![\"Illustration](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2025\/04\/Dorothy-handing-file-to-evil-Wizard-of-Oz-document-converter-site-safety-600x300-1.jpg\")
<\/p>\n<\/p>\n
At some point, you’ve likely encountered a file that just wouldn’t open. Perhaps someone made it with an app you don’t have. Or maybe you found a video that QuickTime won’t play.<\/p>\n
You might have also experienced situations where someone needs a file from you in a specific format; they don’t accept Microsoft Word docs or HEIC images, but only accept PDFs or JPEGs.<\/p>\n
When faced with such situations, you might turn to Google (or your preferred search engine) for help. Chances are that you’ll get a long list of sites that claim to be able to convert your file for you\u2014or that offer you an app that will supposedly convert it. But how do you know whether these sites are safe?<\/p>\n
There are many potential security and privacy concerns surrounding file converter sites. Let’s explore several reasons why you should exercise caution\u2014and why you may not even need to use such sites after all.<\/span><\/p>\n In this article:<\/em><\/p>\n Last month, the FBI’s Denver Field Office issued a press release<\/a>, warning “that agents are increasingly seeing a scam involving free online document converter tools.” In some cases, these sites offer Trojan horse downloads\u2014malware, and even ransomware.<\/p>\n The FBI says that such sites may also “scrape the submitted files” to extract sensitive data; this may include social security numbers, dates of birth, telephone numbers, banking information, cryptocurrency seed phrases, e-mail addresses, and passwords.<\/p>\n If for some reason you’re skeptical of the FBI’s report, it has been corroborated by a noted threat intelligence researcher. In a thread<\/a> on X, Will Thomas shared specific examples<\/a> and screenshots<\/a> of alleged file converter sites that had been used to distribute malware.<\/p>\n An FBI official told BleepingComputer<\/a> that “paid results” appearing in search engines often lead to such scams. This comes as no surprise to our research team at Intego; we’ve been reporting for years that poisoned Google Ads, in particular, are a common source of malware.<\/a><\/p>\n But what if you think you’ve found a site that looks safe? Should you trust that site with your file?<\/p>\n Before uploading a file to any site, consider what data your file may contain. Are there any real people’s names or contact info? Are there any financial account details, or any other possibly sensitive or personally identifiable information within the file? If so, you probably shouldn’t send a copy of it to any unauthorized parties.<\/p>\n In some cases, you might not care whether others can view your file, for example if it’s a school assignment or a mundane report for work. However, it’s important to know that documents may also contain hidden metadata that you may want to keep private.<\/p>\n Microsoft Office documents contain hidden authorship metadata. Screenshot: Intego.<\/p><\/div>\n Consider, for example, that Microsoft Word, Excel, and PowerPoint documents typically contain the full, real name of the original author of a document, along with the name of their employer. That may not necessarily be information you want to share with an untrusted site\u2014especially in combination with your work or home IP address, which is visible to every site you visit (unless you’re using a VPN<\/a>; learn more about how VPNs can protect your privacy<\/a>).<\/p>\n Also consider that photos taken on an iPhone or Android smartphone may contain hidden geolocation data<\/a>\u2014the GPS coordinates of where the picture was taken. This could inadvertently expose your home address to a file converter site.<\/p>\n Even if you’re pretty certain that there’s nothing sensitive in your file, there’s more to consider before uploading it to a file conversion service.<\/a><\/p>\n Some sites\u2014especially shady ones\u2014may not have a privacy policy. They may not even make any claims whatsoever about what they do with files submitted to their service. A privacy policy should answer questions such as the following.<\/p>\n Of course, even if a site does have a privacy policy, you should still exercise caution. Don’t assume that the site operator will actually comply with every claim in their privacy policy.<\/a><\/p>\n The geographical location of a server, or of the operator of a service, may also be worth considering. Some countries have laws or policies permitting the government to monitor all communications, or to compel a site owner to turn over all data that users submit to the site.<\/p>\n Perhaps\u2014although it might seem conspiratorial\u2014the site may even be operated by a foreign intelligence agency or someone acting on their behalf. What easier way is there to collect a broad swath of documents than to invite people to upload anything in exchange for some perceived benefit?<\/p>\n Alternatively, the site operator could be someone collecting data to sell on the black market. The location of the server and its operator are important here, too. Some countries turn a blind eye to cybercriminals who try to take advantage of foreigners. Even if you could prove that a site did something unethical with your data, that country’s law enforcement agencies may not be interested in punishing the site owner.