Question 1: Is the program itself trustworthy?
TreeSize is developed by JAM Software, a German company with a long history of publishing this and related Windows utilities. A long track record is a reasonable signal, but it is not proof by itself — the way to actually confirm a specific installer is legitimate is to check its digital signature, not to rely on the developer's reputation alone.
Legitimate Windows installers from an established publisher are typically signed with a code-signing certificate that ties the file to the company name. Do not skip this check just because the software has been around for years; check it on the specific file you downloaded, every time.
Question 2: Is the download itself safe?
This is where most real risk actually lives, and it has nothing to do with TreeSize as a program. Search results for popular Windows utilities routinely surface third-party mirror sites that repackage installers with bundled adware, browser toolbars, or worse. The program's own quality does not protect you from a bad source.
- Get the installer from the developer's own site or a source you have already verified, rather than a random download aggregator.
- Watch for download buttons that lead to an intermediate "download manager" instead of the installer file directly — that pattern is a common bundleware vector.
- Compare the publisher name shown at install time against what you expect; a signature that names an unrelated company is a hard stop.
Our download page discusses this in more detail, including why we do not host installer files ourselves and instead point you to the source.
Question 3: Is using it safe once it's installed?
Scanning a drive is read-only. Building the folder tree and calculating sizes does not move, modify, or delete anything, so running a scan carries essentially no risk to your data.
The risk appears the moment you act on what the scan shows. Deleting or moving a file from inside the program is exactly as permanent as deleting it in File Explorer — there is no extra undo layer. Our guide to deleting large files safely walks through how to avoid removing something you actually need.
Running the program with administrator rights widens what it can see and touch, including system folders and other users' files. That is sometimes necessary to get a complete scan, but it also means a mistaken deletion can reach further than it would under a standard account. See running TreeSize as administrator for when that trade-off is worth making.
A verification checklist you can actually run
- Right-click the downloaded installer file and choose Properties.
- Open the Digital Signatures tab. If it is missing entirely, treat that as a warning sign for this kind of software.
- Select the signature entry and view its details to confirm the signing certificate names the publisher you expect.
- Right-click the file again and run a scan with Windows Security (or your installed antivirus) before opening it, as a second, independent check.
- Only then run the installer, and watch the installation screens for any additional offered software you did not ask for.
A valid signature and a clean antivirus scan both reduce risk; neither one is absolute proof of safety. If anything about a download source feels off, that instinct is worth trusting over a checklist.
Common safety questions
Does TreeSize send my files or file names anywhere?
What a program transmits, if anything, is defined by its own privacy documentation and license terms, not by anything a third-party site can confirm. Check the developer's current privacy statement for specifics.
Can a scan accidentally delete files on its own?
Is it risky to scan a drive I don't fully trust, like a used external hard drive?
Why did my antivirus flag the installer even though the signature looks fine?
Continue reading
Last reviewed by the jam-software.org editorial team on . Spotted something out of date? Tell us.