Free tools Windows power users keep installed
One-click scans. No signup required.
Yes—install a Windows 10 security update whenever Windows Update offers one to your eligible device, but understand what kind of update it is. Normal Windows 10 support ended on October 14, 2025. A Windows 10 PC still runs, yet it no longer receives the regular security fixes, software updates, feature updates, or technical support that Microsoft provided during the supported lifecycle. For a personal Windows 10 version 22H2 computer, Microsoft’s consumer Extended Security Updates (ESU) program can provide critical and important security updates through October 13, 2026. The long-term supported choice is upgrading compatible hardware to Windows 11 or replacing an incompatible PC.
What “Windows 10 updates” means after October 14, 2025
There are now three different situations that people describe as “Windows 10 updates,” and confusing them can lead to a false sense of security:
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Microsoft Windows 11 (USB) | $128.99 | Buy on Amazon |
| 2 |
|
Microsoft System Builder | Windоws 11 Home | Intended use for new systems | Install on a new PC |... | Buy on Amazon |
As an Amazon Associate I earn from qualifying purchases.
- Normal Windows 10 servicing: The supported lifecycle for Windows 10 version 22H2 ended on October 14, 2025. Microsoft says Windows 10 PCs continue to function, but they no longer receive normal software and feature updates, security updates and fixes, or technical support.
- Consumer ESU updates: Eligible personal-use devices running Windows 10 version 22H2 can receive only critical and important security updates after enrollment. Microsoft’s current guidance says this consumer coverage runs through October 13, 2026, with availability and enrollment choices varying by region.
- One-time preparation packages: A package such as KB5126256, published September 8, 2026, prepares licensing components for ESU. Installing it alone does not enroll the computer and does not provide continuing ESU security updates.
If Windows Update offers an applicable security update, installing it is generally safer than leaving the device unpatched. The important question is whether the update is a remaining ESU update for an enrolled device or merely a prerequisite package that still requires separate enrollment.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Is Windows 10 still supported?
Not as a normally supported operating system. Microsoft’s end-of-support guidance identifies October 14, 2025 as the end date for Windows 10 version 22H2. “End of support” does not mean the operating system is remotely disabled or that your files disappear. It means Microsoft has stopped the standard stream of feature changes, security fixes, software updates, and technical assistance for that release.
#1 Best Overall
- Less chaos, more calm. The refreshed design of Windows 11 enables you to do what you want effortlessly.
- Biometric logins. Encrypted authentication. And, of course, advanced antivirus defenses. Everything you need, plus more, to protect you against the latest cyberthreats.
- Make the most of your screen space with snap layouts, desktops, and seamless redocking.
- Widgets makes staying up-to-date with the content you love and the news you care about, simple.
- Stay in touch with friends and family with Microsoft Teams, which can be seamlessly integrated into your taskbar. (1)
The practical effect depends on how you use the PC. An offline machine running a fixed set of local programs may continue working for years, while a computer used for email, banking, work portals, downloads, or removable drives faces increasing exposure when newly discovered vulnerabilities are no longer patched. Security software can reduce some risk, but it does not recreate the operating-system fixes that ended with the lifecycle.
Your four realistic choices
Choose according to hardware compatibility, how long you need the computer, and whether you require a supported operating system rather than simply a functioning one.
| Choice | Security coverage | Features and support | Best fit | Time horizon |
|---|---|---|---|---|
| Upgrade to Windows 11 | Uses the current supported Windows path when the PC meets Microsoft’s requirements. | Receives the Windows 11 feature, quality, and security servicing applicable to the installed edition. | A compatible PC that you expect to keep using as a primary online computer. | Long-term option; exact servicing dates depend on the Windows 11 edition and release. |
| Enroll in consumer ESU | Critical and important security updates only for eligible Windows 10 version 22H2 personal devices. | No new Windows 10 features or general Windows support. Assistance is limited to ESU activation, installation, and possible ESU regressions. | A 22H2 personal device that cannot move immediately to Windows 11 but must remain online temporarily. | Through October 13, 2026 under Microsoft’s current consumer guidance. |
| Replace the computer with a Windows 11 PC | Starts with hardware designed for a supported Windows 11 installation. | Provides a supported platform without relying on an aging Windows 10 device. | Hardware fails Microsoft’s requirements, is unreliable, or is near its planned replacement date. | Long-term, subject to the new PC’s edition and lifecycle. |
| Continue without ESU | No regular Windows 10 security fixes after the end-of-support date. | No feature updates or Microsoft technical support for the unsupported release. | Short-term offline or tightly controlled use where replacement or upgrade is not yet possible. | Indefinite operation is technically possible, but risk rises as unpatched vulnerabilities accumulate. |
Microsoft does not state a universal consumer ESU price in the guidance summarized here, and enrollment options can differ by market. Check the offer shown on your own device rather than assuming that a price, payment method, or eligibility rule from another country applies to you.
Should you install an update Windows Update is offering?
Use the update’s name and your enrollment status to decide.
