5. How to Verify a Download is Safe Before Running It
Even when you download from what appears to be the right source, a quick scan before running the file is a smart final check. Windows Defender scans downloaded files automatically and flags most threats before you even open them. But for extra confidence — especially with less well-known software — VirusTotal is a free online tool that scans your file against 70+ different antivirus engines simultaneously and reports any detections. A file that comes back clean on VirusTotal from 70+ engines is about as thoroughly verified as any download can be. A file with 30+ detections is malware, full stop. Between 1 and 5 detections might be a false positive on a legitimate file — search the software name and "VirusTotal false positive" to verify.
1
Check the file size before downloading
Most software download pages tell you the expected file size. A VLC installer should be around 40MB. If the file you downloaded is 2MB or 200MB when it should be 40MB, something is wrong — you likely downloaded the wrong file or a fake version. Delete it and re-download from the correct source.
2
Right-click the downloaded file and scan with Windows Defender
Before double-clicking any downloaded installer, right-click it and select "Scan with Microsoft Defender." This triggers an immediate targeted scan of just that file. If Defender finds anything, do not open the file — delete it immediately and download from a verified source.
3
For extra verification — scan with VirusTotal
Go to virustotal.com. Click "Choose file" and upload the downloaded installer. VirusTotal will scan it against 70+ antivirus engines and show results in about 30 seconds. For any file you're uncertain about, this is the most thorough free verification available anywhere. It works for files up to 650MB.
4
Verify the digital signature of the installer
Right-click the downloaded .exe file → Properties → Digital Signatures tab. If a Digital Signatures tab exists, click the signature and select "Details" → "View Certificate." The certificate should be issued to the company that made the software — for example, "VideoLAN" for VLC. If the signature is missing or issued to an unknown company, treat the file with suspicion.
6. During Installation — What to Watch For
Even legitimate free software sometimes tries to install extras — a browser toolbar, a different default search engine, or a companion app you didn't ask for. These are not malware but they are unwanted, and they're easy to miss if you click through installer screens without reading. The software companies who bundle these extras make money every time someone accidentally installs them — which is why the opt-out checkboxes are often pre-checked, small, and placed in unexpected locations. Read every single installer screen before clicking Next. If you see a checkbox for additional software you didn't request — uncheck it. Look for phrases like "Also install," "Set as default," "Add to browser," or "Get our recommended software." These are the bundling screens to watch for.
1
Always choose "Custom" or "Advanced" installation when offered
When an installer offers a choice between "Express/Recommended" and "Custom/Advanced" installation, always choose Custom. Express installs everything including bundled extras. Custom lets you see and uncheck each component individually — including anything you didn't ask for.
2
Uncheck all pre-checked boxes for extras
On each installer screen, look for any checkboxes that are already checked — especially ones mentioning browsers, toolbars, search engines, or additional programs. Uncheck every one of them unless it's a core component of the software you actually want. The default state of these checkboxes is checked precisely to trap people who aren't paying attention.
3
Decline any offers to change your browser homepage or default search
Many free software installers offer to change your browser's homepage or default search engine to something the developer is paid to promote. These changes are annoying to undo and serve no benefit to you. Always decline these offers — look for "No thanks" or "Skip" options, or simply uncheck the relevant checkbox before proceeding.
4
After installing — check your browser extensions and startup apps
Even when you're careful, occasionally an installer slips something past you. After installing new software, check your browser's extensions (Chrome: Settings → Extensions; Firefox: Add-ons) for anything unfamiliar. Also check Settings → Apps → Startup for any new entries. Remove anything you don't recognise or didn't intentionally install.
7. The Best Legitimate Free Alternatives to Popular Paid Software
You Don't Need to Pirate Anything — These Free Alternatives Are Genuinely Excellent
Instead of Microsoft Office → LibreOffice (libreoffice.org) — full suite of word processor, spreadsheet, and presentation tools. Completely free, no account required.
Instead of Adobe Photoshop → GIMP (gimp.org) or Photopea (photopea.com — browser-based, no install needed). Both handle professional photo editing tasks.
