windows · reference

🏠

Windows 10 Home

Windows 10 Home — consumer edition, end-of-support timeline, consumer ESU, and how it differs from Pro.

← All products Licensing FAQ

On this page

Editions · channels · activation · audit notes · FAQs

Editions covered

Edition matrix with feature differences and the right audience.

In-depth sections

Channels, activation, audit, modern management & more.

FAQs answered

Common questions buyers and IT admins ask before purchase.

Words of reference

0.5k

Plain-English, no vendor agenda, updated to current Product Terms.

Edition matrix

Pick the right edition

Each edition targets a specific scale and feature set. Match the workload, not the price tag.

Edition 1

Home

Consumer edition. No BitLocker management, no domain join, no Hyper-V.

Edition 2

Home in S mode

Locked to Microsoft Store apps. Free, one-way switch out of S mode to standard Home.

Edition 3

Home Single Language

Region-specific Retail variant. Locked to a single display language at purchase.

Side-by-side

Edition comparison

Heuristic capability matrix derived from each edition's intended use. For binding commitments, always confirm against the current Product Terms.

Capability	Home	Home in S mode	Home Single Language
Target audience	Home	Home	Home
Domain / Entra join	✓	—	—
Virtualisation rights	✓	—	—
Advanced security	✓	—	—
Centralised management	—	—	—
Volume Licensing path	—	—	—

Deep dive

Windows 10 Home — what to actually know

Windows 10 Home was the default consumer edition of Windows 10 from 2015 to its end-of-mainstream-support date of 14 October 2025. It remains installed on a very large share of personal devices and is the most common starting point for in-place upgrades to Windows 11 Home on compatible hardware. Home omits the business management surface that Pro provides — no domain join, no BitLocker management, no Hyper-V, no Group Policy, no Remote Desktop host, no Windows Sandbox — but otherwise delivers the same end-user experience, the same Defender security baseline, the same browser and the same Microsoft Store.

What Home provides versus what it leaves out

Home covers the everyday Windows 10 experience: Start menu, Microsoft Edge (Chromium), Cortana on supported regions, Windows Hello biometric sign-in, Family Safety, Find My Device, Microsoft Defender Antivirus and the consumer Microsoft Store. Device encryption — a stripped-down BitLocker variant — is available on hardware that meets the Modern Standby and TPM 2.0 requirements when signed in with a Microsoft account. What is missing matters when a device crosses into business use: no AD or Entra ID join, no Group Policy editor, no Hyper-V role, no Remote Desktop host, no AppLocker, no Windows Information Protection, no Windows Update for Business deferrals, and no Assigned Access kiosk mode.

End of support and the consumer ESU programme

Windows 10 Home stopped receiving free security updates on 14 October 2025. Consumers can extend security support for one year — through 13 October 2026 — by enrolling in the consumer ESU programme. The free enrolment paths are: signing in with a Microsoft account and using Windows Backup to sync settings to OneDrive, redeeming 1,000 Microsoft Rewards points, or paying a one-time fee. After 13 October 2026 no further consumer ESU is offered; the device continues to boot and run, but new vulnerabilities are permanent. Any device used for banking, email or web browsing should be retired, upgraded to Windows 11, or replaced before that date.

Upgrading from Home to Windows 11 Home

On hardware that meets the Windows 11 compatibility floor (TPM 2.0, Secure Boot, 8th-gen Intel / AMD Zen 2 / Snapdragon 7c gen 2 or newer, 4 GB RAM, 64 GB storage, DirectX 12 GPU), Windows 10 Home upgrades to Windows 11 Home in place through Windows Update at no charge. The digital entitlement converts cleanly; the Microsoft account, files, applications and most settings are preserved. PC Health Check reports compatibility in plain language. Hardware that fails the check stays on Windows 10 with ESU as the only supported security maintenance path; the documented registry bypass for installing 11 on unsupported hardware produces installations that Microsoft will not service for feature updates.

Upgrading from Home to Pro

If the device is moving into business use, upgrading Home to Pro is straightforward: buy a Pro key through Retail or an authorised reseller, enter it under Settings → Update & Security → Activation → Change product key, and the device converts in place without reinstalling applications. The Home digital entitlement is consumed and replaced by a Pro entitlement. The reverse path (Pro to Home) is not supported without a clean install.

