
- What is Windows 10 Extended Security Updates (ESU)?
- What ESU Provides
- What ESU Does NOT Provide
- Who Can Enroll in Windows 10 ESU?
- Eligible Devices
- Devices That Cannot Use Consumer ESU
- How to Enroll in Windows 10 ESU: Three Options
- Option 1: Free ESU by Syncing PC Settings (Recommended)
- Option 2: Redeem 1,000 Microsoft Rewards Points
- Option 3: One-Time Purchase of $30
- How to Enroll: Step-by-Step Instructions
- Step 1: Update to Windows 10 Version 22H2
- Step 2: Install All Pending Updates
- Step 3: Access the ESU Enrollment Wizard
- Step 4: Choose Your Enrollment Method
- Step 5: Verify Enrollment
- What Updates Are You Getting in January 2026?
- January 2026 Update: KB5073724
- Critical Security Fixes Included
- Secure Boot Certificate Updates
- ESU Timeline: Critical Dates You Need to Know
- Consumer vs. Enterprise ESU: Key Differences
- Should You Enroll in Windows 10 ESU or Upgrade to Windows 11?
- Enroll in Windows 10 ESU If You:
- Upgrade to Windows 11 If You:
- Cost Comparison: ESU vs. Windows 11 Upgrade
- What Happens After October 13, 2026?
- Your PC Will Continue to Work
- Security Vulnerabilities Will Accumulate
- Compliance and Regulatory Issues
- Software Compatibility Decreases
- Your Options After ESU Ends
- Maximize Your Windows 10 ESU Experience
- Keep Windows Update Enabled
- Maintain Additional Security Layers
- Plan Your Windows 11 Transition
- Monitor ESU Status
- Getting Your Genuine Windows License from SoftwareLicense4U.com
- Why Choose Genuine Windows Licenses?
- Available Windows Licenses
- Upgrade Path Recommendations
- Frequently Asked Questions About Windows 10 ESU
- Can I still get free Windows 10 security updates?
- Do I need to pay for ESU if I sync my settings?
- Can I use ESU on multiple computers?
- What happens if I sign out of my Microsoft Account?
- Will Windows 10 stop working after October 2026?
- Can I upgrade from Windows 10 ESU to Windows 11 later?
- Is ESU available for Windows 10 Enterprise?
- Will I get feature updates with ESU?
- Conclusion: Make an Informed Decision About Windows 10 ESU
With Windows 10 support officially ending on October 14, 2025, millions of users face a critical decision: upgrade to Windows 11 or enroll in Microsoft’s Extended Security Updates (ESU) program. If you’re still running Windows 10 in January 2026, understanding the ESU program is crucial for protecting your PC from security threats while you plan your next move.
This comprehensive guide covers everything you need to know about Windows 10 ESU in 2026, including enrollment options, costs, what updates you’ll receive, and whether it’s the right choice for you. Whether you’re a home user with incompatible hardware or a business managing a fleet of Windows 10 PCs, this article will help you make an informed decision.
What is Windows 10 Extended Security Updates (ESU)?
Extended Security Updates (ESU) is Microsoft’s paid program that provides critical and important security updates for Windows 10 devices beyond the official end-of-support date of October 14, 2025. This is the first time Microsoft has offered ESU to individual consumers, not just enterprise customers.
The program gives users additional time to transition away from Windows 10 while maintaining protection against security vulnerabilities, malware, and cybersecurity attacks. For consumer editions of Windows 10, ESU extends support until October 13, 2026, providing one additional year of security patches.
