Windows 10 support ended on 14 October 2025. If you're reading this in 2026 and your business is still running it, you already know something needs to change. You probably just haven't got round to it yet.
That's understandable. The machines still work. The software still runs. Nothing visibly broke on 15 October. But what changed — invisibly — is that Microsoft stopped releasing security patches for Windows 10 Home and Pro. Every vulnerability discovered since then is an open door that will never be locked.
Attackers know this. They specifically target end-of-life systems because they know patches aren't coming. We saw this play out with Windows XP in 2017, when the WannaCry ransomware devastated organisations still running an unsupported operating system. The NHS was hit particularly hard — cancelled appointments, diverted ambulances, locked-out systems — largely because of machines that should have been upgraded years earlier.
That was nine years ago. The principle hasn't changed.
What "end of support" actually means
Let's be specific, because there's confusion around this.
What stopped: Security updates, bug fixes, feature updates, and free technical support for Windows 10 Home and Pro (version 22H2). Microsoft confirmed this on their lifecycle page (Microsoft, 2025).
What didn't stop: Your computer still turns on. Your applications still run. Microsoft 365 apps on Windows 10 will continue receiving their own security updates until October 2028 — but only for the apps, not the operating system underneath them (Microsoft Support).
The distinction matters. Running patched applications on an unpatched operating system is like fitting a new lock on a door with rotten hinges. The lock works fine. The door is still the problem.
A note on Enterprise: Windows 10 Enterprise LTSC has separate, longer support timelines. If your IT team has specifically deployed LTSC, this article doesn't apply to those machines. But if you're a small business, you're almost certainly running Home or Pro.
Why this matters beyond the technical
There are four business reasons to care about this, even if cybersecurity isn't your primary concern.
Insurance. Cyber insurance policies increasingly include clauses about maintaining supported software. Running an end-of-life operating system could give your insurer grounds to reduce or deny a claim. Read your policy. If it mentions "reasonable security measures" or "up-to-date software," you may already be in breach.
Client contracts. If you handle client data — and most businesses do — your contracts likely include data protection obligations. Running unsupported software is difficult to defend as meeting a "reasonable standard of care." If a breach occurs and your client discovers you were on Windows 10, that conversation will be uncomfortable.
Compliance. Cyber Essentials certification — increasingly required for government contracts and expected by larger corporate clients — requires all devices to be running supported software with up-to-date patches. You cannot pass a Cyber Essentials assessment on Windows 10 after October 2025. The NCSC published specific guidance urging organisations to upgrade before the deadline (NCSC, 2025).
The breach statistics. 43% of UK businesses reported a cyber breach or attack in the past twelve months (DSIT Cyber Security Breaches Survey 2025). Running an unpatched operating system doesn't guarantee you'll be in that 43%. But it significantly improves your chances.
Your four options
1. Upgrade to Windows 11 (free, if your hardware supports it)
This is the straightforward path. If your PC has a TPM 2.0 chip, Secure Boot, at least 4GB of RAM, and 64GB of storage, you can upgrade for free. Most business laptops from 2019 onwards meet these requirements.
Check compatibility using Microsoft's PC Health Check app, or simply go to Settings → Update & Security → Windows Update and see if the upgrade is offered.
The upgrade itself takes 30-60 minutes per machine. Your files, apps, and settings carry over. It's not painless — some older peripherals may need driver updates, and a few legacy applications may have compatibility issues — but for most businesses, it's the least disruptive option.
2. Buy Extended Security Updates (ESU)
Microsoft offers a paid programme that continues delivering security patches for Windows 10 beyond the end-of-support date (Microsoft ESU). This buys you time — roughly a year of continued patches — while you plan a proper migration.
ESU isn't cheap, and it's a temporary measure. It's most useful if you have specific applications that need testing on Windows 11 before you can migrate, or if you're in the middle of a hardware refresh cycle and need a few more months.
Think of it as renting time, not solving the problem.
3. Replace the hardware
If your machines are old enough that they can't run Windows 11 — typically pre-2018 devices without TPM 2.0 — upgrading the OS isn't an option. The most practical solution is replacing the hardware.
For a small business, this is often the right move anyway. A five-to-seven-year-old laptop is approaching the end of its useful life regardless of the operating system. Modern hardware is faster, more energy-efficient, and comes with Windows 11 pre-installed.
Budget approximately £500-800 for a capable business laptop. If you're replacing multiple machines, plan the rollout in batches rather than all at once — that way you maintain business continuity and can catch any issues before they affect the whole team.
4. Consider alternatives
This isn't the right path for most businesses, but it's worth mentioning. If your work is primarily browser-based — Google Workspace, web applications, cloud tools — a Chromebook or macOS device might be more appropriate than a Windows machine. Chromebooks in particular offer strong security at a low price point and are worth considering for roles that don't need Windows-specific software.
A migration checklist
If you're ready to move, here's the sequence that keeps things orderly.
Before you start:
- Audit every device in the business. What OS version is each one running? Which machines support Windows 11?
- Back up everything. Full backups of all devices, verified by actually restoring a test file. Backups you haven't tested aren't backups — they're assumptions.
- Identify critical applications and check their Windows 11 compatibility. Most modern software works fine. Legacy or industry-specific applications sometimes don't.
During migration:
- Upgrade in batches, not all at once. Do 2-3 machines first. Let people work on them for a few days. Iron out issues before rolling out to the rest.
- Update all drivers after the upgrade — especially display, network, and printer drivers.
- Test everything: Microsoft 365, your line-of-business applications, printers, VPN connections, video conferencing.
After migration:
- Verify that Windows Update is working and automatic updates are enabled.
- Update your asset register with the new OS versions.
- If you have an IT support provider, make sure they're aware of the migration.
- Document any configuration changes for future reference.
What we're seeing in practice
Four months after end of support, there are still a lot of Windows 10 machines out there. We see them in coworking spaces, in small offices, on desks where nobody's told the user their laptop is now a security liability.
The most common reason for delay isn't cost or complexity. It's inertia. The machine works. It looks the same as yesterday. There's no flashing red warning. The risk is invisible — right up until it isn't.
If you've been putting this off, the best time to migrate was October 2025. The second best time is now. Every week you wait is another week of exposure to vulnerabilities that will never be patched.