If it is a security update offered to an enrolled ESU device
Install it. ESU is specifically intended to provide critical and important security updates during the temporary transition period. Save your work, connect the PC to reliable power, and allow the restart to finish. Do not interrupt the machine while it is applying the update.
If it is KB5126256 or another ESU preparation package
Installing the preparation package is a prerequisite step, not proof that ESU is active. Microsoft Support explicitly states that installing KB5126256 alone does not provide Extended Security Updates. After installation, complete the separate ESU enrollment flow shown in Windows Update or Microsoft’s account and licensing prompts for your region. Until enrollment succeeds, do not assume that later Windows 10 security updates will arrive.
If Windows Update offers a Windows 11 upgrade
Review the compatibility and recovery information, back up important files, and schedule the upgrade when you can tolerate a restart and possible application checks. A Windows 11 offer is the supported path for a compatible PC; ESU is a bridge, not a substitute for that upgrade.
If no update is offered
That may be normal for an un-enrolled Windows 10 installation after end of support. It can also indicate that the device is not running version 22H2, is not eligible for consumer ESU, or has not completed the preparation and enrollment sequence. Check the version and update history before concluding that Windows Update is broken.
Check your Windows 10 version and update status
- Open Settings.
- Select System, then About, and review the Windows specifications. Confirm that the device is running Windows 10 version 22H2, because consumer ESU eligibility requires that version.
- Return to Settings and open Update & Security, then Windows Update.
- Select Check for updates. Read the update title and status instead of treating every item as an ESU security update.
- Open View update history to confirm whether the package installed successfully, is waiting for a restart, or failed repeatedly.
- Record the update’s KB number and the date shown by Windows. That record helps distinguish a preparation package from a later security update when troubleshooting.
If the About page shows a release earlier than 22H2, install any still-offered prerequisite updates and determine whether Microsoft provides a supported path to 22H2 for that device. ESU is not a general extension for every Windows 10 release.
How to enroll in consumer ESU
Enrollment is separate from installing the licensing preparation package. The exact screens and payment or account choices can vary by region, so follow the offer presented by Microsoft on the device.
- Bring the computer to Windows 10 version 22H2 and install all updates that Windows Update can legitimately offer for that installation.
- Install the ESU licensing preparation package if Windows Update presents it. For the package identified by Microsoft Support as KB5126256, remember that this step only prepares the licensing components.
- In Settings > Update & Security > Windows Update, look for the consumer ESU enrollment notification or link.
- Read the eligibility statement and the coverage dates. Confirm that the PC is a personal-use device and that the enrollment choice shown is available in your market.
- Complete the account, license, or payment steps requested in the official Microsoft flow. Do not rely on a third-party activation utility or a key that is not associated with Microsoft’s enrollment process.
- Return to Windows Update and verify that the device reports ESU enrollment or displays the applicable protection status. Save the confirmation for your records.
- Check for updates again and install any critical or important security update offered after enrollment.
ESU does not add features to Windows 10. Microsoft describes its support as limited to ESU license activation, installation, and possible regressions of ESU itself. It is not a promise of help with unrelated application failures, hardware problems, or ordinary Windows 10 troubleshooting.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchCan your computer upgrade to Windows 11?
A compatible PC should move to Windows 11 rather than planning around the temporary ESU window. Use Microsoft’s compatibility check and the Windows Update offer on the specific computer; eligibility is determined by Microsoft’s hardware and software requirements, not by whether Windows 10 currently runs well.
Rank #2
- STREAMLINED & INTUITIVE UI, DVD FORMAT | Intelligent desktop | Personalize your experience for simpler efficiency | Powerful security built-in and enabled.
- OEM IS TO BE INSTALLED ON A NEW PC with no prior version of Windows installed and cannot be transferred to another machine.
- OEM DOES NOT PROVIDE SUPPORT | To acquire product with Microsoft support, obtain the full packaged “Retail” version.
- PRODUCT SHIPS IN PLAIN ENVELOPE | Activation key is located under scratch-off area on label.
- GENUINE WINDOWS SOFTWARE IS BRANDED BY MIRCOSOFT ONLY.
Use the built-in offer first
Open Settings > Update & Security > Windows Update. If Windows reports that Windows 11 is ready, read the compatibility and restart notices, back up your files, and confirm that the applications and peripherals you depend on are supported. If the offer is absent, use Microsoft’s official compatibility-checking guidance instead of forcing an installation with an unsupported workaround.
When an upgrade is a poor fit
- The computer fails Microsoft’s requirements and the manufacturer provides no supported hardware path.
- The device is already unreliable, has insufficient storage for a major operating-system change, or is near replacement for business or accessibility reasons.
- Critical software or hardware depends on Windows 10 behavior that has not been validated on Windows 11.
In those cases, ESU can reduce security exposure for an eligible 22H2 personal device while you migrate data and applications. If the hardware is not eligible for ESU or the transition extends beyond October 13, 2026, replacement with a Windows 11 PC is the safer supported plan.
What if the PC cannot run Windows 11?
