‑managed, consumer PCs. Domain‑joined or enterprise‑managed machines must use enterprise ESU channels through IT.

Step‑by‑step: How to claim the free, “instant” extension (practical checklist)​

• Confirm your Windows 10 build:
• Open Settings → System → About and verify Windows 10, version 22H2. If not on 22H2, apply the feature update before proceeding.
• Install all pending updates:
• Open Settings → Update & Security → Windows Update and install outstanding cumulative updates and servicing stack updates (SSUs). Some preparatory updates shipped in mid‑2025 to enable the wizard; install everything available and reboot.
• Sign in with a Microsoft Account (MSA):
• If your PC uses a local account, add or sign in with an MSA that has administrator rights. The free path requires an MSA to map the ESU entitlement.
• Enable Windows Backup / Sync your settings (for the free route):
• Go to Settings → Accounts → Windows backup (or the “Sync your settings” control) and turn on the backup/sync option to OneDrive. In most markets this is the free trigger.
• Open Settings → Update & Security → Windows Update and look for Enroll now:
• If the device meets prerequisites and Microsoft’s phased rollout has reached your machine, you’ll see an Enroll now link or a prompt. Click it and follow the wizard to choose the free path, redeem Rewards, or purchase the one‑time license.
• Verify entitlement:
• After enrollment, Windows Update should continue to deliver ESU security patches; the device may be listed under your Microsoft Account device registration. If you used the free path, keep the MSA signed in periodically to avoid entitlement lapses in some regions.

Troubleshooting: When “Enroll now” doesn’t appear​

• Reboot after installing updates; some servicing stack updates require a restart.
• Confirm you’re on 22H2. Machines on older features won’t be offered ESU until upgraded.
• If you use a local account, sign in with an MSA that has admin rights and enable Windows Backup.
• Enrollment rollout was staged — Insider Preview devices saw the UI first. Wait a few days if you’re sure prerequisites are met.
• If the wizard shows errors, check Windows Update history for failed updates and install servicing stack updates manually using the Microsoft Update Catalog if necessary. This is advanced troubleshooting; back up before making manual changes.

Regional differences and privacy implications​

Security, risk, and realistic expectations​

• ESU covers only security fixes Microsoft classifies as Critical or Important; it does not replace driver updates, full compatibility testing, or feature improvements that often mitigate security exposure over time.
• Running Windows 10 after October 14, 2025 without ESU increases exposure to new, unpatched vulnerabilities; this matters especially for devices used for sensitive work, online banking, or managed network access.
• ESU is time‑boxed and available only through October 13, 2026 for consumer devices; plan to migrate or upgrade within that year. Using ESU as a permanent strategy is a mistake.

Alternatives and practical decision matrix​

• Upgrade to Windows 11 if your PC meets Microsoft’s requirements. Microsoft offers a PC Health Check tool to check compatibility; upgrading is the cleanest option to remain on a supported platform.
• Buy a new PC. Even budget laptops today often outperform mid‑range models from 5–7 years ago and come with Windows 11 preinstalled.
• Migrate to a supported alternative OS (some users choose Linux distributions for older hardware) — this requires testing app compatibility and comfort with a different ecosystem.

• If eligible and you want minimal disruption, enroll in ESU and use the year to migrate.
• If eligible for Windows 11 and you value staying current, upgrade to Windows 11.
• If device is old or unsupported by Windows 11, consider replacement hardware or an alternative OS.

Stepwise action plan — what to do today (immediately)​

• Back up your files to an independent location (external drive, cloud service other than your Windows backup if you prefer). Don’t rely solely on the ESU enrollment flow to protect data.
• Confirm Windows build: Settings → System → About → ensure 22H2.
• Install all pending Windows updates and reboot.
• Sign into a Microsoft Account (MSA) with admin rights. Enable Windows Backup if you’re comfortable using the free path.
• Open Settings → Update & Security → Windows Update and click Enroll now if present; follow the wizard. If the option isn’t visible, wait a day and check again.

Strengths, weaknesses, and the broader implications​

Strengths​

• The consumer ESU gives households a concrete, low‑friction option to receive critical security patches for one more year — often claimable inside Windows without cost. This reduces immediate mass‑exposure risk after the October 2025 cutoff.

Weaknesses and risks​

• The extension is short (one year) and narrow (security‑only). Relying on it long term is risky.
• The free route’s reliance on a Microsoft Account and, in many markets, on Windows Backup/OneDrive raises privacy and telemetry concerns for some users. EEA concessions reduce this tension locally, but global mechanics remain mixed.
• The staged rollout and prerequisite updates mean “instant” enrollment is conditional; not everyone will see the wizard immediately.

Broader implications​

• The ESU program highlights the tension between lifecycle management, consumer choice, and environmental concerns about premature hardware replacement. Consumer groups successfully pressed Microsoft for regional adjustments, demonstrating regulatory leverage on marketplace practices.

Final recommendations​

• Act now: verify your device is on Windows 10, version 22H2, install all updates, sign in with an MSA, and check Settings → Update & Security → Windows Update for Enroll now. This is the fastest route to claim the ESU year if you plan to stay on Windows 10 briefly.
• Use ESU time intentionally: treat the extra year as breathing room to test app compatibility, migrate data, and plan a move to Windows 11 or new hardware before October 13, 2026.
• If you’re privacy‑sensitive and in the EEA, investigate the region’s adjusted enrollment terms; they reduce some cloud‑binding requirements. Outside the EEA, weigh the privacy trade‑offs of enabling Windows Backup vs. paying a one‑time fee or using Rewards points.

How to extend Windows 10 support for free — the reality behind the “instant” headlines​

• Microsoft’s consumer Extended Security Updates (ESU) program gives eligible Windows 10 PCs one extra year of security-only updates (covering critical and important fixes) through October 13, 2026 — and many consumers can claim that year at no cash cost by following an in‑Windows enrollment flow. Confirm your device is on Windows 10 version 22H2, fully updated, and signed into a Microsoft Account; then check Settings → Update & Security → Windows Update for the “Enroll now” / extended updates wizard.

Why this matters (dates and what “support” means)​

• Microsoft’s published end‑of‑support date for Windows 10 is October 14, 2025. After that date Microsoft stops issuing the routine monthly security/quality updates and general technical support for consumer editions — unless the device is enrolled in an extension path.
• The consumer ESU option Microsoft published provides security‑only updates for enrolled devices for one additional year: coverage runs through October 13, 2026. ESU is explicitly security‑only: it does not include feature updates, non‑security fixes, or general technical support.

The claim: “Extend Windows 10 support for free instantly” — what it actually means​

• Microsoft offers a one‑year ESU pathway that many consumers can claim without paying money (free options exist).
• The “instant” part is true for many eligible PCs (the enrollment wizard inside Settings can attach the ESU entitlement to your Microsoft Account in minutes), but only after a few prerequisites are met and after Microsoft’s staged rollout reaches your device. If your PC misses prerequisites (Windows 10 version, recent cumulative updates, etc.) or you haven’t seen the enrollment wizard yet, it won’t be instantaneous.

