Windows 10 End of Support: Home User Options and ESU

Microsoft stopped supporting Windows 10 on 14 October 2025, and a home PC that still runs it without Extended Security Updates no longer gets fixes for newly found security holes. The computer still switches on and your files are still there, which is why many people have not noticed anything change. This guide explains, in plain English, what end of support means for a home user, how to check whether your PC can move to Windows 11, how the consumer Extended Security Updates (ESU) programme works, and what to do with a PC that cannot upgrade. It is written for households, sole traders and anyone who looks after a family member's computer. If you manage PCs for an organisation, the Operating System End of Life and Extended Support Guide covers the business side. Dates on this page are as shown on Microsoft's own pages on 8 November 2026; Microsoft can change them, so check the linked pages before you decide.

This is an independent guide from NHI Mgmt Group, based on Microsoft's public documentation as of November 2026. It is not sponsored or reviewed by Microsoft. Product features change, so confirm settings against Microsoft's current documentation.

Key takeaways

Your PC still works, but it is getting less safe. Since 14 October 2025 Microsoft no longer provides security fixes, software updates or technical support for Windows 10 unless the PC is enrolled in ESU.
Check before you buy. If your PC meets the requirements, Windows 10 Home and Pro upgrade to Windows 11 for free; the PC Health Check app or Windows Update tells you in minutes.
ESU is a bridge, not a destination. Consumer ESU gives critical and important security updates only, and Microsoft's page shows it ending on 12 October 2027. It can be free if you sync your settings with Windows Backup.
Antivirus is not a substitute for updates. Microsoft says plainly that antivirus, its own or anyone else's, is not enough on its own when the operating system is no longer patched.
Do not bypass the hardware checks. Microsoft says a PC that runs Windows 11 without meeting the requirements is not entitled to updates, which leaves you no better off than staying on unsupported Windows 10.

What is changing and why

Every version of Windows has a published lifecycle. When it ends, Microsoft stops writing fixes for that version and puts its effort into the current one. For Windows 10 that meant three things stopped on 14 October 2025:

Security updates: the monthly fixes that close holes criminals use to get into a PC. This is the change that matters most.
Software updates: bug fixes and improvements to Windows itself.
Technical support: Microsoft support will not help with Windows 10 problems.

Nothing is switched off. Windows 10 keeps starting, your programs keep running and your files are untouched. The risk builds over time: each month new weaknesses in Windows are found and fixed in supported versions, and attackers can study those fixes to work out what is still open on unpatched Windows 10 PCs. The UK National Cyber Security Centre puts it bluntly in its guidance on obsolete products: the only fully effective way to remove the risk is to stop using the obsolete product.

Official timeline and current status

Date	What happens	Source
14 October 2025	Windows 10 reached end of support: no more free security updates, software updates or technical support	Microsoft Windows end of support page
Now until 12 October 2027	Home users can enrol eligible Windows 10 version 22H2 PCs in consumer ESU at any time; coverage runs to the programme end date whenever you join	Microsoft Extended Security Updates page
12 October 2027	Consumer ESU programme ends, as shown on Microsoft's page on 8 November 2026	Microsoft Extended Security Updates page
At least October 2028	Microsoft Edge and the WebView2 Runtime keep receiving updates on Windows 10 22H2, without needing ESU	Microsoft Learn: Edge supported operating systems
10 October 2028	Microsoft provides security updates for Microsoft 365 apps on Windows 10 until this date	Microsoft Windows end of support page

Microsoft's ESU page notes that enrolment options and timing can vary by region, including the European Economic Area, so check the version of the page for your country. Office 2016 and Office 2019 are no longer supported on any version of Windows, and Microsoft lists Office 2021 and Office 2024 as not supported on Windows 10.

Who and what is affected

Every home PC running Windows 10: Home, Pro and other editions. If it is not enrolled in ESU, it has received no Windows security fixes since October 2025.
Older PCs that cannot run Windows 11: these are the hardest cases, because the free upgrade is not available and the choice is ESU, replacement or a different operating system.
Family members' computers: an older relative's laptop used for online banking and email is exactly the kind of PC that gets forgotten. It is worth checking for them.
Programs and devices: some software makers and printer or scanner makers will stop supporting Windows 10 as well. Microsoft 365 apps and Edge have later dates (see the timeline), but other apps may not.
Sole traders and very small businesses: consumer ESU is for personal-use devices. Microsoft's ESU page says PCs joined to an Active Directory domain or Microsoft Entra, managed through device management (MDM) or in kiosk mode cannot use the consumer programme; businesses use the commercial ESU route instead.

