Microsoft quietly extended its free Windows 10 Extended Security Updates program by a full year on June 25, 2026, pushing the consumer coverage end date from October 12, 2026 to October 12, 2027. The change arrived without a press release or staged announcement, surfacing only in an editor’s note added to a Windows Experience Blog post and in updates to the consumer Windows 10 ESU enrollment options. For personal-device users still running Windows 10, the new date buys another year of critical and important security patches.
Windows 11 now commands roughly 71.69% of desktop Windows share, up from about 49% in September 2025, while Windows 10 still holds 26.36% on hardware that often cannot clear the TPM 2.0, Secure Boot, or supported-processor bar. The extension is also a tacit acknowledgment that the move has been harder to land than planned.
The Quiet Edit That Reset the Calendar
The change showed up on June 25, 2026, inside a Windows Experience Blog post that Microsoft had originally used to walk users through Windows 10’s end of support on October 14, 2025. An “Editor’s note” appended to that post declared that “the Windows 10 Extended Security Updates (ESU) program for personal use devices is being provided for an additional year, with coverage now available through Oct. 12, 2027.” A second line added that “this extension provides customers with more time to transition to a new Windows 11 PC while continuing to receive critical security updates.”
Microsoft confirmed the move in a statement shared with BleepingComputer, the outlet that first reported the edit. A Microsoft spokesperson said the extension gives customers “more time and flexibility to find the best PC for their needs while keeping them protected.” The full statement described the change as part of Microsoft’s “ongoing commitment to helping customers stay secure during the transition.” No reference to the market share gap or the hardware-compatibility wall appeared in the wording.
The phrasing matters. Microsoft framed the extension as a customer-care gesture, not a strategy reversal. The original end-of-support date for Windows 10 itself, October 14, 2025, is unchanged, and only the ESU bridge has been lengthened.
Devices already enrolled in the consumer ESU program before the edit roll over to the new date automatically, Microsoft’s documentation confirms. New enrollees get the same October 2027 end date regardless of when they sign up.
Three Ways to Get the Free Year
Personal-device users can sign up without paying Microsoft a dollar, as long as they pick one of three enrollment paths. The first is to sync PC settings to a Microsoft account through Windows Backup. The second is to redeem 1,000 Microsoft Rewards points, accumulated by using Bing, the Microsoft Store, and other Microsoft services. The third costs money: a one-time purchase of $30, plus applicable tax.
Users inside the European Economic Area, a bloc of 30 countries, qualify for free ESU coverage without paying or earning points, a concession Microsoft made after pushback from consumer advocacy groups over the original paid-only structure. A single ESU license, once activated, covers up to 10 devices tied to the same Microsoft account. The cheapest path, the EEA fast track, is unavailable to users in most of the Americas, Africa, and Asia.
| Option | What you do | Cost |
|---|---|---|
| Sync settings | Turn on Windows Backup to sync settings to a Microsoft account | Free |
| Redeem points | Cash in 1,000 Microsoft Rewards points | Free |
| One-time purchase | Buy a license through the ESU enrollment wizard | $30, plus tax |
| EEA fast path | Sign into Windows 10 from any of 30 EEA countries | Free |
The points option, in practice, costs roughly a week of casual Bing use for most users starting from zero. Microsoft’s documentation also warns that the free options work only on devices running Windows 10 version 22H2.
Who Can Enroll and Who Cannot
Microsoft’s consumer ESU program is narrow on eligibility. The device must run Windows 10, version 22H2, on the Home, Professional, Pro Education, or Workstations edition. The Microsoft account used to enroll must be an administrator account, and it cannot be a child account. Commercial devices are excluded outright. Active Directory domain-joined machines, Microsoft Entra-joined machines, and devices managed through Mobile Device Management platforms are all blocked from the free consumer path.
The exclusions leave a small commercial opening. Devices that are only Microsoft Entra registered, meaning a personal machine that has a work account added to it, can still enroll through the consumer program. Personally owned devices that fall outside any managed enterprise network can also enroll, a gap Microsoft has acknowledged is impossible to police in small businesses. Kiosk-mode devices are excluded entirely.
- Must run Windows 10, version 22H2
- Must use Home, Pro, Pro Education, or Workstations edition
- Microsoft account must be an administrator and not a child account
- Excluded: Active Directory domain-joined, Microsoft Entra-joined, MDM-managed devices
Why the Migration Has Stalled
The extension’s quiet delivery says something Microsoft did not say out loud. Windows 10 still runs on more than a quarter of all desktop Windows devices worldwide, with the latest breakdown putting the split at 71.69% Windows 11 and 26.36% Windows 10 in May 2026 desktop Windows version share data. A large share of those machines cannot make the jump to Windows 11 without new hardware.
Around 400 million active PCs cannot make the jump to Windows 11 because their hardware fails the TPM 2.0, Secure Boot, or supported-processor test, according to Tom’s Hardware. The hardware problem has a price problem attached. DRAM contract prices have roughly doubled since early 2025, and IDC expects PCs, tablets, and smartphones to rise 10% to 20% in price through the end of 2026 as Samsung, SK Hynix, and Micron divert wafer capacity toward high-bandwidth memory for AI accelerators. Microsoft’s pitch for Windows as an AI-agent platform, made at Build 2026, depends on getting users onto hardware that can run the new AI features.
For a user whose 2019 laptop is fine for email, browsing, and Office, replacing it to keep receiving security updates is a hard sell at $1,000-plus. The migration also has an enterprise tail. A ControlUp survey of more than one million business devices, reported by Redmondmag in October 2025, found many organizations still assessing Windows 11 readiness rather than completing the move. Microsoft’s own June 2025 reporting, cited by the same outlet, put the share of enterprise-managed Windows devices still running Windows 10 version 22H2 at over 53%.