Who is eligible (short checklist)​

• Windows edition: Consumer Windows 10 editions (Home, Pro, Pro Education, Workstation) running Windows 10, version 22H2.
• Updates: The device must have the required cumulative/servicing‑stack updates installed (Microsoft shipped preparatory updates in mid‑2025 that enabled the enrollment flow). If you don’t have those, the wizard may not appear.
• Account: Enrollment is tied to a Microsoft Account (MSA). For the free cloud-backed route you sign into Windows with an MSA to claim the ESU license. (There are alternative enrollment routes described below.)

The three consumer enrollment options (one of them can be free)​

• Free cloud‑backed route: Sign into Windows with a Microsoft Account and enable Windows Backup / “Sync your settings” (Windows Backup to OneDrive). Microsoft treats this as the no‑cash free route and maps the ESU entitlement to your Microsoft Account. This is the route many “free instantly” headlines refer to.
• Microsoft Rewards route: Redeem 1,000 Microsoft Rewards points and apply them to enroll the Microsoft Account in ESU (no money required if you already have points).
• Paid route: A one‑time consumer purchase (roughly $30 USD or local equivalent) assigns an ESU license to your Microsoft Account — useful for people who don’t want to sign into cloud backup. One purchased consumer ESU license can often be assigned to multiple eligible devices tied to the same MSA (Microsoft’s consumer guidance limits and re‑use rules apply).

Regional nuance: Europe (EEA) vs other markets​

• In response to pressure from European consumer groups and regulators, Microsoft adjusted the consumer ESU rules for the European Economic Area (EEA). For EEA residents Microsoft removed the mandatory Windows Backup requirement for the free EEA path; EEA consumers still need a Microsoft Account and must periodically re‑authenticate (reports noted a ~60‑day sign‑in cadence to maintain entitlement). This means EEA residents can get the free ESU extension with fewer cloud‑sync strings attached.
• Outside the EEA the standard free path typically requires enabling Windows Backup/OneDrive sync (or using Rewards) or paying the fee. Expect regionally different wording on Microsoft’s support pages and in the in‑Windows enrollment wizard.

Step‑by‑step: how to check eligibility and claim the free year (the “instant” path)​

• Confirm your Windows 10 feature version
• Settings → System → About OR Settings → Update & Security → View update history. You must be on Windows 10, version 22H2. If not, update to 22H2 first.
• Install all pending Windows updates (LCU + SSU)
• Settings → Update & Security → Windows Update → Check for updates. Microsoft required certain cumulative updates (mid‑2025 servicing updates such as KB5063709 and later SSUs) to enable the enrollment wizard. Install any offered updates and reboot. If you skip this, you may not see the enrollment option.
• Sign in with a Microsoft Account (MSA)
• If you currently use a local Windows account, add or sign in with a Microsoft Account that has administrator rights. The free cloud‑path ties the ESU license to the MSA. (If you prefer not to sign in, consider the Rewards or paid route.)
• Enable Windows Backup / Sync your settings (free route, outside EEA)
• Settings → Accounts → Windows backup (or “Sync your settings”) → turn on. OneDrive will be used to map the device to your Microsoft Account. (In the EEA this step may not be required for the free path because Microsoft relaxed the requirement there.)
• Open Windows Update and look for the enrollment offer
• Settings → Update & Security → Windows Update. If eligible and the staged rollout has reached your device, you should see a banner or “Enroll now” / “Extend updates” link. Click it and follow the wizard. The whole flow can finish in minutes if prerequisites are already met.
• Verify enrollment
• After the wizard completes, confirm your device appears as enrolled (Windows Update display / device list under your Microsoft Account) and that security updates continue to be delivered. Check Update History after an expected ESU patch is published.

Troubleshooting — common issues and fixes​

• “I meet the requirements but I don’t see the Enroll link”: Make sure you installed the relevant mid‑2025 cumulative and servicing stack update (examples and roll‑up KBs were pushed in August–September 2025). Reboot, run Windows Update repeatedly until no pending updates remain, then check again. Microsoft deployed the enrollment UI in a phased rollout; patience is sometimes necessary.
• “I don’t want OneDrive backups but want free ESU”: If you’re in the EEA, Microsoft removed the forced backup requirement for the free path; you still need a Microsoft Account and occasional sign‑in. Outside the EEA you can use Microsoft Rewards (1,000 points) or the paid $30 buy option.
• “I use local accounts or am privacy‑conscious”: The free consumer route requires a Microsoft Account (which is the core account‑binding mechanism). If you cannot or will not use an MSA, your option is the paid ESU purchase assigned to an MSA you create for this purpose (you can keep using a local account day‑to‑day and only use the MSA for the ESU license management), or consider other OS options.
• “How do I confirm updates are actually being delivered?”: After enrollment, check Windows Update history and the device list under your Microsoft Account. Independent reporting has advised testing that an ESU security update is applied after Oct 14, 2025 to ensure your device is properly enrolled.

Privacy, telemetry, and trade‑offs you should weigh​

• The no‑cash free route nudges users toward Microsoft Account sign‑ins and OneDrive sync. That creates a direct account‑to‑device mapping that Microsoft uses to apply the ESU entitlement. If you enable Windows Backup to OneDrive, be mindful which folders and data you choose to sync; OneDrive’s free tier is limited (commonly 5 GB) and you may need to pick what to sync or buy storage.
• For privacy‑sensitive users, the EEA concession reduces the backup requirement, but Microsoft still requires a Microsoft Account and periodic sign‑in. Evaluate whether the convenience of free ESU outweighs the account‑linking trade‑off for your situation.
• ESU is narrow: it supplies only Critical and Important security updates; it is not a substitute for migrating to a supported operating system. Use the ESU year as a planning window, not as an indefinite way to avoid upgrading.

Alternatives and the long view (what to do during the ESU year)​

• Upgrade to Windows 11 (free where your PC meets minimum requirements). Microsoft recommends upgrading eligible devices and provides guidance in Settings → Windows Update. Windows 11 offers ongoing support into the late 2020s for modern hardware.
• Buy a new PC with Windows 11 pre‑installed if your current device fails hardware requirements (TPM 2.0, Secure Boot, supported CPU list).
• Migrate to an alternative supported OS (Linux distributions are a common option for older hardware). Plan data migration and test compatibility for essential applications before switching.
• For organizations, enterprise ESU/licensing channels remain available with different pricing and longer options for managed fleets. Consumer ESU is aimed specifically at individuals and households.

Frequently asked questions (quick answers)​

• Q: Does the free path give me feature updates or full support?
  A: No. ESU provides only security updates (Critical and Important) through Oct 13, 2026. No feature updates, new features, or full technical support.
• Q: Is the free extension permanent?
  A: No. It is a one‑year, time‑boxed bridge. Microsoft could change terms, and the ESU window ends Oct 13, 2026. Plan a permanent migration during the ESU year.
• Q: Can one ESU license cover multiple devices?
  A: Consumer ESU licenses tied to a Microsoft Account can cover up to a limited number of devices (Microsoft’s consumer guidance indicates reuse within account limits); the paid consumer license commonly covers multiple devices tied to the same MSA up to Microsoft’s cap. Check the in‑wizard details for exact limits.
• Q: What if I travel between regions — does EEA rule follow the device?
  A: Enrollment terms are applied based on region and account association; moving devices between jurisdictions can change what enrollment options appear. Check Microsoft’s regional pages and device behavior if you travel frequently.

