diff --git a/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java b/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
index 6503e8d4f21..ac5677212c6 100644
--- a/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
+++ b/arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
@@ -215,6 +215,7 @@ public boolean checkSignature(MultiStepProgress progress, URL signatureUrl, Prog
       download(signatureUrl, packageIndexSignatureTemp, progress, statusText, progressListener, true);
 
       if (skipVerification) {
+        Files.move(packageIndexSignatureTemp.toPath(), packageIndexSignature.toPath(), StandardCopyOption.REPLACE_EXISTING);
         log.info("Allowing insecure packages because allow_insecure_packages is set to true in preferences.txt" +
           " but the signature was download");
         return true;