<\/p>\n You can use a site like IPVoid’s Website Location Finder<\/a> to help identify or confirm where a site’s server is hosted.<\/a><\/p>\n <\/a>Macs actually come with several built-in ways to convert files from one format to another. Additionally, several popular third-party Mac apps can do still more conversions for free.<\/p>\n Apple’s iWork apps (Pages<\/strong>, Numbers<\/strong>, and Keynote<\/strong>) come free with Macs; you can re-download them from the App Store if you don’t have them in your Applications folder.<\/p>\n Since these apps are Apple’s equivalent to Microsoft Word, Excel, and PowerPoint, respectively, it’s no surprise that Apple lets you open and export to those formats. Each app also has its own unique export options:<\/p>\n <\/a>Any Apple app that handles files will allow you to export to PDF. If you don’t see a menu option to Export as PDF, you can alternatively go to File > Print\u2026 and look for the “PDF” drop-down menu near the bottom-left corner of the print dialog.<\/p>\n Most common image file formats will open in Apple’s Preview app<\/strong>, which comes with every Mac. After opening a file, click on File > Export\u2026 and you’ll see a Format menu. From there, you can select HEIC, JPEG, JPEG-2000, OpenEXR, PDF, PNG, and TIFF.<\/p>\n If you find an image file that Preview won’t open, or if you need to export to another format besides those listed above, try GIMP<\/a> instead.<\/a> GIMP<\/strong> (short for GNU Image Manipulation Program) is a free, open-source app that’s similar to Adobe Photoshop. It offers a plethora of image import and export formats; it will most likely be able to handle any format you desire.<\/p>\n If you’re looking for a video file converter specifically because QuickTime Player won’t open a file, consider trying a different player app, like VLC<\/a>, rather than a converter. VLC Media Player<\/strong> is a free, open-source multimedia player app that opens a wide variety of video and audio file formats. Via the File > Convert\/Stream\u2026 menu option, it can even convert files into WEBM, TS, OGG, ASF, FLAC, and WAV (“CD”) formats.<\/p>\n But if you really need a video file format converter, Handbrake<\/a> is likely your best option. Handbrake<\/strong> is a free, open-source video transcoder that can convert videos from “nearly any format.” It takes time (and a lot of CPU power) to convert large video files, but Handbrake works like a charm. It has a ton of advanced features and customization options for pros, too.<\/a><\/p>\n There are a handful of file converter sites run by well-known companies, such as the following:<\/p>\n Note that you may need to create an account to use these sites or some of their features. And remember: even though these are established businesses, it’s still a good idea to browse their privacy policy before you upload anything.<\/a><\/p>\n Even when you upload a file to a site with a good reputation, it’s wise to think carefully first.<\/p>\n For example, consider that even VirusTotal, a legitimate site for scanning individual files for malware, encourages caution when deciding whether to upload a file to its service. When you upload files to VirusTotal, antivirus companies and members of the security community may be able to download copies of those files. Users of the site sometimes inadvertently submit files that contain confidential or sensitive data. Thankfully, VirusTotal has a process<\/a> to request removal of sensitive data, but many online services are not so aware or accommodating.<\/p>\n If you’re looking for file converters online, remember: just because a page is listed near the top of a search results page doesn’t<\/em><\/strong> mean that the site is legitimate or safe. Threat actors often buy Google Ads disguised as legitimate sites just to leap to the top of Google Search results. And malicious sites can even make it to the front page of search results through search-engine manipulation.<\/p>\n Ultimately, it’s up to you whether to trust a site with your files. Before uploading, think about the potential sensitivity of any info or metadata in the file, consider whether the site is reputable, and peruse their privacy policy.<\/a><\/p>\n We discussed the FBI’s report about file conversion scams on episode 388<\/a> of the Intego Mac Podcast<\/a>.<\/p>\n\n
\n
The FBI warns of online file converter scams<\/h3>\n
Your files may contain sensitive, hidden data<\/h3>\n
![\"Microsoft](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2021\/09\/Microsoft-Office-Word-author-name-company-metadata.png\")
Does the site have a privacy policy?<\/h3>\n
\n
Where are the site and its owner based?<\/h3>\n
Can I easily convert files using free tools on my Mac?<\/h3>\n
Document conversion<\/strong><\/h4>\n
\n
Image conversion<\/strong><\/h4>\n
Video conversion<\/strong><\/h4>\n
Are there any file conversion sites that are safe?<\/h3>\n
\n
Always think carefully before uploading a file to any site<\/h3>\n
How can I learn more?<\/h3>\n