Microsoft’s October 14, 2025 deadline for Windows 10 support just got softer—not by delaying the date, but by quietly opening free enrollment routes into its Extended Security Updates (ESU) program. The company now offers three distinct paths to get critical security patches for another year: one costs $30, one costs 1,000 Microsoft Rewards points, and one costs nothing more than flipping on a settings sync toggle. Each option comes with real-world trade-offs that every holdout should understand before the clock runs out.

The Hard Deadline and What’s at Stake

Mainstream support for Windows 10 ends on October 14, 2025. After that day, PCs still running the OS will stop receiving monthly security and quality updates unless enrolled in the consumer ESU program. That program is a one-time bridge—it delivers only critical and important security fixes through October 13, 2026, with no new features, no non‑security bug fixes, and no technical support. Microsoft’s own documentation frames it as a stopgap, not a long‑term plan.

For millions of users whose hardware can’t meet Windows 11’s stringent requirements, ESU is the only official lifeline. The program is rolling out now through a built‑in wizard in Settings on PCs running Windows 10 version 22H2. Enrollment is tied to a Microsoft account and is available for individual consumer devices in select markets.

The Three Enrollment Paths: Pay, Play, or Sync

Microsoft published three ways for consumers to get into ESU. All three require a Microsoft account and a device on 22H2.

1. Pay $30—the Straightforward But Limited Option

The simplest route: hand over $30 and you’re enrolled. That one‑time purchase covers up to 10 devices linked to the same Microsoft account. It buys you exactly one year of security‑only updates and nothing else. For households with multiple aging PCs, this can be a cost‑effective choice, but it won’t solve the underlying hardware problem—it just buys time.

2. Redeem 1,000 Microsoft Rewards Points—Free, If You Play the Game

Microsoft Rewards enthusiasts can cash in 1,000 points for ESU enrollment. Points are earned by using Bing, completing dashboard offers, or snagging promotional bonuses. In theory, this is a no‑cash path, but reality is messier. The Rewards program varies by region, and one‑time point offers—like a 500‑point Bing‑app bonus—are inconsistent. Many users report that those promotions fail to credit reliably. If you’re already sitting on a points balance, redemption is friction‑free; if you’re starting from scratch, don’t count on earning 1,000 points quickly without significant effort.

3. Sync Settings (Windows Backup)—The Truly Zero‑Dollar Gate

The quietest, most friction‑free path: simply enable Windows Backup or settings sync under Settings → Accounts → Windows backup (or Sync your settings) and sign in with a Microsoft account. Microsoft treats this as proof that your device is linked to a cloud identity, which it uses to map the ESU license. No credit card, no points. Just a toggle.

The catch? You must use a Microsoft account. If you’ve been running Windows 10 with a local account for privacy reasons, this forces a cloud tie‑in. And while the minimal requirement is just sync settings—not full file backups—the option is often wrapped with OneDrive folder syncing. Be aware: the free OneDrive tier caps at 5 GB. Anyone expecting to back up large profiles or photos may hit a paywall for extra storage. Microsoft’s own documentation confirms the 5 GB limit.

How to Enroll: The Real‑World Wizard Walkthrough

Enrollment is rolling out in waves, so not every eligible PC will see the banner immediately. Here’s the step‑by‑step:
- Update to Windows 10 22H2 if you haven’t already. ESU only works on that build.
- Sign in with a Microsoft account. The wizard will prompt you if you’re using a local account.
- Open Settings → Update & Security → Windows Update. Look for the “Enroll in Extended Security Updates” banner or link. Click it.
- Choose your path: sync settings (free), redeem Rewards, or pay $30. Complete the wizard.
- Verify enrollment in Windows Update. Once confirmed, security updates will flow through the normal Windows Update channel after October 14, 2025.

If the option isn’t visible yet, keep Windows Update current and check back. Microsoft says every eligible device will get the prompt before the October deadline.

Why This Exists: The Windows 11 Hardware Wall

Microsoft’s strict hardware baseline for Windows 11—TPM 2.0, UEFI Secure Boot, a vetted CPU list—left countless capable PCs stranded. The official rationale is security: TPM 2.0 and virtualization‑based security raise the platform’s defenses. But the practical result is a large installed base that can’t cleanly upgrade. Many of those machines are still perfectly functional for everyday tasks, and owners aren’t eager to trash them. ESU is the pressure valve.