Instead of Adobe Premiere Pro → DaVinci Resolve (blackmagicdesign.com) — used by professional filmmakers worldwide. The free version is extraordinarily capable.
Instead of WinRAR / WinZip → 7-Zip (7-zip.org) — completely free, handles all archive formats, no nag screens, no subscription.
Instead of Spotify Premium → Spotify Free (with ads) or YouTube Music Free — both completely legitimate.
Instead of antivirus software → Windows Defender (built into Windows 11) — independent tests consistently rate it among the top antivirus solutions available. Free, always updated, requires zero setup.
Instead of Adobe Acrobat → Sumatra PDF (sumatrapdfreader.org) for reading, LibreOffice Draw for basic editing. Both completely free.
8. Common Questions About Safe Free Downloads
❓ Is it safe to download free software if my antivirus doesn't flag it?
Antivirus is your safety net — not your first line of defence. Not all malware is caught by antivirus, especially new or sophisticated threats. Always combine antivirus protection with downloading from trusted official sources. Both layers together give you genuinely strong protection.
❓ Is open-source software safer than closed-source freeware?
Generally yes — open-source software has its code publicly visible and audited by the community, making it very difficult to hide malicious code. However, open-source software from unofficial sources can still be tampered with. Always download open-source software from the official project website or its official GitHub repository — not from third parties.
❓ Can I trust "free" versions of paid software like Canva Free or Spotify Free?
Absolutely. These are legitimate business models where the company offers reduced functionality for free to attract users to their paid tier. Canva Free from canva.com, Spotify Free from spotify.com, and similar products from their official sources are completely safe. They make money from their paid users or from ads — not from compromising your security.
❓ What should I do if I realise I already downloaded something suspicious?
Don't run the file — delete it immediately from your Downloads folder and empty the Recycle Bin. If you already ran it, run a full Windows Defender scan immediately (Windows Security → Virus and threat protection → Scan options → Full scan). Check your browser extensions for anything unfamiliar and remove them. Change passwords for sensitive accounts from a different, known-clean device as a precaution.
❓ Is it safe to download software from YouTube tutorial links?
Treat YouTube description links with caution — anyone can put any URL in a YouTube description, and some malicious actors create tutorial videos specifically to drive downloads of malware. Always verify that the link leads to the official website before downloading. If the link leads to a Google Drive, Mediafire, Mega, or similar file-hosting site for software that should have an official website, do not download it.
Safe Download Checklist — Run Through This Every Time
- Downloading from the official developer website — not a third-party site
- URL in browser bar matches the software's known official domain
- Site uses HTTPS — padlock icon visible in address bar
- Skipped all ads in search results — using organic results only
- Hovered over download button to verify it leads to the same domain
- File size matches what the official page says it should be
- Scanned downloaded file with Windows Defender before running
- Chose Custom installation and read every screen carefully
- Unchecked all pre-checked boxes for bundled extras
- Declined any offers to change browser settings or homepage
- Checked browser extensions after installation for unexpected additions
Downloading software safely for free is not complicated — but it does require conscious, deliberate habits rather than clicking on autopilot. The vast majority of malware infections from software downloads happen not because users were unlucky, but because they clicked the wrong download button, skipped reading the installer, or downloaded from a third-party site instead of the official one. Apply the rules in this guide and you essentially remove those risks entirely. Download only from official sources. Scan before you run. Read every installer screen. Use VirusTotal when uncertain. And remember that virtually every piece of paid software you want has a legitimate free alternative that's genuinely excellent — you never need to pirate anything to have a fully functional, capable PC. Safe downloading is a habit. Build it once and it protects you forever.
Download something safely right now
Pick one piece of software you need. Search for its name plus "official site" on Google. Skip any ads. Go to the official domain. Check for the HTTPS padlock. Find the real download button by hovering to verify the URL. Download, scan with Defender, and install using Custom mode with all extras unchecked. That process — done once — becomes second nature by the third time. Start building the habit today.