By channel

Where to buy this product

Relative fit of each licensing channel for typical buyers of this product. Calibrate against your own scale and renewal strategy.

Channel fit (typical buyer)

Retail / FPP7

OEM (pre-installed only)9

Volume Licensing9

CSP / Microsoft 3658

Retail / FPPIndividuals & small teams

Boxed or ESD keys, transferable, registered to a Microsoft account.

Volume LicensingMid-market & enterprise

MAK / KMS activation, centralized VLSC, optional Software Assurance.

CSP / Microsoft 365Subscription, per user

Monthly / annual seats, managed through partner or admin center.

OEM is not a buying channel for end users. OEM keys are supplied pre-installed by hardware manufacturers and are not sold standalone — choose Retail, Volume or CSP instead.

Support timeline

Lifecycle phases to plan against

Windows desktop licensing has three legitimate routes — Retail FPP, OEM pre-installation on new hardware, and Volume Licensing for organisations. Pick the wrong one and you either overpay (Retail for fleet) or break the rules (OEM after the fact).

Phase 1

General availability

Launch day

Edition matrix opens across Retail, OEM (system builders) and Volume Licensing channels. Initial servicing channel is the General Availability Channel (GAC).

Phase 2

Mainstream support

Years 1–5

Monthly cumulative updates, feature updates once a year, free non-security fixes, and warranty-grade incident support for organisations with the right agreement.

Phase 3

Extended support

Years 5–10

Security updates only. No new features, no design changes. Paid Unified Support is the only break-fix path for organisations.

Phase 4

End of support

Beyond year 10

Extended Security Updates (ESU) can be purchased for one to three additional years, with sharply rising per-device pricing. After ESU, every new CVE is permanent.

Procurement checklist

Do this, not that

The small set of decisions that determine whether you overpay, fail an audit, or land in the right place.

Standardise the whole fleet on the same edition (typically Pro or Enterprise) and use Volume Licensing re-image rights on top of OEM.

DON'T

Mix Home and Pro across the same office to save a few dollars — domain join, BitLocker and Intune all silently break on Home.

Verify TPM 2.0 and Secure Boot are switched on in firmware before deployment; both are required for Windows 11 and for serious BitLocker use.

DON'T

Use the unsupported registry bypass for production machines — they will not receive feature updates and Microsoft documents this explicitly.

Use a Microsoft account or Entra ID account at first sign-in so the digital entitlement is recorded against the hardware.

DON'T

Activate a Retail key on multiple machines 'just for a few days' — the entitlement migrates and the original device immediately deactivates.

For 6+ devices, move to Volume Licensing or a Microsoft 365 plan that includes Windows Enterprise per user.

DON'T

Buy stacks of Retail FPP boxes for a corporate rollout — the per-device cost and management overhead never recover.

Typical deployments

How buyers actually use Windows 10 Home

Three reference deployments — find the closest match and adapt rather than starting from zero.

Scenario 1

Solo founder / consultant

A single laptop running client work — Pro is the floor. BitLocker, Hyper-V for testing, and the ability to join a future Entra tenant when the team grows. Retail FPP is the right channel until you cross five seats.

Scenario 2

Growing SMB (10–100 seats)

OEM Pro on every new device, Microsoft 365 Business Premium for the management layer, Intune for policy. You get Defender, conditional access and automated patching without standing up a domain controller.

Scenario 3

Enterprise fleet (500+ seats)

Enterprise Agreement with Windows Enterprise E3 or E5, Autopilot for zero-touch provisioning, Autopatch for the update train, and LTSC only for the narrow set of fixed-function devices that genuinely need it.

Cost optimisation

Where the savings actually live

None of these are tricks — they are the same levers Microsoft's own licensing specialists pull on every renewal.

💰

Layer OEM under Volume Licensing

Buy hardware with OEM Pro pre-installed (cheapest first licence) and add Volume Licensing or Microsoft 365 on top for re-imaging rights and Enterprise features. You only pay the upgrade delta, not the full retail stack.

📊

Use Microsoft 365 E3/E5 for Enterprise

Windows 11 Enterprise is included with M365 E3/E5 per-user — if you already pay for the bundle, paying again for standalone Enterprise licences is double-spend.

