Question What exactly are the risks from using Windows 10 after end of support? And how, if at all, can they be mitigated?

[ThereAndBackAgain]

I'm sure a lot of people will soon find themselves in this situation: they're using a Windows 10 machine that isn't eligible for Windows 11 and, when end of support arrives for Windows 10, they are either not in a position to, or not inclined to, buy new hardware that can run Windows 11. And supposing that they do not wish to install a Linux distro as an alternative, what risks specifically arise from using an unsupported version of Windows? Are you more likely to randomly get a virus just from browsing the internet? Or is it just that things are riskier because, if you do happen to download something that contains a virus, the results may be more catastrophic?

Shouldn't it be just fine to continue using it as long as you avoid sketchy sites or downloads? Or is your computer somehow now at risk simply from being connected to the Internet, regardless of what websites you visit or what files you download?

 

[drivinfast247]

I have a Win10 machine that's used to host Plex, Roon, and also used to run a few slicers for my 3d printers. As long as those run, I'll keep my Win10 PC going.

Apparently my CPU doesn't meet spec for Win11 or else I would upgrade.

 

[USAFRet]

I'm sure a lot of people will soon find themselves in this situation: they're using a Windows 10 machine that isn't eligible for Windows 11 and, when end of support arrives for Windows 10, they are either not in a position to, or not inclined to, buy new hardware that can run Windows 11. And supposing that they do not wish to install a Linux distro as an alternative, what risks specifically arise from using an unsupported version of Windows? Are you more likely to randomly get a virus just from browsing the internet? Or is it just that things are riskier because, if you do happen to download something that contains a virus, the results may be more catastrophic?

Shouldn't it be just fine to continue using it as long as you avoid sketchy sites or downloads? Or is your computer somehow now at risk simply from being connected to the Internet, regardless of what websites you visit or what files you download?

As of Mar 30 2025, completely unknown as to what will happen in Oct 2025.

Will MS:
1. Stop all new Feature updates? Likely.

2. Stop ALL security updates? Unknown, but unlikely.

3. Make any Win 10 installs stop working. No.

 

[dwd999]

There are some well known free programs like Malwarebytes which could help provide security.

 

[ThereAndBackAgain]

2. Stop ALL security updates? Unknown, but unlikely.

It's not impossible that they would patch a critical security flaw if one surfaced after end of support, but they claim, at least, that their plan is to stop providing "security fixes." I imagine they'll stop updating Windows Security/Defender malware definitions, so a third-party tool like Malwarebytes as @dwd999 suggested would be a good start. I just wonder what sort of harmful things can happen from, say, bad actors discovering a security flaw in Windows 10 and taking advantage of it. Would it be the sort of danger that already requires your system to be compromised, with the actors having gained administrative access to your PC by some other means? Or would it cause simple browsing of non-sketchy websites like Tom's Hardware to somehow suddenly become risky?

Basically, the threat of Windows 10 no longer being secure after end of support feels nebulous and ill-defined. I'm curious about concrete examples of the bad sorts of things that could happen to unsuspecting people still using it that wouldn't have happened to them if they had changed to Windows 11. Are there any examples of that sort of thing from Windows 7 users, for example?

 

[lowlifedog]

I wonder what part AI will have in "Zero Days" and will this affect finding and exploiting "old" OS and systems that are vulnerable.

 

[dwd999]

It's not impossible that they would patch a critical security flaw if one surfaced after end of support, but they claim, at least, that their plan is to stop providing "security fixes." I imagine they'll stop updating Windows Security/Defender malware definitions, so a third-party tool like Malwarebytes as @dwd999 suggested would be a good start. I just wonder what sort of harmful things can happen from, say, bad actors discovering a security flaw in Windows 10 and taking advantage of it. Would it be the sort of danger that already requires your system to be compromised, with the actors having gained administrative access to your PC by some other means? Or would it cause simple browsing of non-sketchy websites like Tom's Hardware to somehow suddenly become risky?

Basically, the threat of Windows 10 no longer being secure after end of support feels nebulous and ill-defined. I'm curious about concrete examples of the bad sorts of things that could happen to unsuspecting people still using it that wouldn't have happened to them if they had changed to Windows 11. Are there any examples of that sort of thing from Windows 7 users, for example?

