Is WeTransfer safe? Links, passwords, phishing and the 2025 AI-terms row

WeTransfer is safe for everyday files. Transfers are encrypted, free ones delete themselves after 3 days, and the company is not in the business of reading your uploads. The risks that actually bite are around the link: anyone who has it can download, the free plan cannot add a password, and fake "you've received files" emails are a common phishing trick. Here is each risk, the 2025 AI-terms row explained, and what to do for files that need more control.

What WeTransfer protects

• Encryption. Files are encrypted on the way up and while stored, per WeTransfer's security pages. End-to-end encryption is listed only on its Enterprise plan.
• Malware scanning, on paid plans. WeTransfer's pricing page lists automatic malware scanning as an Ultimate feature, so on Free, treat an unexpected file with the usual caution.
• Short lifetime. Free transfers are removed after 3 days, so a leaked link stops working quickly. We cover the exact rules in how long WeTransfer links last.
• Email verification. Sending by email requires verifying your own address, which makes it harder to impersonate a sender through WeTransfer itself.

The real risks, and what to do about each

A link is a key, and it can be copied

A WeTransfer link is not tied to a person. Forward it, paste it in a group chat or let it land in a shared inbox, and everyone who sees it can download the files until the transfer expires. On the free plan you cannot add a password, and you cannot revoke a link early except by deleting the transfer from your account.

Phishing that looks like WeTransfer

Because people expect WeTransfer emails from strangers, attackers copy them. The tell is usually the link: a real one goes to wetransfer.com (or we.tl), and a real download never asks you to sign in to your email account. When in doubt, ask the sender through another channel.

The July 2025 AI terms row, explained

In July 2025 WeTransfer published updated terms of service. Clause 6.3 granted it a broad licence over uploaded content, including to improve machine-learning models, and creatives who rely on WeTransfer for unreleased work reacted strongly. Within days WeTransfer rewrote the clause, narrowed the licence to operating, developing and improving the service, removed the machine-learning wording, and stated publicly that it does not use customer files to train AI.

The practical lesson is not that WeTransfer is unsafe; it is that terms change. For anything confidential, read the current terms of whatever service you use, and prefer a tool where you can lock, revoke and delete the link yourself.

When you need more control

If you want those controls without a paid transfer plan, a Link in Seconds link gives you, free on every plan:

• A password on the link, which you can change later to revoke access.
• An email gate, so each viewer gives an email before the file opens, even on a forwarded link.
• View-only mode that hides the download button, plus an optional watermark.
• An off switch: disable the link instantly, or set an expiry date or a view limit.
• Analytics, so you can see if the link was opened somewhere you did not expect.

Files sit in private storage and are only served through the link, which enforces every one of those settings. Only allowed file types are accepted (executables are refused), and uploads are scanned for abuse and phishing before they go live. The trade-off is size: a free file can be up to 250 MB, where WeTransfer Free allows up to 3 GB a month. More on locking down a link in share files securely by link.

A quick safety checklist

1. Send by email rather than as