What Microsoft Changed—and Why It Matters
Microsoft’s extension of the Windows 10 Extended Security Updates (ESU) program, providing one more year of free Windows 10 security updates until October 12, 2027, is a temporary safety net that lets home users keep their existing PCs secure while planning a long-term move to Windows 11 or another platform.
Microsoft has extended its consumer Extended Security Updates (ESU) program for Windows 10 by a full year, moving the cutoff from October 13, 2026 to October 12, 2027. In practical terms, that means one more year of free security updates 2027 for eligible Windows 10 machines enrolled in ESU. These updates cover only critical and important security fixes for version 22H2, delivered through Windows Update, and do not restore new features or normal technical support. This change was not announced with a big event; it appeared quietly in updated ESU documentation and as an editor’s note on a blog post, which underlines how reluctant Microsoft is to advertise that its “retired” operating system is still being patched. The signal is clear: this is a grudging extension, not a change of strategy.
Who Benefits: Windows 10 Holdouts and Hardware-Locked Users
The real winners here are the people stuck on Windows 10 not because of habit, but because of hardware and economics. Roughly 400 million active PCs cannot upgrade to Windows 11 thanks to missing TPM 2.0, Secure Boot, or unsupported processors. Many of these systems are still fast enough for everyday work and gaming; users understandably refuse to send them to the scrap heap over an operating system line in the sand. At the same time, memory prices have soared as manufacturers prioritise components for AI hardware, and analysts expect PC prices to rise by 10% to 20% through the end of 2026. Against that backdrop, extending Windows 10 security updates is less generosity and more damage control. Keeping more than a quarter of the Windows base protected from new malware while hardware and budgets catch up is the least disruptive path for everyone.
Quote: “Roughly 400 million active PCs can't run Windows 11 because they lack TPM 2.0, Secure Boot, or a supported processor.”
How the Extended Security Updates ESU Program Works Now
The ESU program is not automatic; it is a gated extension for specific Windows 10 users. Eligible devices must run Windows 10 version 22H2 in Home, Professional, Pro Education, or Workstations editions and have the latest updates installed. The Microsoft account used on the device has to be an administrator and cannot be a child account, and local accounts are nudged into using a Microsoft account because that account becomes tied to the ESU licence. Once enrolled, that licence can cover up to 10 devices on the same account. From there, Windows 10 security updates under ESU look normal: the system keeps receiving critical and important patches via Windows Update, but nothing more. For anyone who cares about basic security yet is not ready to upgrade hardware, this is the minimum bar you should clear.
Enrolling in ESU gives consumers three routes: enable Windows Backup to sync settings to the cloud at no extra cost, redeem 1,000 Microsoft Rewards points, or pay USD 30 (approx. RM140) for a one-year ESU licence, with the same options preserved in the extended year. A previous iteration even made Windows 10 ESU free for some users in specific markets and for those storing data in the cloud. Notifications and a setup wizard within Windows 10 guide users through the process, making ESU enrollment part of the normal settings experience rather than a niche enterprise tool.
Why Microsoft Blinked—and Why It Does Not Change the Endgame
This extension is less about affection for Windows 10 and more about risk management and PR. Windows 10 hit end of support in October 2025, and Microsoft initially offered ESU as a single extra year of patches, ending October 13, 2026. Today’s update adds a second year that was previously an expensive option for enterprises alone, with business customers facing charges as high as USD 122 (approx. RM560) per device. Meanwhile, Windows 11’s share has climbed past 70% of Windows installations, but Windows 10 still sits at roughly 26%, a large enough pool that leaving it unpatched would be reckless. By keeping those machines secure, Microsoft protects its brand as much as its users. But none of this alters the direction: the company still wants everyone on Windows 11 and, eventually, on its new Copilot+ PCs.
Microsoft has been explicit that this is breathing room, not a reprieve. “Come October 12, 2027, Windows 10 will be officially abandoned.” After that date, official patches end, and the only options will be third-party patch providers or alternative operating systems. One security firm has already pledged unofficial Windows 10 patches through 2030, and several Linux migration campaigns are courting Windows 10 holdouts whose hardware cannot run Windows 11. In other words, Microsoft blinked on the timeline, not on the strategy. The future they are investing in is Windows 11 and beyond; ESU is the bandage keeping the past from bleeding.
What You Should Do Now: Treat ESU as a Countdown, Not a Comfort Blanket
The worst response to this news is complacency. If you stay on Windows 10, enrol in ESU now if you have not already, confirm you are on version 22H2, and check that Windows Update is working. That buys you security updates through October 12, 2027, but you should use that time to decide your next move. If your PC meets Windows 11’s requirements, plan a structured upgrade to Windows 11, ideally before ESU ends so you are not migrating under pressure. If your hardware is blocked or you refuse to move to Windows 11, start researching alternatives: a future PC purchase, third-party patch services, or even switching to Linux. The key is to treat ESU as a countdown. Microsoft has extended the runway; whether you glide smoothly to Windows 11 or hit the ground unprepared is up to you.
