Don't Pay $30 for Windows 10 Security: Here's How to Get Extended Updates for Free

Microsoft’s deadline for Windows 10 support—October 14, 2025—is fast approaching, but users have a little-known backdoor to secure another year of critical patches for free. Instead of paying the official $30 fee for Extended Security Updates (ESU), you can enroll using two zero-cost methods that Microsoft quietly built into the operating system. The company will officially stop delivering new security updates after that date, leaving millions of devices vulnerable unless they upgrade to Windows 11 or pay for an ESU license. But the enrollment feature that just landed on Windows 10 PCs offers a painless way to stay protected until October 2026 without spending a dime.

This guide unpacks exactly how the ESU program works, who qualifies, and how to activate the updates using free methods that have sparked discussion across Windows forums. We’ll also explain how to preserve your privacy after enrollment—a key concern many users have raised—and what the extension does and doesn’t cover.

What Is the Extended Security Updates (ESU) Program?

ESU is a stopgap designed for people and businesses that can’t—or won’t—move to Windows 11 by the support cutoff. It’s not a replacement for a full operating system upgrade. Microsoft will only supply “critical” and “important” security patches through Windows Update from October 15, 2025, to October 13, 2026. No new features, no design tweaks, no non-security bug fixes, and no technical support are included. Think of it as a vaccine that keeps your system from getting infected while you plan a more permanent migration.

The program is meant for individual consumers and small businesses using unmanaged devices. Larger organizations with domain-joined PCs, Entra ID, or mobile device management have their own volume-licensing ESU schemes. For everyone else, Microsoft has baked enrollment straight into the Windows Update settings page—a move that simplifies the process compared with the enterprise-only ESU programs of the past.

Who Can Enroll? The Exact Eligibility Checklist

Your PC must meet a precise set of requirements before the “Enroll now” link appears. Both Microsoft’s documentation and community how-to guides agree on the following:

• Operating System: Windows 10 version 22H2, either Home, Pro, Pro Education, or Workstation editions. You must install all latest updates from Windows Update first.
• Administrator Account: You need local admin rights to change system settings.
• Microsoft Account: Even if you normally sign in with a local account, you’ll need a Microsoft account to acquire the ESU license. This can be a temporary sign-in; you can revert to a local account afterward.
• Device Configuration: The PC cannot be in kiosk mode, joined to an Active Directory domain, joined to Microsoft Entra, or enrolled in any mobile device management (MDM). These restrictions exclude most corporate-managed machines from this consumer-oriented enrollment path.

If your device checks all those boxes, you’ll see a notification in Windows Update when the feature reaches your PC. Microsoft began rolling it out in early 2025, but if you haven’t seen it yet, ensure Windows Update is fully up to date.

Step-by-Step: How to Enroll in the ESU Program

Enrollment lives inside the Settings app. Here’s the exact path:

1. Open Settings > Update & Security > Windows Update.
2. Look for a banner that says “Windows 10 support ends in October 2025” with an “Enroll now” link. If you don’t see it, run a manual check for updates, then restart your PC.
3. Click Enroll now. The system will ask you to sign in with a Microsoft account if you haven’t already. Enter your credentials—this step is mandatory for license acquisition.
4. After signing in, you’ll be presented with three license options, which we detail below.
5. Pick your method, follow any additional prompts (such as confirming a Backup or redeeming Rewards points), and wait for a confirmation message within Windows Update settings.

Once enrolled, your device will automatically download ESU patches the same way it receives regular Windows updates. There’s no separate download client or activation key to track.

The Three Ways to Get an ESU License—and How to Do It for Free

Microsoft offers three distinct routes to obtain a license, but two of them cost absolutely nothing. Community feedback overwhelmingly favors the free methods, and forum posts are full of tips to avoid the $30 charge.

1. Windows Backup App (Free)

This is the most straightforward free option. Windows 10’s backup tool syncs a handful of items to your Microsoft account: saved credentials for apps and websites, some personalization settings (like themes and taskbar layout), and a list of installed Microsoft Store apps. You can also optionally back up folders, but the free OneDrive tier only provides 5 GB of storage—barely enough for more than a few documents.

To use this method, select the Backup option when prompted during enrollment. Follow the on-screen wizard to enable syncing. The license activates immediately, and you can stay enrolled for the full year.

