You almost certainly know the situation when a friend or colleague sends you files in a format you can\u2019t open. For example, you asked for photos, expecting JPEGs or PNGs, but instead they arrive in HEIC format. What do most people do in this case? That\u2019s right, they look for a free online file-converter.<\/p>\n
If you\u2019re a long-time reader of our Kaspersky Daily blog<\/a>, you probably already know that the most popular method of doing most anything is hardly ever the safest. File conversion is no different. Let\u2019s figure out together what threats are lurking inside free online-converters, and find out how to change file format safely.<\/p>\n Why is this important? Because converting a file is not simply a matter of changing its extension \u2014 otherwise you could just rename the file from, say, EPUB to MP3. Instead, the converter program must read the file, understand what it contains, convert the data and re-save it in a different format \u2014 and each of these stages poses its own threats.<\/p>\n The first risk that springs to mind is personal data leakage<\/strong>. Even if you\u2019re a \u201cwho on earth needs my data?\u201d kind of person, you should still take care: your vacation snaps may be of no use to anyone, but confidential work documents are a different kettle of fish. When you upload a file to an online converter, you can never be sure that the site won\u2019t save a copy of your file for its own purposes. Uploaded data can easily end up in the hands of scammers, and even be used to launch an attack on your company. And if you get fingered as the intruders\u2019 entry point into the corporate network, your infosec team will hardly be thanking you.<\/p>\n If you think this threat applies solely to text or spreadsheet documents, and that a photo of some accounting statement can be safely uploaded and converted to PDF, think again. Optical character recognition (OCR)<\/a> was invented last century, and now, with AI, even mobile Trojans have learned to extract data of interest to attackers from photos in your smartphone gallery<\/a>.<\/p>\n Another common risk is malware infection<\/strong>. Some dubious converter sites may modify your files or add malicious code to the converted file \u2014 and without reliable protection<\/a>\u00a0you won\u2019t know about it until it\u2019s too late. The converted files may contain scripts, Trojans, macros, and other nasty stuff we\u2019ve covered in detail<\/a> many times.<\/p>\n Converter sites may also be phishing<\/strong>, so services asking you to register, enter a load of personal data, and buy a subscription just to convert a file from, say, PDF to DOC, should be eyed with suspicion. If you still plan to use an online converter, look for one that doesn\u2019t require registration, and never give it your payment details.<\/p>\n The safest way is to convert files locally; that is, on your own device without using third-party sites. This way, the data is guaranteed to remain confidential \u2014 at least until you connect to the internet. You can change a file\u2019s format using either system tools or popular programs.<\/p>\n For text and spreadsheet files, as well as presentations<\/strong>, Microsoft Office can help. It can read many file formats using the File \u2192 Open <\/strong>or File \u2192 Import<\/strong> commands (depending on the version of Office and the operating system), and save them in different formats using the File<\/strong> \u2192<\/strong> Save as<\/strong> \u2192 <\/strong>Save as type <\/strong>(or File format<\/strong>) or File \u2192 Export<\/strong> commands. The list of available formats is long: from PDF and HTML to the OpenDocument<\/a> standard.<\/p>\n If you don\u2019t have access to Microsoft products, you can use the free alternatives LibreOffice<\/a> and OpenOffice<\/a>, which also support various text and table file formats. On Windows, text documents can also be converted in a built-in WordPad editor, although it reads far fewer file types.<\/p>\n For macOS users, Apple\u2019s office applications (Pages, Numbers, Keynote) recognize and save documents in many different formats.<\/p>\n As for graphics files<\/strong>, things are even simpler. Built-in operating-system tools can help convert images from PNG to JPEG. On Windows, just use this command in Paint: File<\/strong> \u2192<\/strong> Save as<\/strong>. macOS users don\u2019t even need to open any programs \u2014 just right-click the image in Finder<\/strong> and select Quick Actions \u2192 Convert Image<\/strong>. The window that opens gives you a choice of format (PNG, JPEG, HEIF) and converted image size.