Finding affected systems and identities

You only need a few minutes per PC to find out where you stand.

Check which Windows you have. Press the Windows key, type winver and press Enter. The window shows "Windows 10" or "Windows 11" and the version, such as 22H2. You can also look in Settings > System > About.
Ask Windows Update. Go to Settings > Update & Security > Windows Update. If your PC can upgrade, Windows Update usually says so and offers Windows 11. If you are eligible for ESU, the same page shows an enrolment link.
Run PC Health Check. Microsoft's free PC Health Check app tells you whether the PC meets Windows 11 requirements and, if not, which part fails. Microsoft notes it does not check the graphics card or screen, because most PCs meet those.
Check the common blockers yourself. Type tpm.msc in the Start menu to see whether a TPM is present and its version. Type System Information and look for "Secure Boot State". A TPM or Secure Boot that is merely switched off in the firmware settings can often be switched on; ask the PC maker or a trusted repairer if you are unsure.
Check your accounts. ESU enrolment needs a Microsoft account with administrator rights on the PC; a child account cannot be used. If you sign in with a local account, Windows asks you to sign in with a Microsoft account during enrolment. Protect that account with a strong password and two-step verification; see the Securing Your Email Account Guide.

Windows 11 minimum requirement	What it means	Usual reason an older PC fails
Processor: 1 GHz or faster, 2 or more cores, compatible 64-bit	Must be on Microsoft's supported processor list	Processor too old, even if fast enough in practice
Memory: 4 GB RAM	Minimum to install	Older budget laptops with 2 GB
Storage: 64 GB or more	Space for Windows and updates	Small built-in storage on cheap laptops
Firmware: UEFI, Secure Boot capable	Modern start-up system that blocks tampered boot code	Very old PCs with legacy BIOS only
TPM version 2.0	Security chip that protects keys and supports encryption	No TPM, older TPM 1.2, or TPM switched off
Graphics: DirectX 12 compatible, WDDM 2.0 driver	Display driver standard	Rarely the blocker
Display: 720p, larger than 9 inches	Screen size and resolution	Rarely the blocker

Windows 11 Home and Pro also need an internet connection and a Microsoft account during first setup, and the upgrade requires Windows 10 version 2004 or later.

Migration options

Option	Best for	Cost	Watch out for
Free upgrade to Windows 11	PCs that meet the requirements	Free for Windows 10 Home and Pro	Back up first; check that important programs and printers support Windows 11
Enrol in consumer ESU	PCs that cannot upgrade yet, or when you need time	Free with Windows Backup settings sync, 1,000 Microsoft Rewards points, or a one-time USD 30 (or local equivalent) plus tax; one licence covers up to 10 PCs	Security fixes only, no new features or support; ends 12 October 2027 per Microsoft's page
Replace the PC	Old or slow PCs that fail the requirements	Price of a new device; trade-in or recycling schemes may offset it	Wipe the old PC properly before passing it on
Install a different operating system	Confident users with a capable older PC used mainly for web and email	Often free	Learning curve; check your apps, printer and banking tools work; you are responsible for its updates
Keep using Windows 10 with no ESU	Not recommended	None up front	Growing risk of malware and account theft; see "Risks of doing nothing"

Upgrading to Windows 11

If Windows Update offers Windows 11, back up first (see below), then accept the offer and leave the PC plugged in. The upgrade keeps your files and most programs. Afterwards, spend ten minutes on the settings that matter most: see the Windows 11 Security Settings Guide.

Enrolling in ESU

Microsoft's requirements are: Windows 10 version 22H2 (Home, Professional, Pro Education or Workstations), the latest Windows update installed including the Licensing Preparation Package KB5126256, and a Microsoft account with administrator rights that is not a child account. To enrol, open Settings > Update & Security > Windows Update, select Enroll now and choose one of the three options. For other PCs in the household, sign in with the same Microsoft account and select Add device. ESU delivers critical and important security updates, as defined by the Microsoft Security Response Center, through Windows Update; it does not add features or include technical support beyond help with activation and installing ESU updates.

Replacing the PC

If you buy a new computer, Microsoft and many manufacturers and retailers run trade-in or recycling schemes in some countries. Before the old PC leaves your hands, copy your files off it, sign out of your accounts, and use Settings > Update & Security > Recovery > Reset this PC with the option to remove everything, so the next owner cannot recover your data.

