Windows 10 ESU: One-year security updates you can enroll in (2025–2026)

Microsoft has quietly handed Windows 10 users a one‑year safety valve — but only if you act before October 14, 2025 and meet a short checklist to enroll in the consumer Extended Security Updates (ESU) program. This move buys eligible PCs a single additional year of security‑only updates through October 13, 2026, but it comes with trade‑offs, account requirements, and a hard deadline that should sharpen, not delay, your migration planning. (support.microsoft.com) (support.microsoft.com)

Background / Overview​

Microsoft set Windows 10’s end‑of‑support date as October 14, 2025; after that date standard security updates, feature updates, and most technical support stop for consumer editions. For users who cannot or will not upgrade immediately to Windows 11, Microsoft opened a limited consumer ESU path that delivers critical and important security fixes for one additional year — through October 13, 2026. This is explicitly a temporary, security‑only bridge, not a full continuation of product support. (support.microsoft.com) (support.microsoft.com)
Microsoft has surfaced the consumer ESU enrollment as a staged “Enroll now” experience inside Settings → Update & Security → Windows Update. The rollout is phased; many machines will need a recent cumulative update to see the option. In August 2025 Microsoft published updates intended to stabilize and surface the wizard — installing the latest Windows updates increases the chance the enrollment toggle appears. (support.microsoft.com, windowslatest.com)

---

What the consumer ESU actually offers​

• Duration: Security updates only from the end of mainstream servicing (Oct 14, 2025) through October 13, 2026. No feature updates, no non‑security quality fixes, and no broad technical support. (support.microsoft.com)
• Eligible OS: Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation) with current cumulative updates installed. (support.microsoft.com)
• Enrollment surface: The ESU enrollment wizard appears in Settings → Update & Security → Windows Update under an “Enroll now” link when your device qualifies and the staged rollout reaches it. (support.microsoft.com)
• Per‑account license reuse: A single ESU license can be applied to up to 10 eligible devices tied to the same Microsoft Account. (support.microsoft.com)

These points mirror Microsoft’s lifecycle and ESU documentation and have been corroborated by independent coverage and community reporting. (support.microsoft.com, techradar.com)

Enrollment options (consumer)​

When the enrollment wizard is available, Microsoft gives three consumer routes to obtain ESU for a year:

• Enable Windows Backup/settings sync (OneDrive) — no additional cash cost, but a Microsoft Account is required and you may need extra OneDrive storage depending on what you back up. (support.microsoft.com)
• Redeem 1,000 Microsoft Rewards points — free if you already have the points in your Rewards account. (support.microsoft.com)
• One‑time purchase (roughly $30 USD, local equivalent + tax) — a paid route that can cover up to 10 devices on the same Microsoft Account. (support.microsoft.com)

Independent tech outlets and community threads report the same three choices and emphasize that all consumer enrollment paths require a Microsoft Account. That account requirement is significant for privacy‑conscious users and anyone still using a local Windows account. (techradar.com)

---

How to confirm eligibility and prepare (practical checklist)​

Before attempting to enroll, complete this short checklist to avoid delays or enrollment failures:

• Confirm Windows edition and build: open Settings → System → About and verify you’re on Windows 10, version 22H2. If not, upgrade to 22H2 first. (support.microsoft.com)
• Install all pending updates: run Windows Update and install the latest cumulative and servicing stack updates — Microsoft’s August 2025 cumulative updates addressed early bugs that blocked the ESU wizard for some devices. (support.microsoft.com)
• Sign into a Microsoft Account with administrator privileges on that device. Local accounts and child accounts are not eligible for consumer ESU enrollment. (support.microsoft.com)
• Back up your data: create a full backup or system image before you change enrollment status or enable additional sync features. Treat ESU as a stopgap, not a long‑term solution.
• Check Settings → Update & Security → Windows Update for an “Enroll now” banner. If it’s missing after updates and a reboot, wait — Microsoft is rolling the experience out in waves. (support.microsoft.com, windowslatest.com)

If you see the Enroll option, the on‑screen wizard will guide you through sign‑in and the three enrollment choices. If the wizard crashes or fails, installing the August 2025 patches (released as KB5063709 and related out‑of‑band fixes) fixed many early issues according to Microsoft’s release notes. (support.microsoft.com)

---

Step‑by‑step: enrolling in ESU (consumer path)​

• Open Settings → Update & Security → Windows Update and select Check for updates. Install any pending updates and reboot. (support.microsoft.com)
• Look for the Windows 10 end‑of‑support header and the Enroll now link beneath it. Click Enroll now when visible.
• Sign in with your Microsoft Account if prompted (this is required). The wizard will validate prerequisites. (support.microsoft.com)
• Choose one of the three enrollment options: enable Windows Backup (OneDrive), redeem 1,000 Microsoft Rewards points, or make the one‑time purchase (~$30). Follow the prompts to complete enrollment. (support.microsoft.com, techradar.com)
• Confirm enrollment status in Settings → Update & Security → Windows Update. The device should now receive security‑only updates while enrolled. (support.microsoft.com)

---

What ESU does not do — important limitations​

• ESU delivers only security updates classified as Critical or Important by Microsoft’s Security Response Center. Expect no feature updates, no non‑security quality fixes, and no general technical support beyond activation/installation help. If a driver, firmware, or compatibility issue arises that requires a non‑security update, ESU won’t fix it. (support.microsoft.com)
• ESU is time‑boxed. Coverage ends October 13, 2026 for consumer enrollments; you cannot use ESU as a long‑term support plan. Plan migration or hardware replacement during the ESU year. (support.microsoft.com)
• Domain‑joined, MDM‑managed, kiosk mode, and many enterprise scenarios are excluded from the consumer path — those use commercial ESU arrangements. If your device is managed by an organization, check with IT. (support.microsoft.com)

These constraints mean ESU reduces near‑term exposure to newly discovered threats but does not remove broader risk vectors tied to outdated drivers, unsupported apps, or hardware flaws.

---

The trade‑offs: why Microsoft designed it this way​

Microsoft’s consumer ESU is clearly framed as a bridge. Two practical drivers explain the design:

• Windows 11’s stricter hardware requirements (TPM 2.0, Secure Boot, newer CPU lists) left a large installed base unable to upgrade in place, creating a security gap Microsoft wanted to close temporarily. (windowscentral.com)
• The consumer enrollment model nudges users toward Microsoft Accounts and OneDrive settings sync (or the Rewards ecosystem). This reduces friction for license tracking and provides Microsoft a straightforward way to manage a one‑year entitlement across multiple devices tied to a single account. That account binding is why even paid enrollments must use an MSA.

These design choices reduce administrative complexity for Microsoft and lower barriers for many consumers — but they also raise valid concerns about account linkage, privacy, and long‑term vendor lock‑in.

---

How much will it cost? The real economics​

• Paid option: roughly $30 USD for a one‑time purchase that can cover up to 10 devices on the same Microsoft Account. That price point is modest for households wanting a quick, paid route. (support.microsoft.com)
• Free options: redeem 1,000 Microsoft Rewards points (no cash) if you already have them, or enable Windows Backup / settings sync (OneDrive) to enroll without paying. The OneDrive route may require purchasing additional OneDrive storage depending on how much you back up. (support.microsoft.com)

If you need extended time and do not want a Microsoft Account or cloud sync, buying the paid license and tying it to an MSA may be the simplest compromise — but note that the paid license still requires an MSA for activation.

