How to Stay Secure After Windows 10 Support Ends

Windows 10 has been a trusted operating system for years, but its time is coming to an end. Beginning October 14, 2025, Microsoft will no longer provide free updates or security patches for Windows 10. If you keep using it without a plan, you’ll be leaving your computer and your data vulnerable.

Don’t panic! You still have safe, supported options that will keep you protected and productive. Here’s what to do when Windows 10 reaches end of support.

What “End of Support” Really Means

When Microsoft ends support for an operating system like Windows 10, it doesn’t mean your computer suddenly stops working. You can still turn it on, log in, and use your favorite programs. What changes is what’s happening behind the scenes.

Up until now, Windows 10 has been receiving regular security updates. These are small patches Microsoft sends out every month to fix newly discovered weaknesses that hackers might exploit. They also release bug fixes to correct software errors and compatibility updates that keep your computer running smoothly with new printers, apps, or hardware.

After the end of support date, Microsoft stops releasing those updates. That means:

• No more Windows 10 security or quality updates via Windows Update unless you enroll that PC in Extended Security Updates (ESU). ESU is a paid program that continues critical and important security fixes for a limited time.
• Antivirus definitions can still update. Microsoft has stated that Microsoft Defender Antivirus Security Intelligence updates on Windows 10 will continue through October 2028. These definition updates help detect known malware, but they do not fix operating system vulnerabilities. Think of them as a guard dog that still barks, not a contractor repairing the broken lock.
• No technical support from Microsoft for Windows 10 and no new features or non-security fixes. Over time, you may also see compatibility issues with newer apps and hardware.

Think of it like a car that the manufacturer no longer services. You can still drive it, but if a safety recall comes up, no one will fix it. Over time, small problems build up, and the risks get bigger. That’s why running an unsupported operating system is considered unsafe, especially if you use it for work, banking, or storing personal information.

Windows Home vs Pro vs Enterprise: Which One Do You Have?

When it comes to end of support, the edition of Windows you’re running makes a big difference. Here’s a simple way to understand the three most common editions:

Windows 10 Home

• Found on most consumer PCs bought at retail or online.
• Designed for everyday use like web browsing, email, and office apps.
• Lacks advanced business features like domain join, BitLocker management, and Group Policy.
• If you bought your computer at Best Buy, Costco, or Amazon, chances are high it’s running Windows 10 Home.

Windows 10 Pro

• Common on small business and professional laptops and desktops.
• Includes everything in Home, plus extra features like BitLocker encryption, Remote Desktop, Hyper-V, and the ability to join a domain.
• Many business-class PCs from Dell, Lenovo, or HP ship with Pro pre-installed.
• If you run a small or mid-sized business, most of your devices are probably on Windows 10 Pro.

Windows 10 Enterprise

• Only available through Microsoft Volume Licensing or Microsoft 365 subscriptions.
• Packed with advanced security, compliance, and device management features like Defender Credential Guard, AppLocker, and Windows Update for Business.
• Used mainly in large organizations with dedicated IT teams and strict compliance requirements.
• If your PC was set up by a corporate IT department, it may be running Enterprise.

Why this matters now

• Home and Pro editions: reached end of support on October 14, 2025. You’ll need to upgrade to Windows 11 or enroll in Extended Security Updates (ESU).
• Enterprise and LTSC editions: have different timelines depending on the version. Some are still supported, while others are nearing their end dates. It’s critical to check which one you have so you can plan ahead.

How to Determine Which Version of Windows You Have

Before you decide what to do next, it’s important to confirm which version of Windows your computer is running.

Here are 3 quick ways to check:

🔹 Press Windows key + R, type winver, press Enter.
🔹 Go to Start → Settings → System → About.
🔹 Look at your Start menu:
 • Centered icons/rounded corners = Windows 11
 • Traditional list/square edges = Windows 10

If it says Windows 10, you’ll need to plan ahead and upgrade, buy Extended Security Updates, or replace your PC.

Your Choices After Windows 10 Support Ends

Now that you know what end of support means, it’s time to decide how you want to move forward. Microsoft has created several paths to keep you secure, whether you’re ready to upgrade, need more time, or want to replace your computer altogether. Here are the main options you can choose from.

Option 1: Upgrade to Windows 11

For many people, the simplest solution is moving to Windows 11. Microsoft offers the upgrade for free on most modern computers.

Here’s how to check if your PC is ready:

1. Download Microsoft’s PC Health Check tool (available on Microsoft’s website).
2. Run the program to see if your computer meets the requirements for Windows 11.
3. If it does, go to Settings → Update & Security → Windows Update.
4. Look for the option to upgrade to Windows 11 and follow the on-screen steps.

Upgrading is the best way to stay on Microsoft’s newest platform. Unlike temporary fixes, Windows 11 will continue receiving full security patches, performance improvements, and new features for years to come. That means you’ll not only be protected from new cyber threats, but you’ll also benefit from a more modern, reliable, and user-friendly operating system.