It would depend on what you're using Windows 10 for. If you're just browsing or gaming there hopefully shouldn't be any problems. But if you're doing anything which requires you to access an account, enter a credit card or other financial information, that could be a serious problem. Figure it should be safe to continue using Windows 10 as long as you're not entering any unique personal information, not even your legal name, address or phone number, etc.

 

[ThereAndBackAgain]

It would depend on what you're using Windows 10 for. If you're just browsing or gaming there hopefully shouldn't be any problems. But if you're doing anything which requires you to access an account, enter a credit card or other financial information, that could be a serious problem. Figure it should be safe to continue using Windows 10 as long as you're not entering any unique personal information, not even your legal name, address or phone number, etc.

That's good to know, thanks, and seems sensible. I'm on Windows 11, but my wife is using a laptop that's stuck on Windows 10. Perhaps it's time to consider a new laptop, or else attempt to prevail upon her to switch to Linux (if indeed Linux really is more secure than unsupported Windows).

 

[USAFRet]

That's good to know, thanks, and seems sensible. I'm on Windows 11, but my wife is using a laptop that's stuck on Windows 10. Perhaps it's time to consider a new laptop, or else attempt to prevail upon her to switch to Linux (if indeed Linux really is more secure than unsupported Windows).

Only as secure as the user.

I personally could run an unsupported Win 10 for years, better than a dangerous/unclueful user could running Linux.

 

[Moonstick2]

Are you more likely to randomly get a virus just from browsing the internet?

As time goes on, yes you're more likely to get a virus just from browsing the internet. But like the fact that buying two tickets makes you twice as likely to win the lottery, it's a matter of degree.

Shouldn't it be just fine to continue using it as long as you avoid sketchy sites or downloads?

Sketchy sites/downloads should of course be avoided, but avoiding them isn't enough. Legitimate sites and downloads have been compromised in all kinds of ways.

Or is your computer somehow now at risk simply from being connected to the Internet, regardless of what websites you visit or what files you download?

Again, it's a thing that's possible, but it's not common.



What's definitely not going to happen is that on a Sunday Microsoft stop supporting Win 10 and on Monday your computer gets totally pwnd.

Over time, the chances of a vulnerability being found and exploited do increase, but it's impossible to say you're very likely to get infected or you definitely won't. Having an up to date anti-virus is obviously strongly advised. If the laptop's used for professional purposes at all then it's probably best not to run Win 10. If it's simply a personal machine then while it's not the best thing, you'll probably be okay. But nobody here can, or should, tell you "Yeah, you'll be totally fine, don't worry about it." But it's not like Win 11 means guaranteed safety either.

What you should do anyway is have mitigations on the assumption that you do get infected (regardless of OS). 2FA/MFA on accounts, notifications of transactions. Off-PC disconnected backups. Encryption of any confidential files you have to keep on the PC for some reason. Stuff like that.

 

[ThereAndBackAgain]

As time goes on, yes you're more likely to get a virus just from browsing the internet. But like the fact that buying two tickets makes you twice as likely to win the lottery, it's a matter of degree.

Sketchy sites/downloads should of course be avoided, but avoiding them isn't enough. Legitimate sites and downloads have been compromised in all kinds of ways.

Again, it's a thing that's possible, but it's not common.



What's definitely not going to happen is that on a Sunday Microsoft stop supporting Win 10 and on Monday your computer gets totally pwnd.

Over time, the chances of a vulnerability being found and exploited do increase, but it's impossible to say you're very likely to get infected or you definitely won't. Having an up to date anti-virus is obviously strongly advised. If the laptop's used for professional purposes at all then it's probably best not to run Win 10. If it's simply a personal machine then while it's not the best thing, you'll probably be okay. But nobody here can, or should, tell you "Yeah, you'll be totally fine, don't worry about it." But it's not like Win 11 means guaranteed safety either.

What you should do anyway is have mitigations on the assumption that you do get infected (regardless of OS). 2FA/MFA on accounts, notifications of transactions. Off-PC disconnected backups. Encryption of any confidential files you have to keep on the PC for some reason. Stuff like that.

Thanks for the info. It helps to put things in perspective.

