Verification answers 'is this file genuine?' - but the better question is 'why did the file ever pass through untrusted hands?' These two routes pull Windows directly from Microsoft's servers, so the file is genuine by origin and the hash check becomes a formality.
Every fake-ISO problem is a supply-chain problem: the file travelled through uploaders, mirrors and pen drives before reaching you. The Media Creation Tool and Rufus's built-in download both cut the chain to its shortest form - your PC asks Microsoft's servers, Microsoft's servers answer. Neither route costs anything, and between them they cover the current release, several older releases, and both ISO and ready-to-boot USB outcomes.
Download the Media Creation Tool from the Windows 10 or 11 page on microsoft.com and run it. Accept the licence, choose Create installation media for another PC, pick language, edition and architecture, then choose ISO file to save a file you can verify and keep, or USB flash drive to write bootable media directly. The tool downloads from Microsoft and assembles the image itself. Its honest limits: it offers the current release only, in the standard consumer edition set - if you need an older build or a business-editions ISO, use the licensing portal or Route 2.
Rufus is famous for writing bootable USBs, but its download feature is the part that matters here: press the small arrow beside the SELECT button, choose DOWNLOAD, and Rufus runs a script that fetches release ISOs - including several older Windows versions - from Microsoft's own download servers. The file that lands on your disk is Microsoft's file; Rufus only carried it. Two disciplines keep this route clean: get Rufus itself only from rufus.ie, and let its requests go to Microsoft domains - the script shows what it fetches. Once downloaded, hash the ISO and keep the verified file as your master copy.
For a single home reinstall, the Media Creation Tool is the calm choice - guided, current, impossible to aim at the wrong file. For a technician's library, Rufus earns its place: older releases for older machines, one tool that both fetches and writes, and ISOs you then verify once and reuse. Businesses under an agreement skip both and use their portal copies, whose published hashes make verification instant. In all three cases the pattern is identical: the shortest possible path between Microsoft and you, with a hash check as the receipt.
Every step shown live — checking a real ISO with the verifier tool and with PowerShell.
▶️ Watch Full VideoThe tool assembles media from Microsoft's servers; the ISO it saves is a Microsoft-built image of the current release. Hash it and compare - it should match the published value for that variant, and checking keeps the habit strong.
Rufus from its official site, rufus.ie, is a long-standing open-source tool, and its download feature fetches from Microsoft's servers. The risk to avoid is a fake 'Rufus' from a download portal - source discipline applies to tools too.
The Windows 10 download page and Media Creation Tool remained available after Windows 11 became the focus, and Rufus's download list includes Windows 10 releases. Consumer availability changes over time - the portal is the fallback for agreement customers.