Windows 10 ESU Guide: How to Extend Security Updates After Oct 14, 2025

Microsoft has given Windows 10 users a narrow, conditional lifeline: you can keep receiving security updates after the OS’s official end-of-support date — but only if you complete a short, specific checklist and enroll in the consumer Extended Security Updates (ESU) pathway before the deadline. (support.microsoft.com)

Background​

Microsoft set a firm end-of-support date for Windows 10: October 14, 2025. On that date Microsoft will stop providing routine feature updates, quality updates, and normal technical assistance for consumer editions of Windows 10. For many households and small offices that cannot immediately move to Windows 11, Microsoft published a limited consumer ESU option that provides security-only updates for a single additional year — in effect extending critical and important security patches through October 13, 2026 for enrolled devices. (microsoft.com)
This consumer ESU path is explicitly narrow in scope: it delivers only security updates categorized by Microsoft’s Security Response Center (Critical and Important). It does not include new features, non-security bug fixes, or full technical support. Microsoft describes ESU as a short-term bridge to give users time to migrate to a modern, supported OS. (learn.microsoft.com)

---

Who is eligible — and what you must do to qualify​

Eligible devices and editions​

• Devices must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation editions). (learn.microsoft.com)
• Devices must have the latest cumulative updates installed; Microsoft’s August 2025 cumulative included fixes that help the ESU enrollment flow surface correctly on eligible PCs.
• The consumer ESU path is intended for personal-use devices. Domain-joined enterprise systems, kiosk-mode devices, or enterprise-managed MDM machines are excluded and should use the enterprise ESU channels instead. (microsoft.com)

Account and enrollment restrictions​

• Enrollment requires signing into the Windows device with a Microsoft Account (MSA) that has administrator privileges. Local accounts will not qualify for consumer ESU enrollment. This is a significant change that affects privacy-conscious users who prefer local accounts. (support.microsoft.com)
• Microsoft has opened a staged “Enroll now” wizard inside Settings → Update & Security → Windows Update; the option appears for eligible devices once the requisite cumulative updates are installed. (microsoft.com)

Timing and coverage window​

• Enrolling gives you security-only patching coverage from October 15, 2025 through October 13, 2026. You can enroll after October 14, 2025, but doing so risks a gap in protection until enrollment completes. Microsoft recommends enrolling early to avoid that exposure. (microsoft.com)

---

How Microsoft is letting consumers get ESU (three enrollment paths)​

Microsoft provides three consumer enrollment routes — two free options and one paid option — all surfaced through the built-in enrollment experience in Settings. The choices are functionally equivalent in delivering the year of security updates; they differ only in how Microsoft validates eligibility or payment.

• Redeem 1,000 Microsoft Rewards points. If you already have Rewards points, this is a free method to secure ESU for the account’s linked devices. (microsoft.com)
• Sync your Windows Backup to Microsoft OneDrive (enable Windows Backup/settings sync to the Microsoft Account). Microsoft frames this as a no-cash option, though you may need to purchase additional OneDrive storage depending on the size of your backup and current 5 GB free limit. (microsoft.com)
• Pay the one-time consumer ESU fee (valued at $30 USD per device, purchased through the Microsoft Store inside Settings). Microsoft notes a single ESU license can be applied to up to 10 eligible devices tied to the same Microsoft Account. (microsoft.com)

Nota bene: independent outlets and community reporting repeated these three options; however, specific Rewards mechanics (how many points awarded for individual actions) can change frequently and should be treated as variable. The claim that "downloading the Bing app alone nets 500 points" is an anecdote that may not be consistently reproducible and should be verified in your Rewards account before assuming you can meet the threshold that way. Treat points-based enrollment as possible but not guaranteed without checking your own account details.

---

Why some users are sticking with Windows 10​

• Hardware limitations. Windows 11 imposes stricter hardware requirements (TPM 2.0, Secure Boot, and a list of supported CPU families). Many older PCs — especially those with 2nd- or 3rd-generation Intel chips or early AMD platforms — cannot upgrade without hardware changes. That reality leaves a sizable user base that prefers a supported security path rather than risky hacks.
• Compatibility and stability. Some legacy applications and peripherals work better on Windows 10 today. IT pros and power users who must validate mission-critical software often need time to test Windows 11 before committing.
• Cost and disruption. Replacing a family’s fleet of machines or performing motherboard-level upgrades is expensive and disruptive. ESU provides breathing room to budget and plan transitions without exposing systems to immediate new vulnerabilities.

That said, relying on ESU is a short-term decision; Microsoft intends it as a bridge, not a permanent alternative. Use the ESU year deliberately to plan migration paths, not as indefinite procrastination.

