Windows 10 ESU Extended to 2027: What to Do Now

By Thomas Lovas Lokoy · Published October 23, 2026 — researched and drafted with AI assistance from published sources; edited and published by NorwegianSpark SA.

If your PC still runs Windows 10, you have more time than you were told: Microsoft's consumer Extended Security Updates (ESU) programme now runs until 12 October 2027, not 13 October 2026. You can still enrol, enrolment can be free, and devices already enrolled stay covered to the new date automatically. What ESU does not do is make Windows 10 a supported operating system again, so the right move is to enrol now and use the year to plan the switch.

What changed, and why you may have missed it

Windows 10 reached end of support on 14 October 2025. Microsoft's own support page is plain about what that means: the PC keeps working, but Microsoft no longer provides technical assistance, feature updates or security updates for it. The consumer ESU programme was the bridge, and it was originally set to end on 13 October 2026.

There was no launch event for the extension. Help Net Security reported on 26 June 2026 that the new date appeared in Microsoft's ESU documentation and in an editor's note on a Windows Experience Blog post dated 25 June 2026, rather than in a formal announcement. Microsoft's ESU page now says you can enrol "any time until the program ends on October 12, 2027", and that devices already enrolled keep their coverage through that date with no action needed.

That quiet rollout matters for one practical reason: a lot of advice written before June, including posts that still rank well, tells Windows 10 users that their protection ends this month. It does not, if they enrol.

Do you qualify for Windows 10 ESU?

Microsoft lists the conditions on its ESU page. A device needs:

• Windows 10 version 22H2, in the Home, Pro, Pro Education or Workstations edition.
• The latest Windows updates installed, including the ESU licensing preparation package KB5126256.
• A Microsoft account with administrator rights to sign in and enrol. A child account cannot enrol.

Some devices are excluded: kiosk-mode devices, devices joined to an Active Directory domain or to Microsoft Entra, and devices enrolled in mobile device management. Entra-registered devices are allowed. In practice, the consumer programme is for home PCs; a work laptop managed by an employer goes through the employer's own route.

To check your version, open Settings, then System, then About, and read the line that says Version. If it shows anything older than 22H2, run Windows Update first; the ESU option will not appear until the PC is current.

How to enrol, and what it costs

Microsoft offers three ways to enrol, set out on the same ESU page:

• Free: turn on Windows Backup so your PC settings sync to your Microsoft account. Microsoft describes this route as "at no additional cost".
• Microsoft Rewards: redeem 1,000 Rewards points.
• Paid: a one-time purchase of 30 USD, or the local-currency equivalent, plus applicable tax.

One licence covers up to 10 devices. The enrolment prompt appears in Settings, under Windows Update, on an eligible PC. If you choose the free route, be clear about the trade: you are agreeing to sync settings to Microsoft's cloud. For most people that is an acceptable price; if it is not for you, the paid option exists precisely so you do not have to.

What ESU covers, and what it does not

ESU provides critical and important security updates, as Microsoft's Security Response Center defines those ratings, for Windows 10 version 22H2. Microsoft is explicit about the limits: ESU "does not provide other types of fixes, feature improvements, or product enhancements", and it does not include technical support.

So an enrolled Windows 10 PC gets the patches that close serious security holes in Windows itself. It does not get bug fixes that are not security fixes, and over time it will fall further behind current software. Drivers, browsers and apps eventually stop supporting an operating system that is out of mainstream support, on their own schedules rather than Microsoft's.

If you use Microsoft 365 apps, there is a separate date to know. Microsoft's support page states that support for Microsoft 365 Apps on Windows 10 ended on 14 October 2025, but that Microsoft will keep providing security updates for Microsoft 365 on Windows 10 until 10 October 2028.

Is antivirus enough on Windows 10 without ESU?

No, and it is worth being precise about why. Antivirus and operating system updates protect against different things.

An antivirus product looks for malicious files and behaviour. A security update removes a flaw in Windows itself, so that an attacker cannot use it at all. A PC that is not getting Windows security updates accumulates known, published vulnerabilities, and no antivirus can patch those. The two layers are complements, not substitutes.

That said, an antivirus layer is still worth having on Windows 10, enrolled or not. Microsoft Defender is built in and keeps running. In AV-TEST's August 2026 round, which was run on Windows 11, Microsoft Defender Antivirus scored 17.5 of 18 points and Avast Free Antivirus scored 18 of 18, with both receiving AV-TEST's TOP PRODUCT award. Lab results on Windows 11 are not a direct measurement of Windows 10 protection, but they do show that the free options are not a downgrade on detection. Our free vs paid antivirus guide covers what paying adds, and the best antivirus roundup compares the field.

Can your PC run Windows 11?

The extra year is most useful if you spend it deciding this. Microsoft's Windows 11 specifications page lists the minimum requirements:

Microsoft says the upgrade itself is free for eligible Windows 10 22H2 PCs, and points to the PC Health Check app as the way to find out. If your PC passes, the upgrade is the cleanest answer and ESU becomes a safety net while you find a convenient weekend. If it fails, usually on the processor or TPM line, ESU buys you until October 2027 to replace the machine on your own timetable rather than in a hurry.

A plan for the next twelve months

• This week: check you are on 22H2, install all pending updates, and enrol in ESU by whichever route suits you.
• Before anything else changes: make a full backup. An upgrade or a migration is exactly when you will need one. Our backup guide covers the options.
• Keep an antivirus layer running. Defender is fine; if you prefer a third-party suite for its extra features, install it before you remove anything else, never after.
• Run PC Health Check and decide: upgrade in place, or budget for a new PC before October 2027.
• Tidy your privacy settings once you land on Windows 11. Our Windows privacy settings guide walks through them.

The one thing not to do

Do not stay on an unpatched Windows 10 PC and assume an antivirus has you covered. Enrolment in ESU is free for most home users, takes a few minutes, and now lasts until 12 October 2027. That is the single highest-value step on this page. Everything else is planning. This is general guidance, not security advice for a specific threat model.

Continue in this collection

Best Security Tools

The shortlist across antivirus, VPN and password managers, and the reasoning.

Explore

Live Offers

What is actually discounted right now, rather than what once was.

Explore