What ESU Provides
When you enroll in Windows 10 ESU, you receive:
- Critical Security Updates: Patches for high-severity vulnerabilities that could be exploited by attackers
- Important Security Updates: Fixes for security issues classified as important by Microsoft Security Response Center (MSRC)
- Protection Until October 2026: One full year of security coverage beyond the standard support end date
- Monthly Patch Tuesday Updates: Regular security updates delivered through Windows Update
What ESU Does NOT Provide
It’s essential to understand the limitations of the ESU program:
- No Feature Updates: You won’t receive new features, improvements, or quality-of-life enhancements
- No Technical Support: Microsoft doesn’t provide phone or chat support for Windows 10 ESU users
- No Bug Fixes: Non-security bugs and performance issues won’t be addressed
- No New Functionality: Windows 10 remains frozen in its final state from October 2025
ESU is a security-only lifeline, not a comprehensive support program. It’s designed as a temporary bridge while you prepare to upgrade to Windows 11 or purchase new compatible hardware.
Who Can Enroll in Windows 10 ESU?
Not every Windows 10 device qualifies for the Extended Security Updates program. Here are the specific requirements:
Eligible Devices
Your Windows 10 PC must meet these criteria to enroll in ESU:
- Windows 10 Version 22H2: Your device must be running the final version of Windows 10 (build 19045)
- Supported Editions: Windows 10 Home, Pro, Pro Education, or Pro for Workstations
- Microsoft Account: You must sign in with a Microsoft Account (not a child account)
- Personal Use: The device must be used for personal purposes, not commercial business operations
Devices That Cannot Use Consumer ESU
The following devices are excluded from the consumer ESU program:
- Devices joined to an Active Directory domain or Microsoft Entra (Azure AD)
- Devices enrolled in Mobile Device Management (MDM) solutions
- Devices in kiosk mode
- Devices that already have a commercial ESU license
- Devices running unsupported Windows 10 editions (Enterprise, Education, LTSC editions require commercial ESU)
If your device falls into these categories, you’ll need to explore the commercial ESU program instead, which operates differently and has separate pricing.
How to Enroll in Windows 10 ESU: Three Options
Microsoft offers three different enrollment methods for the Windows 10 Consumer ESU program, each with different requirements and benefits:
Option 1: Free ESU by Syncing PC Settings (Recommended)
The easiest and most accessible option is to enroll at no cost by keeping your PC settings synced with your Microsoft Account. Here’s how it works:
Vereisten:
- Sign in to Windows 10 with your Microsoft Account
- Keep “Sync settings” enabled in Settings > Accounts > Sync your settings
- Stay signed in to your Microsoft Account continuously
Important Limitation: If you sign out of your Microsoft Account or don’t use it for up to 60 days, your ESU enrollment will be discontinued. You’ll need to sign back in with the same Microsoft Account to re-enroll.
This option is perfect for users who regularly use their Windows 10 PC and don’t mind being signed in to their Microsoft Account. It provides security updates at no cost through October 13, 2026.
Option 2: Redeem 1,000 Microsoft Rewards Points
If you participate in the Microsoft Rewards program, you can use 1,000 points to enroll in ESU:
Vereisten:
- Active Microsoft Rewards account with at least 1,000 points
- Microsoft Account signed in on your Windows 10 device
- Follow the enrollment wizard in Windows Update settings
How to Earn Rewards Points: You can accumulate Microsoft Rewards points by searching with Bing (while signed in to your Microsoft Account), completing daily quizzes, making purchases in the Microsoft Store, and participating in promotional activities. Earning 1,000 points typically takes a few weeks of regular Bing searches.
Option 3: One-Time Purchase of $30
The final option is a straightforward one-time purchase through the Microsoft Store:
Cost: $30 USD (or local currency equivalent) plus applicable taxes
Benefits:
- No requirement to stay signed in to Microsoft Account
- Can be used on up to 10 devices with the same Microsoft Account
- Provides security updates through October 13, 2026 regardless of sign-in status
This option is ideal for users who prefer local accounts, manage multiple Windows 10 PCs, or want the flexibility of not being tied to continuous Microsoft Account sign-in. At $30 for coverage on up to 10 devices, it’s remarkably affordable for families or users with multiple computers.