---

The trade-offs and risks you must understand​

Security scope is limited​

• ESU delivers only Critical and Important security updates as defined by Microsoft’s Security Response Center. It does not include feature updates, non-security quality fixes, or general technical support. You may still face stability or reliability problems that would have been fixed by conventional quality servicing. (learn.microsoft.com)

Privacy and account trade-offs​

• Enrollment requires a Microsoft Account and, in the OneDrive option, synchronization to Microsoft cloud services. This introduces vendor centralization and changes the privacy calculus for users who deliberately used local accounts to limit cloud linkage. Consider this trade-off carefully before enrolling. (support.microsoft.com)

Timing matters — avoid an exposure gap​

• If you wait until after October 14, 2025 to enroll, your device will immediately be without Microsoft-delivered security updates until your enrollment completes. The ESU program remains open to enroll until October 13, 2026, but that doesn’t retroactively fill unpatched time. Plan to enroll before the cutoff to avoid an exposure window. (microsoft.com)

Unsupported Windows 11 workarounds are risky​

• Community workarounds exist to install Windows 11 on hardware that fails Microsoft’s checks (registry toggles, modified ISOs, third-party tools). Microsoft does not support installations on unsupported hardware and has warned such devices may be blocked from receiving updates. Relying on unsupported installs may leave a system unpatched or unstable. For users with unsupported hardware, ESU is the safer short-term path.

Regulatory/compliance implications​

• If you operate in regulated industries or need a persistently supported platform for compliance, ESU’s one-year window may be inadequate. Organizations and individuals with compliance obligations should plan migration promptly, as ESU is unlikely to meet long-term regulatory requirements.

---

What else Microsoft will continue or extend​

Microsoft clarified that Microsoft 365 (Office) apps on Windows 10 will receive security updates for a longer window than the base OS: Microsoft will continue providing security updates for Microsoft 365 apps on Windows 10 through October 10, 2028, to help customers migrate their productivity workloads safely. This is separate from ESU and applies specifically to Microsoft’s Office/Microsoft 365 apps—an important nuance for users who depend on those apps. (support.microsoft.com)

---

Practical step-by-step: how to prepare and enroll (recommended checklist)​

Follow these steps in order to maximize your protection and minimize risk:

• Verify your Windows 10 version:
• Open Settings → System → About and confirm you are running Windows 10, version 22H2. If not, update to 22H2 now.
• Install all pending Windows updates:
• Install the latest cumulative updates (August 2025 and subsequent patches) and reboot. These fixes can be required to surface the ESU enrollment wizard.
• Back up everything:
• Create a full disk image (Macrium Reflect, Acronis, or similar) and an independent file backup to external media or alternative cloud storage. Do at least two backups: one local image and one remote or external file copy.
• Decide which ESU path you will use:
• Redeem 1,000 Microsoft Rewards points, or enable Windows Backup/OneDrive sync, or be prepared to purchase the $30 ESU through the Microsoft Store in Settings. Check your Rewards balance or OneDrive storage situation first. (microsoft.com)
• Sign in with a Microsoft Account:
• Create or sign in with an MSA that has administrator privileges on the PC. Local accounts will not qualify. Consider privacy implications before switching to an MSA. (tomshardware.com)
• Open Settings → Update & Security → Windows Update:
• Look for the “Enroll now” ESU wizard. Follow the prompts to choose your enrollment method and complete the flow.
• Confirm enrollment and check Windows Update history:
• After enrollment, verify the ESU license has been applied and that the device is receiving security updates from Microsoft.
• Use the ESU year deliberately:
• Test Windows 11 compatibility, budget hardware replacement, and plan migrations for critical apps. Do not treat ESU as a permanent solution.

---

Migration options during your ESU year (Oct. 15, 2025–Oct. 13, 2026)​

During the ESU year you should decide a long-term plan. Prioritize the option that best balances cost, compatibility, and security:

• Upgrade to Windows 11 (if eligible):
• Run PC Health Check and Windows Update compatibility checks. If eligible, upgrade after full backups and testing. Upgrading preserves full support and feature updates.
• Replace failing or incompatible hardware:
• For many aging machines (CPU too old, no TPM), a new Windows 11 PC is the cleanest path. Look at trade-in programs to reduce net cost.
• Migrate to an alternative OS (Linux or ChromeOS Flex):
• For users who primarily do web and basic productivity work, modern Linux distributions or ChromeOS Flex can extend the useful life of older hardware with strong security and community support.
• Virtualize or host legacy workloads in the cloud:
• Windows 365 or Azure Virtual Desktop can move critical Windows apps to cloud-hosted Windows 11 instances, removing endpoint upgrade burdens at the cost of recurring cloud fees.
• Hybrid approach:
• Keep a short list of legacy machines on ESU while moving most daily workflows to modern hardware or cloud services. This reduces risk exposure and concentrates migration effort.

---

Frequently overlooked technical steps (do these now)​

• Export BitLocker recovery keys and verify their storage location.
• Deauthorize software tied to the old machine (Adobe, iTunes-style activations).
• Compile a list of essential peripherals and check driver availability on Windows 11 or alternative OS options.
• Test mission-critical line-of-business applications in a Windows 11 VM or on a trial Windows 11 install to identify compatibility blockers early.

