Official support for Windows 10 ended in October 2025. Yet, while over 60% of PC users have upgraded to Windows 11, approximately 35% still rely on the older operating system. Although sticking with familiar software is understandable, this choice now carries a serious Windows 10 security risk—especially after Microsoft’s latest announcement.
In a recent blog post, Microsoft revealed a “generational refresh” of Secure Boot certificates. These digital credentials, which have safeguarded PCs since 2011 (starting with Windows 8), will expire in late June 2026. Secure Boot itself is a critical security feature that ensures only trusted software runs during startup, blocking malware from hijacking your system before Windows even loads.
Here’s the problem: if you’re still using Windows 10, your device likely won’t receive the new certificates automatically. As a result, you could miss future security updates and enter what Microsoft calls a “degraded security state.” This means your PC becomes vulnerable to new boot-level attacks—the kind that compromise your system the moment you press the power button.
Fortunately, Windows 11 users face no disruption. Microsoft is pushing the updated certificates automatically, with “no additional action required.” Moreover, many PCs sold in 2024 and 2025 already include these new certificates, thanks to partnerships with manufacturers.
However, if you remain on Windows 10—or an even older OS—you won’t benefit from this protection. Without the refreshed certificates, your system cannot verify the integrity of startup software, leaving a dangerous gap in your defenses.
So, what should you do? You have two main options.
First, and most strongly recommended by Microsoft, is to upgrade to Windows 11. This ensures full access to current and future security features, including the new Secure Boot certificates.
Alternatively, if you’re not ready to switch—perhaps due to hardware limitations or personal preference—you can enroll in Microsoft’s Extended Security Updates (ESU) program. Launched in October 2025, this paid service provides critical patches and, importantly, the updated Secure Boot certificates for one year.
That said, the ESU route is only a temporary fix. The program ends on October 13, 2026. At that point, Windows 10 users will face the same dilemma again—only with fewer options.
In short, continuing to use Windows 10 without taking action exposes your device to preventable threats. To maintain strong security, upgrading to Windows 11 remains the safest and most sustainable path forward.
READ: Samsung’s Hidden “Separate App Sound” Feature You’re Missing
