Windows 10 Extended Security Updates: What $30 Actually Buys You Through October 2027

Windows 10 support officially ended on October 14, 2025. If that sounds like old news, here is the part that did not get nearly as much attention: Microsoft quietly moved the goalposts in June 2026, extending the consumer Extended Security Updates (ESU) program's cutoff from October 13, 2026 to October 12, 2027. If you are one of the roughly one in six Windows PCs still running Windows 10 a year after "end of support," that change probably already shaped your decision about whether to pay, enroll for free, or finally replace the machine — whether you noticed it happening or not. The honest judgment call here: for most households with an otherwise-fine PC, the $30 (or free) ESU path is the right short-term answer, and buying new hardware purely to escape a security-update bill almost never pays for itself in year one.

Illustration only, not a specific ESU enrollment screen. Photo: Donald Trung, Wikimedia Commons, licensed under CC BY-SA 4.0.

Wait — I thought Windows 10 support ended over a year ago. What changed?

It did end, on schedule, on October 14, 2025. What changed is how long the paid safety net underneath that end date actually lasts. Microsoft's original plan gave consumers exactly one ESU year, expiring October 13, 2026. In June 2026, Microsoft revised its own support page to push that date to October 12, 2027 — a second full year of security patches for Windows 10 22H2, with no new purchase required if you already enrolled. Devices enrolled under the original terms carry forward automatically; nothing was taken away and nothing new has to be bought by people who already paid the first time. As of this writing (late October 2026), this is the current, official policy on Microsoft's own support page — not a rumor or a leaked roadmap.

What does ESU actually require, and what does it cost?

For a consumer PC, Microsoft lists three ways to enroll, and only one of them costs money directly:

• Free: turn on Windows Backup and sync your PC settings to a Microsoft account.
• Free: redeem 1,000 Microsoft Rewards points (earned through Bing searches, Microsoft Store purchases, or similar).
• Paid: a one-time payment of $30 plus applicable tax.

Whichever path you pick, the device needs Windows 10 version 22H2 with update KB5126256 installed, and a Microsoft account with administrator rights — a local-only account will not qualify. The enrollment does not work on devices joined to Active Directory or Microsoft Entra, managed by MDM, or set up as kiosks, which rules out most workplace-issued PCs. One practical detail that matters for a multi-PC household: the $30 purchase is not strictly per-device. Microsoft's terms let one ESU license, tied to a single Microsoft account, cover up to 10 devices signed into that same account. One footnote worth knowing if you or a family member lives in the European Economic Area: regulatory pressure there got ESU offered free, but only through October 14, 2026 under separate EU-specific terms — after that date, the EEA free-ride ends even though the US consumer program keeps running to October 2027.

A worked example: what this actually costs a real household

Take a household with three Windows 10 desktops still in daily use — maybe a kitchen PC, a kid's homework computer, and an aging gaming rig that still runs everything the owner needs. Assumptions: all three are signed into the same Microsoft account, all meet the 22H2 + KB5126256 requirement, and the household picks the paid route rather than the free ones.

Path	Out-of-pocket cost	Coverage window
ESU, one $30 license covering all 3 PCs	$30 one-time	Through October 12, 2027
Replace all 3 PCs with new Windows 11 machines (~$500 each, a realistic low-end price as of October 2026)	$1,500	Years, but a new expense today
Replace only the oldest of the 3 (the gaming rig), ESU the other 2	~$520 ($500 + a prorated share of a shared $30 license, effectively still $30 since it covers up to 10 devices)	Mixed: one new machine, two covered through Oct 2027

The $1,470 gap between "pay $30 and keep going" and "replace everything now" is the real decision most households are actually making, whether they frame it that way or not. ESU buys exactly one thing — security patches — not new features, not faster hardware, and not an indefinite extension. It is a bridge, not a destination.

What about a small business running Windows 10 on a few office PCs?

Commercial ESU pricing is a different, steeper program. Microsoft's announced structure prices Year 1 at $61 per device, with Year 2 and Year 3 pricing set to double each year — reported at roughly $122 and $244 per device, respectively, when Microsoft first announced the enterprise program. As of this run, independent 2026 confirmation that Year 2 invoicing has actually started at that doubled rate was not found; treat the Year 2/3 figures as the originally announced plan rather than a reconfirmed 2026 bill. The practical takeaway for a small business is the same shape as the consumer math, just with a steeper slope: the second and third years get progressively more expensive relative to simply migrating the fleet to Windows 11-capable hardware, which argues for treating ESU as a one-year bridge for a business rather than a multi-year plan.