---

Final analysis: when to enroll, and when to move on​

• Enroll in consumer ESU if your device is ineligible for Windows 11, you need time to validate critical apps, or replacing the hardware today is not financially feasible. ESU is low-cost and practical for households that need breathing room. (microsoft.com)
• Avoid using ESU as a long-term strategy. The program provides a finite window (one year) and deliberately excludes feature and reliability fixes. Use the year to plan and complete migration.
• Don’t rely on unsupported Windows 11 bypasses; they may block future updates and leave you exposed. ESU is safer for unsupported hardware than an unsupported OS install.
• Be mindful of the Microsoft Account requirement and cloud trade-offs. If you refuse an MSA or cloud sync for privacy reasons, ESU’s consumer path may be unacceptable and hardware replacement or OS switching should be prioritized. (tomshardware.com)

---

Conclusion​

Microsoft’s consumer ESU pathway transforms a hard end-of-support date into a manageable migration runway — but only if you act deliberately, meet the eligibility requirements, and accept the program’s trade-offs. Enroll before October 14, 2025, verify you’re on Windows 10 version 22H2 with all cumulative updates applied, secure your backups, and choose the enrollment route that fits your circumstances. Use the ESU year to test Windows 11 compatibility, budget hardware replacements, or migrate workloads to cloud or alternate OSes. This is not a permanent fix — it’s a one-year extension of security coverage designed to buy you predictable time for a responsible upgrade path. (support.microsoft.com)

---

Source: PCMag UK Want to Stay on Windows 10? Do This Before Support Ends on Oct. 14

 

[ChatGPT]

Microsoft will stop regular support for Windows 10 on October 14, 2025, but a newly expanded consumer Extended Security Updates (ESU) program gives users a one‑year safety net — and for the first time offers legitimate free enrollment paths if you meet the conditions. This feature‑limited safety net lets you continue receiving critical and important security patches through October 13, 2026, without moving to Windows 11 immediately, but it comes with firm prerequisites, operational trade‑offs, and privacy/usability catches that every Windows 10 user should understand before the deadline.

Overview​

Microsoft’s official end‑of‑support date for Windows 10 is October 14, 2025. After that date, the OS will no longer receive routine security updates, feature updates, or standard technical assistance — unless you enroll in the consumer ESU program. The consumer ESU option is time‑limited: it covers eligible Windows 10 systems for one additional year, ending October 13, 2026.
There are three enrollment routes for consumer ESU:

• Use Windows Backup to sync your PC Settings to OneDrive (no additional ESU charge; free enrollment).
• Redeem 1,000 Microsoft Rewards points to cover ESU for one year.
• Pay a one‑time fee of $30 (USD) plus tax to enroll a Microsoft account and receive ESU for up to one year.

All routes require certain system and account conditions to be met — notably, the device must be running Windows 10 version 22H2, have all pending updates installed, and you must be signed in with a Microsoft account (local accounts are no longer eligible for consumer ESU). Enrollment is performed from Settings > Update & Security > Windows Update when the ESU enrollment wizard appears.

---

Background: Why Microsoft is offering consumer ESU​

Microsoft wants Windows 11 adoption to continue, but a significant portion of the installed base cannot easily move to Windows 11 because of stricter hardware requirements (TPM 2.0, Secure Boot, supported CPU lists). To avoid leaving those users suddenly exposed to unpatched security holes, Microsoft created a consumer ESU route similar in spirit to enterprise ESU programs. Unlike enterprise ESU, the consumer program:

• Is limited to one year (Windows 10 support extension through October 13, 2026).
• Provides only security updates classified as critical or important.
• Does not include feature updates, bug‑fix patches outside security bulletins, or full technical support.
• Requires a Microsoft account for enrollment and licensing.

Microsoft has also extended select app support windows: Microsoft 365 Apps on Windows 10 will continue to receive security updates through October 10, 2028, and certain Microsoft browser components will see extended update support beyond the OS end of life. These app‑level extensions are separate from the ESU program and come with their own limitations.

---

What you need to check right now​

Before October 14, 2025, make sure your PC meets the ESU prerequisites. If you delay, you can still enroll after the cutoff, but your device will be unprotected until you do so.

• Confirm your Windows 10 version
• Go to Settings > System > About and verify you're on Windows 10, version 22H2. If you’re on an older feature update, update to 22H2 now.
• Install all pending updates
• Some rollout features and enrollment helpers are delivered via cumulative updates. Make sure Windows Update shows No pending updates.
• Install the August 2025 cumulative update if required
• A cumulative update released in mid‑2025 addressed issues with the enrollment wizard. If your Settings page doesn’t show ESU enrollment, confirm you have the latest cumulative update installed.
• Switch to, or sign in with, a Microsoft account
• Consumer ESU requires a Microsoft account; local accounts cannot enroll. The Microsoft account can cover up to 10 devices for ESU licensing once enrolled.
• Make a backup
• Back up your files and system image before making enrollment changes. Even though one free ESU option is to enable Windows Backup, you should keep an independent local or external backup.

If any of these checks fail, address them now. The ESU enrollment wizard is rolled out progressively, so it may not appear immediately even if you meet every requirement.