Checklist: Quick actions you can take in the next 15–30 minutes​

• Check Windows 10 version: Settings → System → About — confirm 22H2.
• Run Windows Update and install all updates (LCU + SSU) and reboot.
• Sign in with your Microsoft Account (administrator).
• (If not in EEA and you want the free path) turn on Windows Backup / Sync settings to OneDrive.
• Open Settings → Update & Security → Windows Update and look for “Enroll now” or “Extend updates.” Follow the wizard.

Sources and further reading (selected, representative)​

• Microsoft — Windows 10 support ends on October 14, 2025 (official lifecycle and ESU consumer guidance).
• WindowsLatest — reporting on the in‑Windows enrollment wizard and the three consumer enrollment choices.
• Tom’s Hardware and PC Gamer — independent coverage of Microsoft’s regional concession in the EEA and the practical effects for consumers.
• Internal/collected notes and step‑by‑step guidance compiled from device rollout observations and troubleshooting (enrollment prerequisites, KB numbers, rollout behavior).

Bottom line​

• The “extend Windows 10 support for free instantly” headline reflects a real and practical option for many users: Microsoft’s consumer ESU program gives a one‑year bridge of security updates and can be claimed quickly from inside Settings if your PC meets the prerequisites. But “instant” depends on your device being updated to Windows 10 version 22H2, having the required servicing updates installed, and being tied to a Microsoft Account for the free path — and there are important regional and privacy caveats, especially outside the EEA. Use the ESU year to patch, plan, and migrate; don’t treat it as a permanent way to put off upgrading.

• Prepare a short checklist you can print and follow at your own PC (step-by-step with exact Settings clicks and screenshots).
• Walk you through the enrollment flow interactively (tell me what version/build your PC shows and I’ll tailor the exact steps).
• Help evaluate whether your PC can upgrade to Windows 11 (I can guide you through the compatibility checks and the PC Health Check steps).

Background / Overview​

What the News10 “Rich On Tech” segment actually showed​

The facts every Windows 10 user needs to know right now​

• End-of-support date (Windows 10): October 14, 2025. After that date, standard security and feature updates stop for consumer Windows 10.
• ESU coverage window (consumer): through October 13, 2026 for enrolled devices.
• Minimum OS requirement: devices must be running Windows 10, version 22H2 to be eligible for consumer ESU updates.
• Enrollment options (consumer): three equivalent ways to enroll — free with a Microsoft account + syncing settings, redeem 1,000 Microsoft Rewards points, or a one-time $30 purchase per Microsoft account that can be applied to up to 10 devices tied to the same account.

Step-by-step: how to claim the free ESU extension (the “easy” route made explicit)​

• Confirm your version: Open Settings → System → About and verify you’re on Windows 10 version 22H2. If not, update to 22H2 first.
• Install all pending updates: Open Settings → Update & Security → Windows Update and install cumulative updates and servicing-stack updates (SSUs). Microsoft shipped preparatory fixes in mid‑2025 that help the enrollment wizard appear reliably.
• Sign in with a Microsoft Account (MSA): the free path requires an MSA with local admin privileges on the device. If you use a local account, you’ll be prompted to add or switch to an MSA to enroll.
• Enable Windows Backup / Sync (where required): in many markets Microsoft uses the Windows Backup/settings sync path as the free validation method. Enabling Windows Backup ties the device to your MSA; Microsoft treats that linkage as the entitlement mechanism. Note: EEA rules differ (see below).
• Open Settings → Update & Security → Windows Update and look for “Enroll now” or similar. Follow the on-screen enrollment wizard. The process can complete in minutes if your PC meets the prerequisites.

Regional nuance and privacy trade-offs​

• Enabling Windows Backup may cause some settings and small amounts of data to be synced to OneDrive; depending on the size of your backup and your OneDrive free allocation you may need to purchase storage. That’s an indirect cost many viewers don’t anticipate.
• Tying your ESU entitlement to an MSA increases account-dependence: losing access to that Microsoft Account or switching accounts mid-enrollment can interrupt update delivery and require re-enrollment.

What ESU does — and what it does not​

• ESU provides Critical and Important security updates as classified by Microsoft’s Security Response Center. It does not deliver feature updates, non-security bug fixes, or general technical support. Use the ESU year to patch, plan, and migrate — not as a permanent stay of OS replacement.
• Enrollment does not reset the end-of-life clock for Windows 10; it simply gives enrolled devices one year of security-only patches after the official cutoff. Enrolling after October 14, 2025 is allowed, but enrolling earlier ensures you get the full ESU benefit window.

The unofficial “bypass” claims: what the community is saying — and why to be cautious​

• Legality and EULA risk: circumventing Microsoft’s official update mechanisms can contravene licensing terms and may expose users to unknown legal or support risks.
• Security gaps: unofficial hacks can fail silently or stop working after a Microsoft countermeasure, leaving systems with a false sense of protection. There’s no guarantee that all critical patches will be applied correctly.
• Operational fragility: community notes indicate the trick’s success depends on specific builds and update sequences — making it a brittle, maintenance-heavy approach for production or family PCs.

Practical, stepwise guidance for readers who want to keep Windows 10 secure​

• Immediate checklist (do this first):
• Backup important files (local image + cloud copy).
• Confirm you’re on Windows 10 version 22H2.
• Install all outstanding cumulative and servicing-stack updates.
• Claim ESU (if you plan to stay on Windows 10 for a year):
• Sign into the PC with your Microsoft Account (or add one as an admin).
• Enable Windows Backup / “Sync your settings” if you’re comfortable (or redeem 1,000 Microsoft Rewards points, or be ready to pay the $30 one-time fee).
• Open Settings → Update & Security → Windows Update and follow the “Enroll now” wizard when it appears.
• Validate updates post-enrollment: after enrolling, confirm that security updates are actually arriving by checking Windows Update history and MSRC patch bulletins. Don’t assume enrollment equals immediate patch parity.
• Use the ESU year wisely: treat the period as breathing room to evaluate options — upgrade to Windows 11 if your hardware supports it, or plan a hardware refresh, or consider migrating to another supported OS if appropriate. The ESU year is a planning window, not a long-term support contract.

Risks, trade-offs, and the broader picture​

• Account and privacy trade-offs: the free ESU path intentionally ties entitlement to a Microsoft Account and — in many markets — to cloud backup. That increases Microsoft’s service integration footprint on consumer devices and prompted regulatory scrutiny in Europe; EEA rules were adjusted to limit some of those strings. Users must weigh the convenience of a free extension against the privacy implications of cloud sync.
• False security comfort: installing ESU patches reduces exposure, but ESU’s narrow scope means non-security bugs and feature regressions won’t be fixed. Relying on ESU as a substitute for a supported OS is shortsighted.
• The unofficial workaround risk: community “hacks” may appear attractive, but they’re unpredictable and could be short-lived if Microsoft patches the vector used to bypass official checks. Relying on such methods in a family or business environment is high-risk.