How to Enroll: Step-by-Step Instructions
Microsoft has made the enrollment process relatively straightforward through the Windows Update interface. Here’s how to enroll your Windows 10 device:
Step 1: Update to Windows 10 Version 22H2
Before you can enroll in ESU, ensure your device is running Windows 10 version 22H2. To check your version:
- druk op Windows Key + R
- Type winver and press Enter
- Check that the version shows 22H2 (build 19045.xxxx)
If you’re on an older version, go to Settings > Update & Security > Windows Update and install all available updates until you reach version 22H2.
Step 2: Install All Pending Updates
Make sure your Windows 10 installation is completely up to date. The ESU enrollment wizard requires all updates through at least August 2025 (KB5063709) to be installed.
Step 3: Access the ESU Enrollment Wizard
- Open Instellingen (Windows Key + I)
- Navigate to Update & Security > Windows Update
- Look for an “Enroll now (ESU)” link or wizard
- Click the enrollment link to begin the process
Important Note: The ESU enrollment option is rolling out gradually. If you don’t see it yet, check back in a few days. Microsoft continues to expand availability to all eligible devices throughout early 2026.
Step 4: Choose Your Enrollment Method
The wizard will present the three enrollment options described above:
- Free enrollment with Microsoft Account sync
- Redeem 1,000 Microsoft Rewards points
- Purchase for $30
Select your preferred method and follow the on-screen instructions to complete enrollment.
Step 5: Verify Enrollment
After enrolling, verify your ESU status by returning to Settings > Update & Security > Windows Update. You should see confirmation that your device is enrolled in the Extended Security Updates program with coverage through October 13, 2026.
What Updates Are You Getting in January 2026?
Users enrolled in Windows 10 ESU received their first batch of updates as part of the January 2026 Patch Tuesday. Here’s what the January update (KB5073724) includes:
January 2026 Update: KB5073724
The January 2026 ESU update brings Windows 10 to Build 19045.6809 and includes several important security fixes and system changes:
| Update Type | Details |
|---|---|
| Security Fixes | 112+ vulnerabilities patched, including 3 zero-day exploits |
| Build Number | 19045.6809 (from 19045.xxxx) |
| Secure Boot Certificates | Updated 2023 certificates to replace expiring 2011 certificates |
| Driver Removal | Removed old Agere modem drivers with security vulnerabilities |
| WinSqlite3.dll Update | Security fixes for core database component |
Critical Security Fixes Included
The January 2026 update addresses the same 114 vulnerabilities that Windows 11 users received, including:
- 58 Privilege Escalation vulnerabilities: Preventing attackers from gaining higher-level access to your system
- 22 Information Disclosure flaws: Protecting sensitive data from unauthorized access
- 21 Remote Code Execution issues: Blocking attackers from running malicious code on your PC
- Three Zero-Day vulnerabilities: Actively exploited flaws that needed immediate patching
Secure Boot Certificate Updates
A significant component of the January 2026 update involves replacing outdated Secure Boot certificates. Microsoft announced in November 2025 that three Windows Secure Boot certificates issued in 2011 will expire in June and October 2026:
- Microsoft Corporation KEK CA 2011 (expires June 2026) → Replaced with Microsoft Corporation KEK 2K CA 2023
- Microsoft Windows Production PCA 2011 (expires October 2026) → Replaced with Windows UEFI CA 2023
- Microsoft UEFI CA 2011 (expires June 2026) → Replaced with Microsoft UEFI CA 2023
These certificates are used by most Windows devices for Secure Boot verification. The January update ensures your Windows 10 PC has the updated 2023 certificates installed before the 2011 versions expire, preventing potential boot failures.
