
Microsoft has added an extra year to its Windows 10 Extended Security Updates (ESU) initiative. As a result, enrolled devices will keep getting security patches through October 12, 2027.
This modification was implemented quietly, without any formal announcement. It surfaced in an updated version of Microsoft’s documentation for Windows 10 ESU and also as an “editor’s note” added to a Windows Experience blog article published the previous day.
The editor’s note states: “June 25, 2026 — This blog entry has been revised to indicate that the Extended Security Updates (ESU) program for consumer Windows 10 devices has been extended by one more year, now lasting until October 12, 2027. This additional time provides users with a longer window to move to a Windows 11 PC, enabling them to continue obtaining critical security fixes.”
Windows 10 reached the end of its official support lifecycle on October 14, 2025. Since then, Microsoft has ceased offering technical support, feature updates, and security patches, with the exception of Windows LTSC releases. To accommodate those unable to move to Windows 11, Microsoft originally provided a complimentary extra year of security updates through the ESU program, which was set to conclude on October 12, 2026. Business clients had the option to enroll in ESU for as many as three years, with the cumulative cost per device reaching as high as $427 over that period.
For everyday users, there are several ways to obtain extended security updates: pay a fee of $30; create a backup of Windows settings in their Microsoft account; or exchange 1000 bonus Microsoft Rewards points. Individuals located in the European Economic Area can receive ESU at no charge simply by logging into Windows 10 using a Microsoft account.
According to Microsoft, a single ESU license can be applied to as many as 10 devices associated with one Microsoft account. Those who have already signed up for the program will automatically continue to have access until the updated expiration date of October 2027.
The company clarifies that the ESU offering for consumers is designed solely for personal use machines and cannot be used on systems that are joined to Active Directory domains, Microsoft Entra, or administered through mobile device management (MDM). Nonetheless, devices that are registered with Microsoft Entra are also qualified for participation.