---

Risks and caveats — what to watch for​

• Security is narrower than most users assume. ESU only covers security patches labeled Critical or Important; many reliability and compatibility fixes are outside the ESU scope. Plan accordingly. (support.microsoft.com)
• Enrollment rollout is phased and sometimes glitchy. Some users did not see the Enroll button until they installed specific August 2025 updates (KB5063709 fixed several enrollment bugs). If you find the UI missing, update and keep checking. (support.microsoft.com, windowslatest.com)
• The Microsoft Account requirement is non‑trivial for some users. If you prefer local accounts for privacy, you’ll either need to create/sign into an MSA or accept a different migration route. The enrollment flow may prompt you to enable settings sync; read prompts carefully before enabling broad backups.
• OneDrive storage cost: the “free” OneDrive enrollment is only free if your existing OneDrive quota covers the required backup; heavy backups may force OneDrive purchases. Budget for that possibility. (support.microsoft.com)
• ESU is not a long‑term substitute. Use the year to migrate: upgrade to Windows 11 if your hardware supports it, buy a new Windows 11‑capable PC, or plan an alternative OS strategy. Industry coverage and community reporting urge treating ESU as breathing room, not a destination. (techradar.com)

---

Alternatives and migration choices​

If you’re deciding whether to enroll in ESU, run through these alternatives and consider timing:

• Upgrade to Windows 11 (if eligible): use PC Health Check to confirm compatibility and install via Windows Update. This is the long‑term supported path. (support.microsoft.com)
• Purchase a new Windows 11 (or Copilot+) PC: modern AI‑forward hardware is not only about Windows 11 features; it’s also where Microsoft will invest future development. If your device is old or underpowered, a hardware refresh can be the cleaner option.
• Enroll in consumer ESU as temporary protection: buy time while you plan and execute a secure migration. Use the ESU year to build backups, inventory apps, and verify compatibility. (support.microsoft.com)
• Migrate to an alternative OS (Linux or ChromeOS): a viable path for many older devices, especially if you primarily use web apps and lightweight workflows. This is often the greenest option versus buying a new PC.

---

How to accumulate 1,000 Microsoft Rewards points (brief, practical note)​

Redeeming 1,000 Microsoft Rewards points is a non‑cash route if you already participate in Rewards. Points are earned by:

• Using Bing and permitted Microsoft services for searches and activities,
• Completing Rewards offers, and
• Making qualifying purchases in Microsoft Store or linked services.

If you don’t already have the points, the time it takes to earn 1,000 varies by activity and locale — analysts recommend the OneDrive sync route or the modest paid purchase if timing is short. Treat Rewards as a fallback rather than a guaranteed quick fix unless you already have a balance.

---

Mobility and enterprise nuance (short)​

This consumer ESU is not the same as enterprise ESU offerings. Businesses and managed devices should consult corporate licensing and IT guidance: domain‑joined and MDM‑managed devices typically follow commercial ESU paths, which differ in procurement and scope. If a device is Entra/Microsoft Entra joined vs Entra‑registered, eligibility can differ — check Microsoft’s documentation for the precise semantics. (support.microsoft.com)

---

Final analysis: who should enroll — and who should not​

• Enroll if: your PC cannot upgrade to Windows 11, you need measured time to migrate, and you accept the Microsoft Account requirement and ESU’s security‑only scope. For many households with a handful of PCs, the $30 paid option or OneDrive sync will be the most pragmatic short‑term choices. (support.microsoft.com, techradar.com)
• Don’t enroll if: you can upgrade to Windows 11 now, or you plan to replace the device immediately. ESU is not a replacement for upgrading when you’re able; it’s a stopgap. (support.microsoft.com)
• Use caution if: you rely on specialized software that may require feature updates, or you’re highly privacy‑focused and resist Microsoft Account linkage — the enrollment process will force a decision.

Community reporting and major outlets agree: ESU’s value is real but narrow. Treat enrollment as a responsible pause button — buy time, but not complacency. (techradar.com)

---

Quick checklist to act right now (one‑page actionable summary)​

• Confirm you’re on Windows 10 version 22H2.
• Install all pending Windows updates (especially August 2025 cumulative updates). (support.microsoft.com)
• Sign into a Microsoft Account with admin rights on the device. (support.microsoft.com)
• Open Settings → Update & Security → Windows Update and look for Enroll now.
• Choose one enrollment route (OneDrive sync, redeem 1,000 Rewards points, or pay ~$30). (support.microsoft.com)
• Verify enrollment and confirm the device receives security updates. (support.microsoft.com)

---

Closing verdict​

Microsoft’s consumer ESU is a pragmatic, targeted safety net: it gives eligible Windows 10 machines another year of security patches while forcing a timely choice between upgrading, replacing, or migrating. The program’s constraints — security‑only patches, a Microsoft Account requirement, and a one‑year time limit — mean this is breathing room, not a refuge. For most users the best use of the ESU year is to finalize a migration plan, test key applications on Windows 11 or an alternative OS, and execute a secure transition before the 2026 cutoff. Act before October 14, 2025 if you want uninterrupted protection at the moment Windows 10 reaches end of support. (support.microsoft.com)
If enrollment is not yet visible, update, reboot, and check Windows Update repeatedly — Microsoft is rolling the enrollment wizard out in phases and released fixes to unblock earlier issues. Don’t mistake the ESU year for indefinite safety: use it deliberately and migrate on your terms. (windowslatest.com)

---

Source: Mashable You can stay on Windows 10 for another year for free — if you act by Oct. 14

Microsoft has given Windows 10 users a narrow, conditional lifeline: if you want to keep receiving security updates after the platform’s official end-of-support date, there’s a single, time-sensitive action you must complete — enroll the eligible PC in Microsoft’s consumer Extended Security Updates (ESU) program before October 14, 2025. (support.microsoft.com)

Background / Overview​

Microsoft set a firm end-of-support date for Windows 10: October 14, 2025. On that date Microsoft will stop delivering routine feature updates, quality updates, and the normal stream of security fixes for consumer Windows 10 editions. For users who cannot or will not move to Windows 11 immediately, Microsoft published a limited consumer ESU pathway that provides security-only updates for one additional year, running from October 15, 2025 through October 13, 2026. (support.microsoft.com) (support.microsoft.com)
The consumer ESU is explicitly narrow in scope: it delivers only security updates designated Critical or Important by Microsoft’s Security Response Center; it does not include new features, non-security quality fixes, or general technical support. Microsoft intends the ESU option as a short-term bridge while users migrate to a supported OS. This consumer path is different from the legacy enterprise ESU programs, which historically had higher, tiered pricing and different enrollment mechanics. (support.microsoft.com)

The one thing you must do — in plain terms​

If you want to keep Windows 10 secure after October 14, 2025, you must do this before that date:

• Update your PC to Windows 10, version 22H2 and install the latest cumulative updates (including the August 12, 2025 cumulative that fixes enrollment issues, commonly referenced as KB5063709).
• Sign into Windows with a Microsoft Account (an ordinary local account will not qualify for consumer ESU enrollment).
• Open Settings → Update & Security → Windows Update and use the “Enroll now” ESU wizard to choose one of the available enrollment options.

Completing those steps before October 14, 2025 is the gating requirement for the one‑year consumer ESU window. If you wait until after the cutoff and have not enrolled, your device will no longer receive Microsoft-delivered security updates unless you later enroll under the remaining ESU window (enrollment is allowed until the consumer ESU program ends on October 13, 2026), but practical access and rollout are phased and reliability is best when you act early. (support.microsoft.com) (bleepingcomputer.com)

---

Eligibility and technical prerequisites​

Which editions qualify​

• Eligible editions: Windows 10, version 22H2 — Home, Pro, Pro Education, and Workstation editions only.
• Devices joined to Active Directory, Entra joined (but not Entra registered), kiosk-mode devices, or devices managed via enterprise MDM are excluded from the consumer ESU path and must use enterprise channels instead. (support.microsoft.com)

Required updates and the KB you must have​

Microsoft published a cumulative update (August 12, 2025) that both documents the end-of-support and fixes known problems with the ESU enrollment wizard. That update is KB5063709 (OS builds 19044.6216 and 19045.6216 in the release notes). Installing that cumulative update improves the likelihood the “Enroll now” experience appears and resolves early wizard crashes reported by users. If you haven’t installed that LCU (latest cumulative update) and the associated servicing stack updates, you may not see the enrollment option. (support.microsoft.com) (bleepingcomputer.com)

Account and backup requirements​

• A Microsoft Account (MSA) is required for consumer ESU enrollment — local Windows accounts are not accepted even if you plan to pay. The ESU license is tied to the Microsoft Account and can be reused on up to 10 eligible devices associated with that account. (support.microsoft.com)
• One free enrollment path requires enabling Windows Backup / PC Settings sync to OneDrive — that sync must be active for the free route to apply. Keep in mind OneDrive’s free quota is limited (commonly 5 GB); if you need to store larger system backups or many files you may face additional storage costs from Microsoft or choose the Rewards/purchase path instead. (support.microsoft.com)

