Are online file converters safe?
You need to convert a file — HEIC to JPG, PDF to Word, WEBP to PNG — and the first page of search results is lined with free online converters. Drop your file, click a button, download the result. It takes thirty seconds and it works. But somewhere between dropping the file and downloading the output, your original went to a server you know nothing about. Whether that matters depends entirely on what the file contains.
What actually happens when you use one
The typical online converter works like this: your browser uploads the file over HTTPS to the operator's server. Server-side software performs the conversion. The result is stored temporarily and a download link is generated. You download it. The original and the output sit on that server until a cleanup job deletes them — which might be an hour later, a day later, or never, depending on the implementation.
During that window, the operator has your original file in full resolution with all its metadata. If the file is a photo, that includes GPS coordinates, timestamps, and device information. If it is a document, that includes the author name, revision history, and any content you thought you had redacted but only covered with a black rectangle.
The privacy policy question
Most reputable converters state that files are deleted after a fixed period — commonly one hour. Some are more specific; some are vague. A few popular ones say nothing at all.
Even when a privacy policy is clear and well-intentioned, it describes a promise, not a technical guarantee. The operator could change their policy, their server could be breached, or a backup system could retain files longer than intended. This is not conspiracy thinking — it is the ordinary reality of running infrastructure. Things go wrong, configurations drift, and data lingers in places engineers forgot about.
For a sunset photo from your holiday, none of this matters. For a contract, a medical record, a photo of your child, or a document involved in a legal dispute, you are trusting a stranger with something sensitive in exchange for a convenience that takes thirty seconds.
Cases where it went wrong
In 2023, the FBI issued a public warning about free online file converters being used to distribute malware. Some sites — often ad-heavy clones of legitimate tools — returned files with embedded malicious payloads. The converted PDF looked right, but carried a script that executed on opening.
Separately, security researchers have demonstrated that some converters retain files well beyond their stated deletion window, and that download links are predictable enough to be guessed by a third party. These are not exotic attacks. They are mundane failures of implementation.
How to check if a tool processes locally
Some browser-based tools do all their work on your device. The conversion library is loaded when the page opens, and it runs in your browser's JavaScript engine. The file never touches a network. You can verify this in under a minute:
- Open the page and let it load fully.
- Open your browser's developer tools (F12 on most browsers) and go to the Network tab.
- Drop a file and process it.
- Watch the Network tab. If no new request appears carrying your file, the processing happened locally.
An even simpler test: disconnect from the internet after the page loads, then try the conversion. If it still works, nothing is being sent anywhere.
A tool that processes locally and enforces a Content Security Policy blocking outbound connections offers a verifiable guarantee, not just a promise. The browser itself prevents the file from leaving, and you can confirm it with your own eyes.
When server-side conversion is the only option
Not every conversion can happen in a browser. Complex format transformations — Word to PDF with perfect layout fidelity, video transcoding, OCR on scanned documents — often require heavyweight software that does not run in a browser tab. For those cases, a server-side tool may be your only practical option. When that is the situation, prefer tools from established companies with clear data handling policies, and avoid uploading anything sensitive to a no-name site running on ad revenue alone.
For the conversions that can be done locally — image format conversion, metadata removal, basic file transformations — there is no reason to send your files anywhere.
Convert HEIC to JPG locally · Remove photo metadata locally · Remove PDF metadata locally