Download Station Safety Scan Files and Secure the NAS
A machine that fetches files all night deserves two locks: scan what comes in, and secure the account that runs it. Both take minutes.
✍️ Technical Anshu📦 Synology DSM⏱️ 5 minute read
🎥 Watch the full setup in the video — Download Station installed and downloading, step by step
Convenience is the station's promise; safety is the price of keeping it. Two risks come with any always-on downloader: what the files contain and who can reach the box. This page handles both with Synology's own tools — nothing exotic, nothing paid — and ends with the honest limit of what tools can do for you.
Package Center > Safety tools (example)
Antivirus Essential Installed scan: Downloads folder, weekly
DSM version up to date
Admin account custom name, 2-step verification ON
Default 'admin' disabled
👆 The safety checklist in one panel — scanner on, account locked, system updated (values are examples)
1
Scan What the Station Brings Home
A download station collects files while you sleep — that is its job, and also why scanning is not optional decoration.
In Package Center, install Synology's free Antivirus Essential package if your model offers it
Run a scan on the download destination folder, and schedule regular scans of it
Be extra careful with anything executable: installers and programs deserve a scan before they are opened on any PC
Built-in protection on your PC (like Windows Security) is the second layer when a file is copied across. Two layers, neither skipped.
2
The Source Matters More Than the Scan
Honest truth: no antivirus rescues a bad habit. A scanner catches known threats; it cannot make a random file from a random corner of the internet trustworthy.
Download software from the maker's own website — the video itself demonstrates a clean, official download
Treat "free premium software" bundles and repacked installers as hostile until proven otherwise — they are the classic malware delivery vehicle
If a file's origin cannot be explained in one sentence, delete it. Disk space is cheaper than a cleanup
3
Secure the Account That Owns the Station
The station runs under DSM accounts, and a weak admin password turns your download box into somebody else's download box.
Give the default admin account a rest — create your own administrator and disable the default one, as Synology itself recommends
Use a long, unique password and enable two-step verification for administrators
Use a normal, non-admin account for everyday downloading where you can
Keep DSM updated — Package Center and DSM updates close real holes, not imaginary ones
4
Know What the Station Cannot Protect You From
Perspective, plainly: Download Station moves files. It does not judge them, and it cannot judge the rights side of them either — that part is entirely yours, every time. The technical safety on this page plus the legal rule below are the whole safety system. Both are simple; neither is optional.
⚖️ The standing rule, in full: One rule runs through every page of this set: download only content you have the right to download — your own files, free and legal releases, and media you own or are licensed to use. The station is just a tool; what you point it at is your responsibility.
🎥 See the Complete Setup in the Video
The video's setup uses DSM's own packages throughout — watch it to see the clean, official way this is meant to be done.
Yes. Antivirus Essential is Synology's free package in Package Center on supported models. It can scan folders such as your download destination on demand and on a schedule.
Is scanning enough to make any download safe?
No. Scanning catches known threats in files; it cannot make an untrustworthy source trustworthy. Downloading software from the maker's official site matters more than any scanner setting.
Why disable the default admin account?
Attackers try the username admin first, everywhere, automatically. Using your own administrator name and disabling the default removes the easiest half of a login guess, and two-step verification covers the rest.
This guide is based on the Technical Anshu video above • Stuck on a step? Ask in the video comments — that is where answers come from 🙏