 

[geofelt]

When W10 goes out of support, I expect:

1. No new features that do not support Microsoft profits.

2. Extended support for a fee. Likely $30 /year.

3 Most viruses enter the system through social engineering.
W11 has no cure for that.

4. I expect the Defender updates to continue. It would cost MS more to differentiate.

5. Increased pressure to update to W12.

 

[ThereAndBackAgain]

3 Most viruses enter the system through social engineering.
W11 has no cure for that.

True enough.

4. I expect the Defender updates to continue. It would cost MS more to differentiate.

Can't they just stop pushing updates to Defender on 10, though, with minimal cost? Is Windows 8.1 still receiving Defender updates? I'm one of the weirdos that actually liked 8.1, and would go back if I could. It seemed snappier than 10.

 

[USAFRet]

Can't they just stop pushing updates to Defender on 10, though, with minimal cost? Is Windows 8.1 still receiving Defender updates? I'm one of the weirdos that actually liked 8.1, and would go back if I could. It seemed snappier than 10.

They probably could, but they probably won't.

There will be a large enough user base still on Win 10, where if they just 'stopped'...problems would happen and people would bitch long and loud.

 

[MJS WARLORD]

I have been a pc geek since 2003 i started off with using XP and have used every operating system since then and what puzzles me is that microsoft continue to release patches and updates for EVERY operating system that they have made right up to the date they say they will no longer support it and yes thats a good things. Their is of course another way of looking at that , would it have been better to do more work on a new system before its initial release.

I wonder how many of you have heard of an operating system called Longhorn. The project was plagued with problems and many years overdue. In an attempt to save face they stopped talking about it and announced a new system called Vista sorry guys but it was rubbish and had so many tables and logs to look at that if you were paranoid you could actually convince yourself you had a problem ..... it was actually Longhorn rebranded. They even struggled to get Vista right because when i got a windows 7 pc i asked some store techies what it was like they said its Vista with all the rubbish taken out.

 

[stonecarver]

I wonder how many of you have heard of an operating system called Longhorn.

Yup I have a copy of Longhorn and fiddling with it when it came out was like a finished house but nothing really worked.

Plumbing is there but no pipes hooked up.

Programs back than were rare for Longhorn being 64 bit, drivers were MIA and trying to game on it 😕 I honestly can not remember ever happening.

But as far as keeping a Widows 10 alive past the expiration date is just planning ahead.

Have a back up and have it fully patched that you can deploy when and if needed after the October 2025.

Make a back up image or a master clone you can use whenever you need to restore your Windows 10 in some future predicament.

I would also challenge you to test out your back up to verify it actually works before October 2025.

 

[MJS WARLORD]

Yup I have a copy of Longhorn and fiddling with it when it came out was like a finished house but nothing really worked.

Plumbing is there but no pipes hooked up.

Programs back than were rare for Longhorn being 64 bit, drivers were MIA and trying to game on it 😕 I honestly can not remember ever happening.

But as far as keeping a Widows 10 alive past the expiration date is just planning ahead.

Have a back up and have it fully patched that you can deploy when and if needed after the October 2025.

Make a back up image or a master clone you can use whenever you need to restore your Windows 10 in some future predicament.

I would also challenge you to test out your back up to verify it actually works before October 2025.

I was never aware that some copies of longhorn got released , was you part of a windows insider program.

 

[stonecarver]

I was never aware that some copies of longhorn got released , was you part of a windows insider program.

I had an engineer who added me to a Microsoft account with an official spin off account for myself .

I have copies of Windows going back to Windows 95, Windows 98 , 98 SE. Windows ME and Windows 2000 I was able to play around and learn under the hood stuff from being able to get my hands on so much.

I was able to get Windows XP corporate edition. I ran that the whole time XP was alive.

Windows pre installation environment software. It's common now

Non public unreleased versions or pre release copies of different Windows. An insider program thing now.

Vista home , Vista business, Vista Enterprise, and Vista Ultimate

Service packs for different versions of Windows on CD/DVD

I still have my Microsoft account but I just got disinterested in the marketing shuffle of the way Windows did the whole Vista release.


From Windows 7 on I have only used my Microsoft account very rarely and not one time in my history of having that account have I ever used it to log into Windows.