---

How to enroll step-by-step (what most users will see)​

• Confirm your Windows version:
• Settings → System → About → look for Windows 10 version 22H2.
• Install updates:
• Settings → Update & Security → Windows Update → Check for updates. Make sure the August 2025 cumulative (KB5063709) and any pending updates are installed and the PC has been restarted. (support.microsoft.com)
• Sign in with a Microsoft Account:
• Convert or add an MSA as an administrator on the machine if you currently use a local account. The MSA cannot be a child account. (support.microsoft.com)
• Open the Enroll wizard:
• Settings → Update & Security → Windows Update. If your device is eligible and the staged rollout reached you, a link to “Enroll now” will appear. Click it.
• Choose an enrollment option:
• Free: Enable Windows Backup / PC Settings sync to OneDrive.
• Free: Redeem 1,000 Microsoft Rewards points from your Microsoft Rewards balance.
• Paid: A one-time $30 USD option (or local currency equivalent) to cover up to 10 eligible devices on the same Microsoft Account. (support.microsoft.com)
• Complete the wizard:
• Follow on-screen prompts to complete enrollment. After enrollment, security updates designated Critical/Important will be delivered through Windows Update for the ESU coverage window. (support.microsoft.com)

---

Why KB5063709 matters (and what it fixes)​

KB5063709 is not optional for reliable enrollment. The update was released in August 2025 and explicitly corrected enrollment-wizard bugs that caused the ESU wizard to open and then close unexpectedly in some earlier builds. Without this fix users reported the enrollment UI failing to load; installing the update resolves that known issue and improves the staged rollout experience. If you’re preparing to enroll, install KB5063709 first and check Windows Update again for the enrollment prompt. (bleepingcomputer.com) (support.microsoft.com)

---

What ESU gives you — and what it doesn’t​

What you get​

• Monthly security-only updates classified as Critical or Important through October 13, 2026.
• A consumer-friendly enrollment surface via Windows Update with free and paid paths.
• A per-account license that may be reused on up to 10 devices. (support.microsoft.com)

What you do not get​

• No feature updates, no non-security quality updates, and no general technical support from Microsoft under consumer ESU.
• No guarantee of long-term compatibility with new apps or security tooling introduced after the coverage window.
• Enterprise-level telemetry or management — this is a consumer stopgap only. (support.microsoft.com)

---

Strengths: why the ESU option is useful​

• Accessibility: Microsoft offers two free consumer paths (OneDrive sync and Microsoft Rewards) in addition to a modest paid option — making short-term protection broadly affordable for households. (support.microsoft.com)
• Time to plan: ESU buys a discrete, predictable window to test apps, migrate critical workflows, budget for new hardware, or perform staged Windows 11 rollouts in environments where immediate hardware replacement is impractical.
• Simplicity for consumers: Enrollment through Settings aims to be straightforward compared with older enterprise ESU procurement processes. (support.microsoft.com)

---

Risks, caveats, and notable privacy concerns​

• Microsoft Account requirement: The consumer ESU license is tied to an MSA; local accounts are not eligible. That ties your extended support to a single vendor account model and may be unacceptable for privacy-conscious users. If you refuse an MSA, ESU is not an option. (support.microsoft.com)
• OneDrive storage limits: The free backup route depends on OneDrive sync; the free tier is limited. If your backup needs exceed the free quota you may face additional storage charges to remain eligible.
• Short duration and scope: ESU is a one-year bridge. Relying on it as a long-term plan is risky because future vulnerabilities will accumulate and third-party vendors may stop testing on outdated OS versions. Treat ESU as an operational pause, not a destination. (support.microsoft.com)
• Rollout fragility: The enrollment experience is being delivered in phases and early users reported glitches that required KB5063709 to fix. If you wait until the last minute you may encounter rollout or availability issues. Act early. (bleepingcomputer.com)
• E-waste and vendor incentives: Critics argue this approach nudges users toward buying new hardware and migrating to Windows 11, which has stricter requirements; that may increase e-waste and present affordability problems for many households. Estimates about device counts and revenue are imperfect and should be treated cautiously. (windowscentral.com)

---

Who should use ESU — and who should not​

Use ESU if:​

• Your device cannot meet Windows 11 hardware requirements and you need time to plan a safe migration.
• You have legacy peripherals or software that require a controlled migration calendar and cannot be immediately ported to Windows 11.
• You seek a short, affordable, and supported buffer to protect sensitive data while you test upgrades.

Avoid ESU if:​

• You expect or require ongoing feature development and long-term platform support.
• You refuse a Microsoft Account and do not want to tie device identity to vendor-managed cloud sync.
• You are in a regulated environment where a one-year security-only window does not satisfy compliance obligations — enterprise ESU or platform migration may be required.

---

Practical migration plan: how to use the ESU year wisely​

• Inventory every device now — note Windows 10 version, CPU model, TPM state, Secure Boot, and whether the device is eligible for Windows 11.
• For devices that can upgrade: test critical apps on Windows 11 in a sandbox or VM, validate drivers, and pilot upgrades on non-essential PCs first.
• For incompatible devices: plan replacement windows, evaluate refurbished options, and factor in trade-in or recycling to reduce waste.
• For mission-critical legacy apps: consider virtualization, isolated legacy endpoints, or moving workloads to cloud-hosted virtual desktops.
• Harden every device that will remain on Windows 10: enable firewalls, limit administrative accounts, segment network access, and increase monitoring. ESU diminishes risk but does not eliminate targeted threats.

---

Quick checklist — do this right now​

• Confirm Windows 10 version: ensure it is 22H2. (support.microsoft.com)
• Install all pending updates and the August 2025 cumulative KB5063709. (support.microsoft.com, bleepingcomputer.com)
• Sign into Windows with a Microsoft Account (admin-level). (support.microsoft.com)
• Open Settings → Update & Security → Windows Update and look for “Enroll now”; if present, enroll before October 14, 2025. (support.microsoft.com)
• Back up everything to an independent external drive in addition to any OneDrive sync. ESU does not replace a good backup strategy.

---

Addressing common questions and objections​

“Can I just keep using Windows 10 without enrolling?”​

Technically yes, but after October 14, 2025 your system will no longer receive monthly security fixes unless enrolled in ESU. Unsupported systems become progressively riskier targets for malware, ransomware, and exploit kits. For home users that handle sensitive tasks (banking, business, health data), running an unsupported OS is a material security decision. (support.microsoft.com)

“Is the paid $30 option necessary?”​

No — it’s one of three enrollment paths. If you enable Windows Backup/PC Settings sync to OneDrive you can enroll for free; alternatively, redeem 1,000 Microsoft Rewards points. The $30 paid route is convenient and covers up to 10 devices on the same Microsoft Account if the other free options aren’t viable. (support.microsoft.com)

“Will ESU keep my PC usable forever?”​

No. ESU only supplies security patches for one additional year and will not add features or address many stability issues. You should plan to migrate to a supported OS or replace the hardware during the ESU period. (support.microsoft.com)

---

Critical evaluation — strengths, business incentives, and the public debate​

Microsoft’s consumer ESU program is pragmatic: it prevents an immediate security cliff, offers low-cost consumer routes, and provides predictable time to migrate. That is a clear strength for households with older but otherwise functional hardware. However, the program also raises legitimate concerns about privacy and vendor lock-in due to the mandatory Microsoft Account and OneDrive sync for free enrollment. The requirement nudges users deeper into Microsoft’s ecosystem at a time when some households were intentionally avoiding cloud accounts and centralized identity models.
There’s also a broader policy debate: critics argue that the ESU program and the enforced cutoff accelerate hardware churn and may compound e-waste, particularly where Windows 11’s hardware baseline excludes older but otherwise serviceable machines. Estimates about the commercial upside to Microsoft and the number of remaining Windows 10 devices vary and are inherently speculative; treat such numbers with caution. Independent coverage suggests Microsoft could realize significant enterprise revenue via ESU, but consumer economics look modest thanks to the free routes. These financial projections are contested and worth being flagged as estimates, not audited facts. (windowscentral.com)

---

Final verdict and recommended next steps​

Microsoft has created a single, short, and conditional path to keep Windows 10 secure for an additional year — but it’s exactly that: a short-term bridge. The most important immediate action for users who plan to remain on Windows 10 is to update to version 22H2, install KB5063709, sign into a Microsoft Account, and complete ESU enrollment before October 14, 2025. Doing so preserves access to Critical and Important security updates through October 13, 2026 while you plan a responsible migration.
Use the ESU year deliberately: inventory, test, and migrate critical workloads; budget for hardware replacement if necessary; and ensure strong local backups. Treat ESU as temporary insurance, not a permanent platform choice. The door to the consumer ESU program is open now, but it is narrow, time-limited, and tied to explicit technical and account prerequisites — act early and plan clearly. (support.microsoft.com)

