Your laptop is fine. It boots fast, the battery still holds a charge, and the only thing wrong with it is a processor that missed Microsoft's Windows 11 eligibility list by about two model years. Last autumn it stopped getting security updates anyway. Then in late June, with no keynote and no email, Microsoft handed it another year.
Microsoft quietly pushed Windows 10 consumer security updates out to October 2027. Three enrollment routes, one of them genuinely free, all delivering identical coverage. It buys critical patches for version 22H2 and nothing else: no features, no technical support. Enroll now, then plan the exit anyway.
The Extra Year Nobody Announced
The extension arrived the way awkward decisions usually do, as an editor's note appended to documentation that was already sitting there. Microsoft's own consumer ESU page now prices the paid route at $30 one time plus tax, and dates the coverage window to 12 October 2027. Anyone who enrolled during the first year was carried across at no extra charge and told nothing. Call it a reprieve. Actually, call it a pressure valve, because that is what it does.
The pressure is real and it is measurable. Windows 11 holds a clear majority of desktops now, but a large minority of the world's PCs are still running the version Microsoft stopped patching for free. Those machines mostly do not belong to holdouts making a point. They belong to people whose hardware failed an eligibility check they had never heard of until a notification told them about it, which is the same pattern that switched off smart home devices their owners had already paid for. And the obvious fix is not cheap, because memory pricing has pushed the cost of a decent new machine well past where it sat two years ago.
Four numbers describe the entire offer. What Microsoft added, what the points route costs, how far a single license stretches, and how much of the world this still applies to.
Extra coverage added
12 months
Deadline moved into 2027
Rewards route price
1,000 points
Redeemed, never purchased
Devices per license
10 PCs
One Microsoft account each
Windows 10 desktop share
29.83%
StatCounter, July 2026
The device count is the number people leave on the table. Enrollment feels like a per-machine chore, so it gets done on the laptop that nagged loudest and forgotten on the desktop in the study and the machine the kids use for homework. A single license stretches across a household's worth of PCs provided they all sign in under the same Microsoft account. That turns the free route into something worth doing deliberately, in one sitting, rather than reactively.
Three doors, identical patches behind each one. All that changes is what Microsoft takes at the threshold: your money, your loyalty points, or your settings synced to its cloud.
Which Door To Walk Through
The routes are not equivalent, even though three of them end in exactly the same patch stream. What separates them is what you hand over on the way in, and how easily you can change your mind later.
| Dimension | Windows Backup route | Rewards route | Paid route | Move to Windows 11 |
|---|---|---|---|---|
| Out of pocket | Nothing | Nothing, if you already have points | A card charge, plus local tax | Free upgrade, or a new PC |
| Real cost | Your settings live in OneDrive | A balance you cannot spend twice | Money, and nothing else | Relearning an interface you did not choose |
| Patch scope | Security fixes only, no features | Identical to the free route | Identical again, minus the cloud trade | Full updates, features included |
| Household reach | One license covers the family PCs | Same reach, same account rule | Same reach, paid once | Per machine, judged individually |
| Reversible | Yes, stop syncing later | No, spent points stay spent | No, treat it as a sunk cost | Only inside a short rollback window |
| Biggest catch | Free cloud storage fills quickly | Most people have no balance | Buys time, solves nothing structural | Older CPUs fail the eligibility list |
| Best suited for | Anyone already signed in and syncing | Bing and Xbox users with idle points | Anyone refusing to sync settings | Machines that already pass the check |
Read that as a privacy decision rather than a price decision, because on coverage the three ESU columns are indistinguishable. The paid route is the only one that buys patches without handing Microsoft either your synced configuration or your accumulated goodwill, which is a strange thing to have to pay for and, for some readers, still the right call.
Two of those four dates were published without an announcement, which tells you how Microsoft expects this transition to be managed: quietly, and by you.
Where This Still Bites
Extended Security Updates is not a support extension, and the naming does a lot of work to hide that. It is a patch drip aimed at one specific build. Microsoft states plainly that enrollment brings critical and important security updates and nothing further: no fixes for bugs that annoy you, no product improvements, no help desk to call when something breaks. If a driver stops working next March, you are on your own with it.
The larger risk sits outside Microsoft's control entirely. Browser makers, GPU driver teams, antivirus vendors and banking apps set their own end-of-support dates, and none of them are obliged to match this one. An operating system that receives patches while the software layered on top quietly stops being tested is only partly protected. Microsoft's household pricing has form for shifting terms mid-stream too, as family plan subscribers discovered when Copilot arrived in their bill. And if you are switching on Windows Backup purely to unlock enrollment, treat it as one layer of a backup plan that can actually survive a dead drive, not the whole of one.
Whether a third year appears is the genuinely open question, and nobody outside Redmond can answer it. My read is that the June extension was a response to adoption numbers that refused to move, which makes another one plausible but not something to bet a household's security on. Treat this as the last cheap year rather than the first of many. That is a stance, not a forecast, and I would happily be wrong about it.
- Apply the license across every PC in the house in one sitting, not one crisis at a time.
- Go looking for the enrollment prompt in Windows Update rather than waiting for it to find you.
- Treat the account you enroll with as permanent, because unpicking it later reopens the whole question.
- Put the decision date in your calendar for spring 2027, not autumn, since autumn reminders get snoozed.
Enrollment blockers worth checking first
A child account will not enroll. The Microsoft account has to be administrator level on that machine.
Work laptops joined to a domain, to Entra, or managed through MDM sit outside the consumer program, with a narrow carve-out for Entra-registered devices.
The PC must already be on version 22H2 with current updates installed before the option appears at all.
Enroll this week, on every machine in the house, through whichever door you can live with. Then open your calendar and book a real decision for spring, because a year of borrowed patches is not a plan and the clock started in June without asking you.
