Microsoft’s free Windows 11 upgrade offer remains available for Windows 10 users, and with the end-of-support deadline looming, now is the time to move—even on PCs that don’t meet official requirements. The company has yet to close the door on license-free upgrades, so if your device runs a properly activated copy of Windows 10, you can step up to Windows 11 without spending a cent. For those blocked by the TPM 2.0 and Secure Boot mandates, the open-source utility Rufus has become the go‑to tool for sidestepping those checks, but it’s not without trade‑offs. Here’s a full rundown of how to get Windows 11 on any PC, plus the risks you’ll face and why Extended Security Updates might be the smarter play for some.

The Free Upgrade: Still Going Strong

When Windows 11 launched in October 2021, Microsoft promised a limited‑time free upgrade for Windows 10 users. Three years later, the offer hasn’t expired. The company’s primary goal is to move as many devices as possible onto its modern platform, and the easiest path is through Windows Update. If your hardware passes the compatibility check—a relatively modern processor, TPM 2.0, and Secure Boot capability—you’ll likely see a “Free upgrade to Windows 11” banner in Settings > Update & Security. Just click Download and Install and the in‑place upgrade preserves your files, apps, and settings.

Not seeing the banner? That doesn’t mean your PC is ineligible. Microsoft often rolls out the notification in phases, and you can jump the queue with other official methods:

  • Installation Assistant: A small executable that runs an immediate, on‑line upgrade. It’s the fastest way to force the move if your device supports Windows 11 but the update hasn’t appeared yet.
  • Media Creation Tool: This wizard downloads the installation files and creates a bootable USB drive or an ISO image. You can then run Setup.exe from the USB to perform an in‑place upgrade.
  • Direct ISO download: Microsoft’s download page offers a clean ISO for users who want full control. Mount it, launch Setup, and you’re off.

All three methods share a crucial prerequisite: they perform compatibility checks before proceeding. If your processor, TPM, or Secure Boot comes up short, the installer blocks you—unless you use a workaround.

The Hardware Roadblock

Windows 11’s strict hardware floor is the main reason millions of capable PCs are stuck on Windows 10. Microsoft insists that TPM 2.0, Secure Boot, and an 8th‑gen Intel or Ryzen 2000 (or newer) CPU are essential for security, but the reality is that many older machines—especially desktops with discrete TPM headers—run Windows 11 just fine once you bypass the checks. The OS itself doesn’t require any silicon‑level features that a 6th‑ or 7th‑gen Core i5 can’t provide, and anecdotal evidence from thousands of users confirms that daily performance and stability are largely unchanged.

Still, Microsoft’s official stance is clear: unsupported hardware won’t be entitled to Windows Update, and the company may deny security patches down the line. That threat hasn’t materialized yet—unsupported installs have received all cumulative updates—but the risk exists, and it’s the primary reason to think twice before buying a new license for an old PC.

Rufus to the Rescue

Enter Rufus, a free, open‑source tool primarily designed to create bootable USB drives. Starting with version 3.16, its creator Pete Batard added a Windows 11‑specific “Extended” installation mode that automatically strips the TPM, Secure Boot, and CPU checks from the ISO. The tool can also disable the requirement for a Microsoft account during setup and bypass the 64 GB storage minimum, making it the Swiss Army knife for anyone determined to run Windows 11 on aging hardware.

Here’s a simplified walkthrough:

  1. Download the latest Windows 11 ISO from Microsoft’s official site.
  2. Download Rufus from its GitHub page or rufus.ie.
  3. Insert a USB drive (8 GB or larger) and launch Rufus.
  4. Under Device, select your USB drive. Under Boot selection, click SELECT and choose the Windows 11 ISO.
  5. In the Image option dropdown, pick “Extended Windows 11 installation (no TPM / no Secure Boot / 8GB‑ RAM)”.
  6. Leave other settings at their defaults and click START.
  7. Once the USB is ready, reboot your PC, boot from it, and proceed through a clean installation or an in‑place upgrade.

For an in‑place upgrade, you can simply run Setup.exe from the USB while Windows 10 is running and choose “Keep personal files and apps.” The setup program will no longer complain about missing TPM or an unsupported CPU. This is the same process used by the Installation Assistant, minus the hardware checks.

Risks of Bypassing Requirements

Installing Windows 11 on unsupported hardware isn’t a decision to take lightly. The most immediate consequence is Microsoft’s policy on updates: the company might withhold security and feature updates at any time. So far, cumulative patches have arrived on schedule, but a future version bump—say, to Windows 11 24H2—could introduce a compatibility block that bricks your unsupported install. You’ll also see a permanent watermark on the desktop and a nag message in Settings reminding you that the PC is “unsupported.”

Beyond updates, there are no performance guarantees. Driver support for older components can be spotty; you might lose functionality for fingerprint readers, SD card slots, or touchscreens. Stability is another concern: while many users report smooth sailing, others encounter random blue screens or unexplained system freezes, especially on first‑gen Ryzen or 6th‑gen Intel chips with outdated firmware.

Then there’s security. The whole point of TPM 2.0 and Secure Boot is to protect against firmware‑level attacks and to enable features like BitLocker device encryption and Windows Hello Enhanced Sign‑in Security. Without those hardware roots of trust, your device is more vulnerable to ransomware, bootkits, and credential theft. If you use the PC for banking, work, or storing sensitive files, the risk may outweigh the benefit of a shiny new Start menu.

Extended Security Updates: The Safer Alternative

If your machine truly can’t handle Windows 11—or you’d rather not gamble with an unsupported install—there’s always Windows 10. Microsoft will continue to support Windows 10 22H2 with security patches until October 14, 2025. After that, you’ll need to pay for Extended Security Updates (ESU) if you want to stay protected.

ESU is a familiar playbook from the Windows 7 days. Businesses can purchase annual subscriptions, and Microsoft has confirmed that individual consumers will also have a path to extend coverage, though pricing and details haven’t been announced. If history repeats, expect a fee of roughly $30–$50 per device for the first year, doubling each subsequent year. For a home user with a single unsupported PC, that’s a fraction of the cost of a new Windows 11 license—or a new device altogether.

Crucially, ESU only covers critical and important security updates. You won’t get new features, driver enhancements, or technical support. It’s a bridge to buy you time while you save for new hardware, not a permanent solution.

Should You Upgrade or Wait?

For supported hardware, the answer is a no‑brainer: upgrade now. Windows 11 isn’t the radical overhaul its predecessor was, but the interface refinements, Auto HDR, DirectStorage, and tighter security integration make it a worthwhile step. The free license means you can always roll back to Windows 10 within 10 days if you don’t like it.

For unsupported hardware, the calculus is murkier. If your PC is a secondary device used for casual browsing and media consumption, the risks of an unsupported install are minimal. You’ll enjoy a modern OS without spending a dime, and even if updates dry up, your exposure is limited. On a primary workhorse, however, sticking with Windows 10 plus ESU—or finally replacing the device—is the smarter long‑term play.

Rufus makes the unsupported journey trivially easy, but it can’t magic away the underlying hardware limitations. Before you pull the trigger, back up your system, verify that your critical apps and drivers are Windows 11‑compatible, and accept that you may one day have to wipe the drive and reinstall an older OS. With Windows 10’s clock ticking, the choice is yours—just make it with both eyes open.