August 17, 2026 — Mark your calendars. In exactly 57 days, the last security lifeline for millions of Windows 10 devices will be cut. October 13, 2026 is the end of the Extended Security Updates (ESU) Year 1 program for consumers — a hard deadline that will leave an enormous number of PCs permanently unpatched and exposed.
Microsoft ended mainstream support for Windows 10 on October 14, 2025. But unlike past end-of-life events, the company offered a one-year ESU bridge to give users extra time to migrate. That bridge is about to close for good, and the clock is ticking louder than most users realize.
How We Got Here
Windows 10 debuted in 2015 and quickly became one of Microsoft’s most successful operating systems, arguably the most beloved OS the company has shipped since Windows 7. By the time Microsoft pulled the plug on active support last October, an estimated 240 million PCs worldwide were still running it — a testament to how deeply embedded the OS had become in enterprise workflows, government agencies, schools, and everyday households.
Microsoft’s decision to require TPM 2.0 and other hardware prerequisites for Windows 11 locked out a substantial portion of that installed base. Machines from 2017 or earlier often fail the compatibility check, leaving users with a stark choice: buy new hardware, migrate to an alternative operating system, or keep running Windows 10 with dwindling protection.
The ESU program was designed as a safety net, not a permanent home. For a fee of $61 per device per year, enrolled users kept receiving monthly security patches. The program shipped its first batch of ESU-exclusive updates in November 2025, and has delivered patches every month since — ten rounds of fixes that non-enrolled devices simply never received.
The October 13 Cliff
Here is what changes on October 13 for consumer users: nothing, and everything. Windows 10 itself will still boot. Applications will still run. But Microsoft will stop issuing any security updates whatsoever for Year 1 ESU subscribers. From that day forward, every newly discovered vulnerability in Windows 10 — and there will be many — will go unpatched on those machines.
The consequences are not abstract. August 2026’s Patch Tuesday alone addressed 421 vulnerabilities across Microsoft products, including critical zero-days being actively exploited in the wild. A machine that stops receiving patches in October will accumulate those exposures month after month, making it an increasingly attractive target for ransomware operators and credential-stealing malware.
For enterprise customers, the picture is slightly different. Commercial ESU can be extended through Year 2 and Year 3 — but at punishing cost. Year 2 runs $122 per device, and Year 3 jumps to $244 per device. Worse, the pricing is cumulative. Any organization that failed to enroll in Year 1 and now wants Year 2 coverage must pay both years retroactively — a minimum of $183 per device before a single new patch arrives. Wait until Year 3, and the bill climbs to $427 per device.
For a company with 500 machines still on Windows 10, that retroactive catch-up math gets expensive fast.
The Secure Boot Complication
Beyond the patch drought, Windows 10 holdouts face a second, less-publicized problem that began materializing earlier this year. Microsoft’s original 2011-era Secure Boot certificates — cryptographic keys that verify a PC has not been tampered with during startup — began expiring in June 2026. Microsoft has been pushing replacement certificates through its ESU updates. Devices that missed those updates may face Secure Boot validation failures, boot errors, or the quiet loss of a security control that previously protected them from rootkits and bootkits.
This is a hard cryptographic deadline, not a policy preference. The certificates expire whether or not a device is patched, meaning the risk is already present on millions of unenrolled machines. October’s end of ESU means the final remediation window is closing.
What Your Options Are Right Now
For consumers, the paths forward are clear — none of them involve doing nothing.
Upgrade to Windows 11. If your hardware supports it, this remains the cleanest option. Microsoft has made the upgrade free for eligible PCs, and the process is significantly smoother than it was at Windows 11’s launch in 2021. If you are unsure whether your machine qualifies, run the PC Health Check app from Microsoft’s website. Machines that pass the check can upgrade directly from Settings.
Buy new hardware. For machines that genuinely cannot run Windows 11 — typically those manufactured before 2017 — a hardware refresh may be the most pragmatic answer. PC prices have dropped since the supply chain disruptions of earlier years, and refurbished Windows 11 machines are widely available.
Switch to Linux. The Linux desktop has seen remarkable adoption growth in the wake of Windows 10’s end-of-life. Desktop Linux reached roughly 10% market share in North America as of July 2026, driven in part by users who could not or would not upgrade to Windows 11. Distributions like Ubuntu 26.04 LTS and Linux Mint 23 offer familiar interfaces, strong hardware support for older machines, and — critically — active security maintenance for years to come at no cost.
Move to Windows 365. For organizations running Windows 10 on hardware too old to upgrade, Microsoft’s cloud PC service streams a Windows 11 environment to any device capable of running a browser. It is not free, but for businesses that need a compliant, patched environment without replacing physical machines, it can be an effective stopgap.
The Countdown Is Real
What makes this deadline different from previous Microsoft end-of-life dates is that there is no further extension on offer. October 13, 2026 is the end of the consumer ESU line. Microsoft has been unambiguous: Year 1 is the only consumer ESU year that exists. The enterprise path to Year 2 and Year 3 is available, but its escalating costs make clear that Microsoft views extended Windows 10 support as a temporary bridge, not a viable long-term strategy.
Fifty-seven days is enough time to act. It is not enough time to procrastinate and then act. IT administrators who have been waiting for “the right moment” to address their Windows 10 fleet are out of runway. And for home users, the message is equally stark: check your hardware, know your options, and make a decision before October 13 makes it for you.
The Windows 10 era had a good run. It lasted longer than almost anyone expected. But the runway is gone, and the only question now is where you land.
Sources: Microsoft Extended Security Updates documentation; Managed Solution Windows 10 ESU pricing guide; Windows Forum ESU deadline analysis; Linux desktop market share data via Linuxiac, August 2026.