---

Every paragraph above is drawn from Microsoft’s ESU documentation and concurrent coverage that tracked the staged rollout and the KB5063709 fix; users should verify the enrollment option appears on their device after installing the August 2025 cumulative update and ensure their backups are complete before making any significant change. (support.microsoft.com, bleepingcomputer.com)

---

Source: Tom's Guide Want to keep Windows 10? Here’s the one thing you must do before the October deadline

Microsoft’s decision to sunset Windows 10 has moved from distant calendar noise to a pressing deadline: the OS reaches end of support on October 14, 2025, and Microsoft is offering a limited consumer path to buy one more year of security-only updates — including a surprising set of free entry routes — while governments and security agencies urge users to upgrade to Windows 11 or otherwise harden their environments. (support.microsoft.com)

Background​

For over a decade, Windows 10 was the default Windows for many households and businesses: reliable, familiar, and broadly compatible with existing hardware. That era is concluding because Microsoft’s product lifecycle policy sets fixed support windows, and those windows have a security and operational consequence when they close.
Microsoft’s own lifecycle page confirms the date: October 14, 2025 is the official end-of-support day for Windows 10. After that date consumer editions will no longer receive feature updates, routine quality updates, or standard security fixes — unless the machine is enrolled in the Extended Security Updates program. (support.microsoft.com)
At the same time, market trackers show Windows 11 has surged, overtaking Windows 10 in global usage share in mid‑2025 as upgrades and new PC sales accelerated. This milestone is part of the motivation behind Microsoft’s messaging: migrate to Windows 11 for ongoing protection and feature development. (gs.statcounter.com, neowin.net)

---

What Microsoft is offering: the Windows 10 consumer ESU (what it covers and what it doesn't)​

Microsoft has opened a consumer Extended Security Updates (ESU) pathway intended as a one‑year bridge for users who can’t — or don’t want to — move to Windows 11 immediately.

What the consumer ESU covers​

• Critical and important security updates only. No new features, no functional improvements, and no general technical assistance beyond the security patches themselves.
• Coverage window: ESU for consumers extends security patches through October 13, 2026 — one year after the official end-of-support date. (microsoft.com)

What the consumer ESU does not include​

• Feature updates, non-security bug fixes, or new functionality.
• Ongoing technical support comparable to mainstream support.
• Any guarantee it will be offered after the specified one‑year extension.

Microsoft explicitly positions ESU as a short, security‑only safety net rather than a substitute for migration to a supported OS. (support.microsoft.com)

---

How to get another year for free (and the caveats)​

The surprising part of Microsoft’s consumer ESU rollout is the availability of free enrollment paths alongside a paid option. Microsoft lists three consumer enrollment methods in Settings → Windows Update when the enrollment wizard appears:

• Sync your PC settings by enabling Windows Backup (which uses OneDrive). Microsoft treats an active Windows Backup sync to a Microsoft Account as evidence of a managed consumer device and grants the ESU at no extra cost.
• Redeem 1,000 Microsoft Rewards points to claim an ESU license.
• Make a one‑time paid purchase through the Microsoft Store (roughly $30 USD for consumers), which assigns ESU coverage to your Microsoft Account (usable across devices within the account limits).

These methods are documented on Microsoft’s end-of-support pages and confirmed by reporting from major tech outlets. (microsoft.com, theverge.com)

The OneDrive/Windows Backup trick — what it actually is​

Microsoft’s consumer documentation describes the free path as enabling Windows Backup to store your settings, credentials, and (optionally) data in OneDrive, tied to your Microsoft Account. Doing so allows Microsoft to identify the device as a consumer‑managed device and apply the ESU license to that account. Practically, that means a one‑time action of signing in with a Microsoft Account and enabling settings sync/Windows Backup can unlock the free ESU year — but there are operational limits and privacy tradeoffs to weigh. (microsoft.com)
Important caveats:

• OneDrive’s free tier is limited (typically 5 GB). If you choose to back up files beyond settings, you may need to free space or purchase additional OneDrive storage.
• The free path effectively nudges users into Microsoft’s cloud ecosystem (a stated company objective); it is not a permanent change to support policy — it is a one‑year bridge.

---

Step‑by‑step: How to enroll (high‑level)​

• Open Settings → Privacy & Security → Windows Update.
• If your device is eligible, click Check for updates; look for an Enroll now or ESU wizard entry showing enrollment options.
• Choose one of the three paths:
• Enable Windows Backup (OneDrive) and sign in with a Microsoft Account. Follow prompts to sync settings.
• Redeem 1,000 Microsoft Rewards points via the Rewards dashboard and apply the registration to your Microsoft Account.
• Purchase the one‑time ESU license (~$30 USD) via the Microsoft Store.
• Confirm the license applies to your account and verify the device shows as enrolled in the ESU program.

Microsoft has been rolling the Enrollment experience out in phases, so not every eligible PC will display the option at the same time; the company advises enrolling early to ensure full coverage. (microsoft.com, support.microsoft.com)

---

Why governments and CERTs are pushing upgrades (and an Indian government example)​

Public cybersecurity agencies generally treat end‑of‑support OSes as increased risk. The Indian Computer Emergency Response Team (CERT‑In) issued a formal advisory noting the end‑of‑support date and explicitly recommending that users upgrade to Windows 11 to continue receiving security updates. CERT‑In reminded users that ESU is an option but that it does not extend the official lifecycle or guarantee full technical support, reinforcing migration as the preferred course. (cert-in.org.in)
This is consistent with global practice: national CERTs routinely flag legacy OSes ahead of end‑of‑life dates and encourage timely upgrades or enrollment in extension programs to reduce exposure to zero‑day exploits, ransomware, and other malicious activity.

---

Risks and tradeoffs: what staying on Windows 10 means beyond October 14, 2025​

Keeping Windows 10 after end of support without ESU is a real security gamble. The most important risks are:

• Unpatched vulnerabilities. New critical vulnerabilities discovered after October 14 will not receive patches for non‑enrolled consumer devices, exposing them to active exploitation.
• Software and driver compatibility. Independent software vendors and hardware manufacturers will gradually deprioritize Windows 10 testing and driver updates, producing reliability degradations over time.
• Regulatory and compliance exposure. Organizations subject to standards like PCI, HIPAA, or GDPR may find unsupported OSes create compliance gaps for security controls and incident response.
• Ecosystem erosion. Over months and years, apps and cloud services will optimize for newer platforms, potentially removing features or introducing incompatibilities for older OSes.

Even with ESU, the protection is narrow: only critical and important security updates. ESU does not magically preserve compatibility or provide the modern security posture built into Windows 11 (hardware‑based isolation, improvements to Secure Boot and virtualization‑based security). (support.microsoft.com, microsoft.com)

---

Consumer calculus: upgrade, buy ESU, or ride it out?​

There are three primary options for consumers:

• Upgrade to Windows 11 (free when eligible).
• Pros: Continued feature updates, full security lifecycle, improved built‑in protections.
• Cons: Strict minimum hardware requirements (TPM 2.0, Secure Boot, supported CPU list) mean some older PCs are simply ineligible.
• How-to: Settings → Privacy & Security → Windows Update → Check for updates. If eligible, the upgrade option appears. (support.microsoft.com)
• Enroll in the consumer ESU for a year (free through Windows Backup or Rewards, or paid $30).
• Pros: One more year of critical patches; time to plan migration on your terms.
• Cons: Only security updates, no bug fixes or new features; nudges to Microsoft account/OneDrive or to engage the Rewards ecosystem. (microsoft.com, theverge.com)
• Continue on Windows 10 without ESU.
• Pros: No immediate cost, no migration hassle.
• Cons: Growing and accumulating risk; eventual compatibility failures and possible regulatory exposure. (support.microsoft.com)

For many consumers the realistic path is a hybrid: enroll in ESU (or use the free enrollment paths) to gain breathing room while preparing a staged migration plan — checking hardware compatibility, backing up data, and deciding whether to upgrade in place, buy a new PC, or consider alternative OSes for certain workloads.