When Window 8 came out I got such a lost bitter taste of WTF is this!

The thing is I didn't really do all the learning to master Windows It was just a side interest that stuck.

When I see on the forum a reply of an unsubstantiated opinion " your can't do that " verses actual facts when it comes to Windows I speak up.

 

[SomeoneElse23]

2. Extended support for a fee. Likely $30 /year.

The push to win11 is so MS can track you and sell your info more than they do already.

This "extended support" would require some way to identify your PC as "covered". Which would require an account, which means MS can track you and sell your info more than they do already.

 

[SomeoneElse23]

I'm considering using 0Patch:

https://0patch.com/index.html

 

[BFG-9000]

Is Windows 8.1 still receiving Defender updates? I'm one of the weirdos that actually liked 8.1, and would go back if I could. It seemed snappier than 10.

Yes, but no idea if they work. They announced the end of MSE/Defender definition updates for both Win 7 and Win 8.1 would occur on Jan 10, 2023 but at least on Win 7 it continued to be automatically updated until just over a month ago. They are still updating the manual update specifically for it and Vista even now but they won't apply, so this may not be intentional but simply a compatibility issue with the older engine that nobody ever thought to test for. Unsupported means as-is, where-is so these complimentary updates supplied as a gesture of goodwill don't necessarily always work, although they might eventually fix it to work again.

It's not just the risks of online use but the capability:
If XP and Windows 7 are any guide, Chrome will continue to be updated until one year after EOL while a frozen-in-time "ESR" version of Firefox will continue to be security updated for many years but will work worse and worse over time as few people are using it and submitting bugreports. For example Firefox 115 ESR for Windows 7 works terribly on Youtube + has just been extended another 6 months to September 2025 and may be extended yet again as this has now been happening for years. 52.9.1 ESR for XP was finally EOL on September 2018 which was actually before EOL of POSReady2009 (which most XP users switched their install to, in order to receive another 5yrs of security updates for just the non-multimedia parts of the OS).
It's funny that most people seem to have no problem using an outdated Android device or router on their network when it poses the same security risks.

If you will be using it offline then no antivirus, updated browser or patches are required. I left iE5.5 SP2 on all of my 9x machines because it was much more stable than later 6.0 SP1, but then I only really used it for local FTP.

 

[ThereAndBackAgain]

Yes, but no idea if they work. They announced the end of MSE/Defender definition updates for both Win 7 and Win 8.1 would occur on Jan 10, 2023 but at least on Win 7 it continued to be automatically updated until just over a month ago. They are still updating the manual update specifically for it and Vista even now but they won't apply, so this may not be intentional but simply a compatibility issue with the older engine that nobody ever thought to test for. Unsupported means as-is, where-is so these complimentary updates supplied as a gesture of goodwill don't necessarily always work, although they might eventually fix it to work again.

Interesting.

It's funny that most people seem to have no problem using an outdated Android device or router on their network when it poses the same security risks.

I don't even know when my Android phone I bought in 2023 will stop receiving updates, or even if it already has. Thankfully, the model is supported by LineageOS, and I've been considering giving that a try. But is it as big of a problem on Android, being very locked down in comparison to Windows? And I didn't even know that about routers.

 

[dingo07]

I still run Win7PRO on my XPS1530 laptop

 

[Misgar]

I'm sure a lot of people will soon find themselves in this situation: they're using a Windows 10 machine that isn't eligible for Windows 11 and, when end of support arrives for Windows 10, they are either not in a position to, or not inclined to, buy new hardware that can run Windows 11

Have you considered a trial installation of Windows 11 on a cheap SATA SSD using Rufus to tweak the Windows 11 ISO?
https://windowsforum.com/threads/ho...restrictions-and-create-local-account.348702/

With Rufus you can bypass the requirement for Secure Boot and TPM 2.0 if your motherboard or CPU don't support these features.

You'll probably have to perform the initial installation using a Microsoft Account with the latest Windows 11 ISO, but you could try an older Windows 11 ISO which might still allow you to use a Local Account at the outset. Alternatively, try these suggestions:
https://pureinfotech.com/bypass-microsoft-account-setup-windows-11/

Shouldn't it be just fine to continue using it as long as you avoid sketchy sites or downloads?

