FileDial › Guides › Privacy and security
Are online PDF converters safe?
By Himanshu Ranjan · Updated 8 November 2026
Many online PDF converters do the job without incident, but every upload means trusting a stranger's servers, storage and staff with your file. In March 2025 the FBI's Denver office warned that some free converters return files carrying malware, and in 2024 researchers found two PDF services had left about 89,000 uploaded files exposed. For IDs, contracts, tax, medical and client files, converting on your own computer avoids that risk entirely.
The short answer: it depends on who you are trusting
An online converter is a website that takes your file, processes it on its own computers and hands back a result. Plenty of these sites are run carefully and delete files promptly. The issue is not that every converter is dangerous. It is that you usually cannot tell the careful ones from the careless or malicious ones by looking at the page.
When you upload a PDF, a copy of it leaves your control. It travels to a server you have never seen, may be stored for minutes or much longer, and may be backed up, logged or kept in cloud storage you know nothing about. For a menu or a flyer, that rarely matters. For a passport scan, a signed contract or a tax return, it matters a great deal.
So the useful question is not "are online converters safe?" but "is this file one I would be comfortable handing to a stranger?" If the answer is no, do the job on your own computer.
What the FBI warned about in March 2025
On 7 March 2025 the FBI Denver Field Office warned that free online document converter tools are increasingly being used to spread malware. The warning was notable because the scam does not look like a scam: the conversion works and you get the file you asked for. The returned file, though, can carry malware that leads to ransomware.
The FBI also said such sites can scrape personal data from the documents people upload, including identity numbers, banking and cryptocurrency details, email addresses and passwords. In other words, the risk runs both ways: what you upload can be harvested, and what you download can be harmful.
What happened with PDF Pro and Help PDF in 2024
Even honest services can make mistakes with storage. In research reported on 11 July 2024, Cybernews found that two online PDF services, PDF Pro (pdf-pro.io) and Help PDF (help-pdf.com), had left Amazon S3 storage open. That exposed 89,062 user-uploaded files: 87,818 from PDF Pro and 1,244 from Help PDF.
According to the research, the exposed files included passports, IDs, certificates and contracts, which are exactly the kinds of documents people convert, compress or merge before sending them somewhere official. Cybernews said the providers did not respond. BGR also reported the findings.
The lesson is not about those two sites in particular. It is that once a file sits on someone else's storage, its safety depends on their configuration, not your care.
A checklist for judging any online converter
If you do use a website, a few minutes of checking cuts the risk. None of these guarantees safety, but a site that fails several of them is a poor place for anything personal.
- Who runs it? Look for a named company, a real address and contact details. Anonymous sites with no ownership information deserve extra caution.
- Does it say how long files are kept? A clear, specific deletion policy is better than vague promises. No policy at all is a warning sign.
- Does it ask for more than it needs? A converter has no reason to want your email address, an account or browser extension installs just to change a file format.
- Is the download what you expected? A PDF to Word conversion should give you a .docx, not an .exe, a .zip you did not ask for, or a prompt to install software.
- Did you reach it from a search ad or a pop-up? Typing a known address yourself is safer than clicking whatever appears first.
- Is the address spelled correctly? Look-alike domains are a common trick.
- Scan anything you download, and be suspicious of files that ask you to enable macros or editing before they show content.
- Ask what happens if this file leaks. If the honest answer is "identity theft" or "a breach of client confidentiality", do not upload it.
Files that should stay on your own computer
Some documents are worth keeping off other people's servers no matter how reputable a site looks. As a rule of thumb, keep these local:
- Identity documents: passports, driving licences, ID cards, visas and residence permits.
- Contracts and agreements, especially signed ones or anything under negotiation.
- Tax returns, payslips, bank statements and anything with account numbers.
- Medical records, test results, prescriptions and insurance claims.
- Client files: anything a customer, patient or employer has trusted you with.
- Legal documents, court papers and HR files.
- Anything containing other people's personal details, such as staff lists or application forms.
How to do common PDF jobs on a Mac without uploading
Many everyday PDF tasks can be done on a Mac without any website. Preview, which comes with macOS, can combine PDFs, reorder and delete pages, fill and sign forms, and export a PDF with a password. Its Quartz filter for reducing file size exists, but it compresses heavily and can make documents look rough, so check the result. For quick one-off jobs, try Preview first.
For jobs Preview does not cover well, or when you have many files, FileDial runs every tool on your Mac. Files are never uploaded, and all tools work with Wi-Fi off. You select a file in Finder, hold the right Option key, and pick a tool from the dial that opens at the pointer. The result is saved as a new file beside the original, which stays unchanged.
Common offline PDF jobs and where to read more:
- Compress a PDF with Compress › Compress PDF, Compress PDF (strong), or Email-safe (under 20 MB).
- Convert a PDF to Word or turn PDF pages into JPGs.
- Merge PDFs and split a PDF.
- Make a scanned PDF searchable with OCR.
- Password-protect a PDF before you send it.
- Redact a PDF so hidden text is really gone.
- Combine images into a PDF, for example phone photos of a signed form.
When an online converter is a reasonable choice
Being honest about trade-offs matters. Online tools work on any device with a browser, including a shared or work computer where you cannot install software, a Chromebook or a phone. For a public document, such as a brochure, a published report or a recipe, the privacy risk is small and a reputable site is a reasonable option.
The point is to choose deliberately. Use a website when the file is not sensitive and the site passes the checklist above. Use a tool on your own computer when the file is personal, confidential or belongs to someone else, or when you need to process many files at once.
Questions
Are free online PDF converters safe?
Many work without problems, but you cannot easily verify how a site stores or handles your file. In March 2025 the FBI Denver Field Office warned that some free converters return files carrying malware and can scrape personal data from uploads. Avoid uploading anything sensitive.
Do online PDF converters keep my files?
It varies by site. Some state that they delete files after a set time, others say nothing. Even with a deletion policy, a file can be exposed while it is stored, as happened when two PDF services left cloud storage open in 2024.
What happened in the PDF Pro and Help PDF exposure?
Cybernews reported on 11 July 2024 that PDF Pro and Help PDF left Amazon S3 storage open, exposing 89,062 user-uploaded files, including passports, IDs, certificates and contracts. Cybernews said the providers did not respond.
Can I convert or compress PDFs on a Mac without uploading them?
Yes. Preview, built into macOS, handles merging, page edits, signing and password export. FileDial adds tools such as PDF to Word, OCR, compression and redaction, all running on your Mac with files never uploaded.
How can I tell if a downloaded converted file is dangerous?
Check that the file type matches what you asked for, be wary of executables, unexpected archives or prompts to enable macros, and scan it with security software. If in doubt, do not open it.