---

How the three consumer ESU paths work (and the trade‑offs)​

1) Free enrollment by syncing Windows Backup to OneDrive​

• What you do: Enable Windows Backup and choose to back up your PC settings to OneDrive (this is done in the Windows Backup settings).
• What you get: One year of ESU security updates at no additional cost.
• Key caveats:
• A Microsoft account is required.
• OneDrive free storage is limited (5 GB by default). If your backup exceeds that, you’ll need to purchase additional OneDrive storage or selectively back up only the settings required for ESU enrollment.
• This option ties your ESU eligibility to cloud sync — many privacy‑conscious users consider this a material trade‑off.

2) Redeem 1,000 Microsoft Rewards points​

• What you do: Use the Microsoft Rewards program and redeem 1,000 points to apply to ESU enrollment.
• What you get: One year of ESU updates without spending cash.
• Key caveats:
• Earning 1,000 points requires active use of Microsoft services that award points (searching with Bing, using Microsoft Edge and other qualifying activities). For users who don’t already participate in Rewards, accruing 1,000 points can take time.
• A Microsoft account is required.

3) Pay a one‑time $30 USD per account​

• What you do: Make a one‑time purchase through the ESU enrollment wizard tied to your Microsoft account.
• What you get: One year of ESU updates (same coverage as the other routes) for the account, which can be applied to up to 10 devices.
• Key caveats:
• The charge is per Microsoft account (covering up to 10 eligible devices), not necessarily per physical device, but your account must manage those devices.
• The fee only buys one year of ESU, after which devices will need another plan or upgrade.

---

Step‑by‑step enrollment checklist​

• Confirm system is updated to Windows 10 version 22H2.
• Install all Windows Updates, including any cumulative updates released in mid‑2025 that enable the enrollment wizard.
• Switch to a Microsoft account (or sign in) with administrator privileges on the PC.
• Go to Settings > Update & Security > Windows Update.
• Look for an Enroll now link or ESU enrollment wizard under the Check for updates button.
• Follow prompts and choose:
• Enable Windows Backup (OneDrive) OR
• Redeem Microsoft Rewards points OR
• Pay the $30 one‑time fee.
• Confirm ESU enrollment status under the Windows Update page and note licensing details (one Microsoft account can cover up to 10 devices).
• Keep a record of the Microsoft account used to enroll; you’ll need it to manage and apply the ESU license to other devices.

If the wizard doesn’t appear, check for pending updates and the mid‑2025 cumulative patch. The enrollment rollout is phased so availability may vary by device and region.

---

Practical advice and timelines​

• Act now if you plan to use ESU: waiting until days before October 14 could leave your PC temporarily unprotected if the enrollment wizard hasn’t appeared on your device yet.
• If you can upgrade to Windows 11 safely, that remains the long‑term recommendation: it receives ongoing feature and security updates beyond the ESU window.
• If your PC cannot meet Windows 11 hardware requirements, ESU is a short‑term bridge — not a permanent fix. Use the additional year to plan hardware replacement, migrate data, or evaluate alternatives such as Linux distributions for older machines.
• If you rely on Microsoft 365 Apps: note that Microsoft will continue to deliver security updates for Microsoft 365 Apps on Windows 10 through October 10, 2028, but feature updates and certain support paths will be constrained after set cut‑offs. Plan app migration carefully.

---

Security and privacy trade‑offs: what Microsoft’s free route means​

Offering a free ESU route tied to OneDrive backup lowers the economic barrier for many users, but it also increases the company’s cloud tethering of consumer devices. The free OneDrive option:

• Encourages users to adopt a Microsoft account and cloud backup, which improves user recoverability and data continuity.
• Requires users to accept more data in cloud sync; some users will find that an unacceptable privacy trade‑off.
• Can force purchases of additional OneDrive storage if the default 5 GB is insufficient, which converts a “free” ESU into an indirect paid dependency.

The Microsoft Rewards option is an attractive loophole for heavy Microsoft service users, but it’s not a universal shortcut. New users who do not already participate in Rewards may need weeks to build points.
The paid $30 route is straightforward and arguably the cleanest privacy option (no required cloud backup), but it still mandates a Microsoft account.

---

Risks of staying on Windows 10 beyond October 2026​

ESU buys you a single year of critical security updates. After October 13, 2026, unless Microsoft changes the program, Windows 10 consumer devices will be out of official security coverage.
Risks include:

• Exposure to new, unpatched vulnerabilities discovered after the ESU coverage window ends.
• Gradual vendor abandonment: hardware vendors and third‑party software makers may cease driver and application updates for Windows 10, increasing stability risks.
• Limited technical support: ESU does not include routine technical assistance, and Microsoft has clear support limitations for Microsoft 365 Apps on Windows 10 after end‑of‑support dates.
• Compliance and enterprise risks: For business users, using out‑of‑support OS versions can violate internal security policies and regulatory requirements.

Plan your migration or replacement path during the ESU year rather than relying on continued concessions.

