Learn
Still on Windows 10? The security risks of running it after end of support
Windows 10 reached end of support on October 14, 2025. What's dangerous about keeping it (unfixable holes pile up, EOL machines get targeted), what the paid/free ESU extension does and doesn't cover, and your real options — upgrade to Windows 11, replace the hardware, or move to Linux — laid out honestly.
For: anyone still running a Windows 10 PC, wondering "I heard support ended — is it OK to just keep using it? There's some extension option too, right?" Here's the honest answer. No attack steps — just what the risk actually is, and how to move safely.
This site's view: antivirus doesn't fill the gap
"I've got security software, so I'm fine" is a common belief — and a mistaken one. Antivirus watches for suspicious files and behavior; it cannot patch holes in the OS itself (kernel, drivers, network handling). OS patches are the main line of defense and AV is only a supplement. The moment OS fixes stop, the lowest layer of your defenses develops a gap. "Stack whatever you like on top — if the foundation has a hole, it collapses." That's the essential danger of an out-of-support OS.
What ended, and when
2025-10-14
Windows 10 end of support. Free security updates stopped here. From this point, a Windows 10 PC not enrolled in ESU gets no fixes for new vulnerabilities.through 2026-10-13
The consumer ESU (Extended Security Updates) coverage window. Enroll, and you receive Critical/Important security fixes only, until this date. One year of life support.2026-10-14 onward
Consumer ESU ends too. Beyond this, there's no paid life-support route left for consumers — updates stop completely.
Why it's dangerous to keep using it
"It still runs, and nothing has happened so far" — that feeling is the trap. The danger doesn't arrive as a "break"; it arrives as holes quietly piling up.
Concretely, here's what happens.
Unfixable holes pile up (forever-days)
Attackers prioritize EOL machines
Surrounding software abandons it in stages
Antivirus can't protect the main line
What the extension (consumer ESU) really is
ESU (Extended Security Updates) is being opened to consumers for the first time. But it's a "security-only, one-year stopgap, not a solution." No feature updates, no bug fixes, no general support — only Critical/Important security fixes arrive.
There are three consumer enrollment routes, and some are free.
Free: turn on Windows Backup
Free: redeem Microsoft Rewards points
Paid: a one-time ~$30
The 'free first year' doesn't apply everywhere
After pressure from consumer-protection bodies, users in the EEA (European Economic Area) get the first year of ESU entirely free. But many regions — including Japan — are not in the EEA, so that exception doesn't apply; those users choose from the three routes above (Windows Backup / Rewards points / ~$30). Note that enterprise ESU runs up to three years, but its price roughly doubles each year — it, too, isn't a "use it forever" mechanism.
So how should you move?
The defenses are the mirror image of the risks. The key is to buy time with ESU and finish migrating within that window.
Do nothing, keep using it
- unfixable holes keep piling up (forever-days)
- it becomes a favored target as an EOL machine
- surrounding software drops off, shrinking the safe zone
- for work, you fail insurance / compliance requirements
Migrate (with ESU as a bridge)
- Windows 11 means patches arrive again — the foundation is back
- even on unsupported hardware, ESU secures time to migrate
- old machines can be safely extended on Linux
- migration becomes a planned task with a deadline
First, check whether you can move to Windows 11
If the hardware won't qualify, enroll in ESU first to buy time
If you just want to keep old hardware alive, Linux is an option
Put interim guards in place until you've migrated
How this site thinks about it
On handling out-of-support environments, this site applies the same principle laid out in "the practice of vulnerability response" — an end-of-life machine gets isolated before it gets removed. If you genuinely must keep an old Windows 10 box around, the worst thing is to use it as your everyday main machine, permanently connected to the internet. Conversely, isolating it — taking it off the network, narrowing its purpose, keeping no important data on it — thins out the attacker's path to it entirely. If you can't seal the holes, shrink the reach to them. That's the only safe way to coexist with an out-of-support OS. And the real goal remains: move to an OS that still gets updates before the ESU window closes.
Read next
FAQ
QHas Windows 10 support actually ended?
Yes. Windows 10 reached end of support on October 14, 2025 — free security updates stopped there. From then on, a Windows 10 PC that isn't enrolled in ESU (Extended Security Updates) receives no fixes for newly discovered vulnerabilities.
QIf I enroll in ESU, can I keep using it safely forever?
No. Consumer ESU only runs through October 13, 2026, and it delivers Critical/Important security fixes only — no feature updates, no bug fixes, no general support. It's a bridge to buy time; the real fix is upgrading to Windows 11 or replacing the hardware.
QIsn't antivirus enough to cover an out-of-support OS?
No. Antivirus can't patch holes in the OS itself (kernel, drivers, the network stack). OS security patches are the main line of defense and AV is only a supplement. Once the OS stops getting fixes, the foundation of your defenses has a gap that no AV can fill.