On October 14, 2025, Microsoft will pull the plug on security updates for Windows 10, stranding hundreds of millions of PCs in a dangerous no-update zone. Anyone still running the operating system after that date has three choices: upgrade to Windows 11 if their hardware can manage it, pay for a one-year safety net called Extended Security Updates (ESU), or leave Microsoft entirely by installing Linux or ChromeOS Flex. Doing nothing leaves the machine wide open to new malware for which patches already exist on supported platforms.

The support shutdown: what stops and what keeps working

After the October deadline, Windows 10 itself won't self-destruct. Your PC will boot, your apps will launch, and your files will remain accessible. But the vendor maintenance layer vanishes. Specifically, Microsoft will stop delivering:

  • Security updates — no more Patch Tuesday fixes for freshly discovered vulnerabilities. The kernel, browser components, and system services will remain unpatched forever.
  • Quality improvements — no more cumulative updates that fix bugs, stability issues, or driver compatibility snags.
  • Technical support — Microsoft customer service will no longer help you troubleshoot problems on a retired Windows 10 device.

The one exception is the Extended Security Updates program. If you enroll—and only for the year it covers—Microsoft will issue critical and important security patches. But those are strictly security-only: no new features, no design changes, no broad technical support. And when the ESU clock runs out on October 13, 2026, the update faucet turns off for good.

Running an unsupported OS is a gamble that gets riskier every week. Within days of a public vulnerability disclosure, attackers weaponize it against unprotected machines. Third-party software vendors also gradually stop testing their titles on outdated Windows versions, piling on compatibility and supply-chain risk. October 14, 2025 is a hard milestone, not a rough guideline.

How the end of support affects home users, power users, and businesses

For home users, the most immediate danger is a gradual erosion of safety. Browsing the web, opening email attachments, and even visiting familiar sites becomes more dangerous because the underlying operating system can't defend itself against newly discovered holes. Ransomware gangs and phishing campaigns concentrate on unprotected populations. The good news is that if you act before the deadline, you can stay secure without buying a new computer—and often without spending a dime.

Power users typically already know their PC's specs, but many will be caught off guard by the true hardware gate. Even a five-year-old gaming rig or workstation can be locked out of Windows 11 because of one missing component: TPM 2.0. Microsoft's PC Health Check app will spell out exactly which requirement your machine fails. If it's something that can be enabled in the BIOS—Secure Boot, TPM—you might still qualify. If it's the CPU, you're stuck.

IT professionals face a different timeline. While enterprises can purchase multi-year ESU plans (at escalating annual costs), they also must manage fleets of older hardware that may not meet Windows 11 specs. Many are eyeing Linux or ChromeOS Flex to repurpose outdated devices securely, avoiding both e-waste and expensive refresh cycles. For them, October 2025 is when the official clock ends, but the planning should already be well underway.

A decade of Windows 10, and why Microsoft drew a hardware line

Windows 10 launched in 2015 and became the most widely installed desktop operating system ever. Microsoft originally floated the idea of it being "the last version of Windows"—a continuous, ever-updating service—but by 2021 the company introduced Windows 11 with a fresh set of minimum requirements. The most controversial were the demand for a compatible 64-bit CPU from a curated list, UEFI firmware with Secure Boot capability, and TPM 2.0. Those moves instantly locked out millions of machines manufactured before roughly 2018.

Microsoft's public rationale has been security: modern silicon and a hardware root of trust, they argue, are essential to defending against increasingly sophisticated attacks. Critics—including consumer advocacy groups like Consumer Reports—counter that the policy creates an artificial obsolescence problem. They warn of massive e-waste as perfectly functional PCs are discarded, and they highlight an equity issue: lower-income households are far more likely to own older, incompatible hardware.

