sodcalculator

10 Tech How-To

Fix Windows Blocked This Software Publisher

Guide 10-8228 · Updated · Step by step

If Windows shows “Windows protected your PC� or “Windows has blocked this software because it can’t verify the publisher,� it means the file’s digital signature is missing, invalid, or from an unknown certificate authority. The fix is to either run the file with a one-time override, install the correct certificate, or replace the file with a properly signed version—depending on why the check failed.

Why Windows Checks Publishers

Windows uses code signing to verify that a program hasn’t been tampered with and that it really comes from the company named on the certificate. When you download an .exe, .msi, or .dll, the operating system looks at the digital signature embedded in the file. If the signature is valid and the certificate chain leads to a trusted root authority, Windows shows the publisher name and lets you run it. If the signature is missing, expired, revoked, or issued by an unknown authority, you get the “unverified publisher� warning.

This is part of SmartScreen and the Authenticode verification system. It’s not a virus scan—it’s a trust check. A file can be perfectly safe and still fail the check if the developer didn’t pay for a code-signing certificate or if the certificate has expired. Conversely, a file can pass the check and still be malicious, so the warning is just one layer of protection.

What “Publisher Could Not Be Verified� Actually Means

The exact wording varies by Windows version. On Windows 10 and 11 you often see:

  • “Windows protected your PCâ€�
  • “Windows has blocked this software because it can’t verify the publisherâ€�
  • “The publisher could not be verified. Are you sure you want to run this software?â€�

All of these mean the same thing: the file’s digital signature is not in a state Windows trusts. The most common causes are:

  • The developer used a self-signed certificate (common for open-source or in-house tools).
  • The certificate has expired and wasn’t renewed.
  • The file was downloaded from a site that stripped the signature (some file-sharing sites do this).
  • The file was modified after signing, which breaks the signature.
  • The certificate was revoked by the issuing authority.

If you downloaded the file from the official developer’s site and the warning appears, it’s often just an expired certificate or a self-signed one. If you got the file from an unfamiliar site, treat the warning seriously.

How to Fix It: Step-by-Step

Try these in order, from least risky to most permissive.

  1. Right-click the file and select “Properties.� Look for a “Digital Signatures� tab. If it exists, click “Details� to see the signer and certificate status. If the status says “OK,� the signature is valid but Windows still doesn’t trust the root—skip to step 3.
  2. Click “Unblock� in the file’s Properties. If the file was downloaded from the internet, Windows may have added a “Mark of the Web� flag. In the General tab, check “Unblock� and click Apply. This often clears the warning if the file is otherwise fine.
  3. Run the file with the “More info� override. When the SmartScreen dialog appears, click “More info,� then “Run anyway.� This is a one-time override—it does not permanently trust the file.
  4. Install the certificate (only if you trust the source). If the file is from a known developer and the certificate is self-signed, you can add it to the “Trusted Root Certification Authorities� store. Open the file’s Properties → Digital Signatures → Details → View Certificate → Install Certificate, and choose “Local Machine� → “Place all certificates in the following store� → browse to “Trusted Root Certification Authorities.� This permanently trusts that certificate, so use it only for software you are certain about.
  5. Re-download the file from the official source. If the signature is broken or the file was modified, the safest fix is to get a fresh copy directly from the developer’s website.
  6. If the file is a driver or system component, update it via Windows Update or the manufacturer’s site. Never download drivers from third-party sites.

If none of these work, the file may be genuinely corrupted or malicious. Scan it with Windows Defender or another antivirus before proceeding.

Common Mistakes and Misconceptions

One common mistake is clicking “Run anyway� without checking the file’s source. That’s fine for a tool you downloaded from a trusted developer, but it’s dangerous for random files from email attachments or pop-up ads.

Another misconception is that “unverified publisher� means the file is infected. It doesn’t. It only means the signature isn’t trusted. Many legitimate open-source programs (like GIMP or 7-Zip, in some versions) have had self-signed or expired certificates, and users have to override the warning.

People also confuse SmartScreen with antivirus. SmartScreen checks reputation and signature, not malware. A file can pass SmartScreen and still be malicious, so always run a scan if you have any doubt.

Finally, don’t disable SmartScreen entirely to avoid this warning. That removes a useful safety net. Instead, use the per-file override or install the certificate properly.

How to Check a File’s Signature Before Running It

You can verify a file’s signature without running it:

  1. Right-click the file → Properties → Digital Signatures tab.
  2. Select the signature and click “Details.�
  3. Check the “View Certificate� button to see the issuer and expiration date.
  4. If the status shows “This digital signature is OK,� the file has not been tampered with since signing.

You can also use PowerShell to check all files in a folder:

Get-AuthenticodeSignature *

This shows the Status for each file—Valid, NotSigned, or HashMismatch. A “HashMismatch� means the file was modified after signing, which is a red flag.

When to Trust an Unverified File

Trust an unverified file only if all of these are true:

  • You downloaded it directly from the developer’s official site.
  • The URL matches the developer’s domain exactly (check for typos).
  • The file name matches the expected name and version.
  • Your antivirus scan comes back clean.
  • You have a reason to need this specific tool.

If any of those are false, do not run the file. Delete it and find an alternative from a trusted source.

Frequently Asked Questions

Why does Windows block software that I just downloaded from a reputable site?

Even reputable sites sometimes host files with expired certificates or self-signed certificates. The developer may have forgotten to renew the certificate, or they may use a free signing tool that isn’t recognized by Windows. It doesn’t mean the file is dangerous, but you should verify the download URL and scan the file.

Is it safe to click “Run anyway�?

It’s safe only if you are certain the file came from the official developer and you have scanned it. If you have any doubt, don’t click it. The “Run anyway� button is a manual override, not a guarantee of safety.

Can I permanently trust a specific publisher?

Yes, by installing their certificate into the Trusted Root Certification Authorities store. But this gives that publisher the ability to run any code on your system, so only do this for developers you fully trust, like your company’s internal tools.

Why does the warning appear for a file I’ve run before without issue?

The certificate may have expired since you last ran it, or the file may have been updated with a new signature that Windows doesn’t recognize. It could also be a different version of the same program. Check the signature details to see the expiration date.

Does this warning mean my computer is infected?

No. It only means the file’s signature isn’t trusted. However, if you see this warning for a file you didn’t intentionally download, that’s a strong sign of malware, and you should run a full antivirus scan immediately.

What if the file is a driver and Windows blocks it?

Driver files must be signed with a valid certificate that chains to a trusted root. If a driver is blocked, download the latest version from the hardware manufacturer’s website. Do not force-install an unsigned driver unless you are an advanced user and understand the risks.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →