The clock is ticking for Windows 10 users who want to keep their PCs protected beyond October 14, 2025. Microsoft has quietly rolled out a consumer-focused Extended Security Updates (ESU) program that buys eligible machines an extra year of critical and important security patches—through October 13, 2026—but enrollment is not automatic, and the window slams shut on the same day mainstream support ends.

Three paths lead to that additional year of protection. Two cost nothing but require a Microsoft account and a little savvy; the third carries a $30 price tag. All demand action before mid-October. If you’re among the millions still running Windows 10 version 22H2 on a home PC, here’s exactly what you need to know, how to sign up, and what the trade-offs really look like.

What the consumer ESU actually offers

The consumer ESU is explicitly a security bridge, not a support extension. After October 14, 2025, Windows Update will deliver only patches classified as Critical or Important by the Microsoft Security Response Center. There will be no feature updates, no non-security quality fixes, and no broad technical support beyond activation and installation help. Devices on ESU will get the same bulletins that ship for commercial ESU customers, but nothing more.

For households with several older PCs, one enrollment can cover up to ten devices linked to the same Microsoft account. That makes the paid and free routes unusually generous—provided you’re willing to log in with a Microsoft account on each machine. Local accounts won’t work; the enrollment wizard requires a Microsoft account for license validation.

Finding the enrollment switch

Microsoft is rolling out the ESU enrollment experience in waves, and it appears inside Settings → Update & Security → Windows Update. When the feature reaches your device, you’ll see a banner warning that support is ending and an “Enroll now” link beneath it. If the link is missing, three things increase your odds of seeing it: install every pending cumulative update, install the latest servicing stack update, and reboot. The August 2025 patches—including KB5063709—specifically fixed early bugs that caused the wizard to crash or fail to appear. After updating, check Windows Update again; the phased rollout means patience may still be required, but repeatedly checking after installing all updates is the surest way to catch it.

Step-by-step enrollment

Once the enrollment banner appears, the process takes only a few minutes:

  • Open Settings → Update & Security → Windows Update and select Check for updates. Install anything that appears and restart if prompted.
  • Look for the header about Windows 10 support ending and click Enroll now.
  • Sign in with your Microsoft account when asked. The wizard will verify your device meets the prerequisites—Windows 10 version 22H2, current updates, and a qualifying edition (Home, Pro, Pro Education, or Workstation).
  • Choose your enrollment method from the three options presented. The wizard will walk you through the chosen path.
  • Confirm that the device now shows as enrolled. You can verify status on the same Windows Update page; enrolled devices should start receiving security-only updates as soon as they are released after the end-of-support date.

Three ways to pay—two of them free

Microsoft initially planned a one-size-fits-all $30 fee for the consumer ESU, but after user pushback it added two no-cash alternatives. All three are presented side-by-side during enrollment:

1. Sync Windows Backup with OneDrive (free)

Enable Windows Backup and sync your settings and files to OneDrive. No up-front cash is required, but you will need a Microsoft account and enough OneDrive storage to hold what you back up. If your backup exceeds the free 5 GB tier, you’ll have to purchase additional storage. The sync must remain active for the license to stay valid, so treat it as an ongoing commitment.

2. Redeem 1,000 Microsoft Rewards points (free)

If you already participate in Microsoft Rewards—for example, by searching with Bing or buying from the Store—you may have enough points sitting in your account. Earning 1,000 points from scratch can take days to weeks depending on your region and activity level, so this route is best for existing Rewards members. The points are deducted immediately upon enrollment.

3. One-time $30 purchase

Pay roughly $30 (plus tax, adjusted to local currency) and the license is applied to your Microsoft account. That single purchase can then be used on up to 10 compatible devices signed in with the same account. This is the most straightforward option if you don’t want to deal with syncing or chasing points, and it remains considerably cheaper than buying a new PC today.

Mashable recently detailed how to navigate these options, emphasizing that the free routes are a direct response to user backlash against an earlier all-paid plan. But the underlying requirement remains: no matter which door you choose, you will need a Microsoft account to enroll, even for the paid license.

What ESU does not do—important limitations

Security patches are the only thing ESU delivers. Expect nothing else:

  • No feature updates. Your Windows 10 build number will not change for the entire year. New capabilities introduced in Windows 11 will never appear.
  • No non-security quality fixes. If a driver causes a reliability issue, or a compatibility problem surfaces, ESU won’t resolve it. Only vulnerabilities rated Critical or Important get patched.
  • No general technical support. Phone, chat, and community support remain available, but Microsoft’s official assisted support beyond activation and installation questions will be extremely limited.
  • Hard deadline. The consumer ESU ends on October 13, 2026. There is no second bite at the apple; that date is final.
  • Enterprise exclusivity. Domain-joined, MDM-managed, kiosk-mode, and other managed devices must use commercial ESU programs, which have different licensing and procurement rules.

These constraints mean ESU is a temporary reduction in risk, not a long-term solution. Malware that exploits non-patched weaknesses—like a logic flaw in an outdated component—could still compromise an ESU-protected machine.