ESU Timeline: Critical Dates You Need to Know
Understanding the ESU program timeline helps you plan your Windows 10 transition strategy. Here are the critical dates:
| Datum | Event | Impact |
|---|---|---|
| 14 oktober 2025 | Windows 10 End of Support | Free security updates end for all Windows 10 editions |
| October 15, 2025 | ESU Program Begins | Extended security updates available for enrolled devices |
| June 2026 | Secure Boot Certificates Expire | KEK CA 2011 and UEFI CA 2011 certificates expire |
| October 13, 2026 | Consumer ESU Ends | Final security update for Windows 10 Home/Pro consumers |
| October 2026 | Windows Production PCA Expires | Additional Secure Boot certificate expiration |
| October 13, 2027 | Enterprise ESU Year 2 Ends | Only for businesses that purchased Year 2 ESU |
| October 13, 2028 | All Windows 10 Support Ends | Final possible security update for any Windows 10 device |
Critical Takeaway: For consumer Windows 10 users, October 13, 2026 is the absolute final date for receiving security updates. After this date, there are no options to extend support further for personal devices. You must upgrade to Windows 11 or accept the security risks of running an unsupported operating system.
Consumer vs. Enterprise ESU: Key Differences
Microsoft offers two separate ESU programs with different terms, costs, and duration. Understanding these differences is important, especially for small business owners or users managing multiple PCs:
| Functie | Consumer ESU | Enterprise ESU |
|---|---|---|
| Duur | 1 year (until Oct 2026) | Up to 3 years (until Oct 2028) |
| Cost | $0-$30 one-time | $61/device Year 1, doubles each year |
| Eligible Editions | Home, Pro, Pro Education, Pro for Workstations | Enterprise, Education, LTSC editions |
| Enrollment Method | Through Settings app with Microsoft Account | Volume licensing, MAK keys through admin center |
| Device Limit | Up to 10 devices per license ($30 option) | Per-device licensing, no limit |
| Account Requirement | Personal Microsoft Account | Volume licensing agreement |
Important for Small Businesses: If you’re running a small business with Windows 10 Pro devices joined to a domain or managed through MDM, you cannot use the consumer ESU program. You’ll need to purchase enterprise ESU licenses through Microsoft’s Volume Licensing program, starting at $61 per device for the first year.
Should You Enroll in Windows 10 ESU or Upgrade to Windows 11?
The decision between ESU enrollment and upgrading to Windows 11 depends on several factors. Here’s a decision framework to help you choose:
Enroll in Windows 10 ESU If You:
- Have incompatible hardware: Your PC doesn’t meet Windows 11’s requirements (no TPM 2.0, older processor, etc.)
- Need time to plan: You’re saving for a new PC or waiting for prices to drop
- Rely on legacy software: Critical applications only work on Windows 10
- Want minimal cost: Free or $30 is more affordable than new hardware
- Need temporary protection: You’re planning to upgrade within the next 9 months
- Have workflow stability requirements: Can’t afford disruption from OS migration right now
Upgrade to Windows 11 If You:
- Have compatible hardware: Your PC meets all Windows 11 system requirements
- Want long-term support: Windows 11 receives updates well into the 2030s
- Value new features: Enhanced security, better performance, modern interface appeal to you
- Need ongoing improvements: ESU only provides security fixes, no feature updates
- Run modern software: New applications increasingly require Windows 11
- Want peace of mind: Full support is better than security-only coverage
Cost Comparison: ESU vs. Windows 11 Upgrade
Let’s break down the real costs:
Windows 10 ESU Option:
- $0 (with Microsoft Account sync) or $30 (one-time purchase)
- Coverage until October 2026 (9 months remaining as of January 2026)
- No additional features, security only
- Dead-end solution, must eventually upgrade anyway
Windows 11 Upgrade Option:
- $0 if your PC is compatible and you have a valid Windows 10 license
- $139+ for Windows 11 Home license if purchasing new
- $200+ for Windows 11 Pro license if purchasing new
- Ongoing support, features, and security updates through 2030s
- Better long-term value if your hardware supports it
For most users with compatible hardware, upgrading to Windows 11 for free makes more financial sense than paying for limited ESU coverage. However, if your hardware doesn’t meet Windows 11’s requirements, ESU buys you valuable time to plan your next computer purchase.
What Happens After October 13, 2026?
Understanding what happens when ESU ends is crucial for planning your Windows future:
Your PC Will Continue to Work
Windows 10 doesn’t stop functioning after ESU ends. Your computer will boot normally, applications will run, and files will remain accessible. However, running Windows 10 after October 13, 2026 carries significant risks.
