Windows 10 ESU Explained: Cost, How to Enroll, and How Long It Lasts

Windows 10 Extended Security Updates (ESU) cost nothing for most home users willing to sync their PC settings, 1,000 Microsoft Rewards points if you'd rather not back anything up, or a one-time $30 payment if you want a no-strings option. Enrollment happens inside Windows Update, requires a Microsoft account with admin rights, and currently covers devices through October 12, 2027, according to Microsoft's own consumer ESU page. Here's exactly what it costs, how to sign up, who qualifies, and whether it's worth doing instead of moving to Windows 11.

What Is Windows 10 ESU, and Do You Need It?

Windows 10 reached the end of its regular support lifecycle on October 14, 2025. After that date, Microsoft stopped shipping free monthly quality updates, security fixes, and technical support for most Windows 10 editions — a milestone Microsoft documents on its own Windows 10 end of support page. The Windows 10 Consumer Extended Security Updates program is Microsoft's bridge for people who aren't ready to replace or upgrade a PC right away: it keeps critical and important security patches flowing to an enrolled device, rated using the Microsoft Security Response Center's severity system.

ESU is narrow by design. It does not restore feature updates, non-security bug fixes, design-change requests, or general technical support. If your PC starts acting up after enrolling, Microsoft's support commitment only covers issues tied to ESU activation and installation itself — not everyday troubleshooting. You also don't need to decide between ESU and a future Windows 11 move: enrolling in ESU doesn't block or complicate upgrading an eligible PC to Windows 11 later, according to Microsoft's enrollment FAQ.

For the exact support dates and servicing details behind all of this, Microsoft maintains a Windows lifecycle FAQ that covers how end-of-support and ESU fit together across Windows versions generally, not just Windows 10.

How Much Does Windows 10 ESU Cost?

For a single personal PC, Microsoft lists three ways to get covered, and all three unlock the identical set of security updates — there's no "better" tier, just different ways to pay:

Whichever route you pick, one ESU enrollment covers up to 10 devices linked to the same Microsoft account, so a household with several aging laptops doesn't need to pay — or back up — separately for each one.

It's worth contrasting this with the business side of ESU. Organizations enrolling through Volume Licensing pay per device, starting at $61 for Year One, and the price doubles in each subsequent year, for a maximum of three years of coverage. The $30 consumer option is considerably cheaper and isn't tied to that escalating schedule, which is part of why it's aimed squarely at individuals rather than fleets of work PCs.

How to Enroll in Windows 10 ESU for Free

The no-cost path doesn't require Rewards points or a card number — it requires turning on PC Settings sync through Windows Backup, which is tied to the Microsoft account you enroll with. If you're already signed into Windows with a Microsoft account and syncing settings, the ESU enrollment screen should recognize that and let you finish with a click.

If you're on a local account, Windows Update will prompt you to sign in with a Microsoft account first, since the ESU license is tied to that account rather than the device alone. Once you've enrolled, the protection extends to every user profile on that PC — a second person signed in locally on the same machine is automatically covered too, without needing their own ESU license.

The $30 Paid Option: When It Makes Sense

Not everyone wants to hand Microsoft their settings, and not everyone has 1,000 Rewards points sitting around. The one-time $30 purchase (plus applicable tax) exists for exactly that case: it buys the same year of critical and important security updates without requiring Windows Backup sync or a Rewards redemption. It's a single flat fee per Microsoft account, covering up to 10 devices under that account — not $30 per PC — which makes it a reasonable option for a small household with a couple of older machines that aren't worth replacing yet.

Step-by-Step: Enrolling From Windows Update

Enrollment lives inside the same place you already check for updates:

If the "Enroll now" option isn't showing up yet, it's worth re-checking after installing the latest cumulative update and the KB5126256 preparation package — Microsoft has rolled the prompt out gradually, and both updates need to be present before the device is recognized as eligible.

Can You Get ESU Without a Microsoft Account?

No — not for any of the three consumer options. Microsoft's enrollment requirements call for "a Microsoft account with administrator rights" on the device, and the resulting ESU license is tied to that account rather than to Windows itself. A child account can't be used to complete enrollment, even if it has local admin rights. If your PC has always run on a local account, the realistic path is to add or switch to a Microsoft account specifically to enroll — after that, Microsoft's own enrollment page notes that account is what the license and coverage are attached to, so it's worth using one you'll keep using, not a throwaway.

