Roughly one in four Windows desktops on the planet still runs an operating system Microsoft stopped supporting in October 2025. That stubborn quarter (26.36% of desktop Windows page views in May 2026, per Statcounter’s version tracker) is the reason Redmond just moved a deadline it had spent two years calling final.
Microsoft has extended the consumer Extended Security Updates program for Windows 10 by a full year. Coverage that was scheduled to lapse on October 13, 2026 now runs through October 12, 2027. There was no blog post and no press release. The change surfaced as an edited line on Microsoft’s own ESU support page: Windows 10 support has ended. You can enroll in ESU any time until the program ends on October 12, 2027.
For anyone sitting on a working PC that fails the Windows 11 hardware bar, the practical effect is unglamorous and welcome. Another twelve months of monthly security patches. No forced hardware purchase this year. And if you already enrolled, nothing to do at all: coverage rolls forward automatically.
“Windows 10 Extended Security Updates (ESU) program for personal use devices is being provided for an additional year, with coverage now available through Oct. 12, 2027. This extension provides customers with more time to transition to a new Windows 11 PC while continuing to receive critical security updates.”
Microsoft, in a statement confirming the change is not a documentation error
What ESU actually buys you, and what it doesn’t
The program is narrower than most people assume. Enrolled machines receive security updates that Microsoft’s Security Response Center rates critical or important, delivered through Windows Update on the usual monthly cadence. That is the whole offer.
No new features. No bug fixes outside the security bucket. No technical support. Your Windows 10 install stops improving on the day it stops being supported; ESU only stops it from rotting.
Two details make it more valuable than that description suggests. The 2011-era Secure Boot certificates baked into most Windows PCs have begun expiring, and Microsoft has been distributing replacement 2023 certificates inside the monthly security rollup, the same pipeline that delivers Windows security patches generally. Machines outside ESU never receive them. Separately, Windows 10 PCs that skipped enrollment have lost the ability to pause updates, which has produced its own crop of accidental Windows 11 upgrades.
The three ways to enroll, and the one most people miss
Microsoft lists three enrollment routes. All three end at the same place, full coverage through October 12, 2027, and one of them costs nothing.
| Route | Cost | Catch |
|---|---|---|
| Sync your PC settings via Windows Backup | Free | Requires a Microsoft account and settings sync switched on |
| Redeem Microsoft Rewards points | 1,000 points | Rewards orders are final; no refunds |
| One-time purchase | $30 USD plus tax | Standard digital refund policy applies |
One license covers up to 10 devices tied to the same Microsoft account. The path is Settings > Update & Security > Windows Update, where an “Enroll now” link appears on eligible machines. Businesses do not get this deal: volume-licensing customers pay per device, starting at $61 for the first year and escalating from there across a three-year window.
Who can’t enroll
Eligibility is where the program gets fussy. The device must run Windows 10 version 22H2 in the Home, Pro, Pro Education or Workstations edition, fully patched. The Microsoft account used to enroll must be an administrator on that PC, and it cannot be a child account.
Enrollment is blocked outright on devices in kiosk mode, machines joined to an Active Directory or Microsoft Entra domain, and anything managed through an MDM solution. Entra-registered devices are fine, a distinction that trips up people running a personal laptop with a work login attached. If a consumer-enrolled PC later gets pulled into one of those commercial scenarios, Microsoft suspends the ESU license until it is out again.
Microsoft also warns that enrollment options and timing vary by region, singling out the European Economic Area, while insisting the updates themselves land identically everywhere.
Can you still upgrade to Windows 11 after enrolling?
Yes, and this is the question the support page answers most bluntly. Taking ESU does not lock your machine to Windows 10. If the hardware clears the Windows 11 requirements, you can upgrade whenever you like, and nothing about the ESU license interferes.
Which reframes what ESU is for. It is not an alternative to Windows 11. It is a stay of execution for people whose upgrade decision is being made by a TPM chip they did not choose.
What happens after October 2027?
Nobody outside Microsoft knows, and the company has been careful to describe the extension as extra transition time rather than a change of policy. Read the wording literally and the program still ends. The date simply moved.
The obvious counterargument is that this date has now moved once already, in response to an installed base that refuses to shrink on schedule. Windows 11 sits at 71.69% of desktop Windows traffic, Windows 10 at 26.36%, and even Windows 7 clings to 1.61% more than a decade past its own funeral. Adoption in some markets, Germany conspicuously, has crawled. Hardware prices are climbing as memory shortages bite. None of that gets easier for Microsoft in the next fifteen months.
So the useful posture for a Windows 10 holdout is neither panic nor complacency. Enroll — the free route takes two minutes and costs a settings toggle. Assume the 2027 wall is real, because Microsoft has never let one of these programs run forever, and the consumer ESU has always been the version with the shortest leash. Then spend the borrowed year deciding whether your next machine is a Windows 11 PC, a Linux install, or something that isn’t a PC at all. Microsoft has quietly handed you time. It has not handed you an exit.
Coverage details, eligibility and the enrollment flow are documented on Microsoft’s consumer ESU page. The date change was first spotted in late June 2026 and subsequently confirmed across the trade press. Anyone tracking what actually ships each month can follow Microsoft’s Defender and Windows security bulletins.