Security Vulnerabilities Will Accumulate
Without security updates, newly discovered vulnerabilities won’t be patched. Attackers actively target unsupported operating systems because they know these security holes won’t be fixed. Your PC becomes increasingly vulnerable to:
- Malware and ransomware attacks
- Data theft and privacy breaches
- System compromises and unauthorized access
- Botnet recruitment for cybercriminal operations
Compliance and Regulatory Issues
For businesses handling sensitive data (financial information, healthcare records, personal data), running unsupported operating systems often violates compliance requirements like GDPR, HIPAA, PCI-DSS, and SOX. This can result in:
- Failed security audits
- Fines and penalties
- Loss of certifications
- Legal liability in case of data breaches
Software Compatibility Decreases
After ESU ends, software vendors will increasingly drop Windows 10 support. Modern browsers, productivity applications, and security software will require Windows 11, leaving Windows 10 users with outdated, potentially vulnerable versions.
Your Options After ESU Ends
When October 13, 2026 arrives, you’ll need to choose one of these paths:
- Upgrade to Windows 11: If your hardware meets requirements (or you’ve upgraded hardware), migrate to Windows 11
- Purchase New Hardware: Buy a Windows 11-compatible PC and migrate your data
- Accept the Risks: Continue using Windows 10 unsupported (strongly not recommended for internet-connected PCs)
- Switch to Alternative OS: Consider Linux distributions or other operating systems
Maximize Your Windows 10 ESU Experience
If you’ve enrolled in ESU, here are best practices to make the most of your extended support period:
Keep Windows Update Enabled
Don’t disable Windows Update. ESU security patches are delivered through the same Windows Update mechanism. Configure Windows Update to install automatically so you never miss critical security fixes.
Maintain Additional Security Layers
ESU provides operating system security updates, but you should maintain comprehensive protection:
- Use reputable antivirus software: Windows Defender is good, but consider additional protection
- Keep all software updated: Web browsers, productivity apps, and utilities should stay current
- Enable Windows Firewall: Don’t disable the built-in firewall
- Use strong passwords: Implement robust authentication on your accounts
- Back up regularly: Maintain current backups in case of ransomware or system failure
Plan Your Windows 11 Transition
Use the ESU period to prepare for eventual migration:
- Check Windows 11 compatibility: Run Microsoft’s PC Health Check app to see if your current hardware can upgrade
- Research new hardware: If you need to buy a new PC, start researching options and budgeting
- Test Windows 11: If possible, try Windows 11 on a secondary device or virtual machine to familiarize yourself
- Inventory your software: Verify that all essential applications support Windows 11
- Document your setup: Make notes about applications, settings, and configurations you’ll need to recreate
Monitor ESU Status
Periodically verify your ESU enrollment remains active:
- Go to Settings > Update & Security > Windows Update
- Confirm your ESU status shows active coverage through October 13, 2026
- If using the free Microsoft Account sync option, ensure you remain signed in
Getting Your Genuine Windows License from SoftwareLicense4U.com
Whether you’re staying on Windows 10 with ESU or ready to upgrade to Windows 11, having a genuine Microsoft license is essential. At SoftwareLicense4U.com, we provide authentic Windows licenses at competitive prices, ensuring you have legal, fully supported software.
Why Choose Genuine Windows Licenses?
- Full ESU Access: Only genuine Windows 10 licenses qualify for Extended Security Updates enrollment
- Free Windows 11 Upgrade: Valid Windows 10 licenses receive free Windows 11 upgrades if hardware is compatible
- Microsoft Support: Genuine licenses include access to official Microsoft support resources
- Security Updates: Receive all critical security patches without interruption
- Compliance Assurance: Ensure your software usage meets licensing requirements
- No Activation Issues: Avoid problems with counterfeit or volume licensing keys
Available Windows Licenses
We offer a complete range of Windows licenses for different needs:
- Windows 10 Home: Perfect for personal use, includes ESU eligibility
- Windows 10 Pro: Enhanced features for professionals and power users
- Windows 11 Home: Modern OS for compatible PCs, long-term support
- Windows 11 Pro: Advanced features for business and professional use
Upgrade Path Recommendations
Based on your situation, here’s what we recommend:
If you have Windows 10 Home and compatible hardware: Your existing license provides a free upgrade to Windows 11 Home. No purchase necessary—just upgrade through Windows Update.
