Microsoft has officially extended the availability of Extended Security Updates (ESU) for Windows 10 on personal-use devices, giving consumers who cannot or will not upgrade to Windows 11 a critical security lifeline through at least October 12, 2027. The move, confirmed in a recent update to the company’s support documentation, means individual users can now receive patches for newly discovered vulnerabilities for up to two years beyond the operating system’s original October 14, 2025 end-of-support date—with an optional third year available through October 10, 2028.

This is a dramatic expansion of the ESU program. When Microsoft first announced consumer availability in December 2023, it was limited to a single year of updates for a flat $30 fee. The new plan, first detailed in February 2024 and now fleshed out with exact dates, turns the offering into a multi-year subscription model that mirrors what business customers have had access to for years.

A Reversal Driven by Hardware Reality

Windows 10 remains the most widely used desktop operating system on the planet. As of early 2025, it still powers roughly 60% of all Windows PCs, while Windows 11 hovers around 35%. The upgrade chasm is not merely a matter of user reluctance. Windows 11’s stringent hardware requirements—a compatible 64-bit processor, 4GB of RAM, 64GB of storage, and most controversially, a Trusted Platform Module (TPM) version 2.0—have left hundreds of millions of otherwise capable machines ineligible for the new OS.

Microsoft’s own telemetry likely underscored the problem. Without a safety valve like ESU, a massive portion of the installed base would abruptly lose all security support in October 2025. That would create an unprecedented pool of vulnerable devices, ripe for exploitation by ransomware gangs, botnets, and other cyber threats. By extending the patch pipeline, Microsoft buys time for the PC refresh cycle to catch up—and for itself to convince holdouts to migrate.

“We are committed to helping our customers stay secure and productive on their existing devices,” the company said in a statement accompanying the announcement. “The Extended Security Updates program for Windows 10 is a bridge, not a destination.”

The Three-Year Patch Timeline

The ESU program for consumers now follows a tiered structure that will feel familiar to anyone who has watched Microsoft’s commercial licensing playbook. Each phase covers a full year of Patch Tuesday releases, delivering only “critical” and “important” security fixes. No new features, no driver updates, no technical support beyond what Microsoft still offers for the OS in its current state.

  • Year 1: October 14, 2025 to October 13, 2026. Cost: $30.
  • Year 2: October 14, 2026 to October 12, 2027. Cost: $60.
  • Year 3: October 13, 2027 to October 10, 2028. Cost: $120.

Enrollment is not automatic. Consumers must purchase a ESU subscription through the Microsoft Store or a designated online portal. The company has not yet specified an enrollment deadline for the first year, but it will likely align with the final regular security updates in 2025. Once purchased, patches will flow via the same Windows Update channel used today, though behind the scenes they will be flagged for subscribers only.

Crucially, users cannot skip a year and jump back in later. If you let your ESU lapse after year one, you cannot buy into year two or three retroactively—your only option would be to purchase all years from the start. This “cumulative” pricing model incentivizes early enrollment and makes the total cost for three years of patches $210.

Who Benefits Most

The primary audience for consumer ESU falls into three camps: individuals running unsupported hardware who cannot afford a new PC; small businesses and freelancers who rely on legacy applications that aren’t yet compatible with Windows 11; and a smaller but vocal group of users who simply prefer Windows 10’s user interface, workflows, or control philosophy.

For the first group, the calculus is straightforward. A $30–$120 annual fee is far less than the $500–$1,000 cost of a new laptop. For those with software compatibility issues, the extra time allows independent software vendors to update their products or for IT departments to validate virtual machine workarounds.

The third group is more ideological. Many Windows 10 loyalists resent the forced migration pattern that Microsoft has employed since Windows 8. The ESU program at least provides an option to keep a patched system running without resorting to unsupported third-party patch tools like 0patch or Akamai’s Micro-Patching service.

