Are online file converters safe? What happens to a file you upload
2026-10-12
Searching for a converter and dropping a file into the first result is how most people do it. Usually nothing bad happens. But "usually" depends on what the file is and who runs the site, so it is worth knowing what you are actually agreeing to.
What happens when you upload
A server-based converter receives a complete copy of your file. It has to: the conversion runs on its machines. From that moment the copy is outside your control, and what happens next is decided by the operator.
- It is stored, at least briefly. Most services say they delete files after a period, commonly somewhere between an hour and a day. You cannot check that they do.
- It can be read. A connection over HTTPS protects the file on the way there. It does not protect it from the service itself.
- The download link is often the only lock. Many services hand back a link that works for anyone who has it, for as long as the file exists.
- Metadata goes with it. Photos carry location and device details; documents and recordings carry names and dates.
None of this means a given service misbehaves. It means you are trusting it, and with a well-known service and an unimportant file that is a reasonable trade.
Files that should not be uploaded
| Kind of file | Why it matters |
|---|---|
| Photos or scans of ID, passports, bank cards | Enough to impersonate you if the copy leaks |
| Screen recordings | They capture whatever was on screen: messages, account numbers, notifications |
| Voice memos and call recordings | Other people are in them and did not agree to the upload |
| Work files under a confidentiality agreement | Uploading to a third party may itself be the breach |
| Medical, legal and financial documents | Sensitive by nature, and often regulated |
| Photos and videos of children | There is no way to take a copy back |
Warning signs on a converter site
- It asks you to install something. A converter that needs a browser extension, a "download manager" or a desktop helper to finish the job is the most common route to adware.
- The result is not the file type you asked for. If you converted a video and the download ends in .exe, .msi, .dmg or .zip, do not open it.
- Several download buttons. Ads dressed up as download buttons are a sign the operator earns from misclicks.
- It asks for notification permission before letting you download.
- No privacy policy, or one that does not say how long files are kept.
Ways to convert without handing the file over
- Tools already on your device. Preview on a Mac and Photos or Paint on Windows can save an image in another format. Phone gallery apps can trim video.
- Desktop programs. VLC and HandBrake are free, open source, and handle large videos better than any website.
- Converters that run in the browser. A newer kind of site does the conversion inside the page itself, so the file is read locally and never sent. This site is one of them.
How to tell whether a site really converts locally
"Nothing is uploaded" is easy to write on a page. It is also easy to test, on this site or any other that makes the claim.
- Load the page and convert one small file, so anything the page needs is downloaded.
- Disconnect from the internet. Switch off Wi-Fi or turn on airplane mode.
- Convert a second file. If it works, the conversion cannot be happening on a server.
The details of how this works here, and its limits, are in how in-browser conversion works.
When uploading is fine
For a file with nothing private in it, such as a logo, a meme or a public video, a reputable server-based converter is a perfectly good choice, and for very large files or document formats it is often the better one. In-browser conversion is limited by your device: on this site files over 2 GB are refused and long videos are slow. The point is not that uploading is always wrong. It is that the decision should depend on the file.