---

The privacy and operational considerations of the free ESU paths​

The OneDrive/Windows Backup route is functionally simple — sign in, enable sync — but it carries implications:

• Data and settings in the cloud. Even if you only sync settings, that connects system configuration and possibly credentials to a Microsoft Account. For users or organizations sensitive to cloud residency rules or privacy, this may be undesirable.
• Storage limits. OneDrive free storage is constrained (usually 5 GB). Users who opt to back up files may quickly hit limits or face purchase decisions.
• Ecosystem lock‑in. Critics note Microsoft’s approach nudges consumers further into its cloud services, which may be part security convenience and part product strategy. This is a legitimate consideration for privacy‑conscious users.

If privacy or vendor independence is a priority, the Microsoft Rewards route (if you already have points) or the one‑time paid ESU purchase may be preferable. The paid route avoids changes to backup or account behavior, though it still ties the ESU license to your Microsoft Account.

---

Enterprise vs consumer ESU: a brief comparison​

Enterprise ESU options previously existed (and still do) but follow different licensing and pricing models, often priced higher and targeted for multi‑year support (up to three years in some configurations) with per‑device fees that scale. The consumer ESU program is deliberately narrower and simpler — a one‑year bridge rather than a multi‑year enterprise stopgap. Businesses with large fleets should engage formal vendor agreements and migration planning; the consumer ESU program is not a substitute for enterprise lifecycle management. (support.microsoft.com, theverge.com)

---

Broader context: market share, migration pace, and e‑waste concerns​

StatCounter and industry observers documented a rapid acceleration in Windows 11 adoption in mid‑2025, with Windows 11 reaching parity and then overtaking Windows 10 in global install share. That market shift is partly Microsoft-driven messaging, partly natural device refresh cycles, and partly the practical need for continued support after October 2025. (gs.statcounter.com, neowin.net)
Yet the migration is uneven: millions of older PCs lack TPM 2.0 or compatible CPUs and will either remain on Windows 10 (needing ESU) or require hardware upgrades — raising legitimate concerns around e‑waste, cost for lower‑income users, and the digital divide. Industry analysts and PC vendors have noted that migration could extend into 2026, and that commercial support arrangements and refresh programs will shape the pace. (windowscentral.com)

---

Practical, actionable guidance for Windows 10 users today​

• Confirm your device’s eligibility for Windows 11: Settings → Privacy & Security → Windows Update → Check for updates.
• If eligible, plan a careful upgrade: back up data, update drivers, and ensure recovery media is available.
• If not eligible or you need time:
• Enroll in ESU using the method that fits your privacy and operational stance (OneDrive sync, Rewards points, or the paid $30 option).
• Apply standard security best practices: enable automatic updates for third‑party apps, use a reputable antivirus, enable firewall protections, and restrict elevated privileges for daily usage.
• For businesses: begin immediate fleet assessments, prioritize critical systems for migration, and consult vendors for enterprise ESU pricing or alternatives. (microsoft.com, theverge.com)

---

Critical analysis: strengths, weaknesses, and the policy question​

Microsoft’s consumer ESU program is pragmatic: it acknowledges the real-world friction of upgrading (strict Windows 11 hardware requirements and a large installed base) and offers a stopgap that reduces immediate mass‑vulnerability risk. The program’s strengths are clear:

• Practical short‑term mitigation. The ESU buys time for users and organizations to plan secure migrations rather than rushing upgrades that could introduce their own operational problems.
• Multiple enrollment paths. Providing free options reduces friction for low‑cost mitigation and recognizes that not everyone can pay or re‑equip immediately.

But there are notable weaknesses and risks:

• Limited scope of protection. ESU covers only critical/important security updates, not functionality or support, so it is a patchwork rather than a long‑term solution.
• Perception of monetization. Critics argue the arrangement monetizes the transition and nudges consumers into Microsoft’s cloud, especially with OneDrive as an enrollment path.
• E‑waste and digital equity. Hardware requirements for Windows 11 force an upgrade cycle that may be wasteful and exclude economically disadvantaged users.
• Rollout friction. The phased ESU enrollment rollout and inconsistent availability of the enrollment wizard have frustrated users and introduced confusion, undermining confidence in the support option. (microsoft.com, itpro.com)

Taken together, Microsoft’s approach eases an immediate security cliff but does not resolve the larger policy challenge: how to balance modern security needs and hardware requirements with affordability, sustainability, and privacy concerns for a global user base.

---

What remains uncertain or unverifiable​

• Long‑term pricing and availability beyond the single consumer ESU year: Microsoft’s official position covers only the announced one‑year extension; future policies and prices remain speculative and should be treated as such.
• The precise sequence and timing of the Enrollment wizard’s global rollout — users should expect regional and staged availability and check their device over the coming weeks. Microsoft’s staged rollouts are typical, but exact dates for every market and SKU are not published in lockstep. (microsoft.com)

---

Bottom line​

The Windows 10 end‑of‑support deadline (October 14, 2025) is real and consequential. Microsoft provides a limited, one‑year safety net through consumer ESU — and for many users that will include a genuinely free path via OneDrive settings sync or Microsoft Rewards points. Those options are welcome, but they are temporal and narrow in scope: ESU is a bridge, not a destination. The most robust long‑term posture is migration to a supported OS, with Windows 11 the straightforward path for eligible systems.
For those who must delay migration, the practical playbook is simple: enroll (if needed), harden the device, and plan a staged migration that balances security, cost, and sustainability. Governments and CERTs are right to push migration urgency, but the consumer ESU program is a pragmatic, if imperfect, recognition of reality: some users and businesses need time to move — and Microsoft has given them a measured, temporary way to buy it. (support.microsoft.com, microsoft.com, cert-in.org.in)

---

If you need step‑by‑step instructions tailored to a specific device model, hardware audit guidance for a fleet, or a checklist for migrating personal files and apps to Windows 11 or a new PC, that can be provided as a follow‑up practical guide.

---

Source: digit.in Microsoft will end Windows 10 support soon, but you can still get it free for a year

Microsoft has set a hard cutoff for Windows 10: free mainstream support and monthly security updates stop on October 14, 2025, but a one‑year safety net — the consumer Extended Security Updates (ESU) program — gives eligible Windows 10 users a bridge until October 13, 2026. (support.microsoft.com)

Background / Overview​

For a decade Windows 10 has been the backbone of home and business PCs, but Microsoft is shifting its engineering and security efforts to Windows 11. The official lifecycle notice states that after October 14, 2025 Windows 10 will no longer receive feature updates, routine quality updates, or standard technical support — a move that leaves devices unpatched unless they’re enrolled in ESU or upgraded to Windows 11. (support.microsoft.com)
In response, Microsoft created a consumer‑facing ESU path that is intentionally narrow in scope: it delivers security‑only updates classified as Critical and Important by Microsoft’s Security Response Center (MSRC). ESU does not add features, include non‑security bug fixes, or provide general technical support. The consumer ESU option runs through October 13, 2026. (support.microsoft.com)
Major outlets and independent reporting tracked the ESU rollout and the patch that enabled enrollment for many users: the August cumulative update (KB5063709) fixed enrollment wizard issues that prevented some users from signing up. That patch is part of the preparatory updates Microsoft published in mid‑2025. (support.microsoft.com, bleepingcomputer.com)

---

Who is eligible — essential prerequisites​

Before you try to enroll, check these requirements. Missing one will block the consumer ESU flow.

• Your device must run Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation). Older feature updates are not supported by the consumer ESU path. (support.microsoft.com)
• The device must have the latest cumulative updates and servicing stack updates installed; Microsoft specifically pointed to August 2025 updates that prepared systems for ESU. (support.microsoft.com)
• Enrollment requires a Microsoft account with administrator privileges on the device; local accounts will be prompted to sign in. Child accounts are excluded. (support.microsoft.com)
• The consumer ESU program is not intended for devices that are domain‑joined, MDM‑managed, or kiosk devices. Commercial and managed endpoints have different ESU channels. (support.microsoft.com)

These constraints mean the consumer ESU is aimed primarily at individual users and households who need a short runway to upgrade or replace hardware, not enterprises with managed fleets.

