Microsoft has confirmed it will offer free extended security updates for Windows 10 users across the European Economic Area, following regulatory pressure and consumer pushback.
TLDR:
- Microsoft will provide free Extended Security Updates (ESU) to Windows 10 users in the European Economic Area (EEA) until October 14, 2026
- This change removes previous requirements to enable Windows Backup, use a Microsoft account, or redeem Microsoft Rewards points
- The shift comes after pressure from Euroconsumers, citing compliance issues under the Digital Markets Act
- Users outside the EEA will still need to pay or use Microsoft services to access the ESU program
What Happened?
Microsoft initially planned to restrict free access to Windows 10 Extended Security Updates by requiring users to enable Windows Backup, sign in with a Microsoft account, or redeem Microsoft Rewards points. But following legal and consumer pressure from advocacy groups like Euroconsumers, the company has backtracked at least in the European Economic Area.
This means users in the EU, Norway, Iceland, and Liechtenstein can now receive critical security updates for an extra year, without engaging with Microsoft’s cloud or reward systems.
Microsoft has been forced to make Windows 10 extended security updates free in Europe.
— Pirat_Nation 🔴 (@Pirat_Nation) September 25, 2025
Most European Windows 10 users won’t need to enable Windows Backup to join Microsoft’s Extended Security Updates (ESU).
“We are pleased that Microsoft will offer a no-cost ESU option for… pic.twitter.com/WhfrwwcXxd
Free Security Updates: A Major Win for EEA Users
Microsoft’s original plan had raised concerns among privacy and digital rights groups. To get free updates, users had to activate Windows Backup, which syncs device settings and files to OneDrive. This process potentially pushed users past the 5GB of free storage, nudging them toward a paid subscription.
In Europe, that setup did not sit well. Euroconsumers, a prominent Luxembourg-based advocacy group representing over 1.5 million households, argued that tying security updates to cloud services or reward programs could breach the Digital Markets Act (DMA). Specifically, they flagged this behavior as potentially non-compliant with Article 6(6), which prohibits bundling core platform services with unrelated offerings.
Thanks to sustained pressure, Microsoft confirmed that it is “making updates to the enrollment process to ensure it meets local expectations and delivers a secure, streamlined experience” in the EEA. Users in the region will now be able to opt into the ESU program at no cost and without syncing personal data to Microsoft’s servers.
No Changes for the Rest of the World
While European users benefit from the policy shift, Microsoft’s global stance remains the same. For users outside the EEA, accessing Windows 10 security updates still comes with a price tag:
- $30 for home users per year.
- $61 per device for enterprise customers.
- Or by enrolling through Microsoft Rewards or enabling Windows Backup.
Microsoft has also reiterated that it will stop providing bug fixes and security updates for Windows 10 after its end-of-support date on October 14, 2025, unless users are enrolled in the ESU program. These updates will continue only until October 13, 2026, giving consumers one extra year to make the transition.
Euroconsumers Wants Even More
Although this decision marks a clear win, Euroconsumers isn’t stopping here. The group is now urging Microsoft to extend support beyond 2026, citing the precedent of Windows 7 and XP, which received updates for many years after their successors launched.
Their concern is clear: millions of Windows 10 users could still be on older hardware not compatible with Windows 11, potentially leaving them exposed to cybersecurity threats.
What TechKV Thinks?
Honestly, this was long overdue. Microsoft’s initial setup was frustrating. Dangling free security updates in front of users but only if they played along with its cloud ecosystem. That felt like a dark pattern, not user-first thinking. Good on Euroconsumers for calling it out.
By forcing Microsoft to remove the strings, European regulators have set an important precedent. Security shouldn’t be used as a bait-and-switch tactic. It’s a basic right, not a premium feature. I only wish the same fairness was being offered to users outside the EEA.