How to decide: quick decision criteria​

• If your PC is eligible for Windows 11 and you want a modern support path: upgrade now. That’s the cleanest solution.
• If your hardware is incompatible, but you need time to budget a replacement: enroll in consumer ESU and use the year to migrate. The free account-backed route is the easiest for many users.
• If you’re privacy-conscious and want to avoid MS cloud services: be prepared to purchase the one-time ESU license or use Microsoft Rewards points if you prefer not to tie your day-to-day login to an MSA.
• If you’re tempted by community bypasses: treat them as experimental research, not a production strategy. The legal, operational, and security downsides can be material.

Troubleshooting: if the “Enroll now” option doesn’t appear​

• Reboot, re-check updates, and confirm 22H2 and the latest servicing‑stack updates are installed — the wizard depends on preparatory updates that Microsoft shipped in 2025.
• Ensure an administrator is signed in with an MSA on the device if you want the free sync route.
• If you cannot get the wizard to appear and you prefer not to enable Windows Backup, redeem 1,000 Microsoft Rewards points or buy the ESU license inside Settings → Windows Update.

Final assessment — strengths and risks of the “easy” path​

• Practical and fast: for eligible devices the in‑OS enrollment wizard can map ESU entitlement to an MSA in minutes, making the extension genuinely accessible for many consumers.
• Flexible enrollment: Microsoft’s three-path model (sync, Rewards, or purchase) gives consumers options tailored to privacy and convenience preferences.

• Account dependence and privacy trade-offs: free access comes with account linkage and, in many regions, a backup/sync requirement that can mean storing settings or metadata in Microsoft’s cloud. EEA users received concessions, but non-EEA users should read the enrollment flow carefully.
• Narrow scope: ESU is security-only and temporary; it is not a long-term support solution. Use it to plan and migrate.
• Unofficial workarounds are risky: community hacks that promise free, indefinite updates are experimental, potentially against Microsoft’s terms, and may be quickly countered. Treat them with skepticism.

Conclusion​

Background / Overview​

What’s new: the “free instantly” headlines explained​

Who is eligible — the short checklist​

• Device must run Windows 10, version 22H2 (consumer SKUs such as Home, Pro, Pro Education and Workstation).
• All required cumulative and servicing stack updates must be installed; Microsoft’s rollout called out preparatory updates in mid‑2025 that enable the in‑OS flow.
• The enrolling user must sign into the PC with a Microsoft Account (MSA) for the free cloud-backed path (local accounts are not eligible for that route).
• Regional rules: some markets (notably the European Economic Area) have different consent/backup rules — see the regional section below.

How to check readiness and enroll (step-by-step)​

• Confirm your Windows build.
• Open Settings → System → About and verify Windows 10, version 22H2. Devices not on 22H2 are not eligible until updated.
• Install pending updates (LCUs and SSUs).
• Run Settings → Update & Security → Windows Update and install all offered updates. Microsoft’s rollout required a cumulative/SSU pair (an August 2025 cumulative such as KB5063709 and the matching SSU) to fix enrollment-wizard bugs and ensure the flow surfaces. Install and reboot if needed.
• Sign in with a Microsoft Account with administrator privileges.
• If you use a local account, either add an MSA or temporarily sign in with an administrator MSA. The free cloud route maps the ESU entitlement to that account.
• Turn on Windows Backup / Sync settings (where required).
• Outside the EEA, Microsoft’s free route typically requires enabling the Windows Backup / “Sync your settings” toggle so settings/backups map to OneDrive, which Microsoft uses to bind entitlement to your MSA. If you don’t want cloud sync, use the Rewards or paid route instead. (EEA residents have different rules — see regional section.)
• Open Windows Update and follow the enrollment wizard.
• Settings → Update & Security → Windows Update. If eligible and rollout reached your device you’ll see “Enroll now” / “Extend updates.” Follow the prompts. If nothing appears, recheck steps 1–4 and wait a few days — Microsoft is rolling the experience out gradually.
• Verify your entitlement.
• After enrollment, confirm your device appears as enrolled in the Windows Update pane and on your Microsoft Account’s device list. Check Update History after the next ESU patch to ensure updates are applied.

Enrollment choices — three equivalent ways to claim the one-year ESU​

• Free cloud-backed path: Sign in with a Microsoft Account and enable Windows Backup / settings sync (most markets). Microsoft treats that linkage as the free enrollment mechanism.
• Microsoft Rewards: Redeem 1,000 Microsoft Rewards points for an ESU license if you already have the balance and prefer not to enable cloud sync.
• Paid one-time purchase: Buy a consumer ESU license (approx. $30 USD) to tie the entitlement to your Microsoft Account — typically usable on multiple eligible devices tied to that account (Microsoft’s in‑wizard text shows device limits). The paid route avoids enabling backup if you don’t want to.

Regional nuance: EEA concessions and privacy trade-offs​

Strengths — why this matters​

• A practical, time-boxed safety net. The ESU program gives households and small businesses a clear, documented bridge of security-only patches through October 13, 2026, reducing immediate exposure for devices that can’t upgrade to Windows 11. This is a useful, low-friction safeguard for critical security holes.
• Multiple enrollment routes. Offering free, rewards-based, and paid options respects different user preferences (privacy vs. convenience vs. cash payment). The paid option’s ability to cover multiple devices under one account is practical for families.
• In-product enrollment simplifies the process. Surfacing the ESU flow in Settings reduces support friction and lowers the barrier to claim protection quickly — the reason many outlets called the path “instant” for eligible PCs.
• Regulatory responsiveness. Microsoft’s concessions for the EEA show the company responded to consumer and regulatory pressure, improving privacy options in that region. That responsiveness is notable and reduces friction for privacy-focused users in Europe.

Risks and limitations you must know​

• Short coverage window and narrow scope. ESU is one year of security-only patches. It is not a substitute for upgrading to a supported OS. Relying on ESU as a long-term strategy risks exposure once the program ends. Plan migration during the ESU year.
• Account-binding and telemetry concerns. The free path generally requires a Microsoft Account and, in many markets, enabling Windows Backup/OneDrive for settings sync — trade-offs some users view as privacy erosions. Even paid options require an MSA for license assignment. Consider whether that trade-off is acceptable.
• Staged rollout and prerequisites mean “instant” is conditional. If your PC lacks the required cumulative/SSU updates, or if Microsoft’s phased rollout hasn’t reached your device, the enrollment option won’t appear right away. Community reports documented rollout delays and an enrollment-wizard bug fixed via KB5063709. Don’t assume instant availability without checking prerequisites.
• Operational burden for multi-device households and small offices. Each device must meet prerequisites and be enrolled; managing sign-ins, backups, and verifying patch delivery across many systems creates administrative overhead. The ESU year buys time, not a permanent reprieve.
• Incompatibility with certain managed devices. Domain-joined or enterprise-managed machines should use enterprise ESU channels; the consumer flow is intended for personal devices. Misapplying the consumer path in managed environments will introduce support and compliance gaps.