First determine whether the limitation is a temporary software state or a genuine hardware incompatibility. Install pending Windows 10 updates, restart, and run Microsoft’s compatibility check again. If the result still says the computer is unsupported, do not treat an unofficial bypass as equivalent to a supported installation; it can leave you responsible for compatibility and servicing problems that Microsoft does not cover.
For an eligible personal-use 22H2 computer, enroll in ESU and set a replacement deadline before October 13, 2026. Use the bridge period to inventory applications, export browser data, verify backups, and move files to the new computer. A PC that cannot meet Windows 11 requirements and is also ineligible for consumer ESU should be restricted to lower-risk use while you arrange replacement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How Microsoft 365 changes the decision
Microsoft 365 Apps can continue to function on Windows 10. Microsoft’s current guidance plans security updates for Microsoft 365 on Windows 10 through October 10, 2028, even though Microsoft recommends upgrading the operating system for longer-term reliability.
That application timeline does not extend Windows 10 itself. Keeping Microsoft 365 updated does not restore Windows 10 security fixes, feature servicing, or technical support. Treat the two lifecycles separately: the apps may remain usable while the underlying operating system is outside normal support.
What happens if you keep using Windows 10 without ESU?
The computer should continue to boot and run installed programs. The risk is cumulative rather than a guaranteed immediate failure. New vulnerabilities discovered after the end of support may remain unpatched, and Microsoft warns that unsupported Windows 10 devices are more exposed to malware and other threats.
- Use the machine for sensitive accounts only when you have a realistic migration plan.
- Keep browsers, applications, firmware, and security software updated whenever their vendors still support Windows 10.
- Maintain tested offline or otherwise protected backups; an unverified backup is not a recovery plan.
- Use a separate supported device for banking, work administration, and other high-impact activity when possible.
- Avoid installing unknown software, opening unexpected attachments, or using removable media from untrusted sources.
These precautions reduce exposure but do not replace operating-system security updates. They are risk controls for a transition period, not a new support commitment.
Troubleshooting common update and ESU problems
“I installed KB5126256, so why do I not see ESU updates?”
Because the package prepares licensing; it does not enroll the PC. Check Windows Update for the separate consumer enrollment offer, complete that process, and verify the resulting status. If no offer appears, confirm that the device is personal-use, on version 22H2, and in a region where the consumer option is available.
“The update downloaded but will not install.”
- Restart the PC and retry from Settings > Update & Security > Windows Update.
- Confirm that the computer has stable power, sufficient free storage, and a reliable connection.
- Record the exact KB number and error code from View update history.
- Search Microsoft Support using that exact KB number and error code, because the recovery steps differ by package.
- If the failure began after ESU enrollment, use the limited ESU support route for activation, installation, or an ESU regression; do not assume that coverage includes unrelated Windows problems.
“Windows Update says the PC is up to date, but I expected an ESU patch.”
Check whether enrollment is confirmed and whether the expected release is actually applicable to your edition and region. ESU supplies critical and important security updates, not every historical Windows 10 update or a feature release. A device that is not enrolled can legitimately show no further Windows 10 security updates.
“The computer stopped working after the update.”
Allow time for a complete restart cycle, then record the symptom and update number. If Windows can start, use the normal recovery and uninstall options shown in Windows Update history. If the failure is specifically an ESU activation, installation, or ESU regression issue, Microsoft’s ESU support scope applies; hardware failures and unrelated application issues remain outside that limited promise.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsA practical timeline for 2026
| Date | What it means |
|---|---|
| October 14, 2025 | Windows 10 version 22H2 reached the end of normal support. Standard feature, software, security, and technical-support coverage ended. |
| September 8, 2026 | Microsoft Support published KB5126256 as an ESU licensing preparation package. Installing it alone does not enroll a device or deliver continuing ESU updates. |
| October 13, 2026 | Current Microsoft consumer guidance ends ESU security updates for enrolled Windows 10 personal devices. |
| October 10, 2028 | Microsoft’s current guidance plans Microsoft 365 security updates on Windows 10 through this date; this does not extend Windows 10 operating-system support. |
Decision checklist
- Windows Update offers Windows 11 and the PC passes compatibility checks: Back up your files and plan the supported upgrade.
- The PC is Windows 10 version 22H2, personal-use, and must remain online temporarily: Install the preparation package if offered, complete ESU enrollment, and install the security updates that follow.
- The PC is incompatible with Windows 11 but reliable: Use ESU only as a bridge and set a replacement date before October 13, 2026.
- The PC is not 22H2 or is not eligible for consumer ESU: Do not assume a preparation package grants coverage; prioritize migration or replacement.
- You plan to continue without ESU: Treat the computer as unsupported, reduce sensitive online use, maintain protected backups, and understand that Microsoft no longer supplies regular Windows 10 security fixes.
The direct answer is therefore conditional but clear: install an applicable Windows 10 security update when it is offered, enroll in ESU if you need the temporary protection and qualify, and move compatible hardware to Windows 11. For an incompatible or aging computer, replacement is the durable solution; continuing indefinitely without ESU leaves the device outside Microsoft’s security-support boundary.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

