Windows 10 Security Updates End Of Life

Windows 10 security updates ended Oct 14, 2025; move to Windows 11 or buy ESU for continued fixes.

Windows 10 still runs on millions of PCs, so the end of Windows 10 security updates can feel confusing at first. Your computer didn’t stop working on October 14, 2025. What changed is the monthly flow of security patches from Microsoft for standard Windows 10 editions. If you keep using Windows 10 without a plan, the risk grows each time a new Windows flaw gets patched on newer systems and stays unpatched on yours.

This guide walks you through what “end of life” means in plain terms, how to check what you’re running, and what to do next. You’ll see upgrade options, paid options, and a practical safety checklist you can use today.

What Windows 10 security updates end of life means

When Windows 10 reached end of life for security updates, Microsoft stopped shipping regular security fixes for Windows 10 Home and Pro. Microsoft’s lifecycle entry for Windows 10 Home and Pro confirms that version 22H2 was the final Windows 10 release and that monthly security update releases ran through October 14, 2025. Windows 10 Home and Pro lifecycle dates is the cleanest place to confirm the date and the final 22H2 note.

Security updates are the patches that close holes attackers use for ransomware, account theft, and remote takeover. After end of life, those holes keep getting found. Newer Windows versions still receive fixes, and attackers pay attention to the monthly patch notes. That’s why a “still working” PC can still be a risk.

What did not change on the end date

Your PC still boots — Windows 10 continues to run, launch apps, and access the web.
Your files stay put — Photos, documents, and installed programs don’t vanish because of the date.
Your license stays valid — You can reinstall Windows 10 on the same device if you need to.

What changed after October 14, 2025

Monthly security patches stopped — Standard Windows 10 editions no longer get Patch Tuesday fixes.
New weaknesses linger — Bugs fixed on newer Windows can remain open on Windows 10.
Vendor coverage shifts — Some software makers slowly stop testing on Windows 10, then end their own update streams.

How to check if your PC is still on Windows 10

Before you change anything, confirm what you have. Many people think they are on Windows 10, yet they’re on Windows 11 after an earlier upgrade.

Open Settings — Press Windows + I, then choose System.
Go to About — Scroll, then select About.
Read Windows specifications — Look for Edition and Version; Windows 10 22H2 is the last mainstream Windows 10 build.

If you see Windows 10, version 22H2, you were on the last mainstream Windows 10 build before the end date. If you see a lower version number, install pending updates that are still offered on your device, since older builds can miss driver fixes and stability patches.

What your risk looks like after updates stop

Not every Windows 10 PC becomes unsafe overnight. Risk rises over time, and it rises faster for PCs that browse widely, install lots of tools, or store valuable logins. A home PC that only streams video has a different profile than a laptop used for banking, client work, or running a small shop.

Common ways unpatched PCs get hit

Browser and plugin attacks — A malicious page can chain a browser bug with an OS bug to break out of the sandbox.
Email payloads — A file attachment or link can trigger malware that relies on older OS weaknesses.
Network exposure — Open shares, weak passwords, and old remote access tools get scanned on home and office networks.
Bundled installers — A “free” installer can add unwanted software, then escalate using a known Windows flaw.

Attackers don’t need a brand-new zero-day to cause damage. They often use an older weakness that still works on unpatched machines. Once Windows 10 stops getting fixes, the pool of reliable exploits grows.

Best next moves for most people

The cleanest option is to move to a Windows version that still receives security fixes. For most users, that means Windows 11. For older devices that can’t run Windows 11, there are still practical paths that keep you safer than “do nothing.”

Upgrade to Windows 11 if your hardware qualifies

Windows 11 upgrades from eligible Windows 10 PCs are often free. Start by checking your device’s compatibility, then back up, then upgrade. If the checker says your PC is eligible, you can usually upgrade through Windows Update with minimal disruption.

Back up your files — Copy documents and photos to an external drive or a cloud folder you already use.
Run PC Health Check — Install Microsoft’s checker to see if your device meets Windows 11 requirements.
Update Windows 10 fully — Install all pending updates so the upgrade path is smoother.
Start the upgrade — In Settings, open Windows Update, then choose the Windows 11 upgrade option.
Recheck security settings — After the upgrade, confirm Windows Security is active and updates are on.

If your PC fails the Windows 11 checks, note the reason. TPM 2.0 is often disabled in firmware instead of missing. On some boards it’s called TPM, Intel PTT, or AMD fTPM. Turning it on can be enough, though older CPUs can still block an official upgrade.

Enroll in ESU if you must stay on Windows 10

Microsoft offers Extended Security Updates (ESU) for Windows 10, which keeps security fixes coming for enrolled devices beyond the October 2025 end date. Microsoft’s ESU page explains eligibility and the enrollment flow. Windows 10 ESU details is the easiest starting point.

ESU works well when you need extra time because of an older peripheral, a specialized app, or a short replacement cycle. Treat ESU as a bridge. You still want a date to leave Windows 10 once that bridge ends.

Switch to a new PC if yours is too old

If a PC is missing Secure Boot, TPM 2.0, or a compatible CPU, upgrades can become a time sink. At a certain point, replacing the hardware costs less than weeks of workarounds and breaks. A new midrange laptop also tends to add longer battery life, faster SSD storage, and a cleaner recovery path when something goes wrong.

Choices compared in one table

Use this quick comparison to pick a direction. It’s written for typical home use and small teams.

