Windows 10 Extended Security Updates: How to Enable ESU for Free (Step-by-Step Guide)

Microsoft has officially stopped support for Windows 10, which means you won’t be getting any updates, even security updates, unless you enroll in the Extended Security Updates program that they’ve made available for one more year until October 13, 2026.

In this guide, I’m going to show you exactly what options you have for enabling the Windows 10 Extended Security Updates. I’ll take you through a step-by-step process of what I did on my Windows 10 PC to get the Windows 10 Extended Security Updates for another year. Hopefully that’ll help you decide if you want to do it too, or if you’re just struggling to get it enabled, this guide will be helpful to you.

Key Takeaways

• Windows 10 Extended Security Updates are available until October 13, 2026, giving you one more year of protection
• You can enable ESU for free in the US by syncing PC settings, redeeming Microsoft Rewards points, or paying $30
• In Europe, you can get it free by staying signed in with a Microsoft account, or you can use dual accounts to maintain privacy with a local account (anywhere in the world)

Requirements

Before you can enable Windows 10 Extended Security Updates, you’ll need:

• Windows 10 version 22H2 installed on your PC
• All the latest Windows updates installed
• A Microsoft account (you can create one for free online)
• Administrator access to your computer
• Access to the Registry Editor

Why Enable Windows 10 Extended Security Updates?

With Microsoft officially ending support for Windows 10, your computer won’t receive any security updates. This leaves your system vulnerable to security threats, malware, and cyberattacks. The Extended Security Updates program gives you one more year of critical security patches until October 2026, keeping your computer safe while you decide whether to upgrade to Windows 11 or explore other options.

If you’re not ready to upgrade to Windows 11 yet or your hardware doesn’t meet the requirements, enabling ESU is crucial to protect your data and privacy.

Understanding Windows 10 ESU Pricing: US vs Europe

At the time I’m writing this, there’s a bit of confusion and a difference in how the Windows 10 ESU program works in the US and in Europe.

Windows 10 ESU in the United States

According to Microsoft’s EN-US page, you can enroll in one of the following three ways:

• At no additional cost if you’re syncing your PC settings
• Redeem 1,000 Microsoft Rewards Points
• One-time purchase of $30 (or your local currency equivalent plus applicable tax)

Windows 10 ESU in the European Economic Area

In the European Economic Area, things work a little differently. According to Microsoft’s EU page, you can get it in one of the following ways after you sign in with a Microsoft account:

Important: Users have to stay signed in to the eligible PC with a Microsoft account. If you do not continue to sign into your PC with the Microsoft account, then the updates will be discontinued for that device after a period of time, up to 60 days.

For users who don’t want to use a Microsoft account and want to use a local account, you’ll need to do the one-time purchase of $30. This allows you continued use of a local account and doesn’t require you to sign in with a Microsoft account to keep the updates other than to make the purchase.

The Best Solution: Using Dual Accounts for Privacy

I’ve thought about this, and I think if you want to continue using Windows 10 and you want to continue using a local account while keeping the Extended Security Updates, the best way is going to be to have two user accounts on your computer.

One is going to be a Microsoft account that you’re going to sign into every once in a while, every month or so, just to keep the security updates on that computer. And then the other one is going to be your local account that you’ll use for everyday purposes. So that’s going to be your main account.

The Microsoft account is just going to be there for the Extended Security Updates. And that also means that your data and your files and stuff in your local account won’t be synced or shared to Microsoft because that’s tied to a completely different user account than the Microsoft account.

How to Enable Windows 10 Extended Security Updates (Step-by-Step)

Let me now show you how you can enroll into the Windows 10 Extended Security Updates program for free using the dual account method.

Step 1: Verify Your Windows 10 Version

First, you need to make sure you’re running Windows 10 version 22H2. Here’s how to check:

1. Navigate to Settings
2. Click on Update & Security
3. Click on About in the left sidebar
4. Check that your version shows Windows 10 version 22H2

You also need to have all the latest updates installed. Go back to Update & Security and verify that no updates are available to install.

