Is it safe to use online PDF tools? What to check before you upload

Every online PDF tool works the same way at its core: your file is sent to a server, the server does something to it, and a result comes back. That is convenient, and for most documents it is perfectly fine. It also means that for a short time your document is on a computer you do not control. Whether that is acceptable depends on what the document is and how the service behaves. This guide lists the questions to ask, answers them for our own service, and is direct about the cases where an online tool is the wrong choice.

What actually happens to an uploaded file

1. Your browser sends the file over the network. If the address starts with https://, it is encrypted in transit and cannot be read by anyone in between.
2. The server stores the file temporarily and runs the conversion or edit.
3. The result is stored and a download link is produced.
4. At some point, the files are deleted. "At some point" is the part that varies: minutes, hours, days, or never, depending on the service.

The questions that matter are about step 4 and about what the service does with the file in between.

Questions to ask about any service

• Is the connection encrypted? Look for https:// and a padlock. Without it, do not upload anything.
• How long are files kept? A specific number ("deleted after one hour") is better than "we delete files regularly". A service that cannot tell you has not thought about it.
• Are files used for anything else? Training machine-learning models, "improving the service", marketing. The privacy policy should say no, in plain words.
• Who can access the files? Are download links guessable? Is there staff access?
• Where are the servers? Relevant if your organisation has data-residency rules.
• Does the site have a real Privacy Policy, Terms of Service and a way to contact a human? Anonymous tools with no contact page are a bad sign.
• Is there a watermark or a sign-up wall after you upload? Not a security issue, but a sign of how the service treats users.

How webutilitypro.com handles files

Since we are asking you to judge services by these questions, here are our answers.

• All pages and uploads use HTTPS.
• Files you upload and files we generate are stored on our server only while the job runs and for a short period so you can download the result. They are deleted automatically after 60 minutes. You can also delete them immediately with the delete button on the result.
• Your documents are not opened by staff, not used to train anything, not analysed for advertising, and not shared with anyone. They are processed by software and then removed.
• No account is needed, so we do not hold a profile that links uploads to you. Standard web server logs (IP address, time, page) are kept for security and are not tied to file contents.
• Passwords you enter to unlock a PDF are used for that one operation and are not stored.
• The site is run by a small team with a public Contact address and a Privacy Policy written for people rather than lawyers.

We say this plainly because it is the honest answer to a fair question, not because online tools are always the right choice. Sometimes they are not.

When to use offline software instead

Use software on your own computer, not any web tool including ours, for:

• Medical records, legal case files, financial statements of other people, anything covered by a professional duty of confidentiality.
• Documents your employer's policy says must not leave company systems. Many organisations prohibit uploading internal documents to any external service.
• Government-classified or export-controlled material.
• Anything you would be uncomfortable explaining if it leaked, even briefly.

Offline options are better than most people think:

• macOS Preview merges, splits, rotates, compresses (with a custom Quartz filter) and encrypts PDFs.
• LibreOffice (free, all platforms) converts Office documents to PDF and opens PDFs for editing.
• PDF24 Creator (free, Windows) offers most of what online tool sites do, locally.
• qpdf, Ghostscript, poppler-utils and ocrmypdf (free, command line) handle merging, splitting, encryption, compression and OCR with complete control, and are what many online tools run underneath.
• Your browser can print any PDF to a new PDF with a page range.

Several of our guides give the offline equivalent for each task: merging, splitting, compressing, protecting and OCR.

Reducing risk when you do use a web tool

• Remove what is not needed first. If a form wants one page of a statement, extract that page locally before uploading the file anywhere.
• Redact properly. Covering text with a black box in a drawing tool does not remove it; use a redaction tool that deletes the content (Redact PDF does this).
• Delete after downloading when the tool offers a delete button.
• Do not reuse a password you use elsewhere as a PDF password.
• Check the result, then close the tab; the download link is not meant to be shared.

A sensible rule

Use an online tool for the documents you would be happy to send as an ordinary email attachment: reports, forms, brochures, scans of public documents, your own CV. Use offline software for anything more sensitive than that. The web tool saves you time; it should never cost you a confidence.