Skip to content
NewBusinessExplainer

Windows 10 security updates: why they didn't end in October 2026

Windows 10 security updates for home PCs now run to October 12, 2027. How to check you are enrolled, the free and paid routes, and what happens after that.

By Sam Jakola8 min read
A black budget laptop open on a white table with its screen switched off
A black budget laptop open on a white table with its screen switched offPhoto: Kompjuteri Com / Unsplash

Why it matters

Roughly a quarter of Windows PCs still run Windows 10, and guides warning of an October 2026 cutoff are out of date. Knowing the real date and how to check enrollment keeps those PCs patched.

Home Windows 10 PCs that signed up for Extended Security Updates are still getting security patches, and they will keep getting them until October 12, 2027. Microsoft added a year to the consumer program in June 2026, so the October 2026 cutoff that many guides still warn about never happened.

Quick answer: Windows 10 security updates for home PCs enrolled in Extended Security Updates (ESU) now end on October 12, 2027. If your PC was already enrolled, you do not need to do anything; coverage carried over on its own. If it was not, you can still enroll free through Settings until that date.

What changed, and when

Windows 10 reached its official end of support on October 14, 2025. To give people time to move on, Microsoft opened a one-year consumer ESU program that was due to run out in October 2026.

On June 25, 2026, Microsoft added an editor’s note to a Windows Experience Blog post saying the program for personal-use devices “is being provided for an additional year,” with coverage through Oct. 12, 2027. It updated its ESU support page the same day. There was no press release, which is why BleepingComputer described the move as a quiet extension and why plenty of advice written in 2025 still gives the old date.

The change applies everywhere the consumer program is offered. Microsoft’s ESU page says enrolled PCs continue “through that date” with no action needed.

Does an enrolled PC need to do anything?

No. The extension is automatic for any PC that already holds an ESU license. Updates keep arriving through Windows Update on the second Tuesday of each month, the same way they did before.

The October 2026 update is a good test. Microsoft shipped the Windows 10 ESU update KB5126657 on October 13, 2026, moving Windows 10 version 22H2 to build 19045.7807, according to BleepingComputer and IT-Connect. If your PC installed it, you are covered.

How to check that your PC is enrolled

  1. Open Settings (press the Windows key and I together).
  2. Go to Update & Security, then Windows Update.
  3. Look for the line “Your PC is enrolled to get Extended Security Updates” on that page.
  4. Check the update history: an October 2026 entry for KB5126657 means patches are flowing.
  5. If you paid, the $30 purchase also appears in the Order History of your Microsoft account.

If Windows Update shows an “Enroll now” link instead, the PC is not covered yet. If it says “Some settings are managed by your organization,” the PC is probably a work device and falls under the business program described below.

How to enroll a Windows 10 PC now

Enrollment is still open, and every route covers the PC through October 12, 2027. Microsoft’s ESU page lists three options.

Route What it costs What you give up
Sync your PC settings Free Settings are backed up to your Microsoft account with Windows Backup
Microsoft Rewards 1,000 points Points from Bing searches and other Rewards activity
One-time purchase $30 plus local tax Money; works without ongoing account sign-ins
Source: Microsoft Windows 10 ESU page, October 2026.

One license covers up to 10 PCs tied to the same Microsoft account. Microsoft says that once one user enrolls a PC, every other user account on it is protected too.

The basic requirements, according to Microsoft:

  • Windows 10 version 22H2 (Home, Pro, Pro Education or Pro for Workstations) with the latest updates installed.
  • A Microsoft account with administrator rights on the PC. Child accounts cannot enroll.
  • The PC must not be joined to a company domain, Microsoft Entra or a device-management (MDM) service, or run in kiosk mode.

To start, open Settings, then Update & Security, then Windows Update, and select “Enroll now.” A PC on a local account is asked to sign in with a Microsoft account first.

Different rules in Europe

People in the European Economic Area (EEA: the 27 EU countries plus Iceland, Liechtenstein and Norway) get a simpler free route. After complaints from the consumer group Euroconsumers in 2025, Microsoft dropped the settings-sync and Rewards conditions there, according to Pureinfotech, and BleepingComputer confirms the free route still applies after the extension.

The catch is the account. EEA users still need to sign in with a Microsoft account, and Microsoft said in 2025 that if the account is not used to sign in for 60 days, ESU updates stop until the user signs in again with the same account. Paying the one-time $30 removes that 60-day rule, Pureinfotech reported. Microsoft has not said whether the June 2026 extension changed any of this, so EEA users who rely on the free route should keep signing in.

Businesses, schools and LTSC run on separate clocks

The consumer extension does not touch the business program. Commercial ESU is sold per device through Microsoft volume licensing at $61 for year one, and the price doubles each year for up to three years, Microsoft Learn says. That adds up to $427 per PC for all three years, BleepingComputer calculated, with coverage ending in October 2028. Year one ended on October 13, 2026, so companies that want patches through October 12, 2027 had to buy year two, IT-Connect reported.