The minimum Windows 11 requirements remain a 1 GHz 64‑bit CPU with two or more cores, 4 GB RAM, 64 GB storage, UEFI firmware, Secure Boot, and TPM 2.0. Microsoft has published guidance on enabling TPM where hardware supports it, but for many older PCs, a clean upgrade simply isn’t possible without unofficial workarounds—workarounds that Microsoft doesn’t support long‑term.

The Hidden Trade‑offs Microsoft Didn’t Shout About

Beyond the headline flexibility, several points matter for anyone planning to stick with Windows 10:

  • Mandatory Microsoft account. Even the $30 paid path requires signing in with a Microsoft account. For privacy‑minded users who deliberately avoid cloud identities, this is a bitter pill. The choice becomes “trade privacy for security”—a deal many on forums resent.
  • No features, no fixes, no support. ESU is strictly security patches. Driver issues, application bugs, and general troubleshooting won’t be covered. If something breaks, you’re on your own.
  • Mixed support timelines for Office. Microsoft 365 Apps will continue getting security updates on Windows 10 until October 10, 2028—three years beyond the OS support cutoff. But that doesn’t protect the underlying OS; it only keeps Word, Excel, and Outlook patched. The machine itself becomes an increasingly vulnerable target without ESU.
  • Rewards unreliability. The “free via Rewards” pathway sounds great, but promotional point offers are region‑specific and often fail to credit. Community threads are full of users who followed steps for the Bing‑app bonus and got nothing. Rely on this only if you already have the points.
  • OneDrive storage creep. The sync‑settings path is genuinely free, but if you interpret “Windows Backup” as full‑profile cloud backup, you’ll quickly bump into the 5 GB OneDrive cap. Over‑quota accounts can go read‑only and even risk data loss. The wise move: enable settings sync only, and back up files separately.

Practical Action Plan for the Next 60 Days

With the deadline approaching, here’s a clear to‑do list:

  1. Confirm your device is on 22H2 and fully updated. If not, upgrade now.
  2. Decide on your long‑term path:
    - Upgrade to Windows 11 if your hardware qualifies. That’s the permanent fix.
    - Enroll in ESU via sync (free), Rewards, or $30 if you’re staying on Windows 10.
    - Migrate to another OS (Linux, ChromeOS Flex) or move workloads to a cloud PC.
  3. If enrolling in ESU: sign in with a Microsoft account, enable settings sync, and use the wizard. For multi‑device homes, a single $30 license covers up to 10 PCs on the same account—a potential money‑saver.
  4. Run the PC Health Check app to assess Windows 11 compatibility. If you hit a TPM/CPU wall, explore OEM BIOS settings to enable TPM 2.0, or accept hardware replacement as the eventual endgame.
  5. Back up critical files locally before any sync‑enabled enrollment. An external drive or offline cloud service is safer than relying on ESU’s sync step as a full backup.

Critical Analysis: Strengths, Weaknesses, and the Big Picture

Microsoft deserves credit for acknowledging the hardware mismatch. Offering no‑cost ESU paths reduces the number of abandoned, unpatched machines on the internet—a net positive for global security. The centralized license management (one account, up to 10 devices) is also a smart UX move that simplifies multi‑PC households.

But the forced Microsoft account requirement is a genuine friction point. By insisting on cloud identity even for paying customers, Microsoft erodes the user experience for those who kept Windows 10 local for years. The Rewards path, while attractive in marketing copy, is shaky in practice due to regional and promotional variability. And the OneDrive storage trap—where “free” backup quickly becomes a paid upgrade—adds a hidden cost that many will discover too late.

This whole episode underscores the tension between platform security and user autonomy. Microsoft’s hardware stance is defensible, but the downstream costs are real. ESU is a stopgap, not a solution. For the industry, it’s a lesson that OS transitions carry social and economic weight beyond technical checklists.

Final Verdict

The October 14, 2025 deadline is non‑negotiable. ESU buys you one year of security patches—through October 13, 2026—and Microsoft has quietly opened several free doors to get through it. Yet no path is perfect: all require a Microsoft account, the Rewards route is unreliable, and the sync option nudges you toward a cloud ecosystem with its own limitations.

Treat the free paths as the short‑term safety harness they are. Plan your migration or hardware replacement now. Don’t let a toggle lull you into thinking Windows 10 can hum along forever. The clock is ticking, but for many users, Microsoft has handed out a ladder. Use it wisely.

Reference: Technology Org, “Windows 10’s Death Clock Is Ticking — But You Can Cheat It for Free,” September 16, 2025.