Do you fasten your seatbelt when you climb into a car (ignoring any legal penalties if you get caught without one)? You might never be involved in a crash, but I regard security updates as similar to a seat belt. Their purpose is to protect you.

I have working machines dating back to 98SE and I started with Windows 2 on an 80286. When I power up Windows XP or 7 to run old software or hardware, I disconnect the machine from the internet. It might never be infected, but is it really worth risking your important email, social media, online shopping or bank account details from attack on an unpatched OS?

If you're working for a large corporation, you could carry on using Windows 10 LTSC 2019 until January 9 2029.
https://learn.microsoft.com/en-us/lifecycle/products/windows-10-enterprise-ltsc-2019

For Windows 10 IOT Enterprise LTSC 2021, end of support is January 13, 2032.
https://learn.microsoft.com/en-us/lifecycle/products/windows-10-iot-enterprise-ltsc-2021

You don't have to ditch perfectly good hardware this October or repurpose with Linux. Try Rufus and Windows 11. If it works, you've saved the cost of a new desktop or laptop.

It shouldn't take more than an hour to install the basic Windows 11 OS, but remember to disconnect all other SSDs and hard disks before installing. You can reconnect these extra drives after you've booted successfully into 11 for the first time.

As to whether or not you'll like the changes made in Windows 11 is a different matter. I'm still running Windows 10 as my main OS up till October. I tried a Hyper-V VM of 11 on the day it was released, then went back to using 10. I used NT4 extensively at work and XP's desktop was probably my favourite.

 

[ThereAndBackAgain]

Have you considered a trial installation of Windows 11 on a cheap SATA SSD using Rufus to tweak the Windows 11 ISO?
https://windowsforum.com/threads/ho...restrictions-and-create-local-account.348702/

With Rufus you can bypass the requirement for Secure Boot and TPM 2.0 if your motherboard or CPU don't support these features.

You'll probably have to perform the initial installation using a Microsoft Account with the latest Windows 11 ISO, but you could try an older Windows 11 ISO which might still allow you to use a Local Account at the outset. Alternatively, try these suggestions:
https://pureinfotech.com/bypass-microsoft-account-setup-windows-11/


Do you fasten your seatbelt when you climb into a car (ignoring any legal penalties if you get caught without one)? You might never be involved in a crash, but I regard security updates as similar to a seat belt. Their purpose is to protect you.

I have working machines dating back to 98SE and I started with Windows 2 on an 80286. When I power up Windows XP or 7 to run old software or hardware, I disconnect the machine from the internet. It might never be infected, but is it really worth risking your important email, social media, online shopping or bank account details from attack on an unpatched OS?

If you're working for a large corporation, you could carry on using Windows 10 LTSC 2019 until January 9 2029.
https://learn.microsoft.com/en-us/lifecycle/products/windows-10-enterprise-ltsc-2019

For Windows 10 IOT Enterprise LTSC 2021, end of support is January 13, 2032.
https://learn.microsoft.com/en-us/lifecycle/products/windows-10-iot-enterprise-ltsc-2021

You don't have to ditch perfectly good hardware this October or repurpose with Linux. Try Rufus and Windows 11. If it works, you've saved the cost of a new desktop or laptop.

It shouldn't take more than an hour to install the basic Windows 11 OS, but remember to disconnect all other SSDs and hard disks before installing. You can reconnect these extra drives after you've booted successfully into 11 for the first time.

As to whether or not you'll like the changes made in Windows 11 is a different matter. I'm still running Windows 10 as my main OS up till October. I tried a Hyper-V VM of 11 on the day it was released, then went back to using 10. I used NT4 extensively at work and XP's desktop was probably my favourite.

Aren't there issues with updates when you shoehorn 11 onto an unsupported PC? In my case, the unsupported hardware is a closed off laptop being used by my wife, where I'm pretty sure the eMMC drive is soldered on, so it wouldn't be able to be removed.

I'm using 11 on my desktop. I like it fine when StartAllBack is installed to give me back a proper left-aligned, uncombined task bar. Windows 10 may have been snappier in some ways, though.

I'd love it if old Windows operating systems were still supported and could be safely and securely used with the latest hardware and software. Obviously unrealistic, but it would be fun, if only for nostalgia.