Privacy note: Because this route shares data with Microsoft’s cloud, some users are wary. If you’d rather not store anything online, consider the Rewards method below, or simply disable backup after enrollment (explained later).

2. Microsoft Rewards Points (Free)

If you’ve been accumulating Microsoft Rewards points by using Bing, shopping at the Microsoft Store, or completing quizzes, you can cash in 1,000 points for an ESU license. That’s a relatively low threshold—many active users can earn that many points in a month or two of casual browsing.

When you pick this option during enrollment, you’ll be redirected to the Rewards redemption page. Confirm the transaction, and the license is attached to your Microsoft account. No payment information is required, and no data is backed up.

3. One-Time Purchase ($30)

The straightforward paid route costs $30 per device and is tied to the Microsoft account you use during enrollment. It’s a one-off fee, not a subscription, and covers all ESU updates through October 2026. If you need to reinstall Windows 10 or enroll a second machine, you’ll have to pay again or use one of the free methods.

After Enrollment: How to Protect Your Privacy

A common concern raised in Windows forums is the lingering Microsoft account link. ESU enrollment ties the license to that account, but the PC doesn’t need to remain signed into it permanently. Many users prefer to use a local account day to day. Here’s how to sever the connection without losing ESU eligibility:

• Switch to a local account: Go to Settings > Accounts > Your Info. Click “Sign in with a local account instead” and follow the prompts. Your files, apps, and ESU license stay intact.
• Disable Windows Backup: If you used the Backup method, navigate to Settings > Accounts > Windows Backup and turn off all toggles. This stops any further syncing to OneDrive. You can also delete any unwanted data from OneDrive’s web interface.

These steps let you maintain the security blanket of ESU while keeping your digital footprint minimal.

What You Don’t Get with ESU

ESU is deliberately limited. It is not a reason to delay upgrading forever. Be aware of the following:

• Security-only: Critical and important patches only. No feature updates, driver improvements, or quality-of-life fixes.
• No support: Microsoft won’t assist you with technical problems. You’ll rely on community forums and self-help.
• Short timeline: Updates stop completely on October 13, 2026. Microsoft has given no indication it will extend the program again.
• Hardware roadblock: Windows 11’s strict TPM 2.0 and CPU requirements remain the biggest hurdle for older hardware. ESU doesn’t lower those barriers; it just buys time to replace or repurpose the machine.

Real-World Community Wisdom

Across Windows discussion boards, users have settled on a few practical tips that go beyond the official documentation. Many recommend the Backup method purely for its simplicity, even if they immediately disable backup afterward. Others advise against paying the $30, calling it a “last resort” given how easy it is to accumulate Rewards points or run the backup wizard once.

One recurring piece of advice: take this year to plan your next move. Whether that means saving for a Windows 11–ready PC, switching to a Linux distribution, or accepting that your current machine will become an offline-only device, the extended year vanishes quickly. The forum guides emphasize that ESU is a bridge, not a destination.

Why Microsoft Is Doing This—and What’s Next

The free ESU offering is a pragmatic nod to reality. Windows 10 still runs on roughly two-thirds of all Windows PCs globally, and many of those can’t meet Windows 11’s hardware requirements. Forcing those users onto an unsupported system would create a security nightmare with widespread botnets and ransomware. By lowering the friction to stay patched—even if only for a year—Microsoft protects its ecosystem while gently nudging everyone toward newer hardware or subscription services down the line.

Industry watchers note that the Backup method cleverly lures users into the Microsoft account ecosystem, which the company has been championing for years. You might not stick with a Microsoft account after enrollment, but millions likely will, boosting engagement metrics for Microsoft 365 and OneDrive subscriptions.

Key Dates to Remember

Take Action Now

Don’t wait until the last minute. The enrollment link may appear only after you’ve installed all pending updates, and Microsoft could adjust the free methods at any time. Open Windows Update today, check for patches, and watch for the “Enroll now” banner. If it’s there, choose the free path that aligns with your privacy comfort level—and then start researching your long-term upgrade strategy.

Windows 10’s retirement is inevitable, but with a few clicks, you can buy yourself 12 months of peace of mind without spending a cent. That’s a deal worth taking.