Securing Your PC Beyond 2025: How Windows 10 Users Can Purchase Extended Security Updates (ESU)
As the October 14, 2025, end-of-free-support date for Windows 10 rapidly approaches, many users are wondering about their options. While Microsoft strongly recommends upgrading to Windows 11 for the best and most secure experience, they are offering a lifeline for those who can’t or aren’t ready to make the switch: the Extended Security Updates (ESU) program for consumers.
For the first time, individual Windows 10 users have direct access to this program, which was previously reserved for businesses and educational institutions. This article will detail what the ESU program offers and, crucially, how you can enroll your PC to continue receiving vital security updates.
What is the Windows 10 ESU Program?
The ESU program is designed to provide critical security updates for Windows 10, version 22H2, after its official end of free support. These updates are crucial for safeguarding your PC against newly identified vulnerabilities and emerging cyber threats.
Key points about ESU for consumers:
Security Updates Only: ESU focuses exclusively on security. It does not include new features, non-security bug fixes, or design changes.
One Year of Coverage: For consumers, the ESU program currently offers one additional year of security updates, extending support until October 13, 2026. Unlike commercial versions, there isn’t an option to purchase multiple years.
No Technical Support: The ESU program does not come with general technical support for your Windows 10 operating system. Support is limited to issues directly related to the ESU license activation or installation.
Eligibility and Prerequisites:
Before you can enroll, ensure your Windows 10 PC meets these requirements:
Windows 10, Version 22H2: Your device must be running the latest version o, currently available as Version 22H2f Windows 10.
Latest Updates: Ensure all the most recent updates are installed on your system.
Administrator Microsoft Account: The Microsoft account you use to sign into the device must be an administrator account and cannot be a child account. The ESU license is tied to your Microsoft account.
Personal Use Only: The consumer ESU program is strictly for personal devices and not for commercial use (e.g., devices joined to an Active Directory domain or managed by Mobile Device Management, though Microsoft Entra registered devices are eligible).
How to Enroll in Windows 10 ESU
Microsoft has made the enrollment process straightforward for consumers, offering three distinct options. You’ll primarily enroll through your Windows Settings.
When to Enroll:
Microsoft began rolling out the ESU enrollment wizard through notifications and in Settings around July 2025, with broad availability expected by mid-August 2025. You can enroll any time until the program ends on October 13, 2026. If you enroll later, you will receive all previous updates as well.
Step-by-Step Enrollment:
Access Windows Update Settings:
On your Windows 10 PC, navigate to Settings.
Click on Update & Security.
Select Windows Update from the left-hand menu.
Look for the ESU Notification:
If your device meets the prerequisites, you should see a prominent notification regarding the Windows 10 end of support and a link to “Enroll now” under this notification. This option may also appear in the left pane of the Windows Update page.
Initiate the Enrollment Wizard:
Click the “Enroll now” link. This will launch the ESU enrollment wizard.
If you typically sign into Windows with a local account, you will be prompted to sign into your Microsoft account. The ESU license will be linked to this account.
Choose Your Enrollment Option:
The wizard will present you with three choices for obtaining your one-year ESU license:
Option 1: Free (Sync PC Settings to Cloud)
If the system detects that you are already backing up your PC settings to the cloud using your Microsoft account (via Windows Backup), you may see an immediate option to “Enroll” for free.
If not, you can choose to begin syncing your PC settings to the cloud. This requires using a Microsoft account and, depending on your data size, might necessitate purchasing additional OneDrive storage if you exceed the free 5GB.
Option 2: Free (Redeem Microsoft Rewards Points)
You can redeem 1,000 Microsoft Rewards points to receive one year of ESU at no additional cost. Microsoft Rewards points are earned by using Microsoft services like Bing search, shopping in the Microsoft Store, or completing various tasks. If you’re an active Microsoft user, you might already have enough points.
Option 3: One-Time Purchase
The original paid option remains available: a one-time purchase of $30 USD (or the local currency equivalent, plus applicable tax). This provides the same one year of security updates as the free options.
Complete the Enrollment:
Follow the on-screen directions to confirm your chosen option and complete the enrollment process.
Once enrolled, your device will automatically receive critical and important security updates through Windows Update until October 13, 2026.
Using ESU on Multiple Devices:
An existing ESU license obtained through any of these options can be used on up to 10 devices as long as they are linked to the same Microsoft account. You would simply go through the “Enroll now” process on each eligible Windows 10 PC, and the system will recognize your existing ESU license.
Should You Enroll in ESU?
If you want to use your Windows 10 computer safely for another year, yes, you should. Microsoft emphasizes that the ESU program is a temporary measure. It’s designed to provide a secure bridge for users who are currently unable to upgrade to Windows 11 due to hardware limitations or other factors. The long-term recommendation remains to upgrade to Windows 11, which offers ongoing feature development, enhanced security, and the most current support.
However, if you plan to continue using your Windows 10 PC beyond October 14, 2025, and cannot upgrade to Windows 11, enrolling in the ESU program is a highly recommended step to ensure your device remains protected from critical security vulnerabilities for an additional year.