Troubleshooting common enrollment issues​

• If you don’t see the “Enroll now” banner: confirm you’re on 22H2, installed the latest cumulative and SSU updates (including KB5063709 where applicable), are signed into an administrator MSA, and have enabled Windows Backup where required. Then reboot and check again; Microsoft rolled the experience out gradually.
• If enrollment fails or the wizard errors: ensure the KB/SSU packages are installed and that Windows Update is functioning (no pending reboots). In some early cases Microsoft deployed fixes to the enrollment flow — installing the August 2025 cumulative and SSU resolved many of those issues.
• If you’re privacy-conscious and outside the EEA: consider redeeming Microsoft Rewards or buying the one-time ESU license instead of enabling broader sync, and maintain independent backups outside OneDrive. If you are in the EEA, check the local enrollment text — Microsoft’s concession may let you avoid the backup toggle while still signing in periodically.

Practical recommendations and migration checklist​

• Immediately confirm which devices can upgrade to Windows 11. Use Microsoft’s PC Health Check or vendor guidance and document exceptions.
• Move every Windows 10 device to version 22H2 and install the latest cumulative + SSU updates (including KB5063709 where listed) so the ESU enrollment flow can appear.
• Enroll eligible devices in ESU if you need the extra year; confirm updates land after enrollment.
• For devices that can’t upgrade: evaluate alternatives — buy new hardware, move to a supported Linux distribution, or isolate Windows 10 systems from the Internet where possible.
• Maintain independent backups and consider using third-party disk‑image solutions as insurance if you decline OneDrive backup.
• Use the ESU year to validate application compatibility on Windows 11 and to pilot migrations for critical apps.

What we verified and why it matters​

• Microsoft’s official ESU guidance confirms the October 14, 2025 end-of-support and consumer ESU coverage through October 13, 2026. The in‑OS enrollment path and three consumer enrollment methods are documented on Microsoft’s support pages.
• The critical prerequisite cumulative update and servicing-stack note (an August 2025 cumulative — KB5063709 — fixed enrollment bugs and is required to stabilize the flow) is published in Microsoft’s KB article for that update. Community troubleshooting and Microsoft Q&A posts corroborate the dependency.
• Reporting from independent outlets confirms Microsoft’s EEA concession to relax mandatory backup requirements while retaining periodic Microsoft Account sign-in conditions for entitlement in the region. Multiple outlets picked up the regulatory-driven change.
• Local coverage and summary explainers that used the phrase “free instantly” accurately reflected the consumer experience for many eligible machines but simplified the prerequisite and rollout caveats; those same local pieces were mirrored by deeper guides and community threads that emphasize the conditional nature of “instant” enrollment.

The long view: why you should act now (but plan to leave)​

Quick-action checklist (15–30 minutes)​

• Confirm Windows 10 version is 22H2.
• Run Windows Update and install all offered updates (LCU + SSU, including KB5063709).
• Sign in with a Microsoft Account that has admin rights.
• (Outside EEA) Enable Windows Backup / Sync settings to OneDrive or prepare Rewards/purchase option.
• Open Settings → Update & Security → Windows Update and look for Enroll now. Follow the wizard.

Background / Overview​

What Microsoft is offering (the facts you need to know)​

• End of standard support for Windows 10 (consumer editions): October 14, 2025.
• Consumer ESU coverage window (if enrolled): through October 13, 2026.
• Eligible devices: Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation) that are fully patched with required servicing stack and cumulative updates.
• What ESU delivers: Critical and Important security updates only; no feature updates or general Microsoft technical support.

• Free: Sign into Windows with a Microsoft Account and enable Windows Backup / “Sync your settings” (tying the device to your Microsoft account). This is the most commonly reported no‑cost route.
• Microsoft Rewards: Redeem 1,000 Microsoft Rewards points to enroll (if you already have points available).
• One‑time paid purchase: A one‑time consumer purchase (roughly $30 USD or local equivalent, plus applicable tax) associates an ESU license with your Microsoft account and enables ESU for eligible devices.

Why headlines said “free” and why “instant” is conditional​

• The device must be on Windows 10, version 22H2 and fully patched with the required cumulative and servicing stack updates. Microsoft shipped preparatory updates in mid‑2025 that enable the enrollment flow.
• Microsoft is rolling the enrollment UI out in phases; the “Enroll now” banner may not appear immediately on every eligible machine.
• The free path typically requires a Microsoft Account and (in many regions) enabling Windows Backup/sync to OneDrive; regional exceptions apply (see below).

Step‑by‑step: how to check eligibility and enroll (practical guide)​

• Confirm Windows 10 version: Open Settings → System → About and verify you are on Windows 10, version 22H2. If not, install the latest Feature Update to move to 22H2.
• Install pending Windows updates: Open Settings → Update & Security → Windows Update and install all offered updates (especially recent cumulative updates and servicing stack updates). Microsoft’s enrollment flow depends on specific updates being present. Reboot if required.
• Sign in with a Microsoft Account (MSA): If you use a local account, either add an MSA administrator or sign in temporarily with an MSA. The free cloud‑backed route ties the ESU entitlement to a Microsoft Account.
• (Free path only, in many regions) Enable Windows Backup / Sync your settings: Go to Settings → Accounts → Windows Backup (or Sync your settings) and enable the Windows Backup / sync toggle to OneDrive. This is the free enrollment trigger in most markets. If you’re in the European Economic Area (EEA), the backup requirement was relaxed; check the regional notes below.
• Open Windows Update and look for the enrollment banner: Settings → Update & Security → Windows Update. If prerequisites are satisfied and the staged rollout has reached your system, you should see an Enroll now or similar notice. Click it and follow the enrollment wizard.
• Choose enrollment method: Select the free backup option, redeem 1,000 Microsoft Rewards points, or complete the one‑time $30 purchase as offered. Follow on‑screen prompts to finish enrollment.
• Verify entitlement: After enrollment completes, confirm the device appears under your Microsoft Account device list and check Windows Update history to confirm ESU updates are being delivered.

Troubleshooting: common problems and fixes​

• “I don’t see the Enroll now banner.” First make sure you’re on 22H2 and fully updated; reboot and check Windows Update again. The enrollment wizard was rolled out in waves; if requirements are met and you still don’t see it, wait a day or two for the staged rollout.
• “Rewards redemption failed.” Some users have reported intermittent errors when attempting to redeem Microsoft Rewards for ESU via the enrollment wizard; this appears to be a mix of rollout issues and backend validation errors. If redemption fails, try again later or select the free backup option (if available) or the one‑time purchase.
• “I don’t want to use a Microsoft account.” The paid ($30) route was published as an option for users who prefer not to enable Windows Backup or tie their device to cloud sync. However, Microsoft’s consumer ESU guidance still ties enrollment to a Microsoft Account for license association, and regional nuances may affect whether a local‑account‑only path is possible.
• “Enrollment disappeared.” In some reported cases, ESU updates were discontinued when a device stopped signing in with the Microsoft account used for enrollment; Microsoft’s documentation warns that account sign‑in activity may be required to maintain entitlement and that failure to remain signed in may require re‑enrollment.