If you have incompatible hardware: Enroll in ESU (free or $30) to stay protected while you save for a new Windows 11-compatible PC. When ready, purchase a new device with Windows 11 pre-installed or buy a Windows 11 license from us.
If you need Windows 10 Pro features: Upgrade your Windows 10 Home license to Pro through our store, which maintains your ESU eligibility and provides a free Windows 11 Pro upgrade path.
Frequently Asked Questions About Windows 10 ESU
Can I still get free Windows 10 security updates?
No. Free security updates for Windows 10 ended on October 14, 2025. You must enroll in the Extended Security Updates program to receive security patches.
Do I need to pay for ESU if I sync my settings?
No. If you keep your PC settings synced with your Microsoft Account and remain signed in, ESU enrollment is completely free through October 13, 2026.
Can I use ESU on multiple computers?
Yes, if you purchase the $30 ESU license, you can use it on up to 10 devices associated with the same Microsoft Account. The free sync option works on any device where you’re signed in.
What happens if I sign out of my Microsoft Account?
If you’re using the free ESU enrollment (with settings sync), signing out or not using your Microsoft Account for up to 60 days will discontinue your ESU coverage. You’ll need to sign back in with the same account to re-enroll.
Will Windows 10 stop working after October 2026?
No, Windows 10 will continue to function, but you won’t receive security updates. This leaves your PC vulnerable to new threats. We strongly recommend upgrading to Windows 11 or replacing your hardware before ESU ends.
Can I upgrade from Windows 10 ESU to Windows 11 later?
Yes. If your hardware meets Windows 11 requirements, you can upgrade at any time during or after the ESU period. Your Windows 10 license provides a free Windows 11 upgrade.
Is ESU available for Windows 10 Enterprise?
Windows 10 Enterprise requires commercial ESU licensing through Microsoft’s Volume Licensing program. The consumer ESU program ($0-$30) only covers Home, Pro, Pro Education, and Pro for Workstations editions.
Will I get feature updates with ESU?
No. ESU provides only critical and important security updates. You won’t receive new features, quality improvements, or bug fixes for non-security issues.
Conclusion: Make an Informed Decision About Windows 10 ESU
Windows 10 Extended Security Updates offer a valuable lifeline for users who can’t immediately upgrade to Windows 11. Whether you choose the free enrollment option through Microsoft Account sync or the $30 one-time purchase, ESU provides nine additional months of critical security protection through October 13, 2026.
However, ESU is a temporary solution, not a permanent answer. Use this time wisely to evaluate your options, check Windows 11 compatibility, plan hardware upgrades if needed, and prepare for the inevitable transition away from Windows 10. The security landscape evolves constantly, and running an unsupported operating system after October 2026 puts your data, privacy, and system integrity at significant risk.
If you have compatible hardware, upgrading to Windows 11 now provides better long-term value with ongoing support, new features, and enhanced security. For those with incompatible devices, ESU buys time to save for new hardware while maintaining essential security protection.
Ready to secure your Windows future? Visit SoftwareLicense4U.com to explore our genuine Windows 10 and Windows 11 licenses. Whether you’re staying on Windows 10 with ESU or upgrading to Windows 11, we provide authentic Microsoft licenses at competitive prices with full support and updates. Our team is here to help you choose the right license and navigate the transition from Windows 10 to Windows 11 when you’re ready.
Klaar voor een upgrade?
Koop echte licenties met onmiddellijke levering en levenslange ondersteuning.