Article Summary: Windows 10 reached the end of Microsoft support on October 14, 2025, which means it no longer gets security updates. The computers still work, but any new flaw found in Windows 10 will never be fixed, which makes them easier to attack and can cause problems with compliance and cyber insurance. You have three options: upgrade eligible PCs to Windows 11 for free, pay for Extended Security Updates as a short-term bridge, or replace machines too old to upgrade.
Microsoft stopped supporting Windows 10 on October 14, 2025.
If your business is still running it, and plenty are, your computers aren’t getting security updates anymore.
Everything still turns on and works like normal, which is exactly why it’s easy to put off doing anything about it. The trouble is, the longer you stay on Windows 10, the more security holes pile up that nobody is ever going to fix.
So what does it mean for your business, and what are your options?
There are three: upgrade to Windows 11, pay for extended updates to buy some time, or replace the machine.
Let’s go through what you’re dealing with first.
What “end of support” means
When Microsoft ends support for a version of Windows, the updates stop. That includes the monthly security patches that fix newly found flaws.
Microsoft has confirmed that since October 14, 2025, Windows 10 gets no more security fixes, quality updates, feature updates, or technical support.
Your PCs don’t stop working. Nothing switches off the moment support ends. What’s different now is that Microsoft has stopped fixing Windows 10’s security flaws.
Attackers and security researchers keep finding new ones, and now nobody’s patching them. So every new flaw that turns up is another way into your computers, and it never gets fixed.
Why this is a real risk for your business
This is about more than an old, slow computer.
- They’re an easy target. Attackers go looking for computers running software that doesn’t get fixed anymore, because they know the flaws will just sit there. The UK’s National Cyber Security Centre points out that holes in unsupported products stay exploitable, often by fairly low-skilled attackers.
- You can fall out of compliance. If you handle card payments, health records, or personal data, rules like PCI DSS and HIPAA expect you to run supported, patched software. Windows 10 no longer counts, which can put you out of compliance.
- It can hit your cyber insurance. Insurers are asking more and more whether your systems are supported and patched. Running an unsupported operating system can push your premium up, shrink your coverage, or give the insurer a reason to fight a claim.
- Your other software will drop it. Over time, browsers, accounting tools, and other programs stop supporting Windows 10, so the apps you rely on every day can stop updating, or stop working altogether.
CISA puts running supported, updated software on its short list of basic security steps for businesses.
<H2>Your three options</H2>
You’ve really got three options, and most businesses end up mixing them across their computers.
1. Upgrade to Windows 11(free, if the hardware qualifies)
If you bought the PC in the last few years, upgrading to Windows 11 is free, and it’s usually the right move. The catch is the hardware. Windows 11 needs a supported processor, TPM 2.0, and Secure Boot, and that rules out a lot of older machines. To check whether a particular PC qualifies, run Microsoft’s free PC Health Check app.
2. Buy Extended Security Updates as a bridge
If a PC can’t move to Windows 11 yet, Microsoft will sell you Extended Security Updates (ESU) to keep the security patches coming for a while longer.
For businesses, that’s $61 per device for the first year, and it doubles every year after that, up to three years.
Keep one PC on Windows 10 the whole time and you’re looking at around $427 over those three years.
Home users get a much cheaper deal. A one-time $30 payment covers up to 10 devices with security updates through October 12, 2027, and it’s free if you sync your PC settings.
ESU gives you security patches and nothing else. No new features, no real tech support. It’s there to buy you time while you sort out the upgrade or a new machine.
3. Replace the PC
Some machines are just too old for Windows 11 and not worth paying ESU on year after year.
For those, buying a new PC that already runs Windows 11 usually works out cheaper, once you add up the ESU fees and the cost of keeping an old machine going.
How to plan the move
You don’t have to do all of this at once, but you do need a plan. A sensible order looks like this:
- Make a list of every computer still on Windows 10.
- Check which ones can move to Windows 11, using the PC Health Check app or your IT provider.
- Upgrade the ones that qualify. It’s free, and it keeps your files and programs in place.
- For the rest, choose between ESU to buy time or replacing the machine, depending on how old it is and what it’s used for.
Your IT provider can run that inventory quickly and tell you the best option for each machine.
Frequently Asked Questions
Is Windows 10 still safe to use after October 2025?
It still works, but it’s not getting security updates anymore, so the risk creeps up as new flaws are found and left unpatched. If you’re going to keep using it, either enroll in Extended Security Updates or plan your move to Windows 11.
What happens if I keep using Windows 10 and do nothing?
Your PCs will keep running, but they turn into an easier target for attackers, can put you out of compliance with payment and privacy rules, and may cause problems with your cyber insurance. And over time, the apps you depend on will start dropping Windows 10 too.
How much does Windows 10 ESU cost for a business?
For businesses, it’s $61 per device for the first year and doubles each year after that, up to three years, which comes to about $427 per device in total. Home users get a better deal: a one-time $30 payment covers up to 10 devices through October 12, 2027, or it’s free if you sync your PC settings.
Can my PC upgrade to Windows 11 for free?
If it meets the hardware requirements, yes. Windows 11 needs a supported processor, TPM 2.0, and Secure Boot. The PC Health Check app will tell you whether a specific machine qualifies, and PCs from the last few years usually do.
Should I just buy a new computer?
If a PC can’t run Windows 11, a new one is often cheaper than paying escalating ESU fees for years on top of running aging hardware. If it can upgrade, start with the free Windows 11 upgrade.
—