🎯

Plan Copilot+ rollouts around policy first

Recall and on-device AI features ship gated behind enterprise policy. Stand up the Intune policy set before rolling hardware so you do not have to retroactively disable features.

Counterfeit & risk

Red flags when buying second-hand

These four signals show up in every counterfeit-licence case we have seen. If any of them is present, walk away — no discount makes it worthwhile.

⚠ 01

Standalone OEM key sold below market

OEM keys are distributed only pre-installed on hardware and stay bound to that device for life. A separately sold OEM key is almost certainly leaked, harvested from scrapped hardware, or fully counterfeit.

⚠ 02

Lifetime key with no invoice or VLSC record

Microsoft entitlement always leaves a paper trail — a Volume Licensing Service Center record, a CSP invoice, a sealed Retail box with a COA, or a Microsoft Store order. No proof = no defence in an audit.

⚠ 03

Key works once, then 'not genuine' after the next cumulative update

Classic symptom of a MAK key that has exceeded its activation pool, or a KMS key being abused outside its volume programme. Microsoft revokes these centrally; the activation grace period is short.

⚠ 04

Seller refuses to put the entitlement in your tenant

Legitimate CSPs and LARs transfer the licence into your Microsoft 365 / Azure / VLSC tenant under your domain. If the seller insists on activating 'for you' on their account, you do not own anything.

Acronyms

Licensing terms used on this page

Quick definitions — the full glossary lives at /en/glossary if you need to dig deeper.

CSP

Cloud Solution Provider — Microsoft's primary indirect channel for subscriptions and cloud services.

VLSC

Volume Licensing Service Center — the portal where Volume Licensing keys, agreements and downloads live.

MAK

Multiple Activation Key — a Volume Licensing key with a finite activation count, used for isolated machines.

KMS

Key Management Service — an on-premises activation host that activates clients on a 180-day re-check cycle.

Enterprise Agreement — Microsoft's largest commitment-based volume contract, typically a 3-year term with annual true-ups.

Software Assurance — the upgrade-and-benefits add-on to Volume Licensing; required for new version rights and several mobility scenarios.

Browse the full glossary →

FAQ

Frequently asked questions

Can I still get Windows 10 Home updates after 14 October 2025?+

Only by enrolling in the consumer ESU programme through 13 October 2026. After that, no further updates are offered for Home.

Will my Windows 10 Home key activate Windows 11 Home?+

Yes. The Windows 10 Home digital entitlement converts in place to Windows 11 Home through Windows Update on compatible hardware.

Can I still buy Windows 10 Home today?+

Microsoft stopped selling Windows 10 licences through Retail in early 2023. Pre-installed OEM copies on old stock occasionally surface but are scarce. The supported purchase path is Windows 11 Home.

Is consumer ESU available worldwide?+

Yes, though enrolment paths vary by region — Microsoft's enrolment wizard surfaces the available options for the signed-in account.

Where can I legitimately buy a license?+

Through Microsoft's Retail channel, an authorised Cloud Solution Provider (CSP), or a Volume Licensing partner (MPSA, Enterprise Agreement, Open Value, Server & Cloud Enrollment). OEM keys are distributed only pre-installed by hardware manufacturers and stay bound to that device for life — they are not sold to end users as standalone products. Anyone offering a 'cheap OEM key' as a standalone download is, by definition, operating outside Microsoft's distribution terms.

What gets checked in a Microsoft licensing audit?+

Auditors map every installed copy to a proof of purchase (VLSC record, CSP invoice, sealed Retail FPP), verify edition alignment (features used must match the licensed edition), and confirm CAL counts cover the maximum number of authenticated users or devices during the audit window. Small variances usually resolve with a true-up; large gaps escalate to Software Asset Management engagements and back-billing at list price.

Other products in this category

🪟

Windows 11 Pro

Windows 11 Pro — editions, hardware floor, activation models, and the right licensing channel for business and power users.

Read reference →

🪟

Windows 11 Home

Windows 11 Home — the consumer edition of Windows 11: features, limitations, hardware floor, and when you should upgrade to Pro.

Read reference →

🛡️

Windows 11 Enterprise

Windows 11 Enterprise — the volume-only edition: Credential Guard, Application Guard, LTSC option, Autopatch and the Microsoft 365 E3/E5 bundle.

Read reference →