For businesses, upgrading ensures compliance with industry regulations and avoids the ongoing cost of Extended Security Updates. For home users, it means you don’t have to worry about expiration dates or paying for temporary coverage. By moving forward with Windows 11 now, you set yourself up for long-term security, smoother performance, and a system that keeps pace with the latest software and hardware.

Option 2: Get ESU at no cost by syncing (backing up) your PC settings

If you sign in with a Microsoft account and turn on backup for your PC settings, you can enroll in Extended Security Updates at no additional cost.

Steps

1. On your Windows 10 PC, go to Settings → Update & Security → Windows Update.
2. Select Enroll now when you see the ESU prompt.
3. If asked, sign in with your Microsoft account.
4. If the wizard shows Back up my PC settings, turn it on and continue to enroll.

Note: This covers you through October 13, 2026 on eligible Windows 10 version 22H2 devices. Availability is rolling out gradually, so the prompt may appear close to or after the end-of-support date.

Option 3: Use Microsoft Rewards points to enroll (1,000 points)

Enroll by redeeming 1,000 Microsoft Rewards points during the ESU enrollment flow. Check your rewards balance by logging in with your Microsoft account at https://rewards.bing.com

Steps

1. Open Settings → Update & Security → Windows Update and choose Enroll now.
2. When the ESU wizard offers Rewards, choose that option and follow the prompts to redeem 1,000 points for enrollment.

Note: Redemption happens inside the ESU enrollment flow, not from the Rewards website directly.

Option 4: Make a one-time purchase of ESU (about $30)

If you prefer to pay, choose the one-time purchase option in the ESU wizard. Microsoft lists the price as $30 USD (or local equivalent, plus tax).

Steps

1. Go to Settings → Update & Security → Windows Update and select Enroll now.
2. Choose One-time purchase, sign in with your Microsoft account if prompted, and complete checkout.

You can use the ESU license associated with your Microsoft account on up to 10 devices that meet the prerequisites. Refund policies vary by timing and region.

Important Notes

Where to find it: All three choices appear inside Windows Update once your device is eligible. ESU availability is phased, so keep Windows Update current and check again if you do not see Enroll now yet.

Eligibility: Consumer ESU is for Windows 10 version 22H2 Home, Pro, Pro Education, and Workstations. Devices joined to a domain, Microsoft Entra joined, or managed by MDM must use the commercial ESU path instead.

Program window: Consumer ESU delivers security updates through October 13, 2026.

Small Business and Volume Licensing

Who should use this path

This option is for business-managed PCs. If your devices are domain joined, Microsoft Entra joined, or managed by MDM, you won’t see the consumer ESU offer in Windows Update. Instead, you’ll need to go through the commercial ESU program.

What you get and how long it lasts

Commercial ESU provides critical and important security updates for up to three years after Windows 10 support ends. Each year builds on the last, so Year One covers October 2025–October 2026, Year Two continues after that, and so on until October 2028.

What it costs

Commercial ESU is licensed per device. The first year costs about $61 USD per device, and the price doubles each subsequent year. If you start in Year Two or Year Three, you’ll still need to pay for the previous years.

How to buy

• Through a Cloud Solution Provider (CSP): If you work with a Microsoft CSP partner, they can add Windows 10 ESU to your account and provide activation keys. This is often the easiest route for small and mid-sized businesses.
• Through Volume Licensing: If you already have a Volume Licensing agreement, your Microsoft reseller or account rep can add ESU. The keys will then appear in your Microsoft 365 admin center.

Prerequisites on each PC

• Devices must be on Windows 10 version 22H2.
• The latest updates (including the ESU prerequisite update) need to be installed.
• You’ll need local administrator rights to install and activate the ESU key.

Deploying at scale

If you have many devices, you don’t need to activate them one by one. You can push the activation key and commands using Intune, your management tool, or Microsoft’s Volume Activation Management Tool (VAMT).

Cloud and virtualization scenarios

If you run Windows 10 in Microsoft’s cloud environments (like Windows 365 Cloud PCs, Azure Virtual Desktop, or Azure VMs), ESU is already included at no extra cost. Some hybrid scenarios also qualify, such as Windows 10 devices that access Windows 365 Cloud PCs.

Key distinction from consumer ESU

Consumer ESU can be redeemed by syncing PC settings, using Microsoft Rewards points, or making a one-time $30 purchase. That path covers up to 10 devices linked to a Microsoft account. Businesses, however, must use the commercial ESU program with licensing per device.

Windows Enterprise and LTSC: What Businesses Need to Know

What LTSC is for

Windows 10 Enterprise LTSC is a special edition built for fixed-purpose devices that must stay stable for long periods. Think medical equipment, kiosks, point of sale, factory machines, and other systems where you don’t want frequent feature changes. Microsoft limits features and focuses on security and reliability for these devices.

