Configure trust settings for files and folders

In Visual Studio 2022, we've revamped the Trust Settings functionality to show a warning whenever untrusted code is opened in the IDE. With Visual Studio 2022 version 17.12 and later, Mark of the web (MotW) security warnings are now integrated into the overall trust functionality.

Software developers are increasingly being targeted by malware. The new Trust Settings functionality aims to raise awareness about the risks of handling unfamiliar code, and helps protect against malicious actors, who are targeting scenarios ranging from opening content (for example, repositories, solutions, projects, and files) to building and running applications with Visual Studio.

By default, Visual Studio displays a security warning when the Mark of the Web identifier is detected. However, this default behavior can be customized to always show a security warning, regardless of the content's original location.

Customize trust settings

You can customize the trust policies to configure the security settings for opening content in Visual Studio.

When opening content from the web (Mark of the Web)

Visual Studio 2022 version 17.12 and later now shows a security warning when you try to open content tagged with the Mark of the Web (MotW) identifier. This new trust-related alert informs you of the possible security risks associated with opening files from potentially unsafe sources, such as internet downloads.

You can modify the default trust experience from Tools > Options > Environment > Security.

The Mark of the Web is a security feature used by Windows to identify files that originate from the internet. When you download a file, Windows adds this identifier to the file's metadata, signaling that the content may be unsafe to execute or open. Visual Studio 2022 uses this identifier to protect your development environment from potential threats.

Always require a trust decision

When Always require a trust decision is enabled, Visual Studio detects if you're attempting to open content that isn't designated as trusted and shows a dialog that warns you about the security implications. To enable the Always require a trust decision feature, follow these steps:

1. Open Tools > Options > Environment > Security.

2. In the Trust Policies pane, select Always require a trust decision from the Require a trust decision dropdown.

Note

The Skip trust checks for temporary locations Visual Studio creates automatically option is not enabled by default. It has no impact unless the Always require a trust decision option is also enabled.

Manage trust settings

Here's how to add trusted locations, and to remove them.

Add trusted locations

After you've enabled the feature, all content that you open with Visual Studio 2022 is considered untrusted until you add it to the list of Trusted locations. You can trust a folder location directly from the warning dialog. Here's how:

1. Choose the folder you want to trust (the current folder or the parent folder) from the Trust level dropdown list.

   

2. Select the Trust and continue button on the dialog.

   Visual Studio adds the folder path to the Trusted locations list at Tools > Options > Security.

You can also add folders to Trusted locations from the Trust Settings dialog. Here's how:

1. Open Tools > Options > Security. You can also open it by selecting Manage trust settings from the warning dialog.

2. Select Add a Folder in the right-hand Trust Policies pane.

3. Navigate to and select the folder you want to add to the trusted list.

   The folder path appears in the Trusted locations list. This folder that you added manually is listed as Trusted By the Local User.

   

Note

After you've enabled the Trusted locations feature, the folder path for any content you create in Visual Studio will automatically get added to the Trusted locations list. This folder path is listed as Trusted By the System.

Remove trusted locations

To remove trusted locations, follow these steps:

1. Open Tools > Options > Trust Settings.

2. Select the path you'd like to remove in the Trusted locations list, and then click Remove.

   Tip

   To select multiple entries, hold down Shift while you select the paths.

   The selected paths are removed from the Trusted locations list.

See also

Build an application in Visual Studio