Step 2: Create a Microsoft Account User (If Using Dual Account Method)

If you’re currently signed in with a local account and want to keep using it for everyday purposes, you’ll need to add a Microsoft account as a second user.

1. Open Settings and verify you’re signed in with a local account
2. Go to Accounts
3. Click on Family & other users
4. Click on Add someone else to this PC
5. Enter your Microsoft account email address
6. Click Next
7. Click Finish

Note: If you don’t have a Microsoft account yet, you can go online and create one using any browser. You don’t even have to use your primary email address. I use a dummy email address specifically for these types of tasks.

Step 3: Change the Account Type to Administrator

Before you sign into the Microsoft account, you need to change it from a standard user to an administrator, or else you won’t be able to enroll into the Extended Security Updates.

1. In the Family & other users section, click on the Microsoft account you just added
2. Click Change account type
3. Change the account type to Administrator
4. Click OK

Step 4: Sign Into the Microsoft Account

Now it’s time to sign into the Microsoft account for the first time.

1. Click on the Start button
2. Click on your account icon
3. Select the Microsoft account you created
4. Click Sign in
5. Enter the password for your Microsoft account
6. You’ll be prompted to create a PIN – click Next
7. Create a simple PIN and click OK

Once you sign in, you’ll see some ads and prompts from Microsoft. Just decline these and turn off all the data collection settings.

Step 5: Modify the Registry to Enable ESU Enrollment

Now that you’re signed into the Microsoft account, you need to use the Registry Editor to give yourself the option of enrolling into the Extended Security Updates.

Important: I’ll include all of these registry entries in the written guide on my website, which you can find in the video description, just so it’s easier for you to copy and paste the actual value names.

1. Press Windows key + R or search for regedit
2. Click on Registry Editor to open it
3. Navigate to: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows

Create the Consumer ESU Registry Key

1. Right-click on the Windows folder
2. Select New > Key
3. Name it ConsumerESU
4. Press Enter to create it

Create the First DWORD Value

1. Right-click on the ConsumerESU key
2. Select New > DWORD (32-bit) Value
3. Name it ESUEligibility
4. Press Enter
5. Double-click on it to open
6. Change the value data to 2
7. Click OK

Create the Second DWORD Value

1. Right-click on the ConsumerESU key again
2. Select New > DWORD (32-bit) Value
3. Name it ESUEligibilityResult
4. Press Enter
5. Double-click on it to open
6. Change the value data to 1
7. Click OK

Step 6: Enroll in Extended Security Updates

Now that you’ve created the registry entries, you can enroll in the ESU program.

1. Close the Registry Editor
2. Navigate to Settings
3. Go to Update & Security
4. You should now see the option to enroll in the Extended Security Updates
5. Click Enroll Now

You’ll get a wizard to enroll into the Extended Security Updates.

1. Click Next
2. You’ll see that you’re eligible to enroll in the Extended Security Updates at no extra cost
3. Click Enroll

The system will then enroll your device in the Extended Security Updates. You should see a confirmation that you’re enrolled through October 13, 2026.

Tip: If you sign in on another Windows 10 computer with this same Microsoft account, you’ll also be able to enroll in the Extended Security Updates on that computer. If I’m not mistaken, you can have up to 10 devices running on one account that has the Extended Security Updates linked to that account.

Step 7: Switch Back to Your Local Account

Now that your PC is enrolled to get Extended Security Updates, you can switch back to your local account for everyday use.

1. Click Done to close the enrollment window
2. Sign out of the Microsoft account
3. Sign back into your local account

How to Check for Windows 10 Extended Security Updates

If you navigate to Settings > Update and Security on your local account, it’ll still say that your version of Windows has reached the end of support and that it’s not receiving security updates. But this is because it’s a local account.

Important: You have to remember that Windows updates are not installed per user. They’re installed on the entire machine. So basically on the local account, you’re just going to ignore this message.

