Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesSome links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Download games and gaming software from the publisher, an official store, or the project’s own release page—and don’t install anything that asks you to weaken your device’s security. Cheats, cracked games, unofficial APKs, fake betas, and “free currency” offers are common disguises for malware and account-stealing scams. Official stores and antivirus tools reduce risk, but neither can guarantee that every app or file is safe.
Choose the download source before you choose the file
Use this source order whenever possible:
- The game publisher’s official website for its launcher, patches, demos, or tools.
- An official platform store, such as Steam, Epic Games Store, Microsoft Store, Google Play, or Apple’s App Store.
- The project’s official repository or release page for an independent game, mod, or utility.
- An established mod platform that the developer or project itself identifies as an authorized distribution channel.
Be more cautious with search ads, video-description links, shortened URLs, private Discord or Telegram messages, file-hosting links, reuploaded installers, piracy sites, and pages crowded with fake download buttons. The FTC advises getting software from known sources rather than unfamiliar websites or peer-to-peer downloads, and recommends navigating directly to a known site instead of following software ads (FTC malware guidance).
Check the domain character by character. A padlock or HTTPS means the connection is encrypted; it does not prove that the site operator is legitimate. Avoid logging in through a link in an unsolicited message. For Steam, its support guidance names steampowered.com, steamcommunity.com, and help.steampowered.com as official domains. A lookalike domain containing “steam” is not equivalent. When in doubt, open the platform’s app or type its known address yourself (Steam account security recommendations).
Free tools Windows power users keep installed
One-click scans. No signup required.
For a mod or utility, look for an identifiable developer, a release history, documentation, change logs, and a project page linked from the developer’s own site or verified account. Signed releases and hashes published through a trusted channel can help confirm that a file is the one the developer intended. They are not proof that the software is harmless. Download counts, positive reviews, streamer endorsements, and comments saying “virus-free” are supporting clues at most—not safety certifications.
#1 Best Overall
![Norton 360 Deluxe Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Why cheats, unlockers, and “free” downloads deserve extra caution
A cheat can be risky even if it works as advertised. Tools that alter a game may request administrator access, load a driver, inject code into a running process, or ask for antivirus exclusions. That access can make it easier for malware to steal Steam, Discord, Epic, Riot, Microsoft, Google, or Apple credentials; take browser sessions; log keystrokes; install a remote-access tool; or add a cryptocurrency miner or other unwanted software.
Steam warns that malware aimed at gamers can be disguised as cheats, pirated software, fake demos or betas, mods, inventory managers, or communications software. A tool can also be changed after a player trusts its distributor, and “undetected” claims are difficult for an ordinary user to verify. A cheat may also violate the particular game’s rules and lead to an account or device ban; check that game’s own policy rather than assuming one rule applies everywhere.
Stop if installation instructions tell you to disable Defender or Play Protect, add an antivirus exclusion, turn off Secure Boot, paste an unexplained command into PowerShell, install an unknown certificate or profile, reveal a Steam or Discord token, or grant unrelated sensitive permissions. A driver or administrator prompt can be legitimate for some software, but the developer should explain why it is needed. “All cheats trigger antivirus” is not a reason to dismiss a warning.
A practical risk check before installing
Pause if several of these warning signs appear together:
Rank #2
- WITH THE HIGH SCORE AMONG THREAT INTELLIGENCE PROVIDERS, you know you’re in good hands. Stay safe from viruses, ransomware, phishing and more
- MAINTAIN YOUR GAMEPLAY SPEEDS with a solution that scans faster and uses fewer system resources than competitors, so it won’t slow you down
- KEEP YOUR GAMING RIG RUNNING SMOOTHLY with our System Optimizer, which detects system issues, wipes away unnecessary files, and makes deleted files unrecoverable
- THERE’S RARELY A CONVENIENT TIME FOR SOFTWARE UPDATES—especially not while you’re raiding. Our software updates automatically in the background, so it never gets in your way
- WEBROOT PROTECTION IS QUICK AND EASY TO DOWNLOAD, install, and run, so you don’t have to wait around to be fully protected
- The download is not linked from the developer’s official page, or comes from an anonymous uploader, private message, or newly created site.
- The page uses redirects, urgency, fake buttons, or promises “free skins,” “free currency,” or “undetected forever.”
- The file is an unfamiliar executable, DLL injector, loader, trainer, kernel driver, or password-protected archive.
- It asks for administrator access without a clear explanation, requests your game credentials, or wants browser cookies, session tokens, or an unrelated browser extension.
- A mobile app asks for accessibility, SMS, contacts, notification access, screen capture, or device-administrator privileges without a clear reason related to its features.
- The developer dismisses all security warnings as false positives but provides no verifiable identity, release history, explanation, or trusted file hash.
One warning does not prove a file is malicious. Multiple independent warning signs are a good reason not to install it. Open-source code improves inspectability, but a downloaded binary is not automatically verified as a build of that code. Prefer established maintainers and signed or otherwise verifiable releases where available.
