The countdown to the end of Windows 10 support is underway, and many computers will be left without regular patches. For those who can't or don't want to upgrade to Windows 11, there is a way to stay protected without paying in Europe: Activate Extended Security Updates (ESU) using a Microsoft account.
This free option is not automatic: it requires a specific, periodic requirement. Microsoft has confirmed that, in order to maintain free access to ESUs in the European Economic Area, You must sign in with your Microsoft account at least once every 60 days.
What changes from now on
Windows 10 mainstream support ends on 14th October 2025. From that moment on, the system will not receive regular fixes, but with ESU EEA users will have until 13th October 2026 of critical and important patches. It is a security extension, not a new lifecycle, and is limited to security updates.
The key requirement: using a Microsoft email
To qualify for free ESU in Europe, the PC must be linked to a Microsoft account (MSA) And that session must be used regularly. A single start is not enough: If 60 days pass without using the MSA on the equipment, the ESUs are suspended until you meet the requirement again.
The company will carry out periodic checks to verify that the account remains active on the device. This avoids activating the ESU and then operating indefinitely with a local account without interaction with the MSA, an approach that has already been denied by Microsoft.
There are relevant regional differences: in the EEA You are required to link and log in to the MSA, but you are not required to sync with the cloud. In the United States, free access does not apply, and the process may require additional actions such as backups to OneDrive or use the payment option.
How to activate free ESUs step by step
Registration is done from the system itself. If you don't have an MSA, create one; then open Settings > Windows Update and look for the invitation to the program. When the notification appears, press participate now and sign in with your Microsoft account by following the wizard.
On IT-managed computers (e.g., domain joined/Enter ID (or with MDM), it's a good idea to first validate that the MSA session doesn't conflict with the organization's policies. The most sensible approach is to pilot it on a small group of PCs and, if everything fits, gradually roll it out.
What the ESUs cover (and what they don't)
The ESU deliver critical and important security patches. They don't bring new features, interface changes, or technical support. They serve as a safety net to contain risks while plan the migration or the hardware renewal is decided.
They also do not guarantee compatibility with all tools in the ecosystem. Third-party software (antivirus, EDR, suites, drivers) can set their own support schedule and stop certifying Windows 10 even if it receives ESU.
Who is eligible?
Free of charge applies in the European Economic Area (Spain, the rest of the EU, and countries such as Iceland, Liechtenstein, and Norway). Outside the EEA, access to ESU depends on the annual payment option or alternatives that Microsoft enables in each region.
What happens if more than 60 days pass?
If the system detects that you have not logged in with your MSA within that time, the updates are suspended. It's not the end: you can re-register repeating the process from Windows Update with the same Microsoft account to reactivate the patches.
In regions without free ESUs, the option is the paid license (historically around $30 per year) or the jump to Windows 11 or migrate to Linux If the hardware allows it. Conditions may vary by market and channel, so it's worth checking local information.
Why is it offered for free in Europe?
The movement fits in with European regulatory demands and pressure from consumer associations. Organizations such as Euroconsumers or the French collective HOP have pointed out the need to guarantee patches without excessive obstacles, invoking frameworks such as the Digital Markets Law (DMA) to avoid unnecessary blockages or ties to the company's ecosystem.
For Microsoft, this formula allows it to support a complex transition without leaving the still huge Windows 10 fleet unprotected, while binds the service to a user identity with periodic checks.
Practical tips while you're still using Windows 10
With or without ESUs, it's wise to take extreme precautions. Keeping your equipment up to date and adopting good practices helps reduce the attack surface, especially when the system enters the end of life.
- Check Windows Update frequently and confirm that the ESUs are active.
- Avoid installing software outside of trusted channels and uninstall obsolete programs.
- Strengthens authentication with a password manager and two-step verification.
- Segment usage: For sensitive tasks, limit apps and browsing to Trusted sites.
- If you manage multiple teams, create a Verification calendar for the 60-day requirement.
If your workflow relies on older peripherals or software, consider isolating network equipment, virtualizing workloads, or testing systems like WindowsFX, or plan your renovation ahead of time. It all adds up. reduce the risk while the final migration arrives.
Anyone who wants to stay on Windows 10 with maximum peace of mind in Europe has a clear path: Activate ESU, sign in with your Microsoft account, and repeat that usage every 60 days.It's a limited, security-focused extension that helps save time without being left unprotected or having to pay in the EEA.
