diff --git a/build/sign.bat b/build/sign.bat
index e860790..f719bfc 100644
--- a/build/sign.bat
+++ b/build/sign.bat
@@ -65,7 +65,8 @@ echo Using signtool: %SIGNTOOL%
 echo.
 
 echo 1. Signing exe...
-"%SIGNTOOL%" sign /f "%CERT_PFX%" /p "%CERT_PASS%" /tr http://timestamp.digicert.com /td sha256 /fd sha256 "%EXE_PATH%"
+REM 使用更安全的签名选项：指定描述、URL、时间戳服务器
+"%SIGNTOOL%" sign /f "%CERT_PFX%" /p "%CERT_PASS%" /d "WindowMsgBot" /du "https://github.com/ypshidifu/windowmsgbot" /tr http://timestamp.digicert.com /td sha256 /fd sha256 /v "%EXE_PATH%"
 if %errorlevel% neq 0 (
     echo [ERROR] Signing failed!
     pause