SmartScreen warns when a downloaded file has no established reputation, and an unsigned new installer will often trigger it. Before you click Run anyway, confirm the file came from the official page and that its SHA-256 checksum matches. If either check fails, delete the file.
Why the warning appears
Microsoft's documentation says SmartScreen checks downloaded files against a list of reported malicious programs, and against a list of files that are well known and downloaded frequently. If a file is not on the well known list, it shows a warning that advises caution. It also does reputation checks on the digital signature used to sign a file. If a URL, file, app or certificate has an established reputation, you see no warning. If there is no reputation, the item is marked higher risk.
So a warning means "not enough history", not "known bad". But the reverse matters too: a missing warning does not mean safe.
Why Safeguard Desktop triggers it
The Safeguard download page says the Windows builds of Desktop are not yet code-signed, so SmartScreen may show a warning. Its instruction is to choose More info and then Run anyway. That is the whole explanation, and the page states it plainly rather than hiding it.
A short decision routine
- Did you reach the download from the official address, typed or bookmarked?
- Does the file name and version match what the page lists?
- Does the SHA-256 hash match the published value?
- Is the warning the only oddity, with no browser or antivirus alerts on top?
If all four are yes, running the installer is a reasonable call. If any is no, stop.
The commands for step 3 are in the post on verifying a checksum.
What SmartScreen does not cover
Microsoft notes that SmartScreen protects against malicious files from the internet. It does not protect against malicious files on internal locations or network shares, such as shared folders with UNC paths or SMB shares. If your team distributes tools from a file share, SmartScreen will not be your safety net there, so your own checksum and approval process has to do that job.
For administrators
SmartScreen supports management through group policy and Microsoft Intune. Some teams turn the prompt into a hard block for unknown apps, which is a sensible default for managed fleets. If you do, plan an approval path for tools such as Safeguard Desktop, for example by approving a specific version and hash. Do not tell staff to disable SmartScreen to get around a prompt.
If you believe a warning on a legitimate file is wrong, Microsoft provides a way to submit the file for review, and the publisher is the right party to do that.
Where Safeguard fits
Safeguard Desktop is one surface among several, and a managed fleet may prefer the CLI or IDE extensions instead. The free scan at gold.safeguard.sh/scan needs no installer at all.
Quick check
Does a SmartScreen warning mean the file is malware?
No. It often means the file has no established reputation. Verify the source and checksum before deciding.
Should I turn SmartScreen off to install an app?
No. Verify the file and approve that one installer instead.
Sources
Last reviewed: 19 October 2026.
