Microsoft Extends Windows 10 Security Updates for Consumers Until October 2027

Microsoft has extended its Windows 10 Consumer Extended Security Updates program until October 12, 2027, giving eligible users another year of security patches. The change gives Windows 10 users more time to move to Windows 11 or replace older hardware.

The extension applies to enrolled consumer devices running Windows 10 version 22H2. Microsoft says users who are already enrolled do not need to take any action, as their coverage will automatically continue through the new end date.

This does not mean Windows 10 has returned to normal support. Windows 10 support ended on October 14, 2025, and Microsoft still recommends upgrading to Windows 11 where possible.

Windows 10 ESU now runs through October 12, 2027

The updated Microsoft ESU page says consumers can enroll any time until the program ends on October 12, 2027. Devices will receive critical and important security updates after enrollment.

The move matters because many Windows 10 PCs still cannot upgrade to Windows 11 due to hardware requirements. Some users also prefer to keep existing machines rather than buy new PCs immediately.

Microsoft’s extension gives those users a safer bridge, but it does not remove the long-term need to move to a supported Windows version. Devices that stay on Windows 10 without ESU remain more exposed to malware, ransomware, and other security threats.

What Windows 10 ESU includes

Windows 10 ESU covers critical and important security updates, based on the Microsoft Security Response Center severity rating system. These updates help reduce risk from newly discovered vulnerabilities after the end of regular support.

However, ESU does not include new Windows features, design changes, non-security fixes, or product enhancements. Microsoft also says ESU enrollment does not include general technical support for Windows 10.

Included in Windows 10 ESU	Not included in Windows 10 ESU
Critical security updates	New Windows features
Important security updates	Product improvements
Windows Update delivery for enrolled PCs	General technical support
Coverage for eligible Windows 10 version 22H2 devices	Non-security fixes requested by users

Who can enroll in Windows 10 ESU?

Consumer ESU enrollment is available for eligible Windows 10 version 22H2 devices. Supported consumer editions include Home, Professional, Pro Education, and Workstations.

Users must have the latest Windows updates installed before enrollment. The Microsoft account used to enroll must have administrator rights, and the ESU license links to that Microsoft account.

• The device must run Windows 10 version 22H2.
• The device must use an eligible consumer edition.
• The latest Windows updates must be installed.
• The Microsoft account used for enrollment must be an administrator account.
• A child Microsoft account cannot complete enrollment.

Who is not eligible for the consumer ESU program?

Microsoft says the consumer ESU program cannot be used for several commercial or managed scenarios. Devices in kiosk mode do not qualify, and neither do devices joined to Active Directory, Microsoft Entra, or Mobile Device Management systems.

Business and education customers should use the commercial ESU path instead. Microsoft Learn says commercial and education devices can receive security updates for up to three years after the Windows 10 end-of-support date.

That distinction is important for IT teams. The consumer ESU extension helps individuals and households, while organizations still need licensing, deployment, and migration planning for managed fleets.

How much does Windows 10 ESU cost?

Microsoft lists three enrollment options for consumers. Users can enroll at no additional cost by syncing PC settings with Windows Backup, redeem 1,000 Microsoft Rewards points, or make a one-time $30 purchase, plus any applicable local taxes.

Enrollment option	Cost	Coverage period
Sync PC settings with Windows Backup	No additional cost	Through October 12, 2027
Redeem Microsoft Rewards points	1,000 points	Through October 12, 2027
One-time purchase	$30 USD or local equivalent, plus tax	Through October 12, 2027

One ESU license can cover up to 10 eligible Windows 10 devices under the same Microsoft account. That makes the extension useful for homes with several older PCs.

How to enroll in Windows 10 ESU

Enrollment happens through Windows Update. Users should open Settings, go to Update & Security, select Windows Update, and look for the ESU enrollment option if the device meets the requirements.

1. Open Settings on the Windows 10 PC.
2. Select Update & Security.
3. Open Windows Update.
4. Select Enroll now when the option appears.
5. Sign in with a Microsoft account if Windows asks for one.
6. Choose Windows Backup, Microsoft Rewards, or the paid option.

If the device uses a local account, Windows will prompt the user to sign in with the Microsoft account that will hold the ESU license. The same account can then be used to add more eligible devices.

Why Microsoft still wants users to move to Windows 11

Microsoft continues to position ESU as a temporary bridge. The company’s Windows 10 end-of-support guidance still recommends Windows 11 for eligible PCs and a new device for systems that cannot upgrade.

Windows 11 has stricter hardware requirements than Windows 10. The official Windows 11 specifications include TPM 2.0, Secure Boot capability, at least 4GB of RAM, and at least 64GB of storage.

Those requirements explain why many older machines remain on Windows 10. Still, ESU only buys time. It does not turn Windows 10 back into a fully supported platform.

What businesses should do next

Organizations should not treat the consumer extension as a fleet-management solution. The commercial Windows 10 ESU program remains the correct route for managed business and education devices.

IT teams should review hardware inventories, identify devices blocked by Windows 11 requirements, and plan replacements or upgrades. They should also confirm which systems need ESU licensing and which can move to Windows 11 now.

The updated timeline gives consumers more breathing room, but the security message remains the same. Enroll eligible Windows 10 PCs in ESU, keep updates installed, and use the extra year to prepare for a supported platform that meets the Windows 11 requirements.

FAQ