Windows 10 Security Updates Extended to 2027: How to Stay Protected for Free

Microsoft has extended the free Windows 10 Extended Security Updates (ESU) program by one additional year. The new end date is October 12, 2027, up from the original October 12, 2026 deadline. If you are still running Windows 10 and already enrolled, your coverage rolls over automatically with no action required.

Windows 10 Security Updates Extended to 2027

What Is the Windows 10 ESU Program?

Windows 10 officially reached end of support on October 14, 2025. After that date, Microsoft stopped delivering feature updates, technical support, and regular security patches for the OS.

To bridge the gap for users who cannot or will not move to Windows 11, Microsoft launched the Extended Security Updates program. ESU delivers only critical security patches, not new features or general fixes, keeping enrolled devices protected against actively exploited vulnerabilities.

The consumer ESU program was originally a one-year extension, set to expire in October 2026. Microsoft has now quietly pushed that deadline to October 2027, giving Windows 10 users a second free year of security coverage.

How Microsoft Announced the Extension

Microsoft did not issue a formal press release or blog post for this change. The update appeared as an editor’s note on a Windows Experience Blog post and as a revision to the official Windows 10 ESU support page.

The support page now reads: “Windows 10 support has ended. You can enroll in ESU any time until the program ends on October 12, 2027. If you’re already enrolled, your coverage will automatically continue through that date, no action needed.”

Microsoft told BleepingComputer that the extension reflects its “ongoing commitment to helping customers stay secure during the transition” and gives users “more time and flexibility to find the best PC for their needs while keeping them protected.”

Why Microsoft Extended Windows 10 ESU

Microsoft has not published a detailed rationale, but two factors are widely cited.

First, around 400 million PCs worldwide cannot officially run Windows 11 because their hardware lacks TPM 2.0, Secure Boot support, or a compatible processor. Those machines have no direct upgrade path.

Second, the ongoing RAM shortage has pushed new PC prices sharply higher. DRAM contract prices have roughly doubled since early last year as major manufacturers redirect memory production toward high-bandwidth chips for AI data centers. IDC projects that PC, tablet, and smartphone prices will rise 10 to 20 percent through the end of 2026. With upgrade costs at a high, Microsoft appears to have acknowledged that many users simply cannot justify a hardware purchase right now.

Windows 11 has reached approximately 73 percent of global desktop market share, but Windows 10 still accounts for around 26 percent, representing hundreds of millions of active devices.

Who Qualifies for the Free ESU Extension

The consumer ESU program covers personal devices only. Your device must meet the following conditions to qualify:

  • The device runs a non-LTSC version of Windows 10
  • The device is not joined to an Active Directory domain
  • The device is not joined to Microsoft Entra as an organization-owned machine
  • The device is not managed through Mobile Device Management (MDM)

Devices that are Entra-registered, meaning a work account is added to a personally owned machine rather than the organization controlling the device, do qualify.

One ESU license covers up to 10 devices tied to the same Microsoft account.

How to Enroll in Windows 10 ESU for Free

You can enroll using any of the three methods below. Already-enrolled users do not need to re-enroll.

Method 1: Sync your PC settings to a Microsoft account (free)

  1. Open Settings and go to Accounts.
  2. Select Windows Backup.
  3. Sign in with your Microsoft account if prompted.
  4. Toggle on Remember my apps and Remember my preferences.
  5. Let the backup sync complete.

After the sync, your device automatically enrolls in ESU at no cost.

Method 2: Redeem 1,000 Microsoft Rewards points

  1. Visit rewards.microsoft.com and sign in.
  2. Search for the Windows 10 ESU redemption option in the rewards catalog.
  3. Redeem 1,000 points for one year of ESU coverage on up to 10 devices.

Method 3: Pay $30

  1. Visit the Microsoft Store or the Windows 10 ESU purchase page.
  2. Purchase a one-year ESU license for $30 USD.
  3. The license applies to up to 10 devices on the same Microsoft account.

European Economic Area (EEA) users: You can enroll for free simply by signing in to Windows 10 with a Microsoft account. No sync, points, or payment required.

What ESU Covers and What It Does Not

ESU delivers only critical and important security patches. It does not include:

  • New features or UI changes
  • Non-security bug fixes
  • Technical support from Microsoft
  • Updates for Internet Explorer or legacy inbox apps

If a zero-day vulnerability targets Windows 10, an enrolled device receives the patch. An unenrolled device does not.

Enterprise ESU Is a Separate (Paid) Program

Business and enterprise customers can purchase Windows 10 ESU for up to three years. The total cost over that period reaches $427 per device. Enterprise ESU enrollment requires Microsoft Volume Licensing and is managed through the Microsoft 365 admin center or Windows Autopatch.

Third-Party Security Options for Windows 10

If you prefer not to enroll in the Microsoft ESU program, one alternative exists. The security firm 0patch has committed to providing unofficial micropatches for Windows 10 through 2030. These patches cover vulnerabilities in Windows components and some third-party software, but they are not official Microsoft fixes and may not address every CVE.

For users whose hardware cannot run Windows 11 and who want to step away from Windows entirely, initiatives such as End of 10 offer guided paths to Linux distributions optimized for older hardware.

How to Keep Your Windows 10 PC Secure Until 2027

If you are running Windows 10 on a personal device and not yet enrolled in ESU, use Method 1 above. Syncing via Windows Backup is the fastest free path. Your device will receive the October 2027 extension automatically after enrollment.

If you are already enrolled, nothing changes. Your device stays protected until October 12, 2027 with no additional steps on your part.

For anyone who can upgrade to Windows 11, the hardware requirements page on Microsoft’s website lists the minimum specs. Running the PC Health Check app gives you a direct answer on whether your current machine qualifies.

Related Guides

Leave a Comment

Comments

No comments yet. Why don’t you start the discussion?

    Leave a Reply