When Windows Enterprise is used

Windows Enterprise editions (including LTSC) are designed for organizations that need advanced security, compliance, and device management features. They are not sold through retail or pre-installed on consumer PCs. Instead, Enterprise licenses are offered through volume licensing programs or subscription services like Microsoft 365. Businesses choose Enterprise editions when they need more control over updates, access to advanced security tools like BitLocker and Defender Credential Guard, and centralized management through tools like Intune or Group Policy.

Support timelines at a glance

Support depends on the exact LTSC release you run. The two most common Windows 10 Enterprise LTSC versions are:

• LTSC 2019. Mainstream support ended January 9, 2024. Extended support continues until January 9, 2029, so you will keep receiving security fixes until that date.
• LTSC 2021. This release has a five-year lifecycle that ends January 12, 2027. There is no additional extended-support phase beyond that date for the Enterprise edition.

For Windows 10 IoT Enterprise LTSC 2021 (a different product for embedded and appliance-style devices), security updates run through January 13, 2032. That longer date applies only to IoT LTSC.

LTSC is not a shortcut for general PCs

LTSC is intended for specialized devices. Microsoft cautions that some apps and tools built for the general channel may have limited support on LTSC, and it is not meant to replace Windows 11 on everyday employee laptops or desktops.

How this ties to ESU for businesses

If you manage Windows 10 devices in a business, Extended Security Updates for commercial use are purchased per device through a Cloud Solution Provider or through Volume Licensing. You activate with ESU MAK keys and can deploy at scale with your management tools. ESU is a bridge to help you complete your move to Windows 11 or to newer hardware.

Why Staying Secure Matters

Cybersecurity might seem like a concern only for big companies, but the truth is that criminals go after anyone running outdated technology, including small businesses and home users. Hackers know that once Microsoft stops supporting Windows 10, there will be millions of computers around the world left unpatched. These machines become easy targets.

When your system no longer receives updates, it’s like leaving the windows of your house unlocked. Even if you’ve never had a break-in before, you’re inviting trouble by making it easy. Hackers use automated tools that constantly scan the internet looking for vulnerable computers. If your PC is one of them, you could become a victim without ever clicking a bad link or opening a suspicious email.

The risks include:

• Data theft – personal files, customer records, and financial information could be stolen.
• Ransomware – hackers could lock your computer and demand payment to give it back.
• Business downtime – small businesses may lose hours or days of productivity if systems are compromised.
• Reputation damage – if customer data is exposed, trust is lost and recovery can be costly.

Staying secure isn’t just about protecting your PC. It’s about protecting your identity, your finances, and the trust of the people who rely on you.

Frequently Asked Questions

Q: Can I keep using Windows 10 after support ends?

A: Yes, you can still use your computer. It won’t suddenly stop working on the end-of-support date. However, without updates, your system will slowly become more vulnerable to hackers, viruses, and compatibility issues.

Q: What happens if I don’t upgrade or buy Extended Security Updates (ESU)?

A: If you do nothing, your computer will keep working, but you’ll be taking a big risk. Cybercriminals specifically look for older, unpatched systems. Even if you’re careful online, you could be targeted through hidden vulnerabilities.

Q: How long will Extended Security Updates be available?

A: Microsoft plans to offer ESU for up to three years after the October 2025 cutoff. That means coverage until October 2028. Pricing will likely increase each year.

Q: Is ESU free, or can I get it with Microsoft Rewards?

A: ESU is not free. It’s a paid subscription. However, you can use Microsoft Rewards points, which can be applied toward the cost of ESU.

Q: Should I upgrade to Windows 11 or stick with ESU?

A: If your computer is compatible with Windows 11, upgrading is the best long-term choice. ESU is best used as a short-term solution while you prepare for a new PC or software migration.

Q: What if my computer can’t run Windows 11?

A: You can buy ESU for short-term security, replace your PC with a newer model, or switch to Linux. Linux is free and secure, but it may take some getting used to.

Q: Is Linux really a safe alternative?

A: Yes. Linux is widely used and considered very secure. It’s less targeted by hackers compared to Windows. However, it looks different from Windows, so there’s a small learning curve.

Q: Do small businesses face different risks than home users?

A: Yes. For businesses, running an unsupported operating system can mean failing compliance requirements like HIPAA, PCI, or other industry regulations. A single breach can lead to legal penalties and financial loss.

Next Steps

If you’re a small business owner, this decision can feel overwhelming. That’s where we come in. At Z-JAK Technologies, we help businesses in Louisville plan their IT roadmap, manage upgrades, and stay protected against cyber threats.

📞 Call us today at 502-200-1169
💻 Or schedule a discovery call here: https://zjak.net/contact-us

Let’s make sure your business is secure and ready for the future.