Is running unpatched or un-enrolled Windows 10 actually risky, or is this overblown?

The data says it is not overblown. A fleet-inventory analysis published July 20, 2026 found that Windows 10 devices carried an average of 1,903 active CVEs (known vulnerabilities) per device, compared with 652 for Windows 11 — roughly three times as many. Of the vulnerabilities tracked on Windows 10 devices in that analysis, 66.6% were rated high or critical severity, and 2.4% were already being actively exploited in the wild. The same analysis found small and mid-size businesses running Windows 10 at a higher rate (21.4% of their fleets) than large enterprises (16.6%), and noted that 2.8% of Windows 10 systems in its sample cannot meet Windows 11's hardware requirements at all — meaning ESU, not an upgrade, is their only patching option before 2027.

How many machines does this actually affect? The two most recent measurements do not agree, because they measure different things. StatCounter's browser-telemetry data put Windows 10 at 18.93% of US desktop traffic in September 2026 (versus 80.51% for Windows 11). The same July 2026 fleet-inventory analysis cited above put Windows 10 at 16.9% of managed devices globally (versus 78.8% for Windows 11). Both describe a shrinking but still substantial minority — somewhere in the range of one in six to one in five Windows PCs — not a rounding error.

So should I pay the $30, use a free option, or just buy a new PC?

If your Windows 10 PC otherwise still does what you need, ESU is the economically obvious move for at least one more year: $30 (or free, if you are willing to sync settings or spend Rewards points) against a four-figure replacement cost is not a close call. The trade-off is that ESU is a security-only patch stream — it does not add Windows 11 features, does not speed up old hardware, and does not change the fact that Windows 10 will stop getting any updates at all after October 12, 2027 (absent a further extension, which Microsoft has not announced). If your PC is already struggling with normal daily tasks, is one of the 2.8% that cannot meet Windows 11's hardware floor, or is used for anything handling sensitive data on a network you cannot fully trust, the calculus shifts toward replacing it sooner rather than treating ESU as the final answer. Treat the 2027 deadline as a real one this time: there is no indication Microsoft plans to extend it again.

Checking whether your own PC actually qualifies

Before assuming either the free or paid path is available, four things need to be true, and all four are easy to check in under five minutes:

1. Open Settings > System > About and confirm the Windows specification reads "Windows 10, version 22H2." An older feature update will not qualify until it is brought current.
2. Open Settings > Windows Update > Update history and confirm KB5126256 (or a later cumulative update that supersedes it) has installed successfully.
3. Confirm you are signed in with a Microsoft account that has administrator rights on that device — Settings > Accounts will show "Administrator" under your account name, and will show whether the account is local-only or a Microsoft account.
4. Confirm the PC is not managed by a workplace through Active Directory, Microsoft Entra, or mobile device management, and is not configured as a kiosk — if your employer controls the machine, ESU enrollment is their decision, not yours.

If all four check out, the ESU enrollment wizard itself appears directly inside Windows Update once the device is eligible, offering the choice between the free options and the $30 purchase in the same screen — there is no separate app or website to track down.

Related reading

• Microsoft's Recall Can Claim 150 GB of Your Drive. Here's What That Default Actually Costs You
• Your New Laptop's NPU Hits 80 TOPS, Double the Copilot+ Minimum. Here's What That Headroom Actually Changes
• SSD Endurance in Years: How Long 600 TBW Lasts in Real Use

Tip: If you decide to keep the old machine running through the ESU window instead of replacing it, small desk upgrades go further than new hardware. A laptop stand improves airflow on an aging laptop, and a set of bluetooth earbuds sidesteps a worn-out headphone jack. (These are Amazon Associate links — we may earn a small commission on qualifying purchases.)

Sources

• Microsoft: Extended Security Updates for Windows 10 (official enrollment options and requirements)
• Pureinfotech: Microsoft extends Windows 10 ESU to October 2027
• Help Net Security, July 20, 2026: Windows 10 support-risk fleet analysis (CVE and device-share data)
• StatCounter: Windows version market share, United States desktop
• PCWorld: Commercial ESU Year 1 pricing ($61/device)

General information only, not a recommendation for any specific device or purchase. Figures are as of late October 2026 and may change; check Microsoft's own ESU page before enrolling.