Option	Who it fits	Main tradeoff
Upgrade to Windows 11	Eligible PCs you plan to keep	May need firmware settings like TPM 2.0 and Secure Boot
Pay for Windows 10 ESU	Short-term Windows 10 holdouts	Ongoing cost and a hard stop when ESU ends
Replace the PC	Older hardware or slow systems	Upfront spend and time to move files and apps

Security checklist if you keep using Windows 10

If you stay on Windows 10 for now, tighten your setup. None of these steps makes Windows 10 “as safe as patched Windows,” yet each step reduces the chance of a bad day.

Account and login hygiene

Use a standard account daily — Keep an admin account for installs, and do everyday work on a non-admin login.
Turn on two-step sign-in — Use 2FA on email, banking, and any password manager you use.
Change reused passwords — If one site gets breached, reused passwords get tried on your email and cloud storage.

System hardening in Windows settings

Enable automatic updates for apps — Keep browsers, PDF readers, and chat tools updated, since they face the open web daily.
Keep Microsoft Defender on — Don’t stack multiple antivirus tools; pick one and keep it current.
Turn on firewall — The built-in firewall blocks many unwanted inbound connections on shared networks.
Remove old remote tools — Uninstall remote desktop helpers you no longer use, then close any port forwards on your router.
Audit startup apps — Fewer background tools means fewer weak spots and a faster boot.

Browser habits that reduce exposure

A browser is your most-used entry point for threats. Stick to a browser with frequent updates on Windows 10, keep extensions lean, and block pop-up downloads. Also skip “coupon” or “video downloader” add-ons from random sites.

Use one modern browser — Keep either Edge, Chrome, or Firefox updated and remove extra browsers you don’t use.
Limit extensions — Remove anything you can’t name and trust; each extension is extra code with permissions.
Use DNS filtering — A family DNS service can block known malware domains before a page loads.

Backups that save you when things go wrong

A good backup turns ransomware into an annoyance instead of a disaster. The best setup is boring and automatic.

Keep one offline copy — Use an external drive you unplug after the backup finishes.
Keep one separate copy — Use a second location, like cloud storage, that keeps version history.
Test a restore — Try restoring a folder once, so you know the backup is real.

Plan for apps, drivers, and devices that lag behind

The end of Windows 10 security updates isn’t only about the OS. It also changes how vendors treat your device. Printer makers, audio interface makers, and VPN tools can start skipping Windows 10 testing. You might still get updates for a while, then see fewer fixes, then none.

Check the software you can’t live without

List your must-use tools — Write down your work apps, school apps, VPN, password manager, and any specialized utilities.
Check the vendor’s OS list — Look for Windows 11 coverage and the newest driver version dates.
Try a pilot upgrade — If you have a spare PC, test the app on Windows 11 before you switch your main machine.

For small teams, the sticking point is often one legacy line-of-business app. If that’s your case, a virtual machine or a remote desktop session to a newer host can keep the legacy app running while your daily browsing happens on a patched system.

Printers and peripherals

Printers are the classic time trap. Before upgrading, download the newest drivers and installers from the maker’s site. If a device is older, try switching to a model that uses class drivers or standard protocols, since those tend to keep working longer across Windows versions.

Safe ways to upgrade without losing data

Upgrades feel scary when the PC holds family photos, school files, and work folders. The trick is to reduce the chance of surprise. Do a clean backup, then do the upgrade, then verify your data before you wipe anything.

Clean up storage — Free 20–30 GB if you can, so the installer has room for rollback files.
Update device drivers — Install firmware, chipset, and graphics drivers from Windows Update or the PC maker first.
Disconnect extra hardware — Unplug unused drives and accessories during the upgrade to avoid driver hiccups.
Pause third-party security tools — If you use non-Microsoft antivirus, disable it during the upgrade, then re-enable later.
Verify after reboot — Confirm your accounts, Wi-Fi, and printer access work before calling the job done.

If you want the cleanest setup, you can do a fresh install of Windows 11, then restore your files. A fresh install takes longer, yet it removes years of junk drivers and leftover apps. For many older PCs, that alone makes the system feel snappier.

When staying on Windows 10 can still make sense

There are cases where moving off Windows 10 right away is not realistic. A lab PC tied to a hardware dongle, a device workstation, or a controller PC might be locked to a specific Windows 10 build. In those cases, isolation and strict network rules matter more than shiny upgrades.

Keep the PC offline — If the device can run without internet access, disconnect it and move files via scanned USB drives.
Segment the network — Put the Windows 10 device on a separate VLAN or guest Wi-Fi that can’t reach your main PCs.
Use ESU if allowed — If the device can enroll in ESU, keep that channel active until you replace the workflow.
Lock down user access — Restrict who can install software and who can log in locally.

Even in these cases, you want a written replacement date, a budget target, and a backup path. The longer a Windows 10 box stays online without patches, the more time you spend compensating with extra rules.

Decision steps for today

Pick one track and act on it. Waiting tends to create messy, last-minute upgrades when a security incident or a failed drive forces your hand.

Check Windows 11 eligibility — Run PC Health Check and confirm TPM 2.0 and Secure Boot status.
Upgrade if eligible — Back up, update Windows 10, then run the upgrade from Windows Update.
Buy time if not eligible — Use ESU for a limited window, or replace the PC if it’s due.
Harden the system — Apply the checklist above, with special attention to backups and 2FA.
Set a date to exit — Put a calendar reminder on the last month you want to be on Windows 10.

If you follow that path, you cut risk fast and you avoid surprise breakage later. Windows 10 had a long run. Treat the end of Windows 10 security updates as a nudge to tidy up your setup, then move to a version that still gets fixes.