---

Alternatives to ESU: upgrade, replace, or switch platforms​

If ESU is not suitable, consider these alternatives:

• Upgrade to Windows 11 (if hardware is compatible and you accept Microsoft’s support policies).
• Replace the PC with a Windows 11 device or a modern Windows‑compatible laptop.
• Reinstall a supported Linux distribution on older hardware for continued security updates and long lifecycles.
• Use a virtual machine on a newer host for legacy Windows 10‑only apps, isolating the old OS from the internet.
• Evaluate extended enterprise ESU or paid third‑party security solutions if you are a business with critical dependencies.

Each option has trade‑offs in cost, compatibility, and user experience. Use the ESU year to test and execute whichever path you choose.

---

What Microsoft’s concessions reveal about the Windows upgrade landscape​

Microsoft’s consumer ESU signals several important realities:

• A non‑trivial number of Windows 10 users cannot upgrade due to hardware constraints or policy choices (e.g., corporate images, TPM issues, or user preference).
• Microsoft recognizes the security risk of leaving those users immediately unprotected and has chosen to provide a managed, time‑limited solution rather than forcing an abrupt cutoff.
• The company is increasingly insistent on Microsoft accounts and cloud services as part of its device management and security model — even for consumers seeking a short ESU extension.
• The ESU program and app extension windows are temporary concessions, not a long‑term commitment to keep Windows 10 viable.

For users, the net effect is a controlled extension that buys planning time, not a permanent lifeline.

---

Deep dive: common questions and authoritative clarifications​

Does ESU include bug fixes or new features?​

No. Consumer ESU only provides security updates categorized as critical or important. Feature updates, general bug fixes, and broader technical support are not part of the ESU package.

Can a single ESU purchase cover multiple machines?​

Yes. Once you enroll a Microsoft account, you can apply the consumer ESU license to up to 10 eligible Windows 10 devices associated with that account. That makes the $30 option especially cost‑effective for small households with several Windows 10 PCs.

If I enroll after October 14, will I receive previous updates?​

If you enroll after the OS end date, Microsoft’s enrollment flow is designed to deliver past ESU‑eligible updates for the period covered, but your device will be unprotected from the end‑of‑support date until enrollment is completed. Acting earlier avoids that gap.

Is a local Windows account acceptable for ESU?​

No. A Microsoft account is required for consumer ESU enrollment, even if you choose to pay. Devices using only a local account cannot enroll.

Will Microsoft change ESU terms or extend the period?​

Policy decisions can change. Treat the ESU year as the commitment Microsoft has made today. Building migration plans as if support ends definitively on October 13, 2026 is the responsible course.
(If any of the specific KB numbers, patch rollouts, or phased availability details appear different on your device, update Windows and check Settings > Update & Security for the latest wizard. Some rollout details were addressed by cumulative updates in mid‑2025; if your device lacks those patches, the enrollment UI might not be present.)

---

Recommended action plan — a concise checklist to follow this week​

• Verify Windows edition and version (Settings > System > About). Update to 22H2 if needed.
• Install all available Windows Updates now.
• Convert or sign in with a Microsoft account (admin level).
• Set up local backups to external media and consider a full system image.
• Decide your ESU route:
• Enable Windows Backup for the free OneDrive option (confirm OneDrive capacity), or
• Redeem 1,000 Microsoft Rewards points if you already have them, or
• Purchase the $30 ESU license via the enrollment wizard.
• Enroll through Settings > Update & Security > Windows Update and confirm ESU license shows active.
• Use the ESU year to test Windows 11 upgrades on non‑critical hardware or to source replacement hardware and complete migrations.

---

Final analysis: who should use ESU — and who should not​

ESU is a pragmatic stopgap for individual users and households who:

• Cannot upgrade due to hardware incompatibility or cost.
• Need additional time to plan data migration, purchase new hardware, or test Windows 11 compatibility.
• Want to keep key Windows 10 devices running safely for a defined, short period.

ESU is not a good choice for users who:

• Prefer to avoid cloud tie‑ins and Microsoft account dependencies (the enrollment options effectively require both).
• Expect ongoing feature updates, vendor support, or full technical assistance during the extension period.
• Are seeking a long‑term solution beyond the one‑year window.

For users in the latter groups, immediate migration to newer hardware, a fresh OS build (Linux or supported Windows 11 device), or virtualized legacy environments are better long‑term strategies.

---

Microsoft’s one‑year consumer ESU program is a sensible engineering compromise: it reduces the immediate security cliff for millions of Windows 10 users while nudging people toward Windows 11 and cloud services. The program’s free paths make the extension accessible, but they also create new dependencies on Microsoft accounts and OneDrive. Treat ESU as time to act, not a reason to postpone upgrading indefinitely. Use the covered year to secure backups, evaluate upgrade readiness, and make a migration plan that aligns with your privacy, compatibility, and budget goals.

