: Always use a checksum tool (MD5 or SHA-256) provided by a trusted source to ensure the file hasn't been tampered with during transit. Sandboxing