That figure, dated six months before the extension, helps explain why Microsoft chose to keep a consumer-grade safety net in place. The same data explains why hardware vendors, retailers, and Microsoft itself have been pushing AI-equipped Copilot+ PCs as the upgrade destination. Older machines that cannot run Copilot+ will fall further behind with each Windows 11 feature update.
- 71.69% of desktop Windows devices run Windows 11 (Statcounter, May 2026)
- 26.36% still run Windows 10 (Statcounter, May 2026)
- Around 400 million PCs cannot upgrade to Windows 11 (Tom’s Hardware)
- Over 53% of enterprise-managed Windows devices still run Windows 10 22H2 (Microsoft, June 2025)
- PC prices expected to rise 10% to 20% through end of 2026 (IDC)
Microsoft’s free ESU covers individual users through October 2027. The commercial ESU covers organizations through November 2028, at the end of Year Three.
What Companies Still Have to Pay
The free year is for personal devices. Companies, schools, and other organizations that need Windows 10 coverage past October 2025 still pay through Microsoft’s commercial ESU program, documented in detail on the commercial ESU terms and per-device pricing schedule. Year One, which began in November 2025, costs $61 per device. Year Two doubles to $122, and Year Three doubles again to $244.
The maximum commercial coverage period is three years, and Microsoft warns that ESU purchases are cumulative, so an organization that buys Year Two without buying Year One has to pay for both. For a business running a thousand Windows 10 PCs through all three years, the per-device total comes to $427, the figure BleepingComputer cited from Microsoft’s own documents. That is the cost ceiling for the commercial program.
| Year | Per-device cost |
|---|---|
| Year 1 | $61 |
| Year 2 | $122 |
| Year 3 | $244 |
| Three-year total | $427 |
Some virtualized environments, including Windows 365 Cloud PCs, Azure Virtual Desktop, and Azure Local, get ESU at no additional cost, a list Microsoft maintains on its Learn documentation. Commercial ESU enrollment is not available through the Settings app. IT administrators must use Multiple Activation Keys through the Microsoft 365 admin center or buy through Microsoft Volume Licensing partners. The Year One start date of November 2025 means organizations that delayed enrollment can still pick up the cumulative Year One and Year Two together when their planning catches up. Organizations that already replaced their fleet can skip the program.
What October 2027 Will Bring
October 12, 2027, is the last day Microsoft has committed to shipping critical and important security updates to consumer Windows 10 devices. After that date, enrolled PCs will go back to receiving no security patches from Microsoft, regardless of how the license was paid for. Microsoft 365 apps, the Office line that runs on Windows 10, will keep working through October 2028, PCMag reports, but will gradually lose new features. There is no indication in the editor’s note or in Microsoft’s statement that a second extension is planned.
We understand that moving to a new PC can take time. As part of our ongoing commitment to helping customers stay secure during the transition, the Windows 10 Extended Security Updates (ESU) program for personal devices is being provided for an additional year.
A Microsoft spokesperson, in a statement reported by BleepingComputer on June 25, 2026. Microsoft framed the extension as customer care, not a strategy reversal. The same statement made no reference to the market-share gap or the hardware wall that has stalled the move for many users.
For users who cannot reach Windows 11 by that deadline, alternatives exist outside Microsoft’s own programs. The security firm 0patch has pledged to provide unofficial Windows 10 micropatches through 2030. The End of 10 initiative, backed by Linux distribution maintainers, continues to court holdouts whose machines cannot run Windows 11 but can run a Linux desktop, and both options require trade-offs in software compatibility and support.
Microsoft’s free consumer ESU program now runs through October 2027. The editor’s note gives no indication the cutoff will move again.
Frequently Asked Questions
Is the Windows 10 ESU extension really free?
For most personal-device users, yes, through one of three free paths: turning on Windows Backup to sync settings, redeeming 1,000 Microsoft Rewards points, or signing into Windows 10 with a Microsoft account from any of the 30 countries in the European Economic Area. Outside the EEA, the only other route is a one-time $30 purchase, plus tax, through the ESU enrollment wizard.
What happens if I do not enroll in ESU before October 12, 2027?
Your Windows 10 PC will continue to work, but Microsoft will stop shipping security updates to it on that date. The operating system itself, your installed applications, and your files remain in place. PCs that have not enrolled will simply be exposed to whatever vulnerabilities emerge after the cutoff without an official patch path from Microsoft.
Does the ESU extension include new features?
No. Microsoft describes ESU as covering only critical and important security updates as defined by the Microsoft Security Response Center. The program does not include feature updates, bug fixes, design changes, or general technical support. Windows 10 enrolled in ESU behaves exactly like Windows 10 always has, with patches layered on top.
Can small businesses use the free consumer ESU?
Officially, no. The consumer ESU is restricted to personal-use devices, and Microsoft’s documentation blocks enrollment on PCs joined to Active Directory, Microsoft Entra, or Mobile Device Management. In practice, owners of small businesses who use personal machines outside a managed network can enroll those machines through the consumer path. Microsoft has called enforcing the restriction on unmanaged small-business devices impossible.
Will Microsoft extend ESU again past October 12, 2027?
Microsoft has not said it will. The June 25, 2026 editor’s note and the company’s statement to BleepingComputer both end at October 2027 with no mention of further extensions. Users planning past that date should look at third-party options, including 0patch’s unofficial Windows 10 micropatches through 2030, or plan a move to Windows 11 or a supported Linux distribution before the deadline.