The Security Imperative

Let’s be blunt: running an unpatched, internet-connected operating system is a recipe for disaster. The National Institute of Standards and Technology (NIST) maintains a database of common vulnerabilities and exposures (CVEs) that affect Windows 10. In 2024 alone, over 600 CVEs were addressed, many rated critical. Without ESU, a Windows 10 machine will become a sitting duck within weeks of the October 2025 cutoff.

“We’ve seen what happens when unsupported systems are left exposed,” said a senior threat researcher at a major cybersecurity firm, speaking on background. “Within 24 hours of Patch Tuesday, exploit code for newly disclosed vulnerabilities often appears in public repositories. Attackers actively scan for machines that haven’t updated. If a large segment of the population is locked out of patches, we’ll see widespread compromises.”

The ESU program doesn’t eliminate all risk. Because Microsoft says it will only release fixes for vulnerabilities rated “critical” or “important,” any “moderate” or “low” severity bugs will remain unpatched. Additionally, the company will not issue patches for any vulnerabilities that are deemed out-of-scope for the ESU program, such as those that require architectural changes or new features to resolve.

Still, for the average home user or small business, having critical patches is infinitely better than nothing. And the escalating annual cost serves as a soft deadline—Microsoft is undoubtedly betting that by year three, the financial pain will push most to finally upgrade.

How to Enroll

Microsoft has not yet opened the enrollment portal for consumer ESU. Based on the commercial program’s history, expect availability around mid-2025, with priority given to enterprise agreements. The consumer version will likely appear in the Microsoft Store under a new subscription SKU.

Users will need a personal Microsoft account and the license key for their Windows 10 installation. The subscription will be tied to a specific device, though Microsoft has hinted at allowing transfers to a replacement device in the event of hardware failure—a detail that will be clarified when enrollment begins.

For volume license customers, a separate SKU has long existed. Those users already have a path to purchase ESU through their usual licensing channels, often at a lower per-device cost.

What About Windows 11 Downgrades and LTSC?

Some power users have long exploited downgrade rights to install Windows 10 Pro on machines that shipped with Windows 11 Pro, then use extended support for the older OS. However, Microsoft closed that loophole for new purchases some time ago. If you buy a new PC today, it comes with Windows 11, and you cannot legally downgrade to Windows 10 without a separate license. For existing systems, ESU is indeed the only official way to keep Windows 10 running securely after 2025.

There is another avenue: Windows 10 Enterprise LTSC (Long-Term Servicing Channel), which receives updates for up to ten years. The current LTSC 2021 edition is supported until January 12, 2027, and the last LTSC release (which appeared alongside Windows 11) extends to 2032. But LTSC is not available to general consumers; it requires a volume license agreement and is intended for specialized devices like medical equipment or ATMs. For the vast majority of home users, ESU is the sole official post-2025 patch strategy.

The Road to 2028 and Beyond

Microsoft’s communication around Windows 10’s end of life has been a study in mixed messaging. Company executives have publicly called the October 2025 date a “hard deadline,” while simultaneously building an ESU escape hatch that stretches years into the future. The phrase “Windows 10 is the last version of Windows” has been relegated to a distant memory; the operating system’s retirement now looks more like a phased partial drawdown.

The existence of a three-year ESU program also raises questions about what comes after. Windows 11 is three years old and has yet to reach majority market share. There are persistent rumors that Microsoft will pivot to a Windows 12 release in 2025 or 2026, possibly with relaxed hardware requirements to entice the holdouts. If true, the ESU window might precisely overlap with that transition—give users patched Windows 10 until Windows 12 is established, then shut the door for good.

For now, though, the message is clear: if you need to stay on Windows 10, you can—for a price. And that price will only rise the longer you wait.

The October 12, 2027 date marks the end of the second year of consumer ESU. By then, Microsoft hopes you’ll have finally made the leap. But if you haven’t, $120 will buy you one more year of breathing room, after which the only patches you’ll get are the ones you write yourself.