When Microsoft pulls the plug on Windows 10 security updates on October 14, 2025, you won’t be forced to immediately upgrade or junk your PC—the company is offering a $30 lifeline that extends critical patches for 12 months, and you can even get it for free. That consumer Extended Security Update (ESU) program, quietly detailed in Microsoft’s lifecycle documentation and now rolling out through Windows Update, is the centerpiece of a transition that will affect an estimated hundreds of millions of devices. For the first time, individual users can buy a one-year extension of security-only fixes for a flat fee, or skip payment entirely by syncing settings to OneDrive or cashing in Microsoft Rewards points.

The move is both a concession and a safety valve. By giving households a predictable, affordable bridge, Microsoft hopes to forestall a chaotic rush of unsupported machines that could swell botnets and erode trust. But it also sharpens a hard truth: after October 13, 2026, there will be no more patches for Windows 10—period. And for PCs that can’t meet Windows 11’s stringent hardware requirements, that narrow window demands a plan.

What “End of Support” Actually Means

October 14, 2025 marks a triple cutoff. No more security updates will ship for any Windows 10 edition, leaving any newly discovered vulnerabilities unpatched on devices that don’t enroll in ESU. Microsoft also halts all technical support for the aging OS; help desk calls will be redirected to upgrade paths. And the stream of quality improvements, bug fixes, and feature updates dries up entirely. The operating system will still boot and run applications, but from a security standpoint it will rapidly become a soft target.

For businesses bound by compliance rules, the risk is acute. Regulators and cyber insurers increasingly mandate that endpoints run supported software. For consumers, the danger is more insidious: a single unpatched flaw in the wild can turn a neglected home PC into a stepping stone for ransomware gangs or credential thieves. The ESU program exists precisely to buy breathing room against that clock.

Your Four Options, Ranked by Risk and Effort

Microsoft has laid out a clear hierarchy of choices. The official recommendation is to upgrade to Windows 11 on eligible hardware. For machines that can’t make the jump, buying a new PC or enrolling in ESU are the sanctioned fallbacks. Running without any updates is an option, but only in the way that leaving your front door unlocked is an option.

1. Upgrade to Windows 11 (The Safest Bet)

Free in-place upgrades remain available for Windows 10 version 22H2 devices that meet the hardware bar. That bar is high, and intentionally so. The official system requirements demand a 64-bit 1 GHz dual-core or better CPU, 4 GB RAM, 64 GB storage, UEFI firmware with Secure Boot, and a Trusted Platform Module (TPM) version 2.0. Microsoft publishes a specific list of supported processors; even some capable of meeting core speed and core-count minimums are excluded if they lack modern security features.

You can check eligibility with the PC Health Check app or by visiting Windows Update. If your machine qualifies, the upgrade preserves your files and most settings. The payoff is immediate: you get ongoing security patches, compatibility with future software, and access to Windows 11 features like Copilot on newer hardware. The downside: some older printers, scanners, or niche peripherals may lack updated drivers, and the redesigned interface demands a learning curve.

2. Buy a New Windows 11 PC

If your hardware fails the TPM or Secure Boot test and you have no appetite for workarounds, replacing the device is the most straightforward path. Current market pricing puts entry-level Windows 11 laptops and desktops in the $500–$800 range, with more powerful Copilot+ AI models commanding a premium. Discount cycles around spring and back-to-school seasons offer opportunities to time a purchase. The ESU year can act as a budget buffer: enroll for $30, line up a replacement during the following 12 months, and migrate at your convenience.

3. Enroll in Consumer Extended Security Updates (ESU)

This is the new variable in the equation. Microsoft has created a consumer ESU program for devices running Windows 10 version 22H2. Here are the hard facts:

  • Coverage: Security-only updates classified as “critical” and “important” through October 13, 2026—exactly one year of extra protection. No new features, no quality improvements, no design changes.
  • Cost and enrollment paths:
  • Free if you use Windows Backup to sync your PC settings to OneDrive (requires a Microsoft account).
  • Free by redeeming 1,000 Microsoft Rewards points.
  • $30 (plus tax) for a one-time purchase, tied to your Microsoft account.
  • Licensing: A single ESU license covers up to 10 eligible devices signed into the same Microsoft account. This makes it a bargain for families with multiple aging PCs.
  • Limitations: Domain-joined or MDM-managed commercial devices are ineligible; they must use the enterprise ESU program. Child accounts are also excluded. ESU does not extend technical support.

Enrollment appears inside Settings > Update & Security > Windows Update once your device is running 22H2 and signed in with a qualifying Microsoft account. Click “Enroll now” and choose your preferred payment path. The free OneDrive route is attractive but subject to storage limits—the free tier caps at 5 GB, so if your settings backup exceeds that, you may need a Microsoft 365 subscription.

Nothing physically prevents an unenrolled Windows 10 PC from operating after October 14, 2025. But the risk accumulates daily. Antivirus vendors can only do so much without operating-system-level patches. Third-party software makers will eventually stop supporting Windows 10. And financial websites, streaming services, and corporate VPNs increasingly refuse connections from outdated and potentially compromised clients. For anyone who handles sensitive data, this path is a gamble with poor odds.

