The consumer Windows 10 Extended Security Updates program ends October 13, 2026. What that means for home users and businesses, and how to plan the move to Windows 11.
Microsoft ended mainstream support for Windows 10 on October 14, 2025. To give people more time, Microsoft offered a one-year Extended Security Updates (ESU) program for consumers, and that year ends on October 13, 2026. After that date, Windows 10 computers enrolled in the consumer ESU program stop receiving security patches. Businesses that paid for commercial ESU can extend for up to two more years, but at a steeply increasing price. If you or your business still have Windows 10 machines, now is the time to finish the move.
What Actually Happens After October 13, 2026
Windows 10 will keep working. Nothing shuts off, and files and applications remain in place. What stops is security patching for the operating system. Every month Microsoft fixes vulnerabilities in Windows, and attackers study those fixes to find the weaknesses in unpatched systems. Within weeks of the final update, newly discovered flaws in Windows 10 will remain open permanently. Over time, browsers, security software, and business applications also drop Windows 10 support, which leaves the computer more exposed and less compatible every month.
For businesses, there is a compliance dimension as well. HIPAA, PCI DSS, and most cyber insurance questionnaires expect operating systems to be supported and patched. Running unsupported Windows on a computer that handles patient records, payment data, or client files can create a finding in an audit or a reason for an insurer to dispute a claim. Our cyber insurance requirements guide explains how carriers evaluate patching.
Option 1: Upgrade Eligible PCs to Windows 11 for Free
Windows 11 is a free upgrade for Windows 10 computers that meet its hardware requirements: a supported processor (generally Intel 8th generation or AMD Ryzen 2000 series and newer), TPM 2.0, UEFI with Secure Boot, at least 4GB of RAM, and 64GB of storage. Run the PC Health Check app from Microsoft to see whether a computer qualifies. Many computers built from 2018 onward are eligible but simply have TPM or Secure Boot turned off in firmware settings, which takes a few minutes to enable.
Before upgrading, back up the computer, confirm critical applications and printer drivers support Windows 11, and update the BIOS. The in-place upgrade typically takes one to two hours and keeps files and applications. For businesses, upgrading in batches with a pilot group first avoids surprises. Our Windows 11 upgrade guide for small businesses covers the full rollout process.
Option 2: Replace Computers That Cannot Upgrade
Computers older than about 2018 usually cannot run Windows 11 on supported terms. Microsoft does not support installing Windows 11 on unsupported hardware, and such systems may not receive updates. For a business, those machines should be replaced. Most of them are five or more years old anyway, and a new business laptop or desktop with an SSD, 16GB of RAM, and Windows 11 Pro will be dramatically faster. Our business laptop buying guide lists the specifications we recommend.
If replacement has to wait, isolate the machine. Take it off the main network or limit it to a single application, remove email and web browsing, and do not use it for sensitive data. For home users, an older computer used only for offline tasks like a photo archive is lower risk than one used for banking and email.
Option 3: Commercial ESU as a Short Bridge
Organizations can purchase commercial Extended Security Updates for Windows 10 for up to three years in total, through October 2028. The price doubles each year, which is intentional: Microsoft designed ESU as a bridge, not a long-term plan. For a business with a specialized application that cannot yet run on Windows 11, such as lab equipment or legacy accounting software, a year or two of ESU on those specific machines can make sense while the vendor catches up. For ordinary office computers, the cost of ESU quickly approaches the cost of new hardware.
Do Not Forget the Data
Whether upgrading or replacing, protect the data first. Confirm that documents, desktops, and pictures sync to OneDrive or another cloud service, export browser bookmarks and saved passwords into a password manager, and make a full backup before any upgrade. When retiring an old computer, securely wipe the drive or physically destroy it rather than throwing it away or donating it with data still on it. HelpTek can migrate data to a new computer and securely wipe the old one as part of our computer repair services.
Frequently Asked Questions
When does Windows 10 Extended Security Updates end?
The consumer Windows 10 ESU program ends on October 13, 2026. Commercial ESU for organizations can be renewed annually for up to two more years, through October 2028, at a higher price each year.
Can I keep using Windows 10 after ESU ends?
Windows 10 will keep running, but it will not receive security updates, so new vulnerabilities will remain unpatched. It should not be used for email, web browsing, banking, or business data after support ends.
How do I know if my PC can run Windows 11?
Run the free PC Health Check app from Microsoft. It checks the processor, TPM 2.0, Secure Boot, memory, and storage. If TPM or Secure Boot is the only issue, they can often be enabled in the computer firmware settings.
Is upgrading from Windows 10 to Windows 11 free?
Yes. Eligible Windows 10 computers can upgrade to Windows 11 at no cost through Windows Update, keeping files and applications in place.
If you have Windows 10 computers at home or across your office, HelpTek can check eligibility, perform upgrades, migrate data to new hardware, and securely retire old machines throughout Albuquerque and Santa Fe. Business clients can include the transition in a managed IT services plan. Contact us to plan your upgrade.