Windows 10 PCs running as virtual machines in Windows 365 or Azure Virtual Desktop get ESU at no extra cost, according to Microsoft.

Long-Term Servicing Channel (LTSC) editions, used in factories, kiosks and medical equipment, have their own dates:

  • Windows 10 Enterprise LTSC 2021 reaches end of support on January 12, 2027, according to a Microsoft 365 Message Center notice (MC1448328). Paid ESU for it went on sale on September 1, 2026.
  • Windows 10 Enterprise LTSC 2019 is supported until January 9, 2029, according to Microsoft’s lifecycle listings.
  • Windows 10 IoT Enterprise LTSC 2021 is supported until January 13, 2032.

If your PC is a work machine, the date that matters is your employer’s, not October 2027.

Why Microsoft keeps extending Windows 10

The simplest reason is the size of the installed base. In September 2026, Windows 10 still ran on 27.82% of Windows PCs worldwide, against 71.44% for Windows 11, according to StatCounter’s tracking of web traffic. Microsoft does not publish a device count, but more than a quarter of Windows users is a very large number of machines to cut off at once.

Microsoft’s stated reason is time. Its ESU documentation, quoted by BleepingComputer, says: “We understand that moving to a new PC can take time.” The blog note frames the extra year as more time to move to a Windows 11 PC while still getting critical patches. Microsoft has not given any other explanation.

How earlier Windows versions ended

The pattern of paying for a soft landing is old, but home users rarely got one before.

  • 8 Apr 2014: Windows XP support ends, with no paid update program for home users.
  • 12 May 2017: During the WannaCry ransomware outbreak, Microsoft released an emergency patch for Windows XP, its first public XP security fix in more than three years, according to Computerworld and BankInfoSecurity.
  • 14 Jan 2020: Windows 7 support ends. ESU was sold only to businesses, for Windows 7 Professional and Enterprise, at $50, $100 and then $200 per device for Pro, according to Microsoft and Petri.
  • 10 Jan 2023: The third and final year of Windows 7 ESU ends, Microsoft’s FAQ shows.
  • 14 Oct 2025: Windows 10 support ends, with the first ESU program open to consumers.
  • 25 Jun 2026: Microsoft extends consumer ESU to October 12, 2027.

The XP episode is the warning. An unpatched flaw in old file-sharing code let WannaCry spread across machines that no longer got updates, and Microsoft had to break its own rule to contain it.

How much risk does an unpatched Windows 10 PC carry?

The volume of fixes gives a sense of scale. Microsoft’s October 13, 2026 Patch Tuesday fixed 1,411 vulnerabilities across its products, a record, including 70 rated critical and one Windows Shell flaw already being exploited, according to BleepingComputer. IT-Connect counted more than 1,400 and said 1,115 affected Windows itself.

Not all of those apply to Windows 10, but ESU subscribers get the critical and important ones that do. A PC without ESU gets none. The Daily Summit’s coverage of the PHP2Shell vulnerability shows how quickly attackers move once a flaw is public: unpatched systems are the first targets.

ESU also has firm limits. It delivers only security fixes rated critical or important by the Microsoft Security Response Center. It brings no new features, no non-security bug fixes and no technical support, Microsoft says.

What happens after October 12, 2027

Windows 10 PCs will keep working. Microsoft says they will “continue to function,” but they will stop receiving security updates of any kind. Microsoft has not said whether there will be a third consumer year, and nothing in its documentation promises one.

A few parts of the system have their own timetable. Microsoft says it will provide security updates for Microsoft 365 apps on Windows 10 until October 10, 2028, but that covers Word, Excel and the rest, not Windows itself.

Can your PC run Windows 11?

Enrolling in ESU does not stop you upgrading. Microsoft’s page says the two are compatible, so many people can enroll now and upgrade later.

Windows 11 requires, according to Microsoft:

  • A compatible 64-bit processor with at least two cores at 1 GHz or faster
  • 4 GB of memory and 64 GB of storage
  • UEFI firmware with Secure Boot capability
  • Trusted Platform Module (TPM) version 2.0, a security chip on the motherboard or built into the processor
  • DirectX 12-compatible graphics

Microsoft’s free PC Health Check app tests most of these, though not the graphics card. The PC must run Windows 10 version 2004 or later to upgrade. For a PC that fails the check, ESU is the only official way to keep getting Windows 10 patches, and only until October 2027.

What to do: Open Windows Update today and confirm the “enrolled” message. If it is missing, enroll free while you can, then run PC Health Check. If the result is green, plan the Windows 11 upgrade before October 12, 2027, rather than in the final week.

Get Today’s Summit by email

One short email each morning: five stories, and why each one matters. Free.

Unsubscribe any time. See our privacy policy.