In mid-2025, Lawrence Klein filed a complaint aiming to compel Microsoft to provide free Windows 10 updates until the OS’s user share dropped to around 10%. The suit argues that the end-of-life plan amounts to forced obsolescence and pressures consumers into buying Copilot-equipped hardware, potentially cornering the AI market. Legal experts consider the case a long shot; courts rarely enjoin product lifecycle decisions, and Microsoft’s published support timelines give it a strong defense. Still, the lawsuit has amplified public debate about e-waste, the right to repair, and the environmental cost of hardware requirements that render millions of functional machines obsolete.

The complaint does not demand monetary damages—only an injunction to extend free updates. For the millions of users weighing their options, it introduces a sliver of uncertainty, but Microsoft’s October 14, 2025 deadline remains firmly in place in all official documentation. Betting on a court order to delay the cut-off would be reckless.

The Hidden Costs and Trade-Offs

Beyond the sticker price, the transition carries subtler expenses. ESU requires a Microsoft account for license binding, which rankles privacy-conscious users who insist on local accounts. To enroll, you must either convert to a Microsoft sign-in or accept that your ESU license will be worthless without one. The OneDrive sync route further ties your device to Microsoft’s cloud, a trade-off some will reject.

There is also an environmental dimension. TPM 2.0 and Secure Boot requirements render many perfectly capable eighth-generation Intel and earlier systems ineligible for Windows 11. If those machines cannot be repurposed with Linux or ChromeOS Flex, they become e-waste—a burden that falls heaviest on lower-income households and organizations with large fleets of older hardware.

Application and driver compatibility erosion is another creeping cost. ESU patches only the operating system; it does not prod peripheral makers or software vendors to support Windows 10 longer. Printers, graphics tablets, and legacy business apps may quietly lose updates over the next year, forcing replacements even if the OS still boots.

A Practical Migration Checklist

To avoid a last-minute scramble, start now:

  1. Inventory every Windows 10 device you own or manage. Note its model, age, role, and whether it has TPM 2.0 and Secure Boot enabled. Use the PC Health Check app for each.
  2. Prioritize machines that handle sensitive data—personal finance, work documents, customer information. These are the first that must be upgraded or enrolled in ESU.
  3. Apply Windows 10 version 22H2 to all devices that will remain in service. The update is free and required for ESU eligibility.
  4. Back up everything. Use Windows Backup to OneDrive if you’re comfortable with the cloud, or create full disk images to external drives with tools like Macrium Reflect or Veeam Agent.
  5. If a PC is Windows 11-eligible, schedule the upgrade during a low-use period. Verify that critical apps and drivers work under Windows 11 before cutting over.
  6. If a PC is not eligible, decide between ESU and replacement. For ESU, follow the Settings path to enroll and note the expiration date (October 13, 2026). For replacement, begin budgeting and watching for sales.
  7. For businesses, phase migrations by department, test application stacks on Windows 11 virtual machines, and negotiate enterprise ESU coverage through volume licensing if a longer runway is needed.
  8. Maintain endpoint protection throughout—Microsoft Defender or a reputable third-party AV remains essential, even during the transition.

Who Should Use ESU—and Who Shouldn’t

ESU shines for households with multiple older but functional PCs that can’t be upgraded immediately. The $30-per-account license covering up to 10 devices turns a potential $300 expense into pocket change. Families can enroll in ESU today, replace one machine every few months, and decommission the rest as needed.

ESU is not a solution for businesses that need more than a year of runway. Commercial ESU exists through volume licensing and permits multi-year subscriptions, but the consumer plan ends in October 2026. Organizations that can’t complete migrations by then must investigate Windows 365 Cloud PC or other virtual desktop options that let them stream a supported OS to aging hardware.

Privacy purists who refuse Microsoft accounts will find ESU an uncomfortable fit. The Rewards route theoretically avoids direct payment but still requires an account. Those who won’t budge must accept that their only sanctioned path is to upgrade hardware or switch to an alternative operating system.

The Clock Is Ticking—Plan Now, Not Later

Microsoft’s October 14, 2025 deadline is carved in stone, but the company has built a surprisingly consumer-friendly bridge with the ESU program. For the first time, individuals can buy a predictable year of security updates for a nominal fee—or get them for free. That bridge, however, is strictly temporary. When ESU sunsets on October 13, 2026, any remaining Windows 10 devices will face the same stark choice all over again.

The next twelve months are your window to inventory hardware, test upgrades, clean up data, and make deliberate purchasing decisions. The worst strategy is paralysis. By acting now—whether that means clicking “Check for updates” on an eligible machine or paying $30 to lock in a safety net—you sidestep the risks of an unpatched OS and buy the time to land on a supported platform on your terms.

The legal challenge by Lawrence Klein may grab headlines, but it won’t change the calendar. The smart money is on preparation, not litigation. Back up your files, check your hardware, and enroll in ESU or upgrade today. The clock is ticking, and October 14 will arrive whether you’re ready or not.