diff --git a/apps/site/pages/en/download/alpha.mdx b/apps/site/pages/en/download/alpha.mdx
index cc435c8af1e41..faad6a120030d 100644
--- a/apps/site/pages/en/download/alpha.mdx
+++ b/apps/site/pages/en/download/alpha.mdx
@@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel
Learn how to verify signed SHASUMS.
+On Windows, use the Windows Installer (`.msi`) for system-wide installations
+when possible. If you use a `.zip` or `.7z` archive for a system-wide
+installation, extract Node.js to a directory that is not writable by untrusted
+users. Avoid leaving the installation directory with permissions that allow
+other authenticated users to create or modify files in that directory.
+
Looking for Node.js source? Download a signed Node.js source tarball.
Check out our nightly binaries or
diff --git a/apps/site/pages/en/download/current.mdx b/apps/site/pages/en/download/current.mdx
index cc435c8af1e41..faad6a120030d 100644
--- a/apps/site/pages/en/download/current.mdx
+++ b/apps/site/pages/en/download/current.mdx
@@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel
Learn how to verify signed SHASUMS.
+On Windows, use the Windows Installer (`.msi`) for system-wide installations
+when possible. If you use a `.zip` or `.7z` archive for a system-wide
+installation, extract Node.js to a directory that is not writable by untrusted
+users. Avoid leaving the installation directory with permissions that allow
+other authenticated users to create or modify files in that directory.
+
Looking for Node.js source? Download a signed Node.js source tarball.
Check out our nightly binaries or
diff --git a/apps/site/pages/en/download/index.mdx b/apps/site/pages/en/download/index.mdx
index 9767b0d9bda2f..b6aaff732b9d0 100644
--- a/apps/site/pages/en/download/index.mdx
+++ b/apps/site/pages/en/download/index.mdx
@@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel
Learn how to verify signed SHASUMS.
+On Windows, use the Windows Installer (`.msi`) for system-wide installations
+when possible. If you use a `.zip` or `.7z` archive for a system-wide
+installation, extract Node.js to a directory that is not writable by untrusted
+users. Avoid leaving the installation directory with permissions that allow
+other authenticated users to create or modify files in that directory.
+
Looking for Node.js source? Download a signed Node.js source tarball.
Check out our nightly binaries or