Safer downloads on Windows 10 and Windows 11
Keep Windows, your games, and your launchers updated. Leave Microsoft Defender, SmartScreen, and potentially unwanted application protections enabled. Microsoft distinguishes potentially unwanted applications (PUAs) from malware: a PUA may show intrusive ads, install additional software, mine cryptocurrency, or behave unexpectedly without fitting the definition of malware. It can still be harmful or disruptive (Microsoft guidance on unwanted software).
Check Windows Security
- Open Windows Security from the Start menu.
- Select Virus & threat protection. Check that protection is on and update security intelligence if an update is available.
- Use Quick scan for a basic check. For a more thorough check, open Scan options and choose a Full scan or a custom scan.
- If you suspect persistent malware, consider Microsoft Defender Offline scan. It restarts the PC to scan outside the normal Windows session.
For file and app reputation checks, open Windows Security → App & browser control → Reputation-based protection and keep Check apps and files and available potentially unwanted app blocking enabled. Labels and availability can vary with Windows edition, updates, device state, or organization policy. Smart App Control is a Windows 11 feature whose availability and ability to be enabled again depend on the installation and device state; do not assume every PC can switch it on at any time. Microsoft explains the scan choices and reputation-based protections in its Defender scanning instructions and App & browser control guidance.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchBefore running a downloaded file, scan it with your security software and inspect where it came from and what it is. A clean scan is not proof of safety: new, modified, encrypted, or targeted malware can evade detection. Password-protected archives deserve extra caution because their contents may be harder for automated tools to inspect. Don’t upload private files, saves, or documents to a public scanning service without considering who may be able to access them.
Rank #3
- DEVICE SECURITY - Award-winning McAfee antivirus, real-time threat protection, protects your data, phones, laptops, and tablets
- SCAM DETECTOR - We'll automatically identify risky texts, emails, and videos that attempt to steal your personal or financial information. You can even use our mobile app to check social messages and QR codes for scams on-demand, without missing a beat.
- SECURE VPN – Secure and private browsing, unlimited VPN, privacy on public Wi-Fi, protects your personal info, fast and reliable connections
- IDENTITY MONITORING – 24/7 monitoring and alerts, monitors the dark web, scans up to 60 types of personal and financial info
- SAFE BROWSING – Guides you away from risky links, blocks phishing and risky sites, protects your devices from malware
If a legitimate mod is flagged
Some mods and utilities that inject code or modify game files may resemble malware to security tools. Do not disable protection globally or create an exclusion as your first response. Verify that the download came from the developer’s own page; compare its signature or hash with one published through a trusted channel, if available; look for a documented explanation and a signed or newer release; and report a suspected false positive to the security vendor. If you cannot establish the file’s source and integrity, don’t run it. A false positive is possible, but the label alone does not tell you that the file is clean.
Safer downloads on Android
Prefer Google Play when the game or utility is available there. Google Play Protect checks apps from Google Play and other sources, can warn about harmful apps, and may disable or remove them. Keep it on, but treat it as one layer—not a guarantee that an app is honest, privacy-friendly, or allowed by a game’s rules.
To check its settings, open Google Play Store → profile icon → Play Protect → settings. Keep Scan apps with Play Protect enabled, and consider enabling Improve harmful app detection if you install apps from outside Google Play. Menu labels may vary by Android version or device manufacturer (Google Play Protect help).
Sideload an APK only when there is a good reason and you can verify its origin. Confirm that the game publisher or project links to that exact download, that the developer and package identity make sense, and that the release information is plausible. An APK’s name or logo can be copied, and repackaged apps may differ from the original. Be suspicious of a supposed mobile port for a famous PC or console game if the publisher has not announced it, or of a game that asks for Play Protect to be turned off or requests permissions unrelated to play.
Rank #4
- ALL-IN-ONE PROTECTION – award-winning antivirus, total online protection, works across compatible devices, Identity Monitoring, Secure VPN
- SCAM DETECTOR - We'll automatically identify risky texts, emails, and videos that attempt to steal your personal or financial information. You can even use our mobile app to check social messages and QR codes for scams on-demand, without missing a beat.
- SECURE VPN – Secure and private browsing, unlimited VPN, privacy on public Wi-Fi, protects your personal info, fast and reliable connections
- PERSONAL DATA SCAN - Scans for personal info, finds old online accounts and people search sites, helps remove data that’s sold to mailing lists, scammers, robocallers
- SOCIAL PRIVACY MANAGER - helps adjust more than 100 social media privacy settings to safeguard personal information
In particular, question requests for SMS, contacts, accessibility access, notification content, screen capture, or device-administrator privileges. A game’s label or star rating does not explain why it needs those powers. The FBI’s 2026 advisory warns that installing apps from unfamiliar websites or third-party stores carries increased malware risk and recommends verified official app stores; that advisory is U.S.-focused, and risk conditions can vary (FBI IC3 mobile-app advisory).