Why Microsoft built the consumer ESU this way

Two realities drove the program’s design. First, Windows 11’s strict hardware requirements—TPM 2.0, Secure Boot, and a relatively narrow list of supported CPUs—left a sizable chunk of the Windows 10 installed base unable to upgrade in place. As the October 2025 cutoff approached, a security vacuum was inevitable if Microsoft refused to offer patches. The consumer ESU fills that gap temporarily.

Second, the enrollment process itself advances Microsoft’s broader ecosystem goals. Requiring a Microsoft account ties the license to a known identity and enables easy multi-device management. The OneDrive sync path nudges users toward cloud storage and settings backup, making future PC transitions smoother. The Rewards route loops users into the Bing and Edge engagement loop. Even the paid $30 route links customers to a Microsoft account they may not have used before. None of this is accidental; it lowers support costs and creates stickiness.

For privacy-conscious users, the account requirement is the most controversial piece. If you have religiously avoided Microsoft accounts on your Windows 10 PC, ESU forces a choice: accept the account or leave your machine without patches after October.

The hidden costs of the “free” options

The OneDrive route can cost more than expected. Backing up your entire user folder—Desktop, Documents, Pictures, maybe more—can quickly overflow the free 5 GB. A 100 GB OneDrive plan costs around $2/month, so a year’s worth could tally up to $24, nearly as much as the straight $30 license. If you only need ESU and don’t want cloud storage, the paid option may actually be cheaper.

Accumulating 1,000 Microsoft Rewards points from zero may be impossible for latecomers. Points accrue through daily searches, quizzes, and purchases. Reports from forum users suggest it can take two to three weeks of regular activity to earn 1,000 points—cutting it very close to the October 14 deadline. If you don’t already have a balance, pick another route.

A checklist to confirm eligibility right now

Before you hurtle toward enrollment, run through this quick audit:

  • Edition and version: Settings → System → About. You must be on Windows 10, version 22H2. Older builds must be upgraded first.
  • Updates installed: Run Windows Update repeatedly until no updates remain. Look specifically for the August 2025 cumulative updates; these are critical for the enrollment UI.
  • Microsoft account sign-in: Check Settings → Accounts → Your info. If it says “Local Account,” you must switch to a Microsoft account. The account also needs administrator rights.
  • Backup: Create a full system image or at least copy your irreplaceable files to external media. ESU enrollment doesn’t touch data, but it’s wise to have a safety net before any system change.
  • Enrollment visibility: After all updates and a reboot, go to Settings → Update & Security → Windows Update and look for the banner. If it’s still missing, wait and check daily—the phased rollout may not have reached your machine yet.

Who should enroll—and who should skip it

Enroll if:
- Your PC cannot upgrade to Windows 11 because of hardware blocks, and you need time to save for a new machine.
- You rely on software that has not been validated for Windows 11 and you need a year to test alternatives.
- You simply want to delay a major OS change without losing security coverage.

Skip enrollment if:
- Your PC is already eligible for Windows 11 and you’re willing to upgrade now. The free upgrade offer remains open, and migrating now avoids the ESU’s limitations entirely.
- You plan to replace the device within weeks. Stick to your replacement plan and decommission the old PC before it becomes a risk.

Proceed with caution if:
- You are deeply opposed to signing in with a Microsoft account. The enrollment flow offers no workaround; you will be prompted to sign in.
- You use specialized hardware or software that demands full driver and firmware support. ESU won’t fix those layers, so vulnerabilities there will persist.

Migration paths beyond ESU

ESU gives you breathing room, but the clock doesn’t stop. During that extra year, you should pursue one of these permanent solutions:

  • Upgrade to Windows 11. Run the PC Health Check app to confirm compatibility. If your hardware qualifies, upgrading in place via Windows Update is the simplest path. You’ll get full support, feature updates, and a longer future.
  • Buy a Windows 11 PC. Even modest modern laptops include the required TPM 2.0 and Secure Boot, along with faster storage and better battery life. Microsoft’s Copilot+ PCs also offer AI features that will only expand.
  • Switch to an alternative OS. Linux distributions like Ubuntu and Linux Mint, or ChromeOS Flex, run well on older hardware and can often give a machine years of additional utility. If your workflow is browser-based, this can be a zero-cost migration that leaves you with a patched, maintained OS.

Industry analysts and community forums alike treat ESU as a responsible pause, not a destination. The consensus: enroll if you must, but commit to a migration plan before the 2026 lights go out.

Final verdict

Microsoft’s consumer ESU is a pragmatic, narrowly scoped lifeline. For households with incompatible PCs, it eliminates the need to scramble before October 14 while still providing protection against the most dangerous exploits. The free enrollment paths are genuinely zero-cash for many users, and the $30 paid license is reasonable for a year’s security.

But the program’s constraints are real. The lack of feature and non-security fixes, the forced Microsoft account, and the hard end date mean ESU is a bridge, not a home. Use the year to evaluate your hardware, test applications, and execute a clean transition. If you wait until October 2026 to decide, you’ll be out of options.

To lock in uninterrupted security, find that “Enroll now” link in Windows Update before October 14, 2025. Update your PC, sign in, choose your path, and then start planning your next move. The safety net exists—but it’s only as strong as the plan that follows it.