A free online converter is safe enough for a holiday photo and a poor choice for a passport scan unless it passes a few checks. Look for HTTPS, a stated deletion time, a clear limit on what is free, and no fake download buttons. For anything private, pick a tool that converts inside your browser and never uploads the file.
What actually happens when you convert online
Most online converters work the same way. Your browser sends the file to a server, software on that server converts it, and the result is offered back as a download. For a few minutes, at least, a copy of your file sits on a machine you do not control.
That is not alarming by itself. It is how the service works. The questions that matter are what happens to that copy afterwards, who can reach it while it exists, and whether the site tells you the answers in plain words.
A holiday snapshot and a scanned contract carry different risk, so the same tool can be fine for one and wrong for the other. Decide which kind of file you have before you pick a site.
The checklist before you upload
Run through these in order. The first three take ten seconds.
| Check | What good looks like | Red flag |
|---|---|---|
| Connection | The address starts with https and the browser shows no warning | A plain http address, or a certificate warning |
| Retention | A stated time, such as "deleted after 24 hours" | No mention of deletion at all |
| Account | Works without one for small jobs, or says clearly why it needs one | Demands an email before showing any result |
| Limits | File size and daily count are written on the page | You find out after the upload has finished |
| Download | One button, clearly the result of your job | Several large buttons, some of them ads |
| Privacy page | Exists, is readable, names what is stored | Missing, or copied boilerplate |
1. HTTPS is the floor, not a badge
HTTPS means the file is encrypted on its way to the server and back, so someone on the same coffee-shop network cannot read it. Every serious site has it, so its absence is a reason to leave. Its presence says nothing about what the site does with the file once it arrives. Do not treat the padlock as a verdict on the service.
2. Look for a retention time, and a number rather than a mood
"We respect your privacy" is not an answer. "Files are deleted after 24 hours" is. A specific time can be checked and held against the site later. A site that never states one is leaving the option open to keep your file for as long as it likes.
Read how the deletion is phrased too. "Deleted after" is a promise about a maximum. "May be deleted" is not a promise at all.
3. Notice whether you need an account
Needing no account is convenient and also means less data about you is collected. Needing one is normal for higher limits, saved history and paid features, and it is not a problem when it is explained. The warning sign is a site that hides the result until you hand over an email address, because that is a marketing list, not a conversion tool.
4. Limits should be visible before you start
Honest services print their limits: maximum file size, how many conversions you get, how long a batch can be. If a limit shows up only after a long upload, the site is using your time to push you toward a paid plan. It is a bad sign for the whole experience, though not a security problem as such.
5. Ads and fake download buttons
This is the check that catches most people. Some free sites surround the real button with large green "Download" buttons that are advertisements. They lead to other sites, sometimes to installers you did not ask for. A converter that runs in the browser should never ask you to install a program to get your result.
Before clicking, look at where the real result is: usually a link named after your file, with the new extension, and a file size. If you are unsure, hover over a button and read the address in the status bar. An ad points to another domain.
6. What happens after the job
Deletion is the part you cannot see. You get nothing on screen when a server removes your file. So the best you can do is read what the site says, and prefer the one that names a time and a scope: the uploaded file, the result, or both.
When the file is private, skip the upload
Some files should not travel at all: scans of identity documents, signed contracts, medical letters, bank statements, photos of children. For those, the safest converter is one that does the work on your own computer, inside the browser tab.
An in-browser tool reads the file with your browser, converts it there and hands you the result. No request carries the file anywhere. You can check this yourself. Open the browser's developer tools, switch to the Network tab, run the conversion, and watch whether a large upload appears. If the file never leaves, there is nothing to retain and nothing to delete.
The trade-off is range. Browsers are good at images and decent at PDF pages. They are not good at converting video, camera RAW or office documents, which need heavy software that lives on servers. So in-browser conversion is a narrow tool, and for the right job it is the best option.
What 1converter does, using the same checklist
Applying the list to this site, with only facts you can verify on the pages:
- Retention. Download links last 24 hours on the Free plan and for visitors without an account, and 7 days on paid plans. When a link expires, the stored files are deleted. The cleanup runs on a schedule, so removal can come a little after the exact hour. Read the privacy policy for what else is stored.
- Account. You can convert without one. Visitors without an account get 10 free operations in total, after which registering is required. Files up to 50 MB are accepted on the Free plan.
- Plans and limits. Daily allowances, file sizes and batch sizes are listed on the pricing page, before you upload anything.
- No upload at all, for some jobs. Private Mode converts image to image, image to PDF and PDF to image in your browser. The file is not sent anywhere. Everything else, such as video, audio, office documents and archives, is uploaded to the server.
One caveat is worth knowing. Private Mode relies on what your browser can decode. HEIC photos from an iPhone, for example, can be read there only in Safari. In other browsers the photo has to go through the server. If that is your case, the HEIC to JPG converter handles it, and the 24-hour deletion rule above applies.
A short routine you can reuse
Spend thirty seconds before any upload:
- Is the file private? If yes, look for an in-browser option first.
- Is the address HTTPS, with no browser warning?
- Does the site name a deletion time? If not, assume it keeps the file.
- Can you tell which button is the real download?
- Does it work without installing anything?
If a site fails two of these, close the tab. There are plenty of others, and a converted file is never worth a bad trade.
For everyday jobs with low stakes, such as shrinking a photo for a form, a normal server-side converter is fine. A PNG to JPG conversion of a screenshot of a recipe does not need a security review. Save the caution for files you would not want a stranger to see, and keep originals until you have checked the result opens correctly.
What this checklist cannot tell you
Be honest about the limits of the method. You cannot see inside a server. A site can state a deletion time and not keep to it, and from outside you have no way of auditing that. A checklist reduces the chance of picking a careless or deceptive service, and it does not replace choosing a tool that never receives the file when the file really matters.
That is why the rule of thumb is simple. Low stakes: check the basics and go ahead. High stakes: convert on your own device, or do not convert online at all.
Frequently asked questions
- Can an online converter see my file?
- Yes, in the sense that the file is uploaded to its server so the conversion can run there. HTTPS protects it in transit, but what happens afterwards depends on the service, so look for a stated deletion time.
- How can I tell whether a converter really uploads my file?
- Open the browser developer tools, go to the Network tab and run the conversion. A large outgoing request means the file was uploaded. If nothing sizeable leaves the page, the work happened in your browser.
- Which files should I not upload to a free converter?
- Identity document scans, signed contracts, medical letters, bank statements and similar private papers. Use a tool that converts in the browser, or keep the file on your device.
- Does 1converter delete my files?
- Download links expire after 24 hours on the Free plan and without an account, and after 7 days on paid plans. At expiry the stored files are deleted, with the cleanup running on a schedule.