Windows 10 reached end of support in October 2025. If you are still running it in 2026, you have already made a choice - consciously or not - about how you want to handle the transition. Microsoft's Extended Security Updates (ESU) programme is designed to give you more time, but it is not free, it is not unlimited, and it does not cover everything. This guide explains exactly what you are buying, who qualifies, and when it genuinely makes sense versus the alternatives.
I have managed OS transitions across refurbishment workshops, small offices, and home setups for over a decade. The ESU decision is almost never purely technical - it involves budget, hardware age, user comfort, and software dependencies. Below I lay out every angle, including scenarios where paying for ESU is money well spent and scenarios where it is a waste that delays a better solution. For broader guidance on older hardware, see our Guides hub.
Why This Matters Now
Between October 2025 and early 2026, every unpatched Windows 10 machine became a larger target. Security researchers who previously held off on publishing Windows 10 exploits out of responsible disclosure now have less incentive to wait, because Microsoft is no longer issuing free patches. The result is a growing pool of known vulnerabilities that only ESU subscribers receive fixes for.
At the same time, the installed base is enormous. Hundreds of millions of PCs worldwide are still running Windows 10 - many because their hardware cannot meet the TPM 2.0 and CPU requirements for Windows 11. That creates a large, attractive attack surface. Whether you are running a single family laptop or a small fleet of office machines, the risk calculation has changed since October.
This does not mean every unpatched Windows 10 machine will be compromised next week. It means the probability of exploitation climbs with each passing month, and the ESU programme is Microsoft's mechanism for slowing that clock. The question is whether it is worth the cost for your situation.
Eligibility Criteria
Not every Windows 10 installation qualifies for ESU. Before you spend anything, confirm the following requirements are met.
Windows 10 version 22H2
Your machine must be running Windows 10 version 22H2 - the final feature update. Earlier versions such as 21H2, 21H1, or 20H2 are not eligible. Open Settings > System > About and check the "Version" field. If you are behind, run Windows Update to install 22H2 before purchasing ESU.
Genuine licence
The installation must be running a genuine, activated copy of Windows 10. Unactivated installations, volume licence keys that have been decommissioned, and pirated copies are excluded. Check activation status under Settings > Update & Security > Activation.
Per-device licence
ESU is licensed per device, not per user or per household. If you have three Windows 10 laptops, you need three separate ESU licences. There is no family plan or multi-device bundle for consumers.
Cost Breakdown: Home vs Business
Microsoft structured ESU pricing differently for consumers and organisations. The gap is significant, and the escalation for businesses in subsequent years is steep.
| Customer Type | Year 1 (Oct 2025—Oct 2026) | Year 2 (Oct 2026—Oct 2027) | Year 3 (Oct 2027—Oct 2028) |
|---|---|---|---|
| Consumer (Home / Pro) | $30 per device | Not yet announced | Not yet announced |
| Business (volume licence) | $61 per device | $122 per device | $244 per device |
| Education | $1 per device | $2 per device | $4 per device |
For consumers, $30 for one year of patches on a single device is reasonable if the alternative is buying a new laptop. For a business with fifty machines, Year 1 alone costs over $3,000 - and that doubles each subsequent year. At those numbers, the migration cost to Windows 11 or Linux starts looking economical very quickly.
Education institutions get a heavily subsidised rate, which makes ESU almost a no-brainer for schools still running lab machines on Windows 10. For everyone else, the maths depends on your device count and your migration timeline.
What ESU Actually Covers (and What It Does Not)
The name "Extended Security Updates" is precise. Here is exactly what you get - and what remains outside the programme.
Critical and important security patches
ESU delivers monthly patches rated "Critical" or "Important" in Microsoft's severity classification. These cover the Windows kernel, networking stack, core system libraries, and built-in components like the print spooler and Remote Desktop.
No feature updates
There will be no new features, no Start menu redesigns, no Settings app improvements, and no additions to built-in tools. The operating system is frozen at its October 2025 state.
No driver library expansion
Windows Update will not receive new drivers for hardware released after end of support. If you add a new peripheral that requires a Windows 10 driver not already in the catalogue, you will need to source it directly from the manufacturer.
No technical support
ESU does not include access to Microsoft technical support. If something breaks, you are on your own - community forums, independent repair guides, and your own troubleshooting skills are your resources. Our slow startup guide and system requirements reference can help with common issues.
