Windows 10 ESU explained: cost, enrollment and what it covers
Windows 10 ESU (Extended Security Updates) keeps critical security fixes coming to a Windows 10 PC until October 12, 2027. For most people it’s free, and you enroll from Windows Update in a few minutes.
The short version
- ESU delivers critical and important security updates for Windows 10 version 22H2 until October 12, 2027.
- Enrollment is free if you sync your PC settings to a Microsoft account. The alternatives are 1,000 Microsoft Rewards points or a one-time US$30 payment. One license covers up to 10 devices.
- You need a Microsoft account with administrator rights to enroll, even if you normally sign in with a local account.
- ESU adds no new features and no technical support. It buys time; it doesn’t replace a plan.
What Windows 10 ESU is
Windows 10 support ended on October 14, 2025. Since then, Microsoft only releases security updates for Windows 10 PCs that are enrolled in the Extended Security Updates program.
The consumer program covers Windows 10 version 22H2 in the Home, Pro, Pro Education and Workstations editions. Microsoft first offered one year of consumer ESU and later extended it, so coverage now runs through October 12, 2027. If you’re already enrolled, Microsoft says your coverage continues automatically to that date, with no action needed.
Your PC keeps working without ESU. Microsoft’s lifecycle FAQ says Windows 10 still runs after support ends, but it gets no security fixes, so it becomes riskier to use online over time.
Is Windows 10 ESU free?
Usually, yes. Microsoft offers three ways to enroll:
| Option | Cost | What you need |
|---|---|---|
| Back up your PC settings | Free | Windows Backup syncing your PC settings to your Microsoft account |
| Microsoft Rewards | 1,000 points | Enough points on the same Microsoft account |
| One-time purchase | US$30 or local equivalent, plus tax | A payment method on your Microsoft account |
One ESU license covers up to 10 devices, so a single enrollment can protect the whole household. Microsoft says refunds for the paid option follow your country’s digital purchase policy, and Rewards redemptions are final.
What you need before you enroll
- Windows 10 version 22H2. Check it in Settings → System → About, under Windows specifications.
- The latest Windows updates. Microsoft lists the Windows 10 ESU Licensing Preparation Package (KB5126256) as required.
- A Microsoft account with administrator rights on that PC. It can’t be a child account.
- A personal device. PCs joined to an Active Directory domain or Microsoft Entra, enrolled in mobile device management (MDM) or running in kiosk mode can’t use the consumer program. Microsoft Entra registered devices can.
How to enroll in Windows 10 ESU
- Open Settings → Update & Security → Windows Update.
- If your PC meets the requirements, you’ll see an enrollment link. Select Enroll now.
- If you sign in to Windows with a local account, you’ll be asked to sign in with a Microsoft account.
- If you already back up your PC settings, you may just be asked to confirm. Otherwise, choose to start backing up your settings, redeem Rewards points or make the one-time purchase.
To cover another PC, open the same page on that PC and select Enroll now. If you’re signed in with the Microsoft account you used the first time, choose Add device. Once one user on a PC enrolls, Microsoft says the other users on that PC are covered too.
The Windows Update page shows whether the PC is enrolled. If you paid, the purchase also appears in your Microsoft account’s order history.
What ESU covers, and what it doesn’t
ESU delivers security updates that the Microsoft Security Response Center rates as critical or important. It doesn’t include other fixes, new features or technical support.
Enrolling doesn’t lock you in. If your PC meets the requirements, you can still upgrade to Windows 11 later. Not sure? See how to check whether your PC can run Windows 11.
The ESU enrollment option isn’t showing
Microsoft says the Enroll now link appears only when the PC meets every requirement. Work through these checks in order:
- Check the version. If Settings → System → About doesn’t show 22H2, the PC isn’t eligible until it’s updated to 22H2.
- Install every pending update and restart. The ESU preparation package (KB5126256) must be installed before the link appears.
- Sign in as an administrator. On a child’s PC, Microsoft says a parent needs to be an administrator user on that PC and enroll from their own account.
- Check for work or school management. If the PC is still joined to an organization’s domain or Entra, or managed through MDM (common on ex-business laptops), the consumer program isn’t available on it.
- Check whether it’s already enrolled. Look for the enrollment status on the Windows Update page.
Microsoft also says enrollment options and timing can vary by region, which is covered next.
ESU in Europe (EEA)
Microsoft says consumer ESU enrollment options and timing may vary by region, such as in the European Economic Area (EEA). Microsoft’s EMEA news site says private users in the EEA, including Switzerland, can choose between two options:
- No added cost: enroll with your Microsoft account and stay signed in with it. If that account isn’t used to sign in for up to 60 days, ESU updates stop until you re-enroll by signing in with the same account.
- One-time purchase of US$30 or the local equivalent, plus tax. You sign in with a Microsoft account to enroll, but can use a local account afterwards.
The UK isn’t part of the EEA, so Microsoft’s EEA terms don’t cover it. Expect the standard options described above.
What happens after October 12, 2027
Microsoft’s ESU page gives October 12, 2027 as the end of the consumer program and says nothing about anything beyond it. After that date, an enrolled PC stops getting security updates.
Use the time you have. If your PC can run Windows 11, upgrade. If it can’t, consider Linux Mint or ChromeOS Flex, or plan a replacement. Our Windows 10 end of support guide compares every option.
ESU vs LTSC
People often ask whether Windows 10 LTSC (Long-Term Servicing Channel) is a better way to keep Windows 10. They aren’t comparable. ESU is an add-on for the Windows 10 you already have. LTSC is a separate Enterprise edition of Windows that Microsoft says is designed only for specialized devices, such as those that control medical equipment or ATMs.
LTSC versions also have their own end dates. According to Microsoft’s lifecycle page, Windows 10 Enterprise LTSC 2021 support ends in January 2027, before consumer ESU does. For a home PC, ESU is the documented route.
Frequently asked questions
Can I get Windows 10 ESU without a Microsoft account?
No. Microsoft requires a Microsoft account with administrator rights to enroll, and the ESU license is tied to that account. If you normally use a local account, Windows asks you to sign in with a Microsoft account during enrollment.
Do I have to pay again for year 2?
Microsoft says that if you’re already enrolled, your coverage continues automatically through October 12, 2027 with no action needed. It doesn’t list a second payment.
Is Windows 10 ESU free in the UK?
Microsoft’s EEA terms don’t cover the UK, because the UK isn’t in the EEA. That leaves the standard options: free if you sync your PC settings to a Microsoft account, 1,000 Rewards points, or the one-time purchase. Microsoft notes that options can vary by region, so check the enrollment screen on your PC.
Is Windows 10 ESU worth it?
If your PC can’t run Windows 11 and you aren’t ready to switch systems, it’s the simplest way to keep getting security fixes, and it’s free for most people. If your PC can run Windows 11, upgrading is the longer-term fix, because ESU ends on October 12, 2027.
More in Old PC Rescue
- Windows 10 end of support: your 6 options
- Can my PC run Windows 11? Check in two minutes
- How to check your CPU generation
- How to enable TPM 2.0 and Secure Boot
- Installing Windows 11 on unsupported hardware: what you should know