Free Windows 10 Security Updates Until 2027: One Microsoft Account Covers Up to 10 PCs

Microsoft has formally expanded its consumer Extended Security Updates (ESU) program in a way that will delight Windows 10 holdouts. A single ESU license, tied to a personal Microsoft account, can now protect up to ten Windows 10 PCs, and two enrollment paths cost nothing—syncing settings via the Windows Backup app or redeeming 1,000 Microsoft Rewards points. For those who prefer a direct payment, a one‑time $30 fee per account remains an option. This licensing generosity and extended timeline, running to October 12, 2027, give households and enthusiasts a much wider window than many expected, but it comes with clear strings attached: security updates only, no new features, and a hard nudge toward Windows 11 in the long run.

How the consumer ESU program works

With Windows 10’s formal support ending on October 14, 2025, unpatched machines face mounting risk from the moment the last regular Patch Tuesday passes. The ESU program keeps those devices covered with “critical” and “important” security fixes as defined by the Microsoft Security Response Center (MSRC). Enrolled PCs receive updates through Windows Update just as they would under mainstream support—except they won’t get any non‑security fixes, quality improvements, or design changes. Microsoft will not provide general technical support beyond ESU activation and update installation issues.

The consumer ESU program is meant for personal, non‑commercial use. Devices that are domain‑joined, Entra‑joined, managed through MDM, running in kiosk mode, or already licensed under a commercial ESU are ineligible. One small exception: a device that is merely Microsoft Entra registered (a personal device that signs into cloud apps) can still use the consumer program. The license itself is account‑bound, not device‑bound—use the same Microsoft account across every PC you want to cover, and the enrollment wizard will let you add up to nine additional machines after the first one. Each PC must independently meet the prerequisites, but you won’t pay again or go through a separate license purchase for each.

The enrollment window stretches all the way to October 12, 2027. If you enroll now, coverage automatically extends through that date; late‑comers get updates only from the point of enrollment onward. Microsoft’s support documentation explicitly warns that unenrolled devices “will be more vulnerable and susceptible to viruses and malware before enrollment,” so waiting effectively leaves a gap.

The 10‑PC license: what changed

Earlier guidance from Microsoft and third‑party reporting suggested that the consumer ESU would cost $30 annually per device, with no multi‑PC discount. In mid‑2025, the company quietly updated its support page and communication to state that one license covers up to ten devices. This reduces the per‑PC cost to as little as zero dollars for a household with multiple aging Windows 10 machines—a dramatic shift that acknowledges the reality of family tech closets, lab setups, and enthusiast collections.

The license limit is per Microsoft account, not per household or per billing address. That means a single person can protect up to ten laptops, desktops, or medical‑device PCs simply by signing into each with the same account during enrollment. Microsoft notes that child accounts cannot enroll directly; a parent or guardian must add the child’s device under their own account, provided they are set up as an administrator on that PC.

This development first surfaced in a Thurrott.com report, which pointed out the quiet update to Microsoft’s official documentation. Since then, both the Redmond‑published support page and the Windows Team blog have confirmed the 10‑device per‑account model. Forum discussions among Windows enthusiasts underscore the appeal: families who delayed upgrading can now lock in security patches for all home computers without juggling multiple payment receipts or Rewards redemptions.

Enrolling for free: Windows Backup and Rewards

The two zero‑cost paths are the headline magnets. If you already sync your PC settings via Windows Backup (the integrated tool that backs up folders, passwords, language preferences, and other Windows configuration to your Microsoft account), you can enroll in ESU with a single click. The backup must be active at the time of enrollment; simply toggling it on triggers the free option during the wizard.

For users who avoid cloud syncing, Microsoft allows redemption of 1,000 Microsoft Rewards points. This is the first time Rewards points have been convertible into a security support subscription, and it’s a clever move to engage the millions of points that otherwise expire in dormant accounts. Accumulating 1,000 points is trivial for anyone who uses Bing regularly, fulfills daily quizzes, or owns an Xbox with Game Pass. Forums note that the Rewards route is ideal for privacy‑conscious users who want the free tier without activating Windows Backup.

Both free paths feed the same ESU license. Once enrolled, the license status is visible in Settings > Update & Security > Windows Update. If you later change your mind and want to stop syncing settings, the license remains valid because it is tied to the account, not the backup state.

The $30 one‑time fee remains as a fallback. This is not an annual subscription—pay once by October 12, 2027, and your account gets ESU for the full remaining program window. All three options are presented side‑by‑side inside the Windows Update enrollment wizard, which Microsoft began rolling out in July 2025 with broad availability expected by mid‑August 2025.

Step‑by‑step enrollment

The process is straightforward, but Microsoft has baked in a few guardrails:

1. Check your version. Every PC must be on Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation) with the latest cumulative update installed. Older builds—including 21H2 and earlier—don’t qualify.
2. Open Windows Update. Navigate to Settings > Update & Security > Windows Update. If the device is eligible, an “Enroll now” link appears.
3. Sign in. If you normally use a local account, you’ll be prompted to sign into a Microsoft account. This account will hold the ESU license.
4. Pick your path. A screen offers the three choices: continue backing up your settings (if already active), redeem 1,000 Rewards points, or pay $30.
5. Add more PCs. On each additional 22H2 device, sign in with the same Microsoft account, go back to Windows Update, and select “Enroll now.” If the account already holds an ESU license, you’ll see an “Add device” button instead of the payment options.