A different operating system

Some people give an older laptop a second life with a Linux distribution or ChromeOS Flex. This can work well for browsing and email, but check first that the programs, printer and any banking or tax tools you depend on will run, and remember that you take on responsibility for keeping that system updated.

Decision guide

PC meets requirements: upgrade to Windows 11 now; there is no reason to wait.
PC fails only because TPM or Secure Boot is switched off: ask the maker or a trusted repairer about switching them on, then upgrade.
PC fails on processor or memory and is still useful: enrol in ESU now and plan a replacement before ESU ends.
PC is slow, unreliable or holds little of value: replace it, or reuse it offline only.

Testing and rollback

Back up before anything else. Copy photos, documents and other personal files to an external drive or a cloud service, and make sure you can open them from another device. See the Backing Up Personal Data Guide.
Note your passwords and licences. Check you can sign in to your email, banking and Microsoft account from your phone, and have product keys for any paid software.
Check key programs and devices. Look up your printer, scanner and any specialist software on the maker's website for Windows 11 support.
Upgrade, then test. After the upgrade, open your main programs, print a page and confirm Windows Update runs.
Know how to go back. For a short period after upgrading, Windows 11 offers a Go back option in Settings > System > Recovery that returns the PC to Windows 10. If you go back, enrol in ESU so the PC keeps getting security fixes.

Avoid tools or guides that promise to force Windows 11 onto unsupported hardware. Microsoft says such a PC is not guaranteed to receive updates, including security updates, damage caused by incompatibility is not covered by the manufacturer's warranty, and a watermark appears on the desktop. Microsoft advises anyone who has done this to go back to Windows 10.

Risks of doing nothing

Unpatched holes: new weaknesses found in Windows stay open on your PC, and some can be used just by opening a booby-trapped file or visiting a malicious web page.
Account and money theft: malware on an unpatched PC can steal saved passwords and browser sessions, which then lets criminals into your email and bank. See the Protecting Your Personal Finances Online guide.
Antivirus gaps: Microsoft states that antivirus software helps but is not enough on its own without operating system security updates.
Apps stop working: over time, software makers drop Windows 10, and new versions of apps will not install.
Scams that exploit the change: criminals phone or pop up warnings claiming your "Windows licence has expired" and offer paid "fixes" or remote access. Treat any unexpected call or pop-up about Windows 10 as a scam. See the Recognising Tech Support Scams Guide.

If you must keep an unsupported PC for a while, follow the NCSC's short-term advice for obsolete devices: keep risky activity such as email, web browsing and USB sticks off it, do not use it for banking, and keep it on a separate network if your router allows. Re-installing Windows removes existing malware but does not fix the underlying weaknesses.

Detection and measurement

For a household, "measuring" simply means checking that the plan worked:

Windows Update status: Settings shows "You're up to date" and a recent check date on every PC.
ESU confirmation: enrolled PCs show that they are enrolled in Extended Security Updates on the Windows Update page.
Count of PCs on unsupported Windows: the goal is zero, including relatives' machines you look after.
Backup test: you have restored at least one file from your backup in the last three months.
Replacement date: every ESU PC has a planned replacement or upgrade before 12 October 2027.

Framework mapping

For readers who want to tie this to recognised standards, unsupported operating systems are a lifecycle and patching issue in every major framework.

Action	NIST CSF 2.0	NIST SP 800-53 Rev 5
Know which PCs run which Windows version	ID.AM-08	CM-8 System Component Inventory
Replace or remove unsupported software and hardware	PR.PS-02, PR.PS-03	SA-22 Unsupported System Components
Keep receiving and installing security fixes	ID.RA-01	SI-2 Flaw Remediation

Practitioner checklist

Every Windows PC in the household is listed with its Windows version and whether it can run Windows 11.
Personal files are backed up and a test restore has worked.
PCs that meet the requirements have been upgraded to Windows 11 and checked for updates.
PCs that cannot upgrade are enrolled in consumer ESU, or taken offline.
The Microsoft account used for ESU has a strong password and two-step verification.
Each ESU PC has a planned replacement or upgrade before ESU ends.
No PC has Windows 11 forced onto unsupported hardware.
Old PCs are reset with "remove everything" before sale, gift or recycling.
Everyone in the household knows to hang up on unexpected calls about Windows 10.

Windows 10 End of Support for Home Users Guide: Your Options After October 2025