Microsoft's page also flags that enrollment options and timing can vary by region, specifically calling out the European Economic Area as an example — so what you see in the Windows Update enrollment flow may look slightly different depending on where the device is registered.

Eligibility: Which PCs Qualify

Before "Enroll now" will even appear, Microsoft requires the device to meet a specific baseline:

That management-status rule mainly rules out work-managed PCs on the consumer path — a PC your employer administers through Intune or joined to a company domain needs to go through commercial ESU licensing instead, not the $30 consumer option.

How Long Does Year 2 of Consumer ESU Last?

Microsoft's current Windows 10 Consumer ESU page states plainly that "you can enroll any time until the program ends on October 12, 2027," and that devices already enrolled continue to receive updates automatically through that date with no renewal step required. Since Windows 10 support itself ended October 14, 2025, that gives consumer ESU a coverage window of roughly two years in total — Year 1 covering the stretch right after end of support, and Year 2 carrying protection through October 12, 2027.

There's no partial enrollment and nothing to renew manually inside the consumer program — unlike the business ESU track, where organizations buy coverage year by year and must pay for every earlier year to add a later one. For a home user, enrolling once covers you straight through to the October 12, 2027 cutoff.

An Alternative: Moving the PC to the Cloud

Microsoft's own ESU documentation points to one other option worth knowing about if your Windows 10 hardware is aging out entirely: Windows 10 devices used to connect to a Windows 365 Cloud PC are entitled to ESU coverage for up to three years at no separate per-device ESU cost, as long as there's an active Windows 365 subscription. In that setup, the old Windows 10 machine effectively becomes a terminal for a Windows 11 Cloud PC running elsewhere, which sidesteps the local hardware-eligibility question completely. It's a commercial/subscription product rather than a free consumer option, so it won't make sense for most home users, but it's a legitimate route for anyone already using or considering Windows 365 for other reasons.

Is ESU Worth It, or Should You Upgrade?

ESU is a stopgap, not a long-term plan — Microsoft says as much, recommending that eligible PCs move to Windows 11 or get replaced for "the best, most secure computing experience." Whether paying $30 (or spending ten minutes backing up settings) makes sense depends on how much runway you actually need.

If your PC meets Windows 11's hardware requirements and you just haven't gotten around to upgrading, ESU can buy you time to do that migration on your own schedule rather than rushing it. It's worth checking the Windows 11 support timeline before you do, though — some older Windows 11 feature updates are approaching their own end-of-support dates, so it's worth landing on a current release rather than an aging one.

If your hardware can't run Windows 11 at all, ESU is more of a bridge to a new PC purchase than to an in-place upgrade. New machines shipping now lean heavily into Copilot+ features — Microsoft has said Copilot+ PCs are now shipping in the tens of millions annually — and if you do move to one, some of the new hardware quirks, like the dedicated Copilot key, are easy enough to reconfigure or disable if they're not for you.

For a PC that's purely used for light browsing, email, or offline work and rarely touches sensitive accounts, some people reasonably decide to skip ESU and just be more careful — but Microsoft's own position, and most security guidance generally, is that running an unpatched, internet-connected OS past its support window is a real risk, not just a theoretical one.

What to Do Next

If you're planning to stay on Windows 10 past its support date, the practical checklist is short: confirm you're on version 22H2, install the latest cumulative update and KB5126256, open Windows Update and look for "Enroll now," and pick whichever of the three options suits you — free sync, Rewards points, or $30. Enrollment is open now and stays open until October 12, 2027, so there's no rush to decide today, but there's also no benefit to waiting if your PC already qualifies.

If you're weighing a switch instead, treat ESU as the deadline extension it's designed to be — a window to plan an upgrade or a new PC purchase, not a permanent substitute for one.

Written byFelix Moreau

Felix Moreau writes Pandromeda's software coverage and how-to guides. He covers Windows, macOS and Linux updates, the apps people rely on, emulators and developer tools, and turns official documentation into clear, numbered steps that work on the current version.

More from Felix MoreauAll Software & Guides coverage