---

Source: PCMag Australia Want to Stay on Windows 10? Do This Before Support Ends on Oct. 14

 

[ChatGPT]

Microsoft’s October deadline for Windows 10 support has become a hard stop for millions of users — but the company quietly carved out no-cost escape routes that let many stay patched for another year without handing over cash. What once looked like a strict $30 paywall for Extended Security Updates (ESU) has been softened into three enrollment paths: pay, redeem Microsoft Rewards points, or enable Windows backup/sync — and each option carries real-world tradeoffs that every Windows 10 user should understand before the clock runs out.

Background / Overview​

Microsoft will end mainstream updates and technical support for Windows 10 on October 14, 2025. After that date, devices that remain on Windows 10 will no longer receive ongoing security and quality updates unless they are enrolled in the consumer Extended Security Updates (ESU) program. ESU for consumer devices extends security-only updates for one additional year, through October 13, 2026, but excludes new features, non-security bug fixes, and general technical support. (support.microsoft.com) (support.microsoft.com)
The company positioned ESU as a bridge — not a long-term plan — to give users more time to migrate to Windows 11 or replace aging hardware. Enrollment is being rolled out via a built-in wizard in Settings on eligible Windows 10 devices running version 22H2. Microsoft states enrollment is available to individual consumer devices in select markets and ties ESU entitlements to a Microsoft account. (microsoft.com) (support.microsoft.com)

---

What Microsoft announced — the straight facts​

• End of regular Windows 10 support: October 14, 2025. After this date, Microsoft will stop providing free security updates and technical support for Windows 10. (support.microsoft.com)
• Consumer ESU coverage window: devices enrolled in ESU receive critical and important security updates through October 13, 2026. ESU does not include feature updates, broad bug fixes, or general technical support. (support.microsoft.com)
• Enrollment options (consumer): three paths are published by Microsoft:
• At no additional cost if you are syncing your PC settings (Windows Backup / Settings sync).
• Redeem 1,000 Microsoft Rewards points.
• Buy ESU for $30 USD (one-time purchase) — a single ESU license can be used on up to 10 devices linked to the same Microsoft account. (microsoft.com) (support.microsoft.com)

These are the official, load-bearing claims from Microsoft. Independent outlets and community reporting have confirmed the rollout details and the account requirements, though some user-reported wrinkles have emerged in practice. (theverge.com)

---

The Free Alternatives — what they are and how they work​

1) Sync settings / Windows Backup (no cash outlay)​

Microsoft’s enrollment wizard lists “Use Windows Backup to sync your settings to the cloud” as a free path to ESU enrollment. Practically, this means enabling the Windows backup / Sync your settings option under Settings → Accounts → Windows backup (or Sync your settings) and signing in with a Microsoft account. The company treats this as evidence the device is linked to a Microsoft account and can be managed for ESU license mapping. (support.microsoft.com)

• Benefit: no cash required; covers the device for ESU updates through Oct 13, 2026.
• Caveat: you must sign in with a Microsoft account; if you use local accounts on Windows 10, you’ll be forced to add a Microsoft account for enrollment. This has frustrated privacy-conscious users and those who deliberately avoid cloud-linked accounts. (tomshardware.com)

A second practical caveat: Microsoft’s description of “Windows Backup” includes OneDrive folder syncing as an available option, but the minimal settings-sync option does not require you to store large files in OneDrive. That said, if you intend to use OneDrive to back up your entire profile or files (as some guides suggest), the free OneDrive tier is only 5 GB and many users will need to buy additional storage to fully migrate large profiles. Confirmed: Microsoft’s free OneDrive allocation is 5 GB. (support.microsoft.com)

2) Redeem 1,000 Microsoft Rewards points (no cash if you play the game)​

Microsoft allows consumers to redeem 1,000 Microsoft Rewards points for ESU enrollment. Rewards points are earned by participating in Microsoft’s ecosystem — web searches on Bing, using the Rewards dashboard, completing offers, and possibly promotional bonuses. In principle this gives a no-cash route, but in practice the points take effort or prior participation to accumulate. Microsoft’s Rewards program and dashboard are market-dependent and the availability of specific offers (for example, one-off bonuses for installing the Bing app) can vary by region and time. Many users report inconsistent awarding of one-off point offers; the 500-point Bing-app pop-up described in some coverage is not guaranteed and has been unreliable for many. Treat any claims of “install Bing and you’re halfway there” with caution unless you personally verify the current offer in your Rewards dashboard. (microsoft.com)

3) Pay $30 USD (still an option)​

If you prefer the simplest route and already use a Microsoft account, a one-time $30 ESU purchase will enroll you and can be applied to up to 10 devices under the same Microsoft account. This option is straightforward but explicitly limited: it only covers security updates for one year (through Oct 13, 2026) and excludes broader support or non-security updates. (support.microsoft.com)

---

The enrollment reality — how you actually sign up​

• Update your PC to Windows 10 version 22H2 if it isn’t already on that build. ESU is only available for devices running 22H2. (support.microsoft.com)
• Sign into Windows with a Microsoft account (ESU enrollment requires it). If you currently use a local account you’ll be prompted to sign into Microsoft as part of the wizard. (support.microsoft.com)
• Open Settings → Update & Security → Windows Update. Look for the “Enroll in Extended Security Updates” banner or link. The enrollment wizard lets you choose one of the three paths (sync, redeem Rewards, or buy). (learn.microsoft.com)
• Complete the wizard and confirm enrollment. You’ll receive ESU entitlements tied to the Microsoft account used during enrollment and the device will receive the security updates distributed through Windows Update for ESU subscribers. (support.microsoft.com)

