Millions of Windows 10 users can now lock in one more year of security patches without opening their wallets—if they know which toggle to flip. Consumer Extended Security Updates (ESU) for Windows 10 give ordinary PC owners a practical, one-year lifeline to stay protected through October 13, 2026. The kicker? Microsoft has tucked a free enrollment path behind a simple settings switch that sidesteps the cloud storage panic many fear.

Microsoft set the final curtain for Windows 10 Home and Pro support on October 14, 2025. After that date, no feature updates, no technical support, and crucially, no standard security patches will ship unless a device enrolls in a supported program. For the tens—or even hundreds—of millions of PCs that won’t magically become Windows 11 compatible overnight, ESU is the emergency lane. It’s not a feature upgrade; it’s a narrow, security-only extension meant as a bridge. And for consumers, it comes with a few cleverly gated freebies.

What the Consumer ESU Program Actually Delivers

Once enrolled, your Windows 10 device keeps receiving Critical and Important security updates through Windows Update. Microsoft categorizes each patch as it does today, and ESU eligibility ensures you get the fixes that stop attackers from exploiting newly disclosed vulnerabilities. What you won’t get: new operating system features, routine bug fixes, or vendor technical support. ESU is laser-focused on keeping you secure, nothing more.

The enrollment window remains open until the October 2026 cutoff, and updates are delivered retroactively—so even if you sign up late, your PC will grab any missing patches the moment you join. This is a crucial detail for procrastinators; there’s no penalty for waiting beyond having a temporarily unpatched device.

Which PCs Qualify for Consumer ESU

To hop on the program, your machine must tick these boxes:

  • It runs Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation). Older LTSB/LTSC variants and certain restricted builds won’t qualify under the consumer path.
  • All pending Windows updates are installed. Microsoft’s rollout included an August 2025 servicing update (notably KB5063709 and its successors) that fixed early enrollment bugs and made the ESU control visible in Settings. If you don’t see the option, the most likely culprit is a missed patch.
  • You’re signed in with a Microsoft Account (MSA). Local accounts are a hard stop—even if you choose the paid route, an MSA anchors your ESU license. The entitlement ties to that account and can be reused across up to 10 devices linked to it.
  • The device isn’t domain-joined or managed through certain MDM solutions. Enterprises have separate ESU enrollment flows with different pricing and policies.

The Three Paths to Enrollment—and the Free Secret Hiding in Plain Sight

Microsoft rolled out three consumer ESU gates:
1. Windows Backup / settings sync — free, if you flip the right switch.
2. Microsoft Rewards — redeem 1,000 points (free if you’ve earned them).
3. One-time $30 purchase — covers up to 10 devices on the same Microsoft Account.

The “Windows Backup” route—the one causing widespread headlines—is where most misconceptions live. When Microsoft says “activate Windows Backup,” they’re not talking about uploading your entire disk image to OneDrive. The enrollment trigger is the much lighter settings sync function. Open Settings > Accounts > Windows backup (or Sync your settings) and enable “Remember my preferences” and “Sync your settings.” That’s it. No desktop folder backup required. No massive file uploads. The sync covers items like app lists, Wi‑Fi passwords, preferences, and some personalization—data measured in megabytes, not gigabytes.

The real “catch” that spooked users was the OneDrive folder backup toggle that often sits alongside settings sync. If you turn that on, OneDrive will mirror your Desktop, Documents, and Pictures folders. The free OneDrive tier includes only 5 GB of storage; exceed that and you’ll need a paid plan to keep the backup running. But crucially, folder syncing is optional for ESU enrollment. Microsoft’s own support forums and documentation confirm that settings sync alone satisfies the free enrollment requirement. If you never touch the OneDrive folder switch, you’ll never blow through the 5 GB quota.

Microsoft Rewards redemption is the other no-cash option. If you’ve earned points by using Bing or other Microsoft services, 1,000 points get you the same one-year ESU entitlement. Reports of redemption errors surfaced during the staged rollout, but the $30 fallback or settings-sync path remains available if the Rewards backend stumbles.

The paid $30 route is straightforward and avoids any cloud-sync step. It’s a single purchase that licenses up to 10 devices tied to the same Microsoft Account, making it a bargain for households with multiple legacy PCs. Each device still needs individual enrollment, but no extra payment is needed beyond the first.