The entire flow is designed so non‑technical users can complete it without visiting a website or calling support. Microsoft says that once enrolled, all critical and important updates released after October 14, 2025, will download automatically through the normal Windows Update pipeline.

What you get—and what you don’t

The ESU coverage is deliberately narrow. Its purpose is to shield machines from the thousands of vulnerabilities that are expected to surface after public patching stops. It does not extend the lifecycle of Windows 10 as a platform. Key limitations:

• No feature updates. Windows 10 22H2 is the final feature release; ESU will never deliver new capabilities or interface changes.
• No non‑security fixes. If the print spooler crashes in a way that isn’t a security hole, there’s no fix coming.
• No technical support. Unless an issue is directly related to ESU enrollment or update delivery, Microsoft won’t help.
• App ecosystem decline. Microsoft has already signaled that Office feature updates on Windows 10 will wind down, and third‑party developers are likely to follow suit. Running security‑patched software from 2022–2023 will become increasingly challenging.

For these reasons, even Microsoft’s own documentation frames ESU as “peace of mind” during a transition, not a long‑term alternative to Windows 11.

Cost comparison: consumers vs. organizations

The consumer program’s pricing is deliberately simple compared to the commercial ESU, which follows a tiered annual model.

Organizations willing to combine Windows 365 or Azure Virtual Desktop with their existing Windows 10 estate can effectively get ESU for free on those virtualized endpoints, which has spurred many IT departments to accelerate cloud migration while maintaining legacy Windows 10 access for specific line‑of‑business applications.

Privacy considerations with Windows Backup

Choosing the free‑via‑backup path requires syncing Windows settings to Microsoft’s cloud. Among the data that flows: Wi‑Fi passwords, language preferences, accessibility options, and other personal configuration details. While Microsoft states that this data is encrypted in transit and at rest, privacy‑sensitive users have voiced concerns on forums. Some worry that enabling the backup could inadvertently expand OneDrive storage consumption if files or other folders are flagged for sync beyond settings.

Microsoft’s documentation clarifies that only “PC settings” are synced for the purpose of the free ESU path, not documents, photos, or arbitrary files. However, the backup settings interface in Windows can be confusing; it’s easy to accidentally turn on folder backup at the same time. Enthusiasts recommend reviewing the Windows Backup options carefully before selecting this path and ensuring that OneDrive has sufficient free space if any folders become selected.

The Rewards‑point path sidesteps all backup concerns entirely. It requires only a Microsoft account with a balance of at least 1,000 points and no privacy‑related toggle beyond the usual Bing/Rewards data collection. Because Rewards points can expire if the account is inactive, users are advised to check their balance before relying on this method.

Who should sign up

The consumer ESU is tailor‑made for several groups:

• Households with multiple Windows 10 PCs that don’t meet Windows 11 hardware requirements or where upgrading isn’t in the budget this year.
• Enthusiasts running older hardware for retro gaming, test benches, or specialty peripherals that lack Windows 11 drivers.
• Small businesses using personal‑designation devices that are not domain‑joined or MDM‑managed and fall outside commercial licensing rules. (Note: using consumer ESU in a business context violates the license terms.)
• Users who need more time to plan a Windows 11 migration—the free, per‑account coverage buys an extra two years.

If your PC is already capable of running Windows 11, Microsoft’s advice is blunt: upgrade. ESU is not a substitute for modern security architecture, hardware‑enforced stack protection, or the performance benefits of Windows 11. It is, however, a welcome safety net for the estimated hundreds of millions of devices that will still be on Windows 10 when support ends.

Practical tips from the community

Windows enthusiasts on forums have shared a few hard‑won lessons:

• Run Windows Update fully before the enrollment date. Some users saw the “Enroll now” link appear only after installing the August 2025 cumulative update.
• Log in with the same Microsoft account on every device. Even if you normally use a local account, the ESU license follows the Microsoft account you provide during enrollment—not the local user profile.
• Treat the ESU year as a countdown clock. Put a calendar reminder for early 2027 to either migrate to Windows 11 or evaluate long‑term alternatives. Once October 12, 2027, passes, updates stop cold.
• Check your child’s device permissions. Child accounts can’t trigger enrollment; the parent must switch to their own administrator account on the child’s PC to complete the process.

The bottom line

Microsoft’s consumer ESU for Windows 10 is far more generous than early reports suggested: free via two frictionless paths, covering up to ten PCs per account, and providing updates through October 2027. This gives households and power users a low‑stress way to keep their aging machines safe while planning a move to Windows 11. But it is a temporary bridge, not a permanent solution. The operating system will not gain new features, non‑security bugs will remain unfixed, and the broader app ecosystem will gradually move on. For those who need the extra time, the path is clear: enroll one machine, spread the license across the family fleet, and start the countdown to the next chapter.