Safer downloads on iPhone and iPad
Prefer the App Store. Check the publisher name, update history, reviews, and privacy disclosures; when possible, reach the listing from the publisher’s official site. Keep iOS or iPadOS updated. Do not enter Apple Account credentials into a web page reached through a gaming message, and be wary of instructions to install a configuration profile, certificate, or enterprise app to get a supposed game or update. For an update, open the App Store directly and check there.
Installation options and rules can vary by country and operating-system version, so there is no single installation path that applies to every iPhone or iPad user. A familiar logo or a link from a chat does not establish that a profile or download is genuine.
Recognize gaming phishing before it becomes account theft
Gaming scams often use urgency (“your account will be banned”), excitement (“claim free skins”), or social pressure (“vote for my team”). A link or QR code may lead to a convincing copy of Steam, Discord, a tournament site, or a publisher’s login page. After a player enters a password, one-time code, trade approval, or session token, an attacker may take over the account, steal inventory, or make purchases.
Best Value
- POWERFUL, LIGHTNING-FAST ANTIVIRUS: Protects your computer from viruses and malware through the cloud; Webroot scans faster, uses fewer system resources and safeguards your devices in real-time by identifying and blocking new threats
- IDENTITY THEFT PROTECTION: Protects your usernames, account numbers and other personal information against keyloggers, spyware and other online threats targeting valuable personal data
- REAL-TIME ANTI-PHISHING: Proactively scans websites, emails and other communications and warns you of potential danger before you click to effectively stop malicious attempts to steal your personal information
- ALWAYS UP TO DATE: Webroot scours 95% of the Internet three times per day including billions of web pages, files and apps to determine what is safe online and enhances the software automatically without time-consuming updates
Be wary of messages about held trades, tournament prizes, anti-cheat updates, account verification, or support agents who contact you first. Don’t share a password, recovery code, Steam Guard code, or session token. Open the platform app or navigate to its known site yourself instead of signing in through a message. Use a unique password for each account and enable multifactor authentication. Review active sessions, authorized devices, recovery details, purchases, and trades regularly.
For Steam, unsolicited messages claiming to be from Steam Support should be treated with suspicion; Steam says its official support channel is help.steampowered.com. Steam also recommends Steam Guard Mobile Authenticator. A familiar display name, avatar, logo, or voice does not authenticate a sender. Microsoft likewise warns that support scammers use fake error pages, popups, calls, email, text, or chat to get people to reveal information or install remote-access software; genuine Microsoft error and warning messages do not include a phone number (Microsoft tech-support scam guidance).
What to do if you clicked, installed, or logged in
If you downloaded a file but did not open it
- Delete the file and, if appropriate, empty the recycle bin.
- Run a security scan and review recent browser downloads and extensions.
- Do not open the file “just to see what it does.”
If you opened or installed a suspicious file
- Stop using the device for sensitive logins. If you see signs of active compromise, disconnect it from the internet.
- Update your security software and run a scan. On Windows, use Defender Offline if the threat may persist.
- Remove suspicious apps and browser extensions, and review recently installed software and startup items. Don’t download a second “repair” utility from an unrelated site.
- From a known-clean device, change passwords for affected accounts and any account that reused those passwords. Revoke unfamiliar sessions or devices and reset multifactor authentication if its settings may have been changed.
- Contact the game platform through its official support page. Check recovery email and phone numbers, payment methods, trades, purchases, and account activity.
- If unauthorized access continues or the device remains unstable, get qualified help or consider a full device reset. Back up important files carefully without carrying suspicious installers or unknown programs into the new setup.
If you entered credentials on a fake page
Act from a clean device: change the compromised password, change reused passwords elsewhere, revoke active sessions, and check that the attacker did not change recovery details or multifactor authentication. Contact the platform through its official support route and review transactions, inventory activity, and payment methods. If you entered payment details, contact the relevant financial provider. If malware may also have been installed, avoid using the affected device for these changes.
If a scammer obtained remote access
Disconnect the device, remove the remote-access software the scammer asked you to install, and run a full scan. Change passwords from a clean device and contact financial institutions if payment information was exposed. If suspicious behavior persists, consider resetting the device. The FTC advises stopping password or personal-information activity on a suspected infected computer, scanning with updated security software, and changing passwords from a different computer (FTC malware recovery guidance).
One-minute pre-install checklist
- Is the source the publisher, official store, or project page—and does the publisher link to it?
- Does the domain match exactly, without a shortened link or suspicious redirect?
- Can I identify the developer and find a credible release history?
- Does the file request administrator access or sensitive permissions? Is there a clear reason?
- Does the installation ask me to disable security, add an exclusion, reveal credentials, or run an unexplained command? If so, stop.
- Have I kept Defender, SmartScreen, or Play Protect enabled and scanned the file where appropriate?
- Can I verify a signature or hash from a trusted channel?
- Do I have unique passwords and multifactor authentication on my gaming accounts?
The safest choice is not necessarily the download with the most features or the strongest “undetected” promise. Prefer software with a verifiable source, an identifiable maintainer, ordinary and explained permissions, and a maintained distribution channel. If getting it requires trusting an anonymous link or weakening your security, skip it.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
