Consumer Reports is calling on Microsoft to reverse course and provide free security updates for Windows 10 beyond the October 14, 2025 cutoff, a move that could affect hundreds of millions of PCs. The advocacy group’s public letter, first reported by the Houston Chronicle, asserts that the company’s current plan—a one-year paid or account-linked Extended Security Updates program—unfairly burdens lower-income households, schools, and small businesses while creating systemic security risks. With just five months until the deadline, the pressure is mounting on Microsoft to offer a broader safety net.
The Standoff Over Windows 10’s October Deadline
On October 14, 2025, Microsoft will officially end support for Windows 10. That means no more monthly security patches, no compatibility fixes, and no technical assistance for the operating system that still runs on roughly half of all Windows PCs worldwide. In its place, the company has introduced a consumer Extended Security Updates (ESU) program—a one-year bridge that provides critical and important security fixes for enrolled devices through October 13, 2026. The catch: enrollment requires users to either link their device to a Microsoft account by syncing with Windows Backup, redeem Microsoft Rewards points, or pay a fee widely reported at around $30.
Consumer Reports wants Microsoft to scrap those conditions. In a letter addressed to company leadership, the consumer watchdog urged three things: continue basic security updates free of charge for users who can’t upgrade to Windows 11; remove the account-linking requirement; and create clear, privacy-respecting pathways for households, schools, and small organizations that lack the resources to migrate quickly. The group frames the issue not just as a consumer nuisance but as a public safety problem: when millions of devices go unpatched, attackers swarm, and the risk cascades across the internet.
Security Updates After October 14: Your Options
After the cutoff, a Windows 10 PC will still boot and run, but any new vulnerabilities that emerge won’t be fixed. Microsoft says some components—like Microsoft Defender antivirus signatures, Edge browser updates, and certain Microsoft 365 app patches—will continue on their own schedules, but those can’t substitute for operating system-level security updates. The consumer ESU program is strictly security-only; it delivers no new features, design changes, or general support.
Here are the enrollment paths Microsoft has outlined, according to public guidance and press reports:
- Free via Microsoft account: Turn on Windows Backup to sync files, folders, and settings to a Microsoft account. This link enrolls the device in the free ESU offer. The trade-off is a permanent account tie-in and sharing of usage data.
- Microsoft Rewards points: Redeem accumulated Rewards points to cover the ESU fee. This requires active participation in the Rewards program.
- Paid license: A one-time purchase, reported at roughly $30 for the year of coverage, though Microsoft has not published a fixed price sheet. This route does not require account syncing.
Crucially, the ESU is limited: only critical and important security updates; it’s typically capped to a handful of devices per Microsoft account; and you must be running a recent Windows 10 build (22H2) to qualify. It’s a short-term stopgap, not a long-term solution.
Who Is Most at Risk
The burden falls heavily on users whose hardware can’t make the leap to Windows 11. Microsoft’s current OS requires a Trusted Platform Module (TPM) 2.0 chip, UEFI firmware with Secure Boot, and a specific list of supported 64-bit CPUs—features many older but perfectly functional PCs lack. Estimates of the number of stranded devices vary; analysts place the figure anywhere between 200 million and 400 million worldwide, though precise counts differ depending on sampling methods. What’s undisputed is the scale: tens of millions of American households, students, and small businesses could soon be running unpatched machines if they don’t—or can’t—pay or link up.
Low-income families are especially vulnerable. “Even a $30 fee can be a barrier,” Consumer Reports argued, and requiring a Microsoft account raises privacy alarms for many. Schools and small organizations, often operating on thin budgets and outdated IT, face similar dilemmas. And from an environmental perspective, forced hardware turnover means millions of devices heading to landfills prematurely—a concern the group explicitly raised.
How We Got Here
Microsoft’s decision to end Windows 10 support follows a standard product lifecycle. The operating system debuted in 2015, and its 10-year run matches historical support windows. The company has been signaling the move for years, tying it to a broader push toward modern security foundations that hardware-based protections like TPM 2.0 and Secure Boot enable.
In parallel, Microsoft launched Windows 11 in 2021 with those hardware requirements, creating a clear upgrade gate. The company has since offered a limited number of workarounds for unsupported hardware, but official policy remains firm: machines that don’t meet the spec aren’t entitled to Windows 11. For enterprises, Microsoft has long sold commercial ESU licenses at a per-device cost, but consumer ESU is new and more constrained. The pandemic-era extension of Windows 7 ESU for small businesses and schools shows that Microsoft can bend under pressure, but so far, no such flexibility has been signaled for Windows 10.
What You Should Do Right Now
The October deadline is fixed. Even if Consumer Reports’ campaign succeeds, any policy change will take time. Here’s a practical triage plan:
- Inventory your devices: Check your Windows 10 machines and use Microsoft’s PC Health Check tool to see which support Windows 11. Separate the upgradable from the locked-out.
- Prioritize by risk: Internet-facing PCs, those used for banking or healthcare, and any device with access to sensitive accounts should move to the top of the list.
- For upgradable machines: Plan a migration to Windows 11. Test key applications and drivers, and roll out the upgrade before October.
- For non-upgradable machines:
- Enroll in ESU if possible. Choose the free account-linked route only if you’re comfortable with the privacy trade-off; otherwise, consider the paid license.
- Implement compensating controls: Isolate these PCs from untrusted networks, enforce strict firewall rules, remove administrative privileges for everyday use, and use a reputable behavior-based endpoint protection solution.
- Keep backups current, offline if possible, to protect against ransomware. - Consider hardware refresh: If a machine is truly too old to secure, weigh the cost of a new Windows 11 PC against the risks. Factor in recycling or donation programs to reduce e-waste.
For organizations, extend this plan: push out ESU procurement through your IT channels, and lobby for any available government or institutional subsidies. Schools, in particular, should explore government-funded programs that might defray the cost of security updates or new hardware.
What Comes Next
Consumer Reports’ high-profile appeal adds public and regulatory pressure on Microsoft at a critical moment. The company has shown some flexibility before—it briefly extended Windows 7 ESU for small businesses and schools during the pandemic—but it has given no indication it will budge on Windows 10. The coming weeks will likely see more debate, and possibly legislative attention, as the date draws near.
A compromise is possible. Microsoft could offer free ESU to verified low-income households and public institutions, or craft a privacy-respecting enrollment path. Government subsidies, repair initiatives, and industry cooperation could soften the blow without forcing an indefinite support commitment. For now, though, the safest assumption is that the October 14 cliff is solid. Plan accordingly.