No third-party application compatibility guarantees
Software vendors are increasingly dropping Windows 10 support. Google Chrome has committed to supporting Windows 10 through at least early 2026 but has not extended that guarantee indefinitely. Expect more applications to drop Windows 10 compatibility as time passes, regardless of your ESU status.
When ESU Makes Sense vs Alternatives
The right choice depends on your specific hardware, software needs, and timeline. Below is a decision framework based on real scenarios I encounter regularly.
| Situation | Recommendation | Reasoning |
|---|---|---|
| Hardware meets Windows 11 requirements | Upgrade to Windows 11 | Free upgrade, long-term support, growing ecosystem - ESU is an unnecessary cost |
| Mission-critical Windows-only software, no Win 11 support | Buy ESU while planning migration | Buys 12 months to test the software on Win 11 or find an alternative |
| PC too old for Win 11, used for web browsing and documents | Switch to lightweight Linux | A modern browser on Linux is safer than a patched Windows 10 with a shrinking support ecosystem |
| Office with 50+ Win 10 machines, tight budget | ESU Year 1 while migrating in batches | $3,050 for Year 1 is cheaper than replacing all machines at once; migrate 15-20 per quarter |
| Older laptop, rarely connected to the internet | Skip ESU, limit network exposure | If the machine is air-gapped or used offline, the attack surface is minimal |
| Hardware has an SSD and 8 GB RAM but no TPM 2.0 | Consider a TPM module or Linux | Some desktops accept discrete TPM modules for under $20, unlocking Win 11 eligibility |
The recurring theme: ESU is a bridge, not a destination. It makes sense when you need time to plan a proper transition. It does not make sense as a permanent strategy, because the broader software ecosystem is moving on and ESU does nothing to change that.
Hardware Reality Check
Before spending $30 on ESU, assess whether the hardware itself has enough life left to justify the investment. A machine with a failing hard drive or 2 GB of soldered RAM is not a good candidate for anything except a lightweight Linux installation or recycling.
Start with the basics. Open Task Manager and check CPU age, RAM capacity, and disk health. If the hard drive shows warning signs in CrystalDiskInfo or the system struggles to run a single browser tab, ESU patches will not fix the underlying problem. An SSD upgrade might transform the machine's responsiveness, but only if the CPU and RAM can keep up.
Machines from roughly 2015 onward with 8 GB of RAM and an SSD are genuinely useful computers that happen to lack TPM 2.0. For those, ESU is a defensible spend. Machines from 2010-2012 with 4 GB of RAM and a spinning hard drive are a harder sell. The $30 might be better spent toward a used SSD and a Linux install, which would give you both a speed improvement and ongoing security updates at no additional cost. Our lightweight Linux guide covers practical options for exactly this scenario.
Common Mistakes to Avoid
Assuming ESU means "fully supported"
ESU is patch-only. You do not get new features, driver updates, or Microsoft support calls. If a Windows component breaks outside of a security vulnerability, there is no fix coming. Plan accordingly and maintain local backups.
Buying ESU on hardware that should be replaced
If the laptop is already slow, has a failing drive, or runs out of RAM under normal workloads, ESU is a patch on a sinking ship. Fix the hardware first (or switch to Linux) before spending money on OS-level patches.
Forgetting about third-party software
Even with ESU, the software you actually use daily - browsers, office suites, communication tools - will eventually drop Windows 10 support. Track the support policies for your critical applications separately from the OS itself.
Delaying migration planning because ESU feels safe
The biggest mistake is treating ESU as a reason to stop planning your next move. Use the 12 months of coverage to test Windows 11 compatibility, evaluate Linux on a spare machine, or budget for hardware replacements. When ESU runs out, you need a plan that is ready to execute, not one that is still in the idea phase.
Frequently Asked Questions
The Bottom Line
Windows 10 ESU is a well-defined product: 12 months of security-only patches for $30 per consumer device. It is worth buying if your hardware is too capable to retire but cannot run Windows 11, or if you need a runway to plan a proper migration. It is not worth buying if the underlying hardware is already struggling, if you only use the machine for web browsing (where Linux does the job better), or if you are using it as an excuse to avoid making a decision.
Treat ESU as a countdown timer, not a safety net. Use the 12 months it gives you to test alternatives, budget for upgrades, and ensure you are not in the same position a year from now. The machines that handle this transition well are the ones whose owners start planning today.