Note: Microsoft is rolling out the enrollment UI in waves; not every eligible PC will see the “Enroll now” option immediately. The company says every eligible device will be shown the enrollment option before October 14. If you don’t see it yet, make sure Windows Update is current and check again. (pureinfotech.com)

---

Why this situation exists — the hardware bottleneck and Windows 11 requirements​

The tight hardware bar for Windows 11 — especially TPM 2.0, UEFI Secure Boot, and a curated list of supported CPUs — left many perfectly functional Windows 10 PCs ineligible for the free Windows 11 upgrade. Microsoft’s stated rationale is raising the baseline security posture of the platform; TPM 2.0 and virtualization-based security are core to that argument. But the result is a large installed base of devices that can’t upgrade cleanly, pushing users into either hardware replacements, unofficial workarounds, or extended support subscriptions. (microsoft.com)

• Minimum Windows 11 requirements include a 1 GHz 64‑bit CPU with 2 or more cores on Microsoft’s supported list, 4 GB RAM, 64 GB storage, UEFI firmware with Secure Boot capability, and TPM 2.0. These requirements exclude many older (but still serviceable) PCs. (microsoft.com)

Microsoft has published guidance on enabling TPM 2.0 where hardware supports it but has taken a firm line on keeping the security baseline high. Unofficial community workarounds to install Windows 11 on unsupported hardware exist, but they are not supported or guaranteed for the long term. (support.microsoft.com)

---

What Microsoft didn’t loudly advertise (and why it matters)​

• Microsoft requires a Microsoft account for ESU enrollment and license mapping. That requirement applies even if you choose to pay the $30 fee. The company calls it out in the ESU documentation; many outlets independently confirmed the practical effect: local-only users must sign into or create a Microsoft account to enroll. This is an important privacy and logistics implication. (support.microsoft.com)
• ESU enrollment does not bring you feature updates, support for new drivers, or troubleshooting for non-security issues. Microsoft positions ESU purely as a security lifeline for users who genuinely can’t upgrade immediately. If your use-case requires fixes or new drivers, ESU will not help. (support.microsoft.com)
• Microsoft will continue to provide some ancillary services beyond 2025: Microsoft 365 Apps (Office) will continue to receive security updates for a limited period beyond Windows 10 end-of-support — Microsoft indicates security updates for Microsoft 365 on Windows 10 will continue for three years (until October 10, 2028), even though mainstream support for Office desktop apps on Windows 10 ends earlier. This mixed timeline creates a partial reprieve for productivity apps while the OS itself becomes an increasing risk if not enrolled in ESU. (support.microsoft.com)

---

Practical risks and tradeoffs — what users must weigh​

• Security vs. convenience: Enrolling in ESU (via any path) buys time against critical and important threats, but it’s only a one-year extension and not a substitute for migrating to a supported OS. Relying on ESU repeatedly is not a long-term strategy. (support.microsoft.com)
• Privacy and account requirements: The Microsoft Account requirement is non-trivial for users who prefer local accounts or who manage privacy by avoiding cloud-linked identities. Those users face a sticky choice: add a Microsoft account just for ESU or accept being cut off from Microsoft's security updates after Oct 14, 2025. (tomshardware.com)
• Microsoft Rewards variability: The Rewards route can be free, but it’s not universally practical. Earning 1,000 points requires time, a prior engagement in the Rewards system, or exploiting limited-time promotions — and users have reported inconsistent behavior for specific point offers (for example, the “install the Bing app” 500-point bonus is region- and time-dependent and has produced mixed results for claimants). The Rewards path is attractive in marketing copy but inconsistent in practice. Flag this as unreliable unless you verify offers in your Rewards dashboard. (microsoft.com)
• OneDrive storage and data: If you choose the backup/sync path and intend to store sizeable user data in OneDrive to facilitate migration, be aware Microsoft’s free OneDrive plan provides only 5 GB. Users with larger profiles will either need to selectively sync settings only (the minimal requirement) or purchase additional OneDrive storage. Over-quota OneDrive accounts can enter read-only states and may eventually lose data if not remedied. Don’t assume full-profile cloud backups are truly “free.” (microsoft.com)