Regional caveats and privacy trade‑offs​

Security tradeoffs: what staying on Windows 10 (even with ESU) means​

• ESU provides a targeted shield: it supplies critical and important security fixes but not the broader quality and compatibility updates that accompany mainstream support. That reduces immediate exposure to high‑risk exploits, but it’s not a long‑term architecture or feature update.
• Hardware security and modern mitigations: Windows 11 includes platform changes and stronger hardware‑backed security approaches (such as Secure Boot + TPM enforcement in some features). Older hardware that remains on Windows 10 may continue to lack protections that Windows 11 benefits from — ESU is a stopgap, not a modernization.
• Application and ecosystem support: Some third‑party software vendors (notably some game publishers, specialized software vendors, and anti‑cheat systems) may start to limit compatibility or testing on Windows 10 after its end of support; that can affect functionality even if Microsoft is shipping security patches. Plan for potential application lifecycle changes.
• Social engineering and inertia: Remaining on an older OS — even with ESU — can increase the attack surface if users delay other security best practices (patching apps, using modern browsers, enabling multi‑factor authentication, using endpoint protection). ESU is part of a defensive posture, not a license to ignore broader hygiene.

Practical recommendations and migration planning​

• If your PC meets Windows 11 requirements, schedule the free upgrade path now: use the PC Health Check app to confirm compatibility, back up your files, and upgrade on a convenient maintenance window. Windows 11 provides long‑term servicing and modern security features that ESU does not replace.
• If your PC cannot run Windows 11 or you’re not ready to replace hardware, use ESU as a single‑year bridge: enroll, patch, and use the time to plan replacement or migration to supported platforms. ESU is explicitly a temporary safety net — plan hardware refresh, OS upgrade, or migration to alternative platforms (Linux, macOS, or cloud‑hosted VDI) within the year.
• Use ESU enrollment to buy time, not to postpone indefinitely: apply all non‑OS mitigations (modern browser versions, endpoint protection, least privilege, and network segmentation) and monitor vendor support for critical applications.
• If privacy is a major concern, weigh the $30 one‑time purchase and the account‑based requirements against enabling cloud sync. Read the enrollment wizard carefully and confirm which settings are being synced before accepting the free route. For EEA residents, check the different terms that Microsoft surfaced for the region and consider whether periodic sign‑in cadence meets your requirements.

The enrollment experience: what real users are reporting​

Risk flags and cautions (what to watch for)​

• The one‑year limit: ESU ends on October 13, 2026. It is a single year of security‑only coverage; do not plan on ESU as a multi‑year strategy.
• Prerequisite enforcement: Microsoft requires devices to be on Windows 10, version 22H2 and fully patched to be eligible. Devices stuck on older feature updates must be moved to 22H2 first.
• Account dependency: Free enrollment is tied to a Microsoft Account and to the device being associated with that account. If you rely on a local account and will not accept cloud‑linked sign‑ins, the paid option remains, but the account‑linking and re‑authentication behavior can still apply.
• Regional differences: EEA residents receive a modified path with fewer cloud‑sync requirements, but they must still authenticate periodically. If you move a device between regions, enrollment options and behaviors may change.
• Rewards and purchase hiccups: Real‑world reports indicate occasional problems redeeming Rewards points or completing purchases via the enrollment wizard. If a payment or redemption fails, retry or use an alternative enrollment method.

Checklist: what to do right now (15–30 minutes)​

• Open Settings → System → About: confirm you are on Windows 10, version 22H2.
• Run Settings → Update & Security → Windows Update: install all pending updates and reboot if necessary.
• Decide your enrollment method: plan to sign into a Microsoft Account and enable Windows Backup (free path), redeem Rewards points, or pay $30 for the one‑time license.
• Open Windows Update and look for the Enroll now banner. If it appears, follow the wizard and confirm enrollment.
• If you don’t see the option: confirm prerequisites again and wait a short period for the staged rollout to reach your device. Consider the paid purchase as a fallback.

Conclusion​

Background / Overview​

What Microsoft is actually offering — the facts verified​

Core elements (verified)​

• End of mainstream support for Windows 10: October 14, 2025.
• Consumer ESU coverage for enrolled devices: Oct 15, 2025 — Oct 13, 2026 (security updates only).
• Eligible OS: Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation). Devices must be updated to current cumulative builds before enrollment.
• Enrollment surface: a staged “Enroll now” wizard appears in Settings → Update & Security → Windows Update for eligible consumer devices. The rollout is phased; some users may not see it immediately.

The three consumer enrollment routes​

• Free — Enable Windows Backup / sync a Windows Backup to OneDrive. No additional ESU charge, but you must sign in with a Microsoft Account and you may need to buy extra OneDrive storage if the backup exceeds the free 5 GB allotment.
• Free — Redeem 1,000 Microsoft Rewards points. If you already have the points in your Rewards account, redeeming them covers the ESU for one year.
• Paid — One‑time purchase (reported around $30 USD). A paid purchase path is available for those who prefer not to enable cloud backup or use Rewards. Pricing can vary by market; confirm during enrollment.

Important technical preconditions​

• You must be on Windows 10 version 22H2 and have the relevant cumulative updates installed; Microsoft shipped an August 2025 update (KB5063709) to stabilize and fix issues in the ESU enrollment wizard. Installing that update raises applicable 22H2 builds and addresses early enrollment failures. The enrollment wizard itself is still being staged to users, so a missing button may only mean the phased rollout hasn’t reached your device yet.

Regional nuance and privacy caveats​

Detailed step‑by‑step: how to stay on Windows 10 for free (practical checklist)​

• Confirm your Windows 10 edition and build: open Settings → System → About and ensure the OS is Windows 10 version 22H2. If you’re not on 22H2, install the feature update to get to 22H2 first.
• Install all pending Windows updates — especially the August 2025 cumulative update KB5063709 (or newer), which fixes enrollment wizard issues. You should see a build number in the 19045.6216 range after that update.
• Make full backups now: create a disk image, export BitLocker recovery keys, and keep an independent external copy beyond any OneDrive backup. Do not rely on a single backup method.
• Sign in with a Microsoft Account (MSA) on the device if you plan to use the free OneDrive backup path. Note: local accounts are not eligible for the consumer ESU enrollment wizard.
• Open Settings → Update & Security → Windows Update and look for the “Enroll now” or “Extend updates” notification. Follow the wizard to choose your enrollment route (OneDrive backup, Rewards points, or the paid option). The wizard may appear as a notification or directly inside Windows Update; its availability is being rolled out in stages.

What ESU does — and what it does not​

• ESU provides security‑only updates classified by Microsoft as Critical and Important. It does not include feature updates, broad non‑security bug fixes, new OS features, or premium technical support. This is not ongoing product support; it’s a time‑boxed security runway.
• ESU licenses for consumers are account‑tied: a single consumer ESU license can cover up to 10 devices associated with the same Microsoft Account, which helps households manage costs if they choose the paid route.
• Enterprise ESU remains separate (volume licensing with higher per‑device pricing and multi‑year options). If you’re running domain‑joined devices or corporate MDM devices, use enterprise channels rather than the consumer wizard.

Strengths of Microsoft’s consumer ESU approach​

• Accessibility. Two legitimate no‑cash enrollment routes (OneDrive backup and Rewards) make the safety net reachable for many households.
• Clarity and time‑boxing. Microsoft is explicit: one year only. That creates a predictable migration window rather than an open‑ended support limbo.
• Practicality for older hardware. For devices that truly cannot be upgraded to Windows 11, ESU is a pragmatic way to protect them for a transitional period while migration work proceeds.

