Security
Understand the safeguards around Converter.now uploads, randomized paths, safe filenames, restricted converter commands, private libraries, and expiring downloads.
The short version
Uploads use randomized server paths, filenames are sanitized, subprocesses run without a shell, downloads use high-entropy tokens, and account libraries enforce ownership checks.
How Converter.now protects file operations
Security starts before the upload button. Classify the file, remove data that is not needed, and follow the rules of the organization that owns it. Converter.now then limits paths, names, access, execution, and retention during the conversion workflow.
Random paths and safe names
Uploads are written under randomized job directories. User filenames are sanitized before storage. Download links use high-entropy tokens instead of exposing a local file path.
Restricted converter commands
External conversion engines receive argument lists without a command shell. Time limits stop stalled work. The application checks requested routes and handles unsupported formats as errors.
Owned library access
Saved-file queries are tied to the signed-in account. Downloads and deletion actions check ownership. Session cookies use HTTP-only and same-site controls, with secure cookies enabled in production.
A quick checklist
- ✓Scan unexpected files before opening or uploading them.
- ✓Do not process secrets in an unapproved online service.
- ✓Review metadata, macros, attachments, and embedded objects.
- ✓Delete temporary and saved copies when the work is complete.
Key facts
- Command execution
- Converter processes run without a shell.
- Browser protection
- Responses set content-type, referrer, permissions, and content-security headers.
- Download access
- Random tokens identify temporary results; saved files also require account ownership.
- Retention
- Temporary inputs and outputs are scheduled for short-lived deletion.
Next, you can read the privacy policy, learn about safer uploads, contact the team.
Last updated July 31, 2026