---

How the consumer ESU program works — enrollment methods and limits​

Microsoft designed three consumer enrollment routes; all deliver the same security‑only updates until October 13, 2026:

• Free if you enable Windows Backup syncing (OneDrive): Link your PC to a Microsoft account and enable Windows Backup to sync your settings; this qualifies as a no‑cost enrollment route. (support.microsoft.com)
• Redeem Microsoft Rewards points: You can redeem 1,000 Microsoft Rewards points to cover one year of ESU. Points are earned through Microsoft Rewards activities. (support.microsoft.com)
• One‑time purchase: Pay $30 USD (or local currency equivalent plus applicable tax) for a one‑year ESU license; Microsoft indicates a single paid license can be used on up to 10 devices linked to the same Microsoft account. (support.microsoft.com)

Each of these enrollment options results in the same security coverage. Enrollment is presented through the Windows Update settings panel as an “Enroll now” link — Microsoft rolled this UI out gradually and resolved early bugs with the August cumulative update KB5063709. (windowslatest.com, bleepingcomputer.com)

---

Step‑by‑step: How to enroll in ESU (quick practical guide)​

• Confirm your Windows 10 edition and build: go to Settings → System → About and verify you’re on Windows 10, version 22H2. Update if necessary. (support.microsoft.com)
• Install the latest cumulative and servicing stack updates (check Windows Update). The August 2025 updates (including KB5063709) are specifically aimed at resolving ESU enrollment issues for many devices. (support.microsoft.com, bleepingcomputer.com)
• Open Settings → Update & Security → Windows Update. If your device meets prerequisites you should see an Enroll now or Enroll in Extended Security Updates link below the “Check for updates” button. (support.microsoft.com)
• Click Enroll now and follow the wizard. You’ll be offered the three enrollment methods: enable Windows Backup, redeem Microsoft Rewards points (1,000), or purchase the one‑time ESU license. (support.microsoft.com)
• Confirm enrollment status by revisiting Settings → Update & Security → Windows Update; if successfully enrolled, updates classified as Critical/Important for the ESU period will be delivered via Windows Update. (support.microsoft.com)

If the Enroll now option does not appear: ensure you’re on 22H2, install pending updates, restart, and sign in with a Microsoft account. Microsoft has stated the enrollment UI is rolled out in phases and fixed the enrollment crash bug in the August cumulative update. (windowslatest.com, bleepingcomputer.com)

---

What ESU actually delivers — clarity on the limitations​

• ESU supplies security‑only updates (Critical and Important) as defined by Microsoft. It does not include new features, general bug fixes, or performance improvements. (support.microsoft.com)
• Technical support is limited to activation and installation questions; ESU is explicitly not a full support contract. (support.microsoft.com)
• After October 13, 2026, Windows 10 will no longer receive any updates through consumer ESU; organizations seeking longer coverage have enterprise ESU channels but those are priced and structured differently. (support.microsoft.com)

Think of ESU as a time‑boxed security lifeline — useful for avoiding immediate exposure while you plan a migration strategy, but not a substitute for moving to a supported platform long‑term.

---

Verifying the critical claims — independent confirmation​

Multiple independent sources and Microsoft’s own documentation converge on the major facts:

• Microsoft’s lifecycle notice confirms the end date of October 14, 2025 and documents the consumer ESU option through October 13, 2026. (support.microsoft.com)
• The $30 one‑time purchase option, the 1,000 Rewards points redemption, and the free Windows Backup sync route are explicitly listed in Microsoft’s ESU support page. (support.microsoft.com)
• Reporting from security and Windows‑focused outlets documented rollout problems and the KB5063709 fix that addressed an enrollment wizard crash — corroborating Microsoft’s patch notes and release history. (bleepingcomputer.com, support.microsoft.com)

Where claims conflict or appear informal (for example, statements that Microsoft “reversed” an intended fee), those narratives are harder to verify as a discrete corporate announcement. Microsoft’s public support pages list both free and paid enrollment routes; independent reporting tracked the change in how the consumer program was presented during the rollout. Treat claims about internal reversals or pricing about‑faces as contextual reporting unless backed by a named Microsoft statement. (support.microsoft.com, windowscentral.com)

---

Practical trade‑offs: why choose ESU, and what you give up​

Benefits of enrolling in ESU

• Short‑term safety: ESU buys a year of protection against new Critical and Important vulnerabilities — valuable for devices that can’t or shouldn’t be upgraded immediately. (support.microsoft.com)
• Flexible low‑cost options: the free OneDrive backup route and Rewards redemption lower the monetary barrier for many users compared with enterprise ESU pricing. (support.microsoft.com)
• Time to plan: households and small operations get breathing room to migrate files, test Windows 11 compatibility, or budget hardware replacements.

Costs and compromises

• No feature updates or bug‑fixes: ESU is security‑only; persistent functional bugs or compatibility problems won’t be fixed by ESU patches. (support.microsoft.com)
• Microsoft account dependency: enrollment requires a Microsoft account; privacy‑minded users who avoid cloud sign‑in may find this objectionable. (support.microsoft.com)
• Ecosystem and app lifecycle: independent app vendors and hardware makers will increasingly target Windows 11, so long‑term compatibility for new apps and drivers is not guaranteed even on ESU‑covered systems. (support.microsoft.com)

Security practitioners should weigh short‑term protection against the long‑term cost of technical debt. For single, critical machines that must remain on Windows 10 due to legacy apps or device constraints, ESU is a reasonable bridge. For general home fleets, upgrading to supported hardware and Windows 11 is the safer path.

---

Migration and mitigation strategies (recommended plans)​

• Prioritize devices:
• Put internet‑facing machines, admin workstations, and units with sensitive data at the top of the upgrade list. These need the strongest protection.
• Audit hardware compatibility:
• Run the official PC Health Check and inventory devices that cannot meet Windows 11 minimums (TPM 2.0, supported CPUs, firmware). If a machine is incompatible, plan replacement or isolate its network access. (support.microsoft.com)
• Back up and test:
• Use Windows Backup to move user profiles and settings to the cloud or an external drive before performing upgrades. ESU enrollment itself may require backup syncing for the free route, so treat backups as a universal precaution. (support.microsoft.com)
• Avoid single‑point failure:
• Do not delay enrollment until the last minute; Microsoft’s rollout was phased and early bugs required updated cumulative patches to resolve. Confirm ESU enrollment and that updates are being delivered. (bleepingcomputer.com)
• Explore alternatives:
• For devices that can’t be upgraded, consider migration to lightweight Linux distributions for certain use cases, or using older machines as offline, air‑gapped systems where possible. This is a technical trade that requires planning around application compatibility.

---

Privacy and policy considerations​

Free enrollment via Windows Backup hinges on linking a Microsoft account and syncing settings to OneDrive. That design choice raised immediate concerns among privacy‑focused users and advocates because it deepens device ties to Microsoft’s cloud. Microsoft’s support pages explain the rationale — account linkage simplifies license management and device identification for eligibility — but users should evaluate the tradeoff between free security updates and increased cloud integration. (support.microsoft.com)

---

Known rollout pain points and what to watch for​

• Early adopters reported the Enroll now wizard was missing or crashing; Microsoft addressed those issues in the August cumulative update (KB5063709). If the enrollment toggle is absent, confirm you’ve installed the latest updates and reboot. (bleepingcomputer.com, windowslatest.com)
• Some updates in mid‑2025 introduced separate known issues around Reset/Recovery flows; administrators should confirm full backups before applying system‑level changes. Microsoft documented out‑of‑band fixes and known issues in its update catalog. (support.microsoft.com)
• The consumer ESU program excludes domain‑joined and MDM‑enrolled systems; organizations must plan for enterprise ESU channels or fleet upgrades instead. (support.microsoft.com)

---

Risks and broader implications​

• The Windows 10 end‑of‑support event is likely to accelerate hardware turnover and has triggered public debates about planned obsolescence, e‑waste, and digital equity. Critics warn millions of perfectly functional PCs will be retired purely because they can’t meet Windows 11 hardware rules; proponents counter that modern security features require newer hardware. Independent reporting has documented these tensions. (windowscentral.com)
• From a security posture view, every unsupported device in a network becomes an attack surface. Organizations and households that delay migration without ESU coverage will face growing risk from unpatched vulnerabilities and potential compliance failures for regulated workloads. (support.microsoft.com)

---

Final verdict — pragmatic recommendations for readers​

• If your PC is eligible for Windows 11 and you value continued feature updates and long‑term security, upgrade now using the free upgrade path where available. This avoids reliance on short‑term patches and keeps your device in a supported ecosystem. (support.microsoft.com)
• If you cannot upgrade immediately but want to remain protected for another year, enroll in consumer ESU. Use the free Windows Backup route if you’re comfortable enabling OneDrive syncing, or redeem 1,000 Microsoft Rewards points if you prefer not to buy the license. If neither fits, the $30 paid option covers up to 10 devices and is a viable fallback. Confirm enrollment through Settings → Update & Security → Windows Update after installing the latest cumulative updates. (support.microsoft.com, bleepingcomputer.com)
• Treat ESU as a bridge, not a destination: plan migration timelines, budget for hardware refreshes if necessary, and prioritize high‑value systems for early upgrades.

