Windows blocked the download

A blue "Windows protected your PC" box appeared instead of w0a. Here is what it means and how to check the file is really ours before you continue.

What you see

A blue box in the middle of the screen:

Windows protected your PC Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk.

There is a Don't run button and, at first glance, no way to continue.

Why it happens

SmartScreen is not saying the file is dangerous. It is saying it has not seen it often enough yet.

Microsoft counts, for each file, how many people have downloaded and run it. A new release is a new file with no history of its own yet, so the box can appear until enough people have run it. It goes away on its own after a while — the same file, completely unchanged, stops being blocked once the count rises.

So the box is about the file not having enough history behind it yet, not about its contents.

Check the file before you continue

Do not just click through. Check it — and do the same for anything else you download from anywhere.

Properties → Digital Signatures shows whether the file carries a signature and in whose name. If a signature is there and the name on it is not ours, stop right there. Either way, a signature cannot tell you which build you are holding; the fingerprint below is the check that decides.

Open PowerShell in the folder you downloaded to and run:

Get-FileHash .\w0a-*.exe -Algorithm SHA256

The result must match the SHA-256 published on our download page, character for character.

If it does not match, stop. That file is not the one we published. Delete it and download again from w0a.app — and if you got it from somewhere else, tell us, because we would want to know.

Continuing

Once the hash matches:

  1. Press More info in the blue box
  2. A Run anyway button appears at the bottom
  3. Press it

w0a opens normally from there.

Why we do not just make it go away

We could not, without changing what the warning means. Reputation is earned per file, by download count, over time — there is no setting on our side that skips it.

We also would not want to tell you to click past a security warning without checking first. The check above takes thirty seconds and it is the same check that would catch a file somebody had tampered with, which is exactly the case the warning exists for.

Related

Did this page help?

What was missing, or what did not work? We read every one of these.

If this page did not solve it, write to us — say which article you read, and we will fix the article.