Risks, limitations, and criticism (what to watch out for)​

• Privacy and cloud lock‑in. The easiest free path requires signing into a Microsoft Account and syncing a Windows Backup to OneDrive, which nudges users deeper into Microsoft’s cloud ecosystem. That raises legitimate privacy concerns for some users. European consumer groups pressed Microsoft on this point, producing the EEA carve‑out.
• Security‑only scope. ESU does not fix driver problems, add features, or provide broader quality fixes. Over time, unpatched reliability or compatibility issues can still make aging machines brittle even if security patches arrive. Treat ESU as breathing room, not a permanent solution.
• Staged rollout friction. The enrollment wizard has been phased and, early on, required a cumulative fix (KB5063709) for reliability. That means last‑minute enrollment surges could create support headaches. Get the preconditions handled now rather than waiting for the week before October 14.
• Regional differences. The EEA concession changed the economics for European users — but it’s regional. U.S. users and others may still face the cloud/Rewards/payment choices. Don’t assume global parity.
• Re‑authentication and account stability. Reports indicate Microsoft requires periodic re‑authentication of the MSA (for example, roughly every 60 days) to retain enrollment, which is an operational caveat users should plan for. This mechanism prevents circumvention but introduces a maintenance step. Treat that as an operational requirement if you enroll.

Alternatives and long‑term options​

• Upgrade eligible machines to Windows 11 where hardware permits; Windows 11 is free for qualifying Windows 10 installs and gives long‑term platform support. Use the PC Health Check and manufacturer drivers compatibility checks before upgrading.
• If upgrading hardware isn’t practical, consider migrating workloads to cloud or virtual desktop options (Windows 365, Azure Virtual Desktop), which may include ESU entitlements for cloud‑hosted Windows instances.
• For basic web, office, and media tasks, Linux or ChromeOS Flex are viable ways to extend hardware life safely — but test application compatibility first.
• If you rely on regulated compliance or handle sensitive corporate data, ESU’s consumer route may be insufficient; prioritize migration to supported enterprise‑grade platforms with managed updates and compliance controls.

Practical guidance for WindowsForum readers (recommended roadmap)​

• Immediately verify you are on Windows 10 22H2, install all updates (including KB5063709 or later), and confirm your device shows the latest build.
• Create robust backups: full disk image, external copy, and export BitLocker keys. Do this before you touch enrollment paths. A cloud backup alone is not sufficient if you care about fast recovery or privacy.
• Decide your ESU route now: OneDrive backup (free), Microsoft Rewards points (free if you have them), or the one‑time paid purchase. If privacy is a primary concern, weigh the $30 paid option or accelerate hardware replacement instead of enabling cloud sync.
• Use the ESU year actively: do not treat it as indefinite permission to delay migration. Use the twelve months to test Windows 11 on non‑critical systems, purchase and stage replacement hardware, or transition to alternate platforms. ESU is a runway, not a destination.
• If you manage multiple machines for a household, the ESU license reuse (up to 10 devices per MSA) can simplify the process; align all devices under a single trusted Microsoft Account or adopt a hybrid plan (some PCs on ESU, others migrated earlier).

What still needs verification (claims to watch)​

• The exact paid price in every local currency may vary and Microsoft’s enrollment UI is the authoritative final word; treat $30 as a widely reported baseline but confirm in your region during enrollment.
• The timing of re‑authentication or exact cadence (e.g., 60 days) for MSAs enrolling in ESU has been reported by multiple outlets; users should be prepared to sign in periodically and to verify Microsoft’s enrollment terms in their account. If this detail is critical, check the enrollment dialog or Microsoft account security settings when you enroll.

Final analysis — who should enroll and who should not​

• Your PC is genuinely incompatible with Windows 11 and you need time to migrate.
• You require a short, low‑cost security bridge for a device running critical legacy apps.
• You’re comfortable with the Microsoft Account requirement and the limited, security‑only nature of the program.

• You need ongoing non‑security fixes, driver updates, or feature improvements.
• You refuse to use a Microsoft Account and cloud services for privacy reasons.
• You operate under regulatory compliance demands that require continued support beyond a one‑year window.

Conclusion​

Background: what’s changing and why it matters​

Who’s eligible and what you must run​

Minimum software requirements​

• Your PC must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation editions are included).
• Devices must be updated to the latest cumulative updates for 22H2 before enrollment appears.
• The enrollment flow is presented via Windows Update (Settings > Windows Update) or through a notification/ESU enrollment wizard that Microsoft deployed.

Enrollment windows and coverage dates​

• Windows 10 reaches end of support on October 14, 2025.
• ESU coverage for consumer devices runs through October 13, 2026.
• You can enroll any time until October 13, 2026, but if you enroll after October 14, 2025 your device will be unprotected between Oct. 15, 2025 and the moment enrollment completes—so act before the cutoff if you can.

The three consumer paths to ESU (what each one really means)​

• Sync Windows Backup to OneDrive (no direct fee)
• This is Microsoft’s no-cost option for many consumers: enable the built‑in Windows Backup feature and allow the device to sync settings/apps/backup to OneDrive. That sync is the mechanism Microsoft uses to validate enrollment.
• Important caveat: OneDrive’s free tier includes only 5 GB of storage. If your Windows Backup needs exceed that cap you may be pushed to purchase additional OneDrive storage to complete the backup step. The backup requirement is broadly described by Microsoft as “sync your PC settings” but users should be prepared to add storage if prompted.
• Redeem 1,000 Microsoft Rewards points (no direct cash outlay)
• If you participate in Microsoft Rewards, you can redeem 1,000 points in the enrollment wizard to enable ESU for an eligible device. Microsoft Rewards points are earned by using Microsoft services (Bing searches, Microsoft Store purchases, Xbox activities, etc.). Earning 1,000 points is feasible for active participants, but the rate at which points accumulate depends on region, the specific Rewards offers you use, and how often you search with Bing or complete the available activities.
• Practical note: Some users have reported intermittent issues redeeming points in the wizard; if you run into errors, retry after ensuring your Microsoft account shows the points and your system has the latest Windows updates.
• Pay $30 (one-time, per device)
• If you prefer a straightforward cash option, Microsoft offers a one-time $30 (USD) purchase per device (local currency equivalent may apply) to enroll a Windows 10 machine in ESU for the year. This option allows you to keep using a local account rather than signing in with a Microsoft account.

The EEA carve-out: free—but with a sign‑in requirement​

• EEA consumers can receive ESU at no cost without being required to enable Windows Backup to OneDrive—Microsoft explicitly said the backup requirement is relaxed in the EEA.
• However, to receive EEA free ESU you must sign in to the PC with a Microsoft account (MSA) and remain signed in. Microsoft’s published policy requires the Microsoft account used to enroll to be used to sign in to the device at least once every 60 days. If an enrolled device goes longer than 60 days without sign‑in with that MSA, ESU updates will be discontinued and the device will need to be re‑enrolled with the same MSA.