---

Step-by-step action plan for the next 30–60 days​

• Confirm your device is on Windows 10 22H2 and fully updated. If it’s not on 22H2, plan an update first. (support.microsoft.com)
• Decide which path you prefer: upgrade to Windows 11 (if eligible), enroll in ESU now (free via sync or Rewards, or $30), migrate files to another OS, or migrate workloads to cloud PCs. Document the pros/cons for your environment. (microsoft.com)
• If you choose ESU:
• Sign in to a Microsoft account (or create one) and enable the sync/Windows Backup option if you want the free sync path. (support.microsoft.com)
• Open Settings → Update & Security → Windows Update and click the “Enroll in Extended Security Updates” link when available. If you don’t see it, ensure latest KB updates are installed and check again (Microsoft is rolling the feature out in waves). (learn.microsoft.com)
• Choose your enrollment option (sync, redeem points, or pay) and complete the wizard. Verify the enrollment status in Windows Update after completion. (support.microsoft.com)
• If you plan to upgrade to Windows 11, run the PC Health Check app and review the compatibility checklist (TPM, UEFI, CPU). If you fail the check, contact your OEM for guidance on enabling TPM or weigh hardware replacement options. (microsoft.com)
• Back up critical files externally (local disk, external drive, or a cloud service you control). Do not rely solely on the ESU “sync” step as a full backup strategy. Maintain an offline copy before any significant OS migration.
• For multi-device households: a single $30 ESU license can cover up to 10 devices tied to the same Microsoft account, so evaluate whether pooling devices under one account makes financial sense. Alternatively, redeeming points or enabling sync per device will also work, but enrollment is device‑by‑device. (support.microsoft.com)

---

Critical analysis — strengths, weaknesses, and the bigger picture​

The strengths​

• Microsoft’s move to add no-cost ESU enrollment paths recognizes the real-world hardware mismatch many users face. Offering non-monetary routes increases access to essential security patches for users who cannot upgrade. The flexibility is pragmatic and reduces the number of abandoned, vulnerable machines on the internet. (blogs.windows.com)
• Tying ESU to Microsoft accounts enables centralized license management (one license for up to 10 devices), lowering friction for multi-PC households and simplifying enforcement. This is a sensible UX improvement compared with enterprise-only ESU models. (windowscentral.com)

The weaknesses and risks​

• The Microsoft account requirement is a policy friction point. Requiring cloud identity for a security extension on devices that were previously usable with local accounts drives privacy concerns and undermines the experience for users who intentionally avoided cloud tie-ins. For many, the choice becomes “trade privacy for security” — an unacceptable dichotomy for some. (tomshardware.com)
• The Rewards route is market- and time-dependent. Points-earning behavior changes by country and often includes limited-time promotions that may not be available when you need them. Community reports show that some Rewards offers (e.g., the 500-point Bing-app bonus) can be unreliable and sometimes fail to credit points. That makes the “free via Rewards” narrative weaker in practice than it reads in headlines. (learn.microsoft.com)
• The OneDrive-upgrade caveat: using OneDrive to fulfill the “sync” requirement is superficially free but realistically may force a paid step for many users with larger profiles. Microsoft’s free 5 GB cap is small by modern standards and will require purchases for users who expect to back up big folders or photos. (microsoft.com)

The broader implications​

This episode illustrates the tension between platform security and user choice. Microsoft’s insistence on tighter hardware lanes for Windows 11 is defensible from a security standpoint, yet the downstream cost to users is tangible. The ESU program is a stopgap — the company is balancing risk reduction (fewer vulnerable endpoints) with practical migration tools. For the industry, this is a reminder that OS transitions have social, economic, and privacy impacts that vendors must manage beyond pure technical measures. Community discussion and troubleshooting threads reflect real anxiety and a spectrum of reactions from resigned upgrades to cautious take‑backs.

---

Final verdict and recommendations​

Windows 10’s end-of-support deadline is real and non-negotiable: October 14, 2025. Microsoft’s ESU program gives consumers a narrow, clearly defined lifeline through October 13, 2026, and the company has added no-cost enrollment paths that make ESU accessible to many users without immediate outlay. At the same time, the devil is in the details: Microsoft account requirements, region-dependent Rewards offers, and OneDrive’s limited free storage mean the “free” options are not universally frictionless.
Short-term recommendations:

• If you can upgrade to Windows 11 cleanly and want the long-term support path, plan the migration now.
• If your PC cannot run Windows 11 and you want to remain on Windows 10 beyond Oct 14, 2025, enroll in ESU as early as possible using whichever path best fits your privacy and practical constraints.
• Back up files locally before enabling cloud sync and before any major OS changes.
• Don’t assume promotional Rewards offers will be available or reliable — verify in your Microsoft Rewards dashboard and keep realistic expectations.

This moment is a hard deadline for defenders and procrastinators alike. ESU buys time, not eternity. Treat the free paths as the short-term safety harness they are, plan your migration or replacement strategy now, and avoid relying on one-time shortcuts as long-term security policy. (support.microsoft.com)

---

WindowsForum readers have been tracking this transition closely; community threads are full of deployment tips, reports of rollout timing, and practical tricks for enabling TPM or enabling settings sync. Use those discussions as a supplement to official guidance — but rely on the Microsoft support pages and verified documentation for the official rules that determine ESU eligibility and timing. (pureinfotech.com)
The clock is ticking — but for many users, Microsoft has quietly handed out a ladder. Use it wisely.

---

Source: Technology Org Windows 10's Death Clock Is Ticking—But You Can Cheat It for Free - Technology Org