Step-by-Step: Enrolling Your Windows 10 PC in ESU (Free Settings Sync Path)

  1. Confirm your build and update status. Go to Settings > System > About and ensure you’re on Windows 10 Version 22H2. Run Settings > Update & Security > Windows Update and install all pending updates. The August 2025 servicing update (KB5063709 series) is critical; without it, the enrollment control may not appear.
  2. Sign in with a Microsoft Account. If you’re using a local account, switch or add an MSA via Settings > Accounts > Your info. The account must have Administrator rights.
  3. Enable settings sync. Navigate to Settings > Accounts > Sync your settings (or Windows backup). Turn on “Remember my preferences” and “Sync settings.” Do not enable OneDrive folder backup unless you intend to manage the storage and accept the potential cost. The toggle for settings sync alone is all you need.
  4. Locate the ESU enrollment prompt. Return to Settings > Update & Security > Windows Update. Look for a banner or link labeled “Enroll in Extended Security Updates” or an “Enroll now (ESU)” button beneath the Check for updates button. If it’s missing, reboot and recheck for updates.
  5. Follow the wizard. When asked to choose a method, select the sync-settings option. Confirm your choice. The ESU license attaches to your Microsoft Account, and Windows Update will begin delivering security patches through October 13, 2026.
  6. Repeat for other devices. A single paid license or Rewards redemption covers up to 10 devices, but each must be enrolled individually using the same Microsoft Account.

Who Gains the Most from Consumer ESU

  • Owners of hardware-blocked PCs. Machines lacking TPM 2.0, Secure Boot, or sufficient CPU architecture for Windows 11 get a full extra year of safe operation while users budget for replacements.
  • Multi-device families. One $30 fee secures up to 10 home computers—far cheaper than buying even one new laptop.
  • Privacy-aware users willing to accept an MSA. The mandatory Microsoft Account link remains a trade-off, but the settings-sync path exposes minimal personal data compared to full folder backups.
  • Budget planners. ESU buys time to migrate on your own schedule, not Microsoft’s, avoiding rushed purchases or forced OS upgrades.

If You Skip ESU: Risks and Alternatives

Doing nothing after October 2025 turns every unpatched Windows 10 box into a hardening target. Exploit kits, ransomware actors, and supply-chain threats disproportionately focus on unsupported operating systems. Some software vendors may also stop supporting Windows 10, narrowing your app compatibility over time.

Alternatives to consumer ESU:
- Upgrade to Windows 11 (if hardware qualifies). The free upgrade path remains the best long-term solution.
- Third‑party micropatching (e.g., 0patch). Independent vendors offer post‑support micro‑patches for critical vulnerabilities, typically for a subscription fee. Coverage models and trust factors vary—diligently research before adopting.
- Migrate to a Linux distribution. A modern Linux desktop can breathe new life into old hardware at zero cost, though it comes with a learning curve and application compatibility considerations.
- Air‑gap or restrict network access. For single‑purpose local machines, isolating from the internet reduces exposure, but it’s impractical for daily‑driver tasks.

Hardening Checklist Before and After Enrollment

  • Install all pending Windows Updates now. The August 2025 servicing updates are not optional for reliable ESU enrollment.
  • Use settings sync exclusively for ESU qualification. Double‑check that OneDrive folder backup is toggled off unless you’re prepared to manage storage.
  • Maintain local, offline backups. External drive images and isolated copies of critical files guard against ransomware and cloud failures.
  • Keep reputable anti‑malware software current. While Microsoft Defender may continue receiving definition updates, OS‑level patches for enrolled devices provide the crucial defense layer.
  • Audit your Microsoft Account’s synced data if privacy is paramount. Disable anything beyond settings sync and periodically review the account dashboard.

Troubleshooting Common Enrollment Pitfalls

  • ESU link not appearing: Confirm Windows 10 version 22H2 and fully patch Windows Update. The August 2025 servicing update is the minimum; if it hasn’t appeared, manually check for updates and reboot.
  • Rewards redemption failure: Switch to the settings‑sync path or the $30 purchase. Microsoft’s rollout had known teething issues, and these alternate routes avoid the dependency on the Rewards infra.
  • OneDrive quota warnings after enabling folder backup: If you inadvertently turned on folder syncing and exceeded 5 GB, either clean out unnecessary files, disable folder backup and use local storage, or purchase additional OneDrive capacity.
  • Enrollment wizard crashes: Cumulative updates post‑August 2025 addressed many early bugs. Install all available patches and try again.

Final Assessment: A Pragmatic Lifeline with Manageable Strings

Microsoft’s consumer ESU program is neither a charity nor a trap. It’s a calculated, mid-ground concession to a reality where hundreds of millions of PCs can’t simply leap to Windows 11. The free settings‑sync route lowers the barrier to zero cash—provided you’re comfortable with a Microsoft Account and a minimal cloud sync. The paid option, at $30 for up to ten devices, is an equally reasonable stopgap for budget‑conscious households.

The program’s real utility hinges on understanding what “Windows Backup” actually means in this context. Settings sync, not full‑disk mirroring, is the key. Once users grasp that, the dreaded OneDrive quota drama evaporates, and ESU becomes what it was intended to be: a one‑year cushion to plan an upgrade, replace hardware, or explore alternatives—not a last‑minute gotcha.

For the average Windows 10 holdout, the practical playbook is clear: update to version 22H2, install the August 2025 patches, sign in with an MSA, toggle on settings sync, enroll, and then use the next twelve months to decide your next move. It’s security on your own timeline—just don’t trip over the feature’s deliberately confusing label.