<\/p>\n If the above conversion options aren\u2019t enough \u2014 for example, you\u2019re handling audio\/video files or specific file formats \u2014 look for offline tools with a solid reputation as free and open-source software (FOSS).<\/p>\n For video (and many audio) formats, check out Handbrake<\/a> (Windows, macOS, Linux) and Shutter Encoder<\/a> (Windows, macOS, Linux); for audio, try Audacity<\/a>, and for images, ImageMagick<\/a> (Windows, macOS, Linux).<\/p>\n Most multimedia converters simply add a graphical interface to FFmpeg<\/a>, perhaps the top tool for converting multimedia formats. Its only drawback (which for some is a plus) is that it only works from the command line.<\/p>\n If you\u2019re fine with the command line, FFmpeg is the obvious choice (but, being fine, you\u2019ve probably got it installed already). Another great choice for command line fans is Pandoc<\/a> \u2014 a versatile converter of text and markup formats. Incidentally, under Extras<\/a> on the Pandoc website, you can find many third-party utilities for adding a graphical interface to this converter, or embedding it in other editors, services, or even operating systems.<\/p>\n All of the above converters are FOSS (free and open-source software), and support at least the most popular operating systems: Windows, macOS, Linux.<\/p>\n When choosing other offline converters, make sure that the conversion really does take place locally<\/strong> \u2014 many tools simply provide an interface to online converters and still send your source files to a server. This is very easy to check by disconnecting from the internet before converting. If the tool doesn\u2019t work, it\u2019s not an offline converter.<\/p>\n Sometimes there\u2019s no avoiding online converters \u2014 for example, you were sent a file in some highly exotic or outdated format. The next section looks at how to minimize threats when converting files online.<\/p>\n Alas, it\u2019s impossible to guarantee confidentiality when using an online converter. Its creators can write whatever they want in the site\u2019s policies, but you\u2019ll never know what actually happens to your uploaded data. Therefore, the golden rule is: never convert sensitive information online.<\/p>\n If you have a Google account (and who doesn\u2019t?), you can upload the file you want to convert to Google Drive (most office formats are accepted), right-click, and open it in Google Docs\/Sheets\/Slides, then download it in a different format. Among the pluses, this method also works on mobile devices \u2014 although in this case it\u2019s more convenient to open the file in the relevant Google editing tool.<\/p>\n Another fairly safe way to convert either text or graphics files is Adobe\u2019s online converter<\/a>. You can even use it for free on a smartphone \u2014 but there\u2019s a catch: all uploaded data gets stored on Adobe\u2019s servers, making this method unsuitable for confidential files.<\/p>\n Follow these rules to ensure maximum safety when converting files online:<\/p>\n Lastly, a small life-hack that few people know about. Sometimes you don\u2019t need to convert a file to another format at all, but just extract information from it; for example \u2014 pull images out of a text document or presentation in their original format. Doing this even with native editors is usually time-consuming and inconvenient \u2014 you have to export the images one by one, and the editors might change their size or compress them, deteriorating the picture quality.<\/p>\n But there\u2019s a way round this. The secret is that files of many formats are nothing more than a compressed folder with subfolders that store \u201cpieces of the puzzle\u201d: text, images, embedded videos, and the like. And it\u2019s all zipped<\/a>. That means that almost all office-suite files are ZIPs with the extension changed to DOCX, PPTX, PAGES, etc.<\/p>\n To extract all the contents from this \u201carchive\u201d, you simply need to rename the file, changing its extension to ZIP, and then unzip it. The result will be a folder with subfolders in which all the \u201cingredients\u201d of the original document are neatly laid out.<\/p>\nPersonal data leakage, malware, and other threats<\/h2>\n
How to convert files locally<\/h2>\n
How to convert files online as safely as possible<\/h2>\n
\n
Unzip this<\/h2>\n