Windows 10 security updates now run to 2027: what should you do with an older PC?

Regular support for Windows 10 ended on October 14, 2025. Nothing stopped working that day, but Microsoft stopped providing ordinary technical assistance, feature updates, and free security fixes. Consumer ESU now protects eligible enrolled devices through October 12, 2027 while their owners plan a transition.

ESU is narrower than normal support. It delivers critical and important security updates only — no new features, no general bug fixes, no Microsoft technical support. Think of it as a safety bridge that buys time to make a thoughtful decision, not a promise that an aging drive, battery, or fan will keep working.

Microsoft's current requirements are specific, and a machine has to meet all of them.

For eligible personal devices Microsoft currently lists three routes: no additional charge when you sync your PC settings, redeeming 1,000 Microsoft Rewards points, or a one-time $30 purchase plus tax. One consumer ESU license can cover up to ten eligible devices on the same Microsoft account, and coverage runs through October 12, 2027.

Options vary by region, so check Microsoft's page before paying or changing account settings. And never search out an 'ESU activator,' cracked license, or third-party enrollment tool. Enrollment happens inside Windows Update. Anyone asking for remote access, gift cards, cryptocurrency, or banking details is running a scam.

The whole process lives in Windows Update.

An eligible Windows 10 computer can upgrade to Windows 11 at no charge. Check through Windows Update or Microsoft's PC Health Check app. The baseline requirements include a compatible 64-bit processor, 4 GB of memory, 64 GB of storage, UEFI firmware capable of Secure Boot, and TPM 2.0.

If the checker says the PC is incompatible, that does not mean the computer is useless. The processor may not be on Microsoft's supported list, TPM 2.0 or Secure Boot may simply be turned off in firmware, the disk may use an older boot configuration, or a pending update may be blocking an otherwise supported upgrade.

Changing firmware settings blind can leave a computer unable to boot or trigger a drive-encryption recovery prompt. Before touching TPM, Secure Boot, UEFI, or partition settings, make a verified backup and find your BitLocker or device-encryption recovery key. If those terms are unfamiliar, that is a good place to stop and let a technician assess it.

This is usually the simplest long-term path when the hardware is compatible, storage is healthy, and your important programs and peripherals support Windows 11.

This is reasonable when the PC does what you need, is physically reliable, cannot officially run Windows 11, and a replacement is not affordable or necessary yet — or when you need time to confirm that an older program, printer, or scanner will work on a newer system.

Use that time intentionally. Keep Windows Update enabled, maintain a tested backup, run a current browser and security software, and set a transition date well before October 2027.

ESU does not fix a failing drive, overheating, random shutdowns, a swelling battery, a damaged charging port, or a corrupted file system. If the computer clicks, freezes, loses files, runs hot, or shuts off unexpectedly, stop treating it as a Windows deadline and have the hardware examined. A swollen battery should never be pressed, punctured, or charged.

Some computers are poor Windows 11 candidates but still benefit from real work: replacing a failing drive, moving from a mechanical hard drive to an SSD, adding memory, cleaning the cooling system, or replacing a worn battery. Those repairs can make the machine faster and more dependable during the ESU period. They will not make an unsupported processor officially supported.

Replacement usually wins when problems stack up: not Windows 11 eligible, failing storage, a worn battery and charging system, repair costs approaching the price of a better computer, or software you can no longer run.

Do not get rid of the old machine the moment the new one turns on. Transfer the important files, open a representative sample on the new computer, and confirm that email, bookmarks, password access, printers, scanners, and paid applications all work. Keep the old computer unchanged for a short verification period, then securely erase it before donation, trade-in, or recycling.

The EPA recommends considering upgrades before replacement, deleting personal information before recycling, and using a proper local electronics-recycling option. Devices and loose lithium-ion batteries do not belong in household trash or curbside recycling.

The internet is full of instructions for installing Windows 11 on unsupported hardware. That a bypass works today does not make it supported. Microsoft states that Windows 11 on an ineligible device will not receive Microsoft support, may hit compatibility problems, and is not guaranteed to receive updates — including security updates. Compatibility-related damage may also fall outside the manufacturer's warranty.

For a hobby or test machine, an experienced owner can knowingly accept that. For the household computer holding family photos, tax records, business files, and banking access, the safer choices are a supported Windows 11 installation, Windows 10 with valid ESU coverage during the transition, or a planned replacement. Avoid modified Windows downloads from unofficial sources entirely.

Work through it in this order.

Is Windows 10 safe to use in 2026? An enrolled, eligible PC keeps getting critical and important security updates through October 12, 2027. An unenrolled one does not. Either way, ESU does nothing about failing hardware, weak passwords, or missing backups.

Already enrolled? Microsoft says existing consumer coverage continues automatically through October 2027 — just confirm in Windows Update that the device still shows as enrolled.

Will upgrading erase my files? A supported in-place upgrade is designed to keep files and applications, but no upgrade is risk-free. A failing drive, power interruption, or wrong choice during setup can cost you data. Make and verify a separate backup first.

Does ESU apply to a small-business computer? Consumer ESU is for eligible personal-use devices and excludes several managed commercial setups. A business on a domain, Entra join, or MDM should review Microsoft's commercial ESU guidance instead.