Windows 10 users warned to upgrade now or risk a ‘degraded security state’ as Microsoft ends Secure Boot support

News
By published

On Windows 10? Do this right now.

Windows 10 logo on laptop
(Image credit: Shutterstock)

Support for Windows 10 ended officially in October 2025, and while over 60% of PC users have made the switch to Windows 11, 35% are still using the older OS. Look, I get that it’s tricky to break an old habit, but for those users, this has become a significant security concern.

In a new blog post, Microsoft has announced a “generational refresh” of Secure Boot certificates, which means the current ones are set to expire in late June.

If you’re on Windows 10 without these certificates, you could miss out on future security updates, and, as Microsoft says, you will risk a “degraded security state.”

What is Secure Boot?

A hacker typing quickly on a keyboard

(Image credit: Shutterstock)

Secure Boot is an authorization process that only allows the PC to run trusted software on startup, which stops malicious hacks during the boot.

These certificates have been around for 15 years — since 2011 with Windows 8, so it makes sense that they’re renewed to an updated standard.

How could this affect your system?

Windows 10

(Image credit: Shutterstock)

If you’re on Windows 11, you’ll just receive the updated certificates with “no additional action required.” On top of that, chances are some of you reading this may already have them, as Microsoft has been working with PC manufacturers and “provisioning updated certificates” on desktops and laptops sold in 2024 and 2025.

However, if you’re on “Windows 10 and older”, you won’t be protected from new boot-level vulnerabilities, which will put your computer at risk from the second you hit the power button.

What do you need to do?

Windows 11 logo on a laptop screen

(Image credit: Shutterstock)

Well, you’ve got two options here. The first obvious one that Microsoft is really wanting you to do is upgrade to Windows 11.

If neither of these are not to your liking — maybe you have a severe allergy to Windows 11, and you want to wait for when Microsoft pulls back on stuffing it with AI. Well, there is the Extended Security Updates (ESU) program.

Follow our guide and you can expect to get these new certificates, since this program is set to run for a year starting from its launch in October.

Though it’s fair to say that by this point, going this route is kind of like kicking the can down the road. We’ll be back in this situation once October 13, 2026 rolls around.

Google News

Follow Tom's Guide on Google News and add us as a preferred source to get our up-to-date news, analysis, and reviews in your feeds.

More from Tom's Guide

Jason England
Jason England
Managing Editor — Computing

Jason brings a decade of tech and gaming journalism experience to his role as a Managing Editor of Computing at Tom's Guide. He has previously written for Laptop Mag, Tom's Hardware, Kotaku, Stuff and BBC Science Focus. In his spare time, you'll find Jason looking for good dogs to pet or thinking about eating pizza if he isn't already.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.