---

Postscript: watch for changes and verify locally​

The ESU rollout was phased and Microsoft updated its guidance and cumulative updates in mid‑2025 to smooth enrollment. Given how quickly product messaging and rolling updates can change, confirm your device’s eligibility and enrollment status directly from Settings → Update & Security → Windows Update, and make sure the latest Windows updates (including the August 2025 servicing updates) are installed before attempting enrollment. (support.microsoft.com)
Microsoft’s official pages and independent reporting provide corroborating details about dates, enrollment methods, and the KB5063709 fix; where journalistic accounts make claims about internal policy reversals, treat those as context rather than definitive corporate announcements unless Microsoft documents the change explicitly. (support.microsoft.com, windowscentral.com)

---

This guidance is intended to be a practical, step‑by‑step feature for Windows 10 users weighing the tradeoffs of staying on an older platform vs. moving forward. The consumer ESU program is real, useful, and narrowly scoped — but it’s temporary. Act early, back up carefully, and choose the enrollment route that fits your privacy stance and timeline. (support.microsoft.com, bleepingcomputer.com)

---

Source: BizzBuzz How to Get Free Windows 10 Updates Before Support Ends in 2025

Microsoft quietly built a practical pause button for millions of Windows 10 PCs: if you meet a few requirements and follow the enrollment wizard, you can receive one extra year of security updates—without paying—by using Microsoft’s built‑in backup/sync option or by redeeming Microsoft Rewards points, or you can pay a one‑time fee to cover multiple devices. This consumer Extended Security Updates (ESU) program protects eligible Windows 10 devices from critical and important vulnerabilities through October 13, 2026, giving owners breathing room to plan upgrades, replace aging hardware, or adopt alternative strategies. (support.microsoft.com)

Background: what changed and why it matters​

Microsoft set a firm end‑of‑support date for Windows 10: October 14, 2025. On that date, Microsoft stops issuing feature updates, technical support, and standard security patches for Windows 10 Home and Pro editions unless devices are enrolled in a supported program. For consumers who can’t — or don’t want to — move to Windows 11 right away, Microsoft introduced a consumer ESU option that extends security updates for a single year, until October 13, 2026. This is not a new feature update; it’s a narrow, security‑only extension intended as a bridge. (support.microsoft.com)
Why this matters: tens or hundreds of millions of PCs will still run Windows 10 when support ends. Many of those machines are ineligible for Windows 11 because of hardware checks such as TPM 2.0 and Secure Boot requirements. Left unsupported, these PCs become more attractive targets for malware and exploitation. The ESU consumer program therefore gives ordinary users a practical option to stay patched for another year without a mandatory hardware upgrade. (windowscentral.com)

---

What the ESU program actually provides​

What you get with consumer ESU​

• Security updates (Critical and Important) for Windows 10 v22H2 delivered through Windows Update. These updates address newly discovered vulnerabilities that Microsoft classifies as critical or important. ESU does not include feature updates, bugfixes beyond security, or technical support. (support.microsoft.com)
• Coverage window: Extended security patches are available through October 13, 2026 for devices properly enrolled. Enrollment remains possible until that end date, and updates are delivered retroactively once you enroll. (support.microsoft.com)

What ESU does not do​

• It does not upgrade you to Windows 11 or add new OS features.
• It does not restore full vendor technical support; ESU is security‑only.
• It does not cover devices managed by enterprise policies (domain‑joined, MDM‑joined devices typically use enterprise ESU routes). (support.microsoft.com)

---

Who is eligible and the technical prerequisites​

To enroll a consumer PC in the ESU program you must meet the following baseline requirements:

• The PC must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation). Devices running the older LTSB/LTSC variants or non‑eligible builds may not qualify under the consumer path. (support.microsoft.com, learn.microsoft.com)
• All pending Windows updates must be installed; Microsoft’s rollout included an August 2025 servicing update (e.g., KB5063709 and subsequent patches) that corrected enrollment bugs and made the ESU enrollment control widely visible. Installing the recent cumulative updates ensures the Enroll option appears in Settings. (support.microsoft.com, learn.microsoft.com)
• You must be signed in with a Microsoft Account (MSA) to enroll. Local accounts are not accepted for ESU enrollment—even paid enrollments require an MSA. The ESU entitlement is tied to that Microsoft Account and can be used across devices linked to the same account (within limits). (tomshardware.com, windowscentral.com)
• The device should not be joined to Active Directory or managed through some MDM solutions; enterprise devices use different ESU processes. Kiosk mode machines and some other restricted environments are also excluded. (support.microsoft.com)

These prerequisites are important; without them the enrollment wizard will not show or will reject the attempt. If the ESU enrollment UI is missing, installing the latest cumulative updates and then revisiting Settings → Windows Update is the recommended path. (techradar.com)

---

How Microsoft lets consumers get ESU for free (and what “free” actually means)​

Microsoft created three ways for consumers to enroll in ESU:

• Enable Windows Backup / sync your PC settings — free. If Windows detects that you have settings syncing enabled (the “Windows Backup” or “sync your settings” controls in Settings → Accounts), it will let you enroll the device without paying. This option is intended to encourage users to adopt cloud sync and makes the enrollment free of cash cost. (support.microsoft.com)
• Redeem 1,000 Microsoft Rewards points — free if you already have the points. Reward points can be collected by using Microsoft services such as Bing and the Rewards dashboard; redeeming 1,000 points in the ESU enrollment wizard credits your account for the year. This is the other no‑cash route. (support.microsoft.com)
• Pay $30 (one‑time) via the Microsoft Store — cash option that covers up to 10 devices linked to the same Microsoft Account. This is a straightforward paid option that avoids any backup or Rewards requirements. (support.microsoft.com)

Important nuance: the “Windows Backup” option specifically refers to syncing your Windows settings to your Microsoft account (and optionally using OneDrive folder syncing). It does not mean every user must upload a full disk image to OneDrive. The Settings controls list what is synced (apps list, preferences, Wi‑Fi passwords, some personalization), and those items are relatively small in size. The backup UI does also allow OneDrive folder syncing for Documents/Pictures/Desktop, which can consume OneDrive quota if enabled. (support.microsoft.com)

---

Common confusion and the real “catch” with the free backup option​

The widely circulated headline — “get one year free by using Windows Backup” — is correct, but several important details alter the experience and cost profile:

• You must use a Microsoft Account to enroll. Even if you choose the backup path, an MSA is required; local Windows accounts are no longer accepted for ESU. That trade‑off pushes users toward cloud‑tied accounts and centralizes the ESU license management. (tomshardware.com, windowscentral.com)
• “Windows Backup” for ESU can be satisfied by syncing settings only. If you only enable the small “Remember my preferences” and “sync settings” toggles, you likely won’t exceed the 5 GB free OneDrive quota. Many users who interpreted Microsoft’s wording as “backup everything to OneDrive” were alarmed; in practice, full folder syncing (Desktop, Documents, Pictures) is optional and can be toggled off to avoid consuming OneDrive space. Microsoft’s own troubleshooting forum confirms OneDrive folder syncing is not strictly required for ESU enrollment—syncing settings tied to your Microsoft account is the enrollment trigger. (learn.microsoft.com, support.microsoft.com)
• If you choose to back up user folders, OneDrive space matters. The OneDrive free tier is only 5 GB. Enabling Desktop/Documents/Pictures backup could easily push you past that limit, requiring a paid OneDrive subscription if you want those folders fully mirrored. That’s the realistic cost risk if you misunderstand what “backup” will do. If the goal is only to keep ESU eligibility, enable settings sync without folder syncing. (support.microsoft.com, techradar.com)
• Rewards redemption glitches exist. Some users reported errors when trying to redeem Microsoft Rewards points for ESU registration, suggesting Microsoft’s rollout had hiccups. If Rewards redemption fails, the paid $30 route or the settings‑sync route remain alternatives. (learn.microsoft.com, ghacks.net)

---

Step‑by‑step: how to enroll your Windows 10 PC in ESU (practical guide)​

Follow these steps to enroll a consumer device in the ESU program. The steps assume you want the free settings‑sync path; a paid purchase or Rewards redemption follows similar UI prompts.

