Is It Safe to Convert Files Online?
Mostly yes. The risks that are real are specific, and you can check for them in about a minute.
Short answer: for an ordinary file on a reputable site, yes. The three genuine risks are retention (your file sits on a server for a while), metadata (the file may carry more than you think), and bundled downloads (the installer offered alongside your result). For anything personal or confidential, use a tool that processes in your browser, so the file is never sent anywhere.
The question behind the question
"Is it safe" usually means one of three different things, and they have different answers:
- Will I get malware? Not from the file, in normal use. From what else the site offers you, quite possibly.
- Who can see my file? Depends entirely on whether it was uploaded at all.
- Will my file be kept? Yes, briefly, if it was uploaded. For how long is the number to look for.
Risk 1: the file sits on a server
Any converter that processes on a server has your file for some period. This is not sinister — it cannot convert what it does not have — but the window varies by an order of magnitude, and most people never look it up.
| MP3 Toolbox | Audio and video deleted about 15 minutes after the job is created. Image tools upload nothing at all. |
|---|---|
| 123apps | States files are deleted "a few hours" after you finish working with them. |
| TinyPNG | States images are retained for a maximum of 48 hours. |
| Unstated | A privacy policy with no retention period is the one to treat carefully. |
Checked October 2026 against each service's own published pages.
None of these are long by the standards of the web, and all three are stating a policy rather than hiding one. The point is that the number exists and is worth knowing before you upload a recording of a private meeting.
Risk 2: the file carries more than you think
This one catches people out far more often than malware does, because nothing warns you about it.
A photo straight from a phone usually contains the exact GPS coordinates where it was taken, the time to the second, and the device. An MP3 may carry ID3 tags with your name, a ripping program, or a purchase identifier. None of it is visible when you look at the file.
So "is it safe to upload this photo" partly depends on what the photo already knows about you. You can check in a few seconds with the EXIF viewer, which reads the file in your browser without uploading it, and strip it with Remove EXIF if you would rather not pass it on. There is more detail in what EXIF data is and how to remove it.
Risk 3: the download that is not your file
This is the actual malware vector, and it has nothing to do with conversion. A site offers you a "download manager", a codec pack, a desktop version "for faster conversion", or a browser extension. The converted file is the bait; the installer is the product.
The rule is simple: download the converted file and nothing else. A web converter never needs you to install anything. If a site makes installation part of the flow, close the tab — there are a dozen alternatives.
The converted file itself is a different matter. Re-encoding audio or an image produces new data from decoded content, so it does not carry an executable payload across. The exception is formats that can legitimately contain active content, such as PDF or Office documents, which is a reason to be more careful with a document converter than an audio one.
How to tell where the processing happens
This single distinction decides most of the privacy question, and sites are not always clear about it. Three ways to check for yourself:
- Turn off the internet. Load the page, disconnect, then try to convert. A browser-based tool carries on working. A server-based one fails immediately. This is the most reliable test and needs no technical knowledge.
- Watch the Network tab. Open developer tools (F12), select Network, then convert. An upload appears as a POST request with your file's size attached to it. No large request, no upload.
- Notice the speed. A 20MB file that processes the instant you pick it was not sent anywhere. Uploading takes as long as your connection takes.
On this site the split is deliberate and documented. Audio and video run on the server, because they need ffmpeg and your browser does not have it. Every image tool — compress, resize, convert, compress to size, passport photo, set DPI, EXIF viewer, remove EXIF, metadata editor — and the quiz video maker run entirely in your browser and send nothing. Try the disconnection test on any of them.
When not to use an online converter at all
Some files should not be uploaded to a stranger regardless of the retention policy:
- Identity documents. Passport scans, ID photos, driving licences. Use a browser-based tool, or a desktop program.
- Anything under a confidentiality obligation. Client recordings, medical material, unreleased work, legal documents. The policy may be excellent; the obligation is still yours.
- Material covered by a data protection regime. If you are handling other people's personal data professionally, uploading it to a third-party converter is a processing decision, not a convenience.
- Anything on a managed work device. Your employer may already have a rule about this, and it is usually the sensible one.
For these, the options are a browser-based web tool that you have verified, or a desktop program: Audacity for audio, VLC for conversion, GIMP or your operating system's own preview for images. All free, all offline.
A short checklist before you upload
- Does the privacy policy state a retention period, in a number?
- Is the connection HTTPS? (It will be, in 2026, but look anyway.)
- Is the site asking you to install anything? If so, leave.
- Does it demand an account before giving you the result?
- Would you mind if this exact file were seen by a stranger? If yes, use a browser-based or offline tool instead.
- For a photo: do you know what metadata it is carrying?
What this site does
Stated plainly, so you can hold us to it. Audio and video files are uploaded, converted with ffmpeg, and deleted automatically about fifteen minutes after the job is created, input and output alike. Nothing is logged about the contents. There is no account, so there is nothing to attach a file to. Image tools and the quiz video maker never transmit the file. The full text is in the privacy policy, and how it works describes the flow.
Related guides
- Best free MP3 converter — how the main options compare
- What is EXIF data — what your photos are carrying
- Removing EXIF data — and verifying it worked
- Removing MP3 metadata — the audio equivalent
Summary
Converting an ordinary file on a reputable site is safe. Check the retention period, decline every installer, and know what metadata your file is carrying before it leaves your machine. For documents, ID photos and anything confidential, use a tool that processes in the browser — and test that claim by disconnecting from the internet and watching it carry on working.