Regular Update Maintenance Routine

When you want to check for updates, here’s what you should do:

1. Log into your Microsoft account (the one you created specifically for ESU)
2. Go to Settings > Update & Security
3. Click Check for updates
4. Let the updates install on the entire computer
5. Once it says you’re up to date, sign out of the Microsoft account
6. Sign back into your local account for everyday use

I would do this every two weeks or once a month whenever Microsoft releases security updates. Probably every two weeks is going to be safer. This way, your Windows 10 PC stays safe and secure for the next year until the Extended Security Updates program runs out.

Benefits of the Dual Account Method

By using this dual account approach, you get several important benefits:

• Privacy Protection: Your data, files, and browsing activity remain on your local account and aren’t synced to Microsoft
• Compliance with Microsoft’s Requirements: You’re signing in with the Microsoft account regularly, so you won’t lose updates after 60 days
• System-Wide Security: Windows updates are installed system-wide, not per user, so both accounts benefit from the security patches
• No $30 Fee: You get Extended Security Updates for free by maintaining the Microsoft account
• Complete Separation: The Microsoft account is completely separate from your local account and doesn’t have access to the local account’s data

Alternative Options If ESU Isn’t Right for You

If you feel that this is too much hassle for you or you just don’t want to do it, then I recommend that you just upgrade to Windows 11. I’ve created plenty of guides on how to do that which I’ve linked below:

Flyby 11 Tutorial: Bypass Windows 11 Hardware Requirements and Upgrade from Windows 10

How to Upgrade to Windows 11 24H2 or 25H2 on Unsupported Hardware

Upgrading to Windows 11

If your computer hardware supports Windows 11, upgrading might be your best option for continued security and support. And if your computer is just that old that it doesn’t support Windows 11, then maybe it’s just time to buy a new computer or maybe install Linux on that computer.

If you move over to Windows 11, I’ve created a tool called Winhance, which will enhance your Windows 11 experience and just make it not as bad as it is straight out of the box.

Consider Linux as an Alternative

For older hardware that can’t run Windows 11, Linux is a viable alternative that continues to receive security updates and runs well on older machines.

Conclusion

Enabling Windows 10 Extended Security Updates is an important step if you’re planning to continue using Windows 10 beyond its official end-of-support date. The dual account method I’ve shown you gives you the best of both worlds – you get free security updates until October 2026 while maintaining your privacy on a local account.

Remember to sign into your Microsoft account every two weeks or at least once a month to check for and install security updates. This routine will keep your computer protected from security vulnerabilities while you decide your next steps, whether that’s eventually upgrading to Windows 11 or exploring other options.

---

Frequently Asked Questions (FAQ)

How long will Windows 10 Extended Security Updates last?

Windows 10 Extended Security Updates will be available until October 13, 2026. That gives you one additional year of security patches beyond the official end-of-support date.

Do I need to stay signed in to my Microsoft account all the time to keep ESU?

In the European Economic Area, Microsoft states you need to sign in regularly or you’ll lose access after up to 60 days. However, using the dual account method I showed you, you can sign in with the Microsoft account every two weeks or monthly to check for updates, then switch back to your local account. Windows updates are installed system-wide, so both accounts remain protected.

Can I use the same Microsoft account to enable ESU on multiple computers?

Yes! From what I understand, you can have up to 10 devices enrolled in the Extended Security Updates program using the same Microsoft account. This makes it easy if you have multiple Windows 10 computers that need protection.

What happens if I don’t enable Extended Security Updates on Windows 10?

If you don’t enable ESU, your Windows 10 computer won’t receive any security updates. This leaves your system vulnerable to malware, viruses, and security exploits. I strongly recommend either enabling ESU or upgrading to Windows 11 to keep your computer secure.

Will the registry modifications harm my computer?

The registry modifications I showed you are safe and specifically designed to enable the ESU enrollment option in Windows 10. These are the official registry keys that Microsoft uses for the program. Just make sure you spell everything exactly as shown and use the correct values (2 for ESU eligibility and 1 for ESU eligibility result).