• Confirm the PC is running Windows 10, version 22H2 and fully updated. Install any available cumulative updates via Settings → Windows Update. The August 2025 servicing update (KB5063709 series) fixed early enrollment bugs and is strongly recommended. (support.microsoft.com, learn.microsoft.com)
• Sign in with a Microsoft Account (MSA) and ensure that account is an Administrator on the device. If you use a local account, switch or add an MSA before enrolling. (support.microsoft.com)
• Open Settings → Accounts → Windows backup (or Accounts → Sync your settings) and turn on “Remember my preferences” / “Sync your settings”. If you prefer not to use OneDrive folder syncing, do not enable the OneDrive folder toggle. The settings sync alone is sufficient for the free enrollment path. (support.microsoft.com, learn.microsoft.com)
• Go to Settings → Update & Security → Windows Update. Look for a new banner or link labeled “Enroll in Extended Security Updates” or an “Enroll now (ESU)” control below the Check for updates button. Click it and follow the wizard. If the option does not appear, make sure updates are installed and retry after a reboot. (support.microsoft.com, techradar.com)
• Choose your enrollment method when prompted: sync settings (free), redeem 1,000 Rewards points, or buy ESU for $30. Complete the prompts and confirm. Your ESU entitlement will be tied to the Microsoft Account used during enrollment. (support.microsoft.com)
• Repeat enrollment on each eligible device you want covered. A paid license or Rewards redemption can cover up to 10 devices linked to the same Microsoft Account without extra payment; however, each device still needs individual enrollment. (support.microsoft.com)

---

Real‑world scenarios: who benefits most and who should look for alternatives​

• Owners of older laptops and desktops that fail Windows 11 checks (TPM 2.0, Secure Boot): ESU is a pragmatic stopgap if immediate hardware replacement isn’t feasible. It buys time for budgeting or shopping for an appropriate Windows 11 upgrade. (windowscentral.com)
• Small households with multiple legacy PCs: A single $30 purchase tied to one Microsoft Account can cover up to 10 devices—often cheaper than replacing several machines at once. (support.microsoft.com)
• Privacy‑conscious or local‑only users: The MSA and cloud sync requirement may be a dealbreaker. These users should weigh the privacy tradeoffs or consider alternatives like paying for ESU (still requires an MSA) or choosing third‑party micropatching services or migrating to an alternative OS. (tomshardware.com, 0patch.com)
• Organizations and managed devices: They should use enterprise channels—consumer ESU is not designed for domain‑joined or MDM‑managed fleets. Enterprises have separate ESU pricing and enrollment flows. (support.microsoft.com)

---

Alternatives and risks: what to do if you decline ESU or are ineligible​

• Upgrade to Windows 11 (if hardware allows): For eligible devices, the free upgrade to Windows 11 remains the best long‑term route to stay supported. Check PC Health Check and the official system requirements. (support.microsoft.com)
• Third‑party micropatching (0patch): Independent vendors like 0patch have announced plans to provide micropatches for Windows 10 beyond Microsoft’s support window—often for a fee and focused on critical issues. This can be cost‑effective for single devices or niche setups, but third‑party patches carry different support models and trust considerations. Evaluate vendor reputation, coverage policy, and business continuity before adopting. (0patch.com, techradar.com)
• Migrate to Linux or other OS: For some users, switching to a modern Linux distro is a stable, secure, and free alternative. The learning curve and application compatibility should be considered. No single migration choice fits all users.
• Air‑gapping or limited network exposure: For old PCs used only for local tasks, isolating the device from the internet reduces attack surface but is often impractical for everyday machines. Combine isolation with strict local backups and antivirus protections if this route is taken.

Security risks if you do nothing:

• Unpatched devices become targets for exploit kits, ransomware, and supply‑chain attacks.
• Software vendors may eventually stop supporting older Windows versions, including key apps and security tools.
• Regulatory/compliance requirements in some industries may prohibit running unsupported software.

---

Practical advice and hardening checklist before and after ESU enrollment​

• Install all pending Windows updates now—don’t wait for the enrollment wizard. The August 2025 servicing updates fixed ESU enrollment reliability issues. (support.microsoft.com)
• Use the Windows Backup settings‑sync option rather than folder syncing if the goal is free ESU without consuming OneDrive quota. Confirm “Remember my preferences” is enabled. (support.microsoft.com, learn.microsoft.com)
• Keep a local backup strategy: external drive images and offline copies of critical files. Don’t rely solely on cloud backups for disaster recovery. (support.microsoft.com)
• Install and maintain reputable anti‑malware and endpoint protection software that will continue to receive definition updates; Defender’s behavior may continue to receive updates but do not assume OS‑level fixes will cover everything post‑ESU without enrollment. (blog.0patch.com)
• If privacy is a primary concern and you must enroll, limit what is synced to the cloud (disable OneDrive folder syncing) and audit the cloud‑stored settings via your Microsoft account dashboard. (support.microsoft.com)
• For households with multiple PCs, consider consolidating devices under one Microsoft Account (where appropriate) to maximize the value of a single $30 purchase or Rewards redemption. Each device must still be enrolled individually. (support.microsoft.com)

---

Monitoring rollout issues and troubleshooting common problems​

During Microsoft’s staged rollout users reported a few repeatable issues: the ESU enrollment link not appearing, Rewards redemption errors, and enrollment wizard crashes that were later fixed by cumulative updates. If you hit a snag:

• Confirm Windows 10 v22H2 and install all Windows Updates (especially the August 2025 servicing updates and any subsequent patches). (support.microsoft.com, techradar.com)
• Ensure you’re signed in with the Microsoft Account you intend to use for ESU and that you’re an administrator on the device. (support.microsoft.com)
• If Rewards redemption fails, try the Windows Backup/sync option; if that’s not acceptable, the paid $30 purchase is the fallback. Report persistent issues through Microsoft Support channels or Microsoft Q&A where others have shared fixes. (learn.microsoft.com, ghacks.net)
• If you rely on folder backups and run out of OneDrive space, either clean or purchase additional OneDrive storage, or switch to local/external backups for large media files. (support.microsoft.com)

---

Final assessment: strengths, trade‑offs, and what to prioritize​

Microsoft’s consumer ESU program is a clear and reasonable compromise: it recognizes the real world of mixed hardware and offers ordinary users an inexpensive way to stay secure for a transitional year. The program’s strengths include flexible enrollment options (settings sync, Rewards or a single paid purchase) and the ability to protect multiple devices tied to one Microsoft Account.
Notable strengths:

• Accessibility: the free settings‑sync path lowers the cost barrier for users who need time to upgrade. (support.microsoft.com)
• Simplicity: enrollment is exposed through the familiar Windows Update UI and can be completed without deep technical skills. (techradar.com)
• Coverage: critical and important updates continue to flow through Windows Update for enrolled devices until October 13, 2026. (support.microsoft.com)

Key risks and trade‑offs:

• Tied to Microsoft Account and cloud: the enrollment requirement for a Microsoft Account and the potential for cloud syncing may be unacceptable to privacy‑conscious users. (tomshardware.com)
• Not a long‑term solution: ESU is a one‑year bridge, not a replacement for upgrading hardware or migrating off Windows 10 in the long term. (support.microsoft.com)
• Limited coverage scope: ESU only delivers security updates; feature improvements and full technical support are not included. (support.microsoft.com)

For most mainstream users who cannot immediately upgrade hardware, the practical recommendation is to enroll in ESU using the settings‑sync path (if comfortable with an MSA), keep backups, and use the year to plan a migration strategy—either to a supported Windows 11 device, a cloud PC option, a third‑party micropatching service, or another OS where appropriate. (learn.microsoft.com, 0patch.com)

---

Microsoft’s one‑year ESU for Windows 10 is not a magic fix, but it is a pragmatic and verifiable lifeline: with correct preparation—update to v22H2, install the August 2025 servicing updates, sign in with an MSA, and enable settings sync—you can keep receiving critical protections until October 13, 2026, buying time to upgrade on your terms rather than under duress. (support.microsoft.com)

---

Source: leravi.org How to use your Windows 10 PC safely for one more year with this free trick - Le Ravi