On October 14, 2025 Microsoft shipped the last free security update for Windows 10. Nothing dramatic happened on October 15 — the computer still works — but every month that passes the gap between a patched and an unpatched system grows. Here are the four paths, with the honest trade-offs of each.
Option 1: upgrade the same PC to Windows 11
If the machine has a supported processor (roughly Intel 8th generation / AMD Ryzen 2000 or newer), TPM 2.0 and UEFI with Secure Boot, the upgrade is free for an activated Windows 10 PC. Settings → Update & Security → Windows Update will offer it, or you can use Microsoft's PC Health Check app to confirm compatibility first.
This is the right answer for most PCs sold after 2018. Your files, apps and licence carry over.
Option 2: buy Windows 11 for a PC that was never activated or is being rebuilt
Building a new machine, or reviving one with a motherboard change, means a new licence. Windows 11 Home suits a family computer; Windows 11 Pro adds BitLocker, Remote Desktop hosting, Hyper-V and domain join. Both are one-time retail licences for one PC — compare them here.
Option 3: pay for Extended Security Updates
Microsoft sells Extended Security Updates (ESU) for Windows 10. For consumers it is a one-year programme ending in October 2026, free if you sync your settings to a Microsoft account or redeem Rewards points, otherwise about $30. Businesses can buy up to three years at rising prices.
ESU buys time. It does not add features, and the consumer programme does end — so treat it as a bridge, not a destination.
Option 4: keep Windows 10 and reduce the risk
For a PC that cannot run Windows 11 and is not worth replacing, you can carry on with care:
- Keep a modern browser that still updates (Chrome, Edge and Firefox have each committed to Windows 10 support for a while yet).
- Use a current third-party antivirus; Microsoft Defender definitions keep updating for a time, but the engine will not.
- Take it off anything sensitive — online banking, work e-mail — and move those tasks to a supported device.
- Back up regularly. An unpatched PC is more likely to be hit by ransomware.
What about a Windows 10 Pro licence today?
We still stock Windows 10 Pro because some hardware and some line-of-business software needs it. We say the same thing to every buyer: it activates and works, and it will not get security updates. If your PC can run Windows 11, buy Windows 11.
Unsure which group your machine falls into? Run our Compatibility Checker or call us with the model number.
Was this useful? We write about what customers ask us. Suggest the next topic, or browse the licences this article mentions.