Is WeTransfer Safe?

If you use or plan to use WeTransfer, you need to know: Is WeTransfer safe? 

Below, we explain whether WeTransfer is: 

• Safe to use. 
• Good for privacy. 

We also look at some steps you can take to improve both your safety and privacy when using this online service. 

What Is WeTransfer?

WeTransfer is a file-sharing service that allows users to send large files over the internet quickly and easily. 

Founded in 2009 in the Netherlands, WeTransfer offers both free and paid services for individuals and businesses. WeTransfer is known for its user-friendly interface, which makes it easy for users to upload and share files without needing an account or complex setup.

Files can be shared via email or a download link. WeTransfer Pro offers additional features such as password protection, customizable backgrounds, and the ability to track downloads.

Is WeTransfer Safe?

WeTransfer is generally considered safe for sharing files. However, it is not recommended for sensitive file sharing because it doesn’t use end-to-end encryption.

WeTransfer uses TLS (Transport Layer Security) encryption during the transfer process to protect the files as they are being uploaded and downloaded and AES 256-bit encryption for data at rest. 

Files are stored on secure servers, and the company adheres to data protection regulations, such as the GDPR (General Data Protection Regulation) for EU users.

The service says it performs “rigorous security testing” like vulnerability scanning and penetration testing and collaborates with Microsoft for threat intelligence sharing to keep its platform secure. 

WeTransfer implements access controls for all users, including free ones. Files uploaded by free users are accessible via a unique download link. In 2019, WeTransfer issued a security notice saying it sent some file transfer emails to the wrong people for two days. 

WeTransfer Pro users can add password protection to their files and set expiration dates for additional security.

To protect users from receiving emails from spoofed accounts with bogus malicious links, WeTransfer now verifies all email addresses before allowing links to be sent. It also uses two-factor authentication to protect accounts from being accessed by unauthorized users. 

WeTransfer receives a security rating of 828 out of 950 from the cybersecurity company UpGuard.

Some concerns flagged include a lack of secure cookies, a Content Security Policy not being implemented, HttpOnly cookies not being used, and the domain not being found on the HSTS preload list.

Is WeTransfer Private?

Depends on your definition of “private.” 

According to its website, WeTransfer takes privacy seriously. It offers multiple privacy settings that users can adjust to their preferences, including turning off first- and third-party cookies. Users can select what cookies they want to turn off or individually turn off sharing with any particular third party that WeTransfer partners with.

Because WeTransfer doesn’t have zero-knowledge encryption, it can scan your uploaded files. As it says in its terms of service, your content is yours unless you’re doing something illegal, in which case it can block or delete your files and suspend your account. 

In its privacy policy, WeTransfer clearly outlines the type of data it collects, how it uses it, and how long it retains it for. 

WeTransfer’s privacy policy gets a “Grade D” from Terms of Service; Didn’t Read (ToS;DR), a project that rates internet services terms of service and privacy policies.

Some of the concerns highlighted include WeTransfer combining your profile across various products, gathering information about users from third parties, and potentially using your personal information for marketing purposes.

How to Improve Your Safety and Privacy on WeTransfer

For a safer and more private experience on WeTransfer, follow these steps:

• Use WeTransfer Pro. With WeTransfer Pro, you can set passwords for your files. Only recipients with the password can access and download the files. Additionally, you can control how long your files are available for download by setting custom expiration dates. You can also monitor who has downloaded your files and when, allowing you to keep track of access.
• Encrypt files before uploading. Encrypt your files before uploading them to WeTransfer. 
• Securely share links. Share download links through secure, encrypted communication channels. Avoid using public or unsecured platforms to share links.
• Verify recipients. Double-check email addresses or contact information to ensure your files are sent to the intended recipients.
• Minimize public access. Instead of generating a public link, send the files directly to specific email addresses using WeTransfer’s email option.
• Use strong passwords and two-factor authentication. If you use password protection, ensure the password is strong, unique, and not easily guessable. Enable two-factor authentication on your email account and any other service used in conjunction with WeTransfer to add an extra layer of security.
• Stay updated. Regularly update your operating system, web browser, and any security software to protect against vulnerabilities.
• Delete files after download. Once the recipients have downloaded the files, manually delete them from WeTransfer to minimize the time they are stored online.
• Be aware of phishing. Be cautious of phishing attempts. Verify any unexpected communications that ask for access to your WeTransfer files.