What ESU actually delivers — and what it does not​

• ESU delivers security updates rated Critical or Important (as defined by Microsoft’s Security Response Center) that patch vulnerabilities discovered after Windows 10’s end of support.
• ESU does not include:
• New features or feature updates
• Non-security bug fixes (customer-requested non-security updates)
• General product support or in-depth technical troubleshooting (support for activation and installation-related issues for the ESU itself may be available, but full product support is not included)
• Microsoft has stated ESU is intended as a short-term bridge to help users transition to Windows 11 or replace hardware—not a long-term alternative to migrating to a supported OS.

Enterprise and cloud exceptions (quick primer)​

• Commercial organizations can buy ESU through Microsoft Volume Licensing. Year One pricing for organizations is substantially higher than the consumer cost—Microsoft’s published price for Year One commercial ESU is $61 per device, with prices doubling in subsequent renewal years (Year Two, Year Three). Discounts may be available through specific management offerings (for example, Intune/Autopatch discounts in some programs).
• Cloud-hosted and virtual Windows 10 instances (Windows 365 Cloud PCs, Azure Virtual Desktop, certain Azure VMs and other Microsoft-hosted environments) are often entitled to ESU at no additional cost, subject to conditions. For organizations using Windows 365 or Azure-hosted Windows 10 VMs, Microsoft’s documentation explains the circumstances under which ESU is already enabled.

Upgrade vs. stay: how to decide​

• Hardware compatibility: Windows 11 has stricter hardware requirements (secure boot, TPM 2.0, supported processors), so many older systems won’t qualify for a supported Windows 11 installation without workaround steps that Microsoft does not officially support.
• Security posture: If your device is critical for work or handles sensitive data, relying on a one‑year ESU bridge may not be ideal. ESU covers security updates, but it’s a temporary measure. Upgrading to a supported OS is the safer long-term choice.
• Cost: For home users, the default free options (OneDrive backup or Rewards points) or the $30 one-time fee are affordable stopgaps. For businesses, ESU costs escalate and may make hardware refresh or migration more cost-effective.
• Application and peripheral support: Over time, third‑party apps and drivers may drop compatibility with an unsupported Windows 10 environment. Even if security patches arrive, functional regressions or incompatibilities can appear as vendors focus development on supported OS versions.

Step-by-step: how to enroll (consumer flow)​

• Confirm your PC is on Windows 10, version 22H2 and that Windows Update is fully current.
• Open Settings > Windows Update. Look for an ESU enrollment banner or link. If the wizard hasn’t arrived yet, ensure the device has installed the latest cumulative updates—Microsoft rolled the enrollment wizard out in phases.
• Launch the ESU Enrollment Wizard. You’ll be offered the three enrollment options (OneDrive backup, redeem 1,000 Microsoft Rewards points, or pay $30).
• Follow the on-screen steps for your chosen option:
• For OneDrive backup: enable Windows Backup and the sync to OneDrive; confirm storage availability.
• For Rewards: ensure you’re signed in with the Microsoft account that holds the points, confirm redemption, and complete the enrollment.
• For pay option: complete the purchase flow (a local account can be retained if you choose this path).
• After enrollment, verify your device shows ESU coverage in Windows Update; it should indicate enrollment and that security updates will continue through October 13, 2026.

Practical warnings and real-world pain points​

• OneDrive storage may be a hidden cost. Using the OneDrive/Windows Backup route can trigger the need to buy more cloud storage. Don’t assume the backup will fit in the free 5 GB allotment—check your device’s backup size first.
• Rewards redemptions have occasional hiccups. Several users reported temporary errors redeeming Microsoft Rewards within the wizard; a successful redemption may require that your account shows the points inside the device being enrolled and that the system is fully updated.
• EEA sign-in enforcement is real. If you take advantage of the EEA no-cost offer, you must remain signed in with the same Microsoft account and sign in at least once every 60 days—or risk losing ESU updates until you re-enroll. Treat the 60‑day window seriously.
• Waiting too long increases risk. Although Microsoft allows enrollment after the cutoff, your device will be vulnerable during any gap between end of support and enrollment completion. If you rely on that machine for everyday work or sensitive tasks, enroll before Oct. 14.
• ESU is not a feature upgrade. Expect no new capabilities, UI improvements, or broad bug fixes—only security patches for the highest-risk vulnerabilities. Long-term platform stability and compatibility are not guaranteed.

Alternatives and migration options​

• Upgrade to Windows 11 (if compatible): Use Settings > Windows Update to check upgrade eligibility. If your hardware meets Microsoft’s requirements, upgrading keeps you on a supported OS with full feature and security updates.
• Install Windows 11 on unsupported hardware: There are community tools and unsupported registry bypasses that allow Windows 11 installation on older hardware, but Microsoft does not officially support these configurations and they may not receive full updates.
• Move to a fresh PC: If hardware is old or replacement is overdue, purchasing a modern PC ensures compatibility with Windows 11 and future updates.
• Consider Linux or other OSes: For many desktop use cases (web, email, office productivity through web apps), a Linux distribution provides long-term security updates and a low-cost migration path.
• Cloud PC / Virtual Desktop options: Organizations and advanced users can evaluate Windows 365 Cloud PCs or Azure-hosted virtual desktops; Windows 10 instances in Microsoft cloud environments are often entitled to ESU coverage without additional consumer enrollment steps.

What to expect after Oct. 13, 2026​

• ESU coverage for consumer Windows 10 devices ends on October 13, 2026. After that date, Microsoft will no longer publish security updates for consumer Windows 10 systems through ESU.
• Microsoft has extended certain product updates for related products: Microsoft 365 (Office) apps and Microsoft Defender protections will receive security-related updates for a longer timeline in some contexts, but those are separate policies and do not replace OS-level support indefinitely.
• The lifecycle end means vendors may start dropping compatibility for Windows 10 over time; browser, driver, and app vendors could shift resources away from legacy support, increasing security and usability risks.

Final assessment: strengths, risks, and recommended approach​

• Strengths
• Microsoft’s consumer ESU program provides a pragmatic, low-cost path for many users to stay protected for an additional year.
• Multiple enrollment routes (OneDrive, Rewards, or pay) give users flexibility.
• The EEA concession that removes a compulsory OneDrive backup requirement for free ESU shows Microsoft’s responsiveness to regional regulatory pressure.
• Risks and limitations
• ESU is a short-term bridge, not a long-term solution. It covers only security updates, leaving non-security bugs and new features out.
• The OneDrive route can entail additional storage costs; the Rewards route requires activity/participation to accumulate points and has had occasional redemption issues.
• EEA users must manage Microsoft account sign-ins every 60 days; failure to do so interrupts updates. Enforcement details outside the EEA (how Microsoft will detect and validate cloud sync) remain operationally nuanced.
• Organizations face higher and increasing ESU costs compared with consumers.
• Recommendation
• If your device is eligible for Windows 11 and you value long-term security and compatibility, upgrade to Windows 11 as soon as practicable.
• If your device cannot upgrade, enroll in ESU using the route that best fits your tolerance for cloud use, account sign‑in, or cost—do it before October 14, 2025 to minimize the exposure window.
• Treat ESU as a time-limited mitigation: use the year to plan either a hardware refresh, OS upgrade, or a migration to an alternative platform with long-term support.