Consumer Reports recently urged Microsoft to extend free security updates for consumers or to offer more privacy-respecting enrollment paths for the ESU program. The current consumer ESU options include a free enrollment for users who sync their Windows Backup settings to a Microsoft Account, a redemption for 1,000 Microsoft Rewards points, or a one-time purchase documented at about $30 USD. While these pathways soften the blow, they remain a temporary bridge, not a destination.

Take these steps now to secure your Windows 10 PC

1. Make a full backup

Before you touch any installer or partition table, create a verified backup of your documents, photos, and application data. Use Windows Backup, OneDrive, or a third-party disk imaging tool. If something goes wrong during an upgrade or a migration, you'll be able to restore your files exactly as they were.

2. Run PC Health Check and decide if you can upgrade

Download and run the PC Health Check app from Microsoft. It will tell you whether your PC meets Windows 11 requirements and, if not, will pinpoint the specific failure (TPM 2.0 disabled, Secure Boot off, unsupported CPU, etc.). If the issue is fixable—for instance, TPM is present but turned off in the BIOS—consult your PC maker's support pages. If the app gives a green light, you can move to step 3.

3. If eligible, upgrade to Windows 11

Update your firmware (BIOS/UEFI) and drivers to their latest versions, apply every pending Windows 10 update, and then use Windows Update or the Installation Assistant to start the upgrade. As always, have a backup handy. On some older hardware, drivers can be finicky after the upgrade; check your manufacturer's forums for known issues.

4. If your PC doesn't meet Windows 11 requirements, evaluate ESU

Open Settings > Update & Security > Windows Update. If your device is eligible for the consumer ESU program, you'll see enrollment options. The free route requires you to link a Microsoft account and enable Windows Backup sync; the paid one-time fee (around $30) gives you coverage through October 13, 2026. ESU delivers only Critical and Important security updates—no feature fixes, no technical support. It's a stopgap meant to buy time for a longer-term plan, not a reason to postpone action indefinitely.

5. If you prefer to leave Windows, test Linux or ChromeOS Flex

Your hardware may not run Windows 11, but a modern Linux distribution can breathe new life into it. Consumer Reports highlighted Fedora as a user-friendly option, quoting Fedora project leader Jef Spaleta: "Anything that's in service running Windows 10 should be able to run Fedora." Spaleta even got Fedora 42 running on a 2012 laptop. Other polished distributions include Ubuntu, Linux Mint, and Zorin OS, all of which offer graphical software stores and straightforward installers.

To try Linux without touching your current setup:

  • Download the ISO for Fedora Workstation (or a lighter "spin" like XFCE or MATE) from fedoraproject.org.
  • Use Fedora Media Writer (available for Windows, macOS, and Linux) to write the ISO to a USB flash drive of at least 8 GB.
  • Reboot, enter your PC's boot menu (often by pressing F12, F9, or Esc during startup), and select the USB drive.
  • Choose "Try Fedora" to boot into a live session. Test Wi-Fi, sound, display scaling, and your printer. If hardware behaves, you can then install Fedora alongside Windows (dual-boot) or replace Windows entirely—after backing up, of course.

ChromeOS Flex is another lightweight, cloud-centric option that can resurrect older hardware for web-first tasks. It's particularly intuitive for users already invested in Google's ecosystem.

6. For specialized needs, plan a hardware refresh or virtualize

Some industries require Windows-only software that has no Linux equivalent. In those cases, buying a new Windows 11 PC is the path of least resistance. Alternatively, if your current machine is powerful enough, you could run Windows in a virtual machine on top of a Linux host—but that's a more advanced route that requires technical comfort.

What to watch for after October 14

Microsoft has shown zero inclination to extend Windows 10's free support window, but Consumer Reports and similar groups are keeping up the pressure. Regulatory attention, especially around e-waste and consumer protection in Europe and the U.S., might nudge the company into offering a more permanent solution for low-income users or expanding the ESU runway. For now, the Linux community has rallied behind initiatives like endof10.org, which provides plain-English guidance for switchers. October 2025 is a deadline, not a cliff; the months leading up to it are your window to make a deliberate, informed choice.