Windows Protected Your PC? Verify and Run Trusted Apps in Windows 10 and 11

Identify what actually blocked the app​

Before changing anything, record the complete warning and the filename. Do not assume that every Windows security message comes from SmartScreen.

• A warning about an unrecognized app, often headed “Windows protected your PC”: This is the SmartScreen app-reputation scenario covered here. An unsigned app or a newly released file can lack an established reputation.
• A warning inside Microsoft Edge before the download finishes: This is a browser download check. Start by verifying the download source rather than changing Windows app settings.
• A message explicitly naming Smart App Control: This is a separate Windows 11 feature. Microsoft says it does not provide an individual-app bypass. Contact the developer for an appropriately signed release instead.
• An antivirus detection identifying a threat: Treat this as a malware or potentially unwanted software issue, not merely a reputation warning. Do not restore or allow the file simply to make installation work.

An unfamiliar app is not automatically malicious—but unfamiliarity is not a reason to ignore the warning. Microsoft recommends considering whether the publisher is identifiable, whether the download was solicited, and whether it makes sense for that particular program to be uncommon. A supposedly popular application obtained through an unexpected message deserves especially careful scrutiny.

Prepare the file for inspection​

Have the following available before proceeding:

• The actual downloaded installer or executable.
• The developer’s official download page or your organization’s approved software source.
• The expected product, release, and publisher name.
• An active antivirus product.
• A published SHA-256 checksum, if the developer supplies one.

Use the checks below as a decision process, not a checklist that automatically grants permission to run software. Stop whenever the file differs from what you expected.

1. Confirm where the download came from​

Navigate independently to the developer’s official site rather than following an unsolicited message or advertisement. Compare the offered download with the file you have. If the source is uncertain, discard that copy and obtain a new one from the official source.

For workplace software, ask IT whether an approved package is available. Do not assume that a file is approved merely because someone forwarded it.

Microsoft’s guidance for downloaded files is to verify the source, check that the file type is expected, and scan it before opening. If you cannot establish those basics, leave it blocked.

2. Review the file’s properties without running it​

1. Open File Explorer and locate the downloaded file.
2. Right-click it and select Properties.
3. On General, review the filename and file type. Check that you are inspecting the intended download.
4. Look near the bottom for a security notice indicating that the file originated on another computer.
5. If Unblock appears, leave it unchecked for now. Its presence is not a statement that the file is safe.

3. Check the digital signature and publisher​

For an installer that carries an embedded signature:

1. In Properties, open Digital Signatures.
2. Select the relevant entry in the signature list.
3. Select Details.
4. Look for “This digital signature is OK.”
5. Compare the signer’s name with the publisher identified by the developer’s official download information.

A name merely appearing in the signature list is not enough: open the signature details and check its validation result. The signer may be a legal company name rather than the product’s familiar brand name; resolve any discrepancy through the developer rather than guessing. This Properties-based verification procedure is also documented by software vendors such as KiCad and IBM.

If the tab is absent or the result is unclear, use the read-only PowerShell check below. If Windows reports an invalid signature, stop and request a fresh, verifiable installer. Do not install an unfamiliar certificate just to make the warning disappear.

A valid signature is useful evidence of publisher identity and file integrity—not an assurance that every action the software performs is desirable. SmartScreen also considers reputation, so a signed file can still trigger a warning.

Use PowerShell when you need clearer verification​

These checks inspect the file; they do not unblock or execute it.

4. Read the Authenticode signature​

Open Windows PowerShell from Start. Replace the example path with the actual file path, retaining quotation marks:

Get-AuthenticodeSignature -LiteralPath "C:\Users\YourName\Downloads\AppSetup.exe" |
 Format-List Status, StatusMessage, SignerCertificate, Path

Review Status, StatusMessage, and SignerCertificate together. Confirm that Path identifies the file you meant to inspect.

Get-AuthenticodeSignature can obtain Windows catalog-signature information as well as embedded-signature information. That makes it useful when File Explorer does not show the signature information you expected. If the result reports an unsigned file, it does not establish a verified publisher; if validation fails, do not treat the displayed certificate name as sufficient approval.

5. Compare a checksum if the publisher provides one​

Run:

Get-FileHash -LiteralPath "C:\Users\YourName\Downloads\AppSetup.exe" -Algorithm SHA256

Compare the resulting Hash with the SHA-256 value published for that exact download, including its version and architecture.

• Match: The file’s content matches the published checksum.
• Mismatch: Do not run it. Check that you compared the correct release, then obtain a fresh copy if necessary.
• No published checksum: The command cannot independently tell you whether the file is trustworthy.

A checksum is an integrity comparison, not a malware verdict. A hash supplied alongside a file by an untrusted sender does not establish a trustworthy origin. Microsoft documents SHA-256 as the default algorithm for Get-FileHash; specifying it explicitly avoids ambiguity.

Scan the download before deciding​

6. Run a file-specific antivirus scan​

For Microsoft Defender Antivirus:

1. In File Explorer, right-click the downloaded file.
2. On Windows 11, select Show more options, then Scan with Microsoft Defender.
3. On Windows 10, select Scan with Microsoft Defender from the context menu when available.
4. Wait for completion and review the displayed results.

Microsoft documents that the completed scan opens the scan-results view. If another antivirus product is active, use that product’s file-scan function instead; Defender Antivirus may be disabled automatically when a compatible third-party product is installed.

If the menu command is unavailable, open Windows Security > Virus & threat protection > Scan options and use Custom scan to inspect the relevant location. Update Defender’s security intelligence through Virus & threat protection > Protection updates > Check for updates when needed.

If a threat is detected, leave the file blocked or quarantined. For a suspected false positive, contact the developer and pursue malware-analysis review rather than adding an exclusion. Microsoft provides a file-submission process for incorrectly detected files.

Choose a file-specific action only after verification​

Proceed only if you can explain why you trust this particular file: it came from the expected source, its publisher information checks out, any available checksum matches, and scanning did not identify a threat.

If those checks leave uncertainty, the appropriate result is to keep the file blocked and request a verified replacement.

7. Use the SmartScreen prompt when continuation is offered​

Warning: Run anyway allows the app to start despite the reputation warning. Use it only after verification—not for unknown software, an antivirus detection, or an administrator-enforced block.

1. Open the verified installer.
2. If the SmartScreen warning appears, select More info.
3. Review the app and publisher information shown.
4. If the information matches your checks and Run anyway is available, select it.
5. Otherwise, close the prompt and contact the developer or IT.

The More info > Run anyway sequence is documented in vendor installation guidance. Microsoft also notes that enterprise policy can prevent continuation entirely. Do not try a different bypass because that button is missing.

8. Alternatively, unblock a verified downloaded file​

Warning: Unblocking removes the downloaded-file origin information used for certain security checks. It does not scan the file, repair its signature, or prove it trustworthy. Do not unblock whole folders or archives merely to avoid repeated warnings.

For a trusted file whose Properties page offers the option:

1. Close the launch warning.
2. Right-click the downloaded file and select Properties.
3. On General, select Unblock.
4. Select Apply, then OK.
5. Open that same verified file.

Microsoft documents this procedure for both Windows 10 and Windows 11. If another security feature blocks execution afterward, stop and identify that new message rather than repeatedly changing protections.

This is an alternative file-specific action, not a required extra step after Run anyway.

Verify that protection remains enabled​

After the verified app starts, check that you have not solved the problem by leaving reputation protection disabled.

1. Open the appropriate Settings path:

• Windows 11: Settings > Privacy & security > Windows Security > App & browser control.
• Windows 10: Settings > Update & Security > Windows Security > App & browser control.

1. Open Reputation-based protection settings.
2. Confirm Check apps and files is On. This is the SmartScreen control for evaluating downloaded apps and files.
3. Leave browser and potentially unwanted app protections enabled as well.

Successful completion means that the intended, verified app runs while those protections remain active—not simply that all warnings have disappeared.

Troubleshoot missing options and persistent blocks​

There is no Unblock checkbox​

Do not assume that the missing checkbox indicates a damaged Windows installation. The Properties action applies to downloaded-file origin marking, not every possible execution restriction. Microsoft’s equivalent Unblock-File command has no effect on a file that is not blocked in this way. Re-read the actual launch error instead of searching for a stronger unblock command.

The file is signed, but SmartScreen still warns​

A signature and an established reputation are different things. Microsoft explains that newly created binaries can trigger warnings even when signed. Confirm the exact release with the developer; a signed replacement or an official Microsoft Store distribution may provide a better route than overriding a warning. Do not assume that a signature guarantees the prompt should disappear.

The message names Smart App Control​

On Windows 11, inspect Windows Security > App & browser control > Smart App Control settings to identify that feature. Do not treat Properties Unblock as an individual-app exception for it. Microsoft’s current FAQ says individual-app bypasses are unavailable and recommends contacting the developer about signing the app. This guide does not recommend disabling Smart App Control.

The computer is managed by work or school​

A missing continuation button or an administrator restriction is an escalation point. Send IT the complete warning, download source, filename, signature result, and checksum if available. Ask for an approved package or policy review rather than changing Group Policy, registry settings, or antivirus exclusions yourself. Microsoft explicitly documents organization-controlled restrictions on downloaded files and SmartScreen continuation.

Recover if you already allowed the wrong file​

If you only unblocked a file but have not launched it, do not open it. Delete that copy if its trustworthiness is uncertain. Unblocking removes origin metadata; it is not a reversible checkbox that should be relied on as a security recovery mechanism.

If you previously turned off Check apps and files, return to the reputation-based protection page and turn it back On. This restores that setting but does not undo anything an executed program may have done.

If you ran the file and now suspect compromise, stop treating the problem as an installation warning. Use Windows Security > Virus & threat protection > Scan options for a Full scan. Microsoft also provides Microsoft Defender Offline for suspected persistent malware; save your work first, because that scan restarts the PC. Review its results in Protection history afterward. On a managed device, notify IT immediately and provide the file details and approximate execution time.