The Windows 10 ESU Email: What Microsoft Is Really Telling You

If you still run Windows 10, an email from Microsoft may be sitting in your mailbox right now — quite possibly in a folder you never check. The subject line reads “Stay secure for another year.”

It sounds like good news. It mostly is. But the email leaves out the parts that decide what happens to your PC.

The short version

Microsoft has extended the free consumer Extended Security Updates (ESU) program for Windows 10 by one year. Security updates now run until October 12, 2027, instead of October 2026. If you are already enrolled in ESU, the extra year is automatic — no payment, no re-enrollment, nothing to click.

That is the whole message. Everything else below is what the email does not say.

First, an important warning

An email from “Microsoft” about your PC’s security, arriving unexpectedly, asking you to stay protected — this is exactly the template phishing campaigns copy within days.

Never enroll in ESU through a link in an email. Enrollment happens only inside Windows itself:

Settings → Update & Security → Windows Update — if you are eligible, an “Enroll now” link appears there.

If it isn’t in Settings, it isn’t real. Microsoft does not need your credit card, your password, or a “verification” form to keep your PC patched.

What ESU actually gives you

ESU is a life-support machine, not a cure.

You get	You do not get
Critical and important security patches	New features
Delivered via normal Windows Update	Bug fixes for non-security issues
Until October 12, 2027	Technical support
At no cost (consumers)	Driver updates for new hardware

Your PC stays safe. It does not stay current. Application vendors, browsers, and hardware makers keep moving toward Windows 11, and Windows 10 slowly stops being a target they care about.

The conditions nobody put in the email

1. It requires a Microsoft account. The free path into ESU means signing into Windows with a Microsoft account. For anyone who has deliberately kept a local account for years, this is the actual price of the “free” year. In the European Economic Area, that account is all it costs. Outside the EEA, the alternatives are 1,000 Microsoft Rewards points or a one-time payment of about $30.

2. Your protection can pause silently. If the Microsoft account tied to ESU goes unused for 60 days, updates stop until you sign in again. Nobody hands you a red warning banner. Your PC just quietly falls behind.

3. October 12, 2027 is a hard stop. This is the second extension. It is not a promise of a third. On that date, consumer Windows 10 stops receiving security updates permanently — and a PC on the internet without security updates is not a slightly riskier PC, it’s an unpatched one.

4. Not enrolled? You’ve been unprotected since October 2025. Windows 10 reached end of support on October 14, 2025. If you never enrolled in ESU, your machine has received no security patches for nine months. Every vulnerability found since then is still open on your system. Check Settings today.

Why this extension happened

Microsoft has not officially explained it. The likeliest reason is uncomfortable for everyone involved: enormous numbers of people simply did not move. Many cannot move — Windows 11 demands TPM 2.0 and a supported CPU, and a perfectly good 2018 laptop fails that test. And with RAM and SSD prices driven up by AI-datacenter demand, buying a replacement PC has rarely been more expensive.

So Microsoft bought its users a year. The hardware problem it papers over is unchanged.

What to do in the next ten minutes

1. Open Settings → Update & Security → Windows Update.
2. If you see an ESU enrollment link: enroll. It’s free, and it’s the difference between a patched and an unpatched machine.
3. If you’re already enrolled: verify updates are still arriving (check the update history date), and sign into that Microsoft account so the 60-day rule can’t bite you.
4. Put October 12, 2027 in your calendar. That’s your real deadline, not a suggestion.

And then the question that doesn’t go away

You now have roughly 15 months. Three doors at the end of the hallway:

• Buy a new PC. Works. Costs money, and your current machine likely works fine.
• Force Windows 11 onto unsupported hardware. Possible via registry workarounds — and Microsoft has stated such installs may not receive updates. You’d be trading one update problem for another.
• Install Linux. Free, runs well on exactly the hardware Windows 11 rejects, and gets security updates for years. Linux Mint or Zorin OS will look familiar within an afternoon, and a live USB lets you try the whole thing without touching your existing installation.

The ESU email is genuinely a reprieve. Use the year — don’t spend it.

FAQ

Do I have to do anything if I’m already enrolled in ESU? No. The extension to October 12, 2027 applies automatically. No payment, no re-enrollment.

Is the ESU extension free? For consumers, yes. In the European Economic Area it costs nothing beyond signing in with a Microsoft account. Elsewhere you can also use 1,000 Microsoft Rewards points or pay roughly $30 once. Businesses pay per device, per year.

Can I still enroll in ESU now? Yes. Enrollment is available in Settings → Update & Security → Windows Update.

Do I need a Microsoft account? For the free consumer path, yes. A local-only account does not qualify.

What happens on October 12, 2027? Consumer Windows 10 stops receiving security updates for good. From that point, using it online is an unpatched-system risk that grows every month.

Is my old PC too weak for Linux? Almost certainly not. Hardware that struggles with Windows 10 typically runs a lightweight Linux desktop faster than it ever ran Windows.