On October 14, 2025, Microsoft will stop shipping security patches for Windows 10. For the first time, consumers can buy a one-year reprieve for $30. It’s part of a broader menu of options — some free, some costly — and the window to act is shrinking fast.
The $30 Extended Security Update (ESU) gives home users critical and important security fixes until October 13, 2026. You don’t need to pay if you use Microsoft’s backup sync or redeem Rewards points. But ignoring the deadline means running an unpatched machine, a magnet for attackers.
What’s Ending and When
Microsoft’s Modern Lifecycle Policy sets a hard stop. After October 14, 2025, Windows 10 will receive no more routine security updates, no reliability fixes, and no technical support. The operating system won’t suddenly self-destruct, but every day beyond that deadline widens the window for exploits. Attackers actively target unpatched vulnerabilities, and the end-of-support milestone is a known tipping point.
This cutoff applies to all editions of Windows 10, version 22H2, which is the final feature release. There will be no Windows 10 23H2 or beyond. The path forward is Windows 11, but millions of devices don’t meet its hardware requirements. That’s where the new consumer ESU program — and a handful of workarounds — come in.
The $30 Safety Net (and How to Get It Free)
For home users, Microsoft has rolled out a consumer ESU option priced at $30 for one year of security-only patches. The enrollment process is simple, but you must act before the deadline. First, verify your PC runs Windows 10 version 22H2 with all the latest cumulative updates installed. Then, open Settings > Update & Security > Windows Update. The ESU enrollment wizard will appear as an option once it detects your eligible device and the nearing cutoff.
You can skip the $30 charge entirely by taking one of two free routes. The first: sync your Windows settings and files to a Microsoft Account using the built-in Windows Backup feature. This automatically qualifies you for a free ESU license. The second: redeem 1,000 Microsoft Rewards points. Both methods require a Microsoft Account and completion of the enrollment before October 14, 2025.
For businesses, the economics are steeper. Enterprise ESU licenses are sold as per-device subscriptions, with yearly pricing that escalates over the three-year maximum. Education customers get a discounted tier — as low as $1 per device in the first year, $2 in the second, and $4 in the third — while commercial enterprises pay significantly more. Budgeting for these costs must start now, especially for organizations managing fleets of hundreds or thousands of machines.
If Your PC Can’t Run Windows 11
The official Windows 11 hardware requirements are the root of the post-October predicament. You need a PC with UEFI firmware, Secure Boot capable, a Trusted Platform Module (TPM) version 2.0, a compatible 64-bit processor, 4 GB of RAM, and 64 GB of storage. Microsoft’s PC Health Check app tells you exactly where your machine falls short.
The most common showstoppers are a missing or disabled TPM 2.0, or a CPU that lacks the required instruction sets POPCNT and SSE4.2. If your processor was made before 2009 for Intel or 2015 for AMD, those instructions are likely absent — and no workaround exists. You’ll need new hardware.
For newer but technically “incompatible” PCs, two unofficial methods can shoehorn Windows 11 onto the hardware. A registry tweak bypasses the compatibility check, provided you enable Secure Boot and TPM in the BIOS (some TPM 1.2 chips work). Alternatively, the latest Rufus tool (version 4.9 or newer) creates a bootable USB installer that strips out the hardware checks. Neither method is supported by Microsoft. You’ll see a warning that the device is “unsupported” and may not receive updates, though in practice, updates have flowed for many such installations. Still, relying on that continuing is a gamble. And manufacturers may void warranty service on unsupported installs.
New Hardware and Cloud PCs: The Permanent Fix
Buying a new Windows 11 machine remains the safest long-term route. Modern laptops and desktops come with full manufacturer support, proper driver updates, and guaranteed access to security patches for years. If budget is tight, consider trade-in programs and recycling your old device to offset costs.
For those who can’t justify new hardware yet, cloud PCs offer an intriguing bridge. Windows 365 and Azure Virtual Desktop give you a remote Windows 11 desktop streamed to your old Windows 10 device. Pricing starts in the low tens of dollars per month for entry-level configurations, making it cheaper than an immediate hardware purchase for a few seats. The catch: you need a reliable internet connection and may need to rent for longer than expected if your migration plans stall.
The Free-Tier Escape: Linux and ChromeOS Flex
Very old PCs can gain years of extra life by ditching Windows entirely. Ubuntu, Linux Mint, and other distributions cost nothing and run well on hardware that chokes on modern Windows. ChromeOS Flex, Google’s lightweight cloud-first OS, is another option — though it has its own certified device list and support timelines.
Test either option from a live USB stick before committing. Keep a full disk image of your Windows 10 install so you can revert. The biggest trade-off is desktop app compatibility: Windows-only programs won’t run natively. Workarounds like Wine or virtualization exist, but they demand technical comfort.
If You Absolutely Can’t Move
Doing nothing is the worst choice, but if you’re stuck, minimize risk. Isolate unsupported Windows 10 machines from critical networks, restrict internet access, and avoid any sensitive transactions on them. Third-party micropatching services like 0patch can plug some vulnerabilities on a per-PC basis. Their free plan addresses selected zero-day patches, while paid plans offer broader coverage at a few dollars per device per year. This is not a substitute for full vendor support — it’s a tactical stopgap while you plan a real migration.
Your Action Plan: What to Do This Week
- Inventory your devices. List each PC, note its current Windows 10 version, and mark its role — critical, personal, kiosk, backup.
- Run PC Health Check. Download the tool from Microsoft and check every machine. Identify which Windows 11 requirement each fails.
- Back up everything. Create a full system image and an off-device copy (cloud or external drive) for every PC. This is non-negotiable before any upgrade attempt.
- Enroll in ESU if you need it. For critical, non-upgradable devices, sign in with a Microsoft Account and run the enrollment wizard now. Opt for the free route via Windows Backup or Rewards if possible.
- Test your chosen path. On a single machine, try the unsupported Windows 11 install or Linux migration. Validate that your peripherals and essential apps work.
- Budget for the future. If you manage a fleet, lock in ESU or Cloud PC licensing now. Factor in hardware refresh costs for Q4 2025 and beyond.
Looking Ahead: Beyond 2026
The consumer ESU program is a one-year bridge, not an indefinite fix. After October 13, 2026, Microsoft has given no indication it will extend patches again. The company’s focus is firmly on Windows 11 adoption and, increasingly, on AI-powered PCs that demand even newer hardware. Use this extra year to plan a full migration — whether to supported Windows 11 hardware, a cloud desktop, or an alternative OS. The clock started ticking long ago, but the next few months are your last chance to act without security penalties.