Microsoft’s official support for Windows 10 ends on October 14, 2025 — but Microsoft has opened a one‑year safety valve for consumers: the Windows 10 Consumer Extended Security Updates (ESU) program. You can keep receiving critical and important security patches through October 13, 2026 by enrolling through an on‑device wizard, and — crucially — Microsoft now offers three enrollment routes, two of which carry no additional cash cost: syncing your PC settings with Windows Backup (OneDrive), or redeeming 1,000 Microsoft Rewards points. A one‑time paid option (roughly $30 USD) remains available for users who prefer it.
Windows 10 was launched in 2015 with an expected lifecycle that culminates in October 2025. After that date Microsoft will no longer deliver routine feature updates, non‑security fixes, or broad technical support for the OS — leaving unpatched systems exposed to newly discovered vulnerabilities. The Consumer ESU program is a time‑limited, safety‑first response: it is explicitly security‑only, intended as a bridge to help households and individual users transition on their own timetable.
Important operational details:
If you choose to stay on Windows 10 with ESU, do so deliberately: verify prerequisites, keep up with Windows Update, maintain robust backups, and schedule a migration plan inside the ESU window. The offer is generous and pragmatic — but it’s temporary, and the safest option for most users remains upgrading to a supported platform when feasible. (support.microsoft.com, learn.microsoft.com)
Source: PCMag Want to Stay on Windows 10? Do This Before Oct. 14
Background
Windows 10 was launched in 2015 with an expected lifecycle that culminates in October 2025. After that date Microsoft will no longer deliver routine feature updates, non‑security fixes, or broad technical support for the OS — leaving unpatched systems exposed to newly discovered vulnerabilities. The Consumer ESU program is a time‑limited, safety‑first response: it is explicitly security‑only, intended as a bridge to help households and individual users transition on their own timetable. Why Microsoft did this (briefly)
- Windows 11’s stricter hardware requirements (TPM 2.0, Secure Boot, newer CPUs) have left many older PCs ineligible for a supported upgrade, creating a sizable installed base that can’t move to Windows 11 without hardware replacement.
- The ESU program reduces immediate risk of large numbers of unpatched consumer PCs, while nudging users toward Microsoft accounts, OneDrive, and the company’s cloud ecosystem. (blogs.windows.com, crn.com)
What the Consumer ESU actually covers — and what it does not
The Consumer ESU program supplies only critical and important security updates as defined by Microsoft’s security response processes. It does not include:- New Windows features
- Non‑security bug fixes or quality updates
- General technical support for Windows 10 issues
The three enrollment routes — step‑by‑step choices
When the ESU enrollment wizard becomes available on an eligible device, you’ll be presented with three options:- Sync Windows Backup (OneDrive) to your Microsoft account — free. This option requires enabling Windows Backup / settings sync so Microsoft can confirm account‑backed device control. Note that the free OneDrive tier is 5 GB, so heavy backups might require additional storage.
- Redeem 1,000 Microsoft Rewards points — free if you already have the points. Rewards points are earned through Microsoft services such as Bing searches, purchases in Microsoft Store, or other Rewards activities. (bleepingcomputer.com, support.microsoft.com)
- One‑time purchase (approx. $30 USD) tied to your Microsoft account — paid route. The single purchase license can be applied to up to 10 eligible devices registered to the same Microsoft account, which can make this option cost‑efficient for multi‑PC households.
Eligibility and technical prerequisites (what to check right now)
Before you try to enroll, confirm the following on every Windows 10 PC you want covered:- The PC is running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation) and has the latest cumulative updates installed.
- You are signed in with a Microsoft account that has administrator rights on the device — the ESU license is tied to a Microsoft account and child accounts are not eligible. Local accounts are not sufficient for enrollment.
- The device is not Active Directory domain‑joined or MDM‑managed (commercial/enterprise scenarios use separate ESU programs). Microsoft Entra registered devices may work, but Entra‑joined or domain‑joined machines usually are excluded.
- Install the latest cumulative updates before trying to enroll — Microsoft issued fixes to correct enrollment wizard crashes and rollout bugs, so a fully patched system improves your chances. If enrollment UI is missing, update Windows and check again.
Enrollment rollout timeline and practical notes
Microsoft began testing the enrollment wizard with Windows Insiders and rolled the feature out to broader consumer devices in July 2025, with broad availability expected by mid‑August 2025. There were initial reports of an enrollment glitch that prevented some users from signing up; Microsoft issued an update that addressed that problem and improved the wizard’s reliability. Consumers should keep Windows Update current to surface the enrollment experience. (blogs.windows.com, techradar.com)Important operational details:
- A single consumer ESU license can be applied to up to 10 eligible devices registered under the same Microsoft account; the license is account‑centric rather than per‑PC product‑key centric. This matters for families with multiple older PCs.
- ESU enrollment must be completed before or during the ESU program window — you can enroll any time through October 13, 2026, and if you enroll after October 14, 2025 you’ll receive past and future ESU patches that apply.
Microsoft 365 (Office) on Windows 10: what continues and what changes
Microsoft clarified that while Microsoft 365 Apps will continue to run on Windows 10 after October 14, 2025, they will be governed by the Modern Lifecycle Policy. To help during transition:- Microsoft will continue delivering feature updates for Microsoft 365 Apps on Windows 10’s Current Channel through August 2026 (with enterprise channel end dates staggered into 2027).
- Security updates for Microsoft 365 Apps on Windows 10 will be provided through October 10, 2028 — three additional years of security maintenance on Office apps even after Windows 10 reaches end of support. However, Microsoft’s support for incidents will be limited if the issue occurs only on Windows 10 and not on Windows 11. (learn.microsoft.com, support.microsoft.com)
Is ESU the right move for you? Strengths and who benefits
The ESU program is a pragmatic, conservative solution for consumers who need time to plan or who cannot replace hardware immediately. Notable strengths:- Cost flexibility: two free enrollment routes (OneDrive sync or Rewards) remove the financial barrier for many users. (support.microsoft.com, bleepingcomputer.com)
- Low friction: the Enrollment Wizard reduces manual entitlement tracking; a single Microsoft account can cover up to 10 devices.
- Limited risk window: ESU buys one year of security updates — enough time to plan a sensible upgrade, test Windows 11 compatibility, or stagger hardware refreshes.
- Households with multiple older PCs that are functional but not Windows 11 eligible.
- Users who need time to budget a PC replacement or validate critical applications on Windows 11.
- Anyone who prefers to avoid making rushed hardware decisions before the safety net of security patches expires.
Risks, downsides, and important caveats
ESU is not a long‑term strategy. Key risks and limitations to weigh carefully:- Security updates only: ESU does not deliver feature updates or non‑security bug fixes; over time, gaps between platform capabilities and modern app/driver requirements will widen.
- Limited technical support: Microsoft will not provide comprehensive technical support for Windows 10 the way it does for supported OSes; support for Microsoft 365 on Windows 10 will also be constrained.
- Compatibility and testing risks: ESU patches are published for legacy code paths and may not be tested against every older driver/firmware combination. Community reporting has shown that cumulative updates occasionally cause regressions on specific hardware; maintain full backups and recovery media.
- Privacy and account tradeoffs: the two free paths require a Microsoft account and (for the OneDrive option) cloud sync. Users who prefer purely local accounts or who’re cautious about cloud syncing will face a tradeoff.
- Regulatory/compliance concerns: for business users or regulated individuals, running an unsupported OS even with ESU may not satisfy compliance requirements — enterprise ESU programs and vendor SLAs differ from consumer ESU. Consumer ESU is expressly not for domain‑joined or MDM‑managed commercial machines.
Alternatives and parallel strategies
ESU is one path. Consider these alternatives and complementary measures:- Upgrade eligible PCs to Windows 11 — free for qualifying devices; this is the most robust long‑term solution. Use PC Health Check and Windows Update to test eligibility.
- Replace the device with a Windows 11 PC if hardware is old; Microsoft and OEMs are offering trade‑in, recycling, and promotional deals timed around the end‑of‑life. (support.microsoft.com, crn.com)
- Use Windows 365 Cloud PC or virtualization: Windows 10 devices accessing Windows 11 Cloud PCs or Windows 365 may receive ESU coverage through cloud entitlements at no additional charge, depending on plan — and Cloud PC consumption can defer hardware replacement by shifting workloads to the cloud. This is often more costly but can be operationally convenient.
- Move critical workloads to other supported platforms (Linux VMs, dedicated servers) where appropriate, while retaining the older PC for legacy tasks offline.
Practical checklist: how to prepare and enroll (recommended sequence)
- Confirm Windows 10 version: open Settings → System → About, or Settings → Update & Security → Windows Update and verify you are on 22H2 with latest updates installed.
- Create or validate your Microsoft account: ensure it’s an adult account with administrator privileges on the PC. If you currently use a local account, plan a temporary sign‑in.
- Backup everything: create both a file backup (external drive or cloud) and a full system image. ESU helps with security patches, but recovering from a bad update or unrelated hardware failure requires independent backups.
- Decide enrollment path: choose OneDrive sync (free), Rewards (if you have 1,000 points), or the $30 purchase. If you pick OneDrive and need more than 5 GB, purchase only the amount of storage you need — don’t overcommit. (support.microsoft.com, bleepingcomputer.com)
- Update Windows and run the Enrollment Wizard: Settings → Update & Security → Windows Update → Enroll now (if visible). If the option isn’t visible, install pending updates and reboot; the wizard rollout is phased and may appear later.
- Confirm enrollment and periodically check Windows Update history to verify ESU patches are being delivered. Plan to complete migration to a supported OS before October 13, 2026.
FAQ — short, authoritative answers
- How long will consumer ESU coverage last?
Consumer ESU coverage runs from October 15, 2025 through October 13, 2026; you can enroll any time during that window. - Can I use one ESU license for multiple PCs?
Yes — a consumer ESU license tied to a Microsoft account can be applied to up to 10 eligible devices associated with that account. - Will Office (Microsoft 365 apps) keep getting updates on Windows 10?
Microsoft 365 Apps will receive feature updates through August 2026 (Current Channel) and security updates through October 10, 2028, but support is limited and Microsoft may ask you to move to Windows 11 for issues that occur only on Windows 10. (learn.microsoft.com, support.microsoft.com) - What if my device is domain‑joined (work PC)?
Consumer ESU is not for domain‑joined or enterprise‑managed devices — organizations should use corporate ESU programs via volume licensing or consult their IT provider.
Critical takeaways and recommended timeline
- Short term (now–September 2025): Confirm device eligibility, make full backups, and decide whether you’ll enroll in ESU or prioritize an immediate upgrade/replacement. Installing the latest cumulative updates today reduces enrollment friction later.
- Near term (October 2025): If you intend to keep a PC on Windows 10 beyond October 14, 2025, enroll in ESU promptly to ensure the device continues receiving critical patches. If you plan to migrate, use ESU only as a controlled bridge.
- Longer term (through 2026): Treat ESU as a one‑year breathing room — use the time to test Windows 11 compatibility, budget for hardware refreshes, and migrate important workflows to supported platforms. Don’t view ESU as a way to indefinitely defer modernization. (support.microsoft.com, crn.com)
Conclusion
Microsoft’s consumer ESU program provides a practical, low‑cost (or free) way for individuals and households to keep Windows 10 devices secure for one additional year after the October 14, 2025 end‑of‑support date. The three‑path enrollment model — Windows Backup (OneDrive) sync, 1,000 Microsoft Rewards points, or a $30 one‑time purchase — gives users flexibility while Microsoft nudges the ecosystem toward account‑centric cloud services. ESU is a bridge, not a destination: it buys time to plan migrations, test Windows 11 compatibility, or budget for new hardware, but it does not replace the long‑term advantages of moving to a modern, supported OS.If you choose to stay on Windows 10 with ESU, do so deliberately: verify prerequisites, keep up with Windows Update, maintain robust backups, and schedule a migration plan inside the ESU window. The offer is generous and pragmatic — but it’s temporary, and the safest option for most users remains upgrading to a supported platform when feasible. (support.microsoft.com, learn.microsoft.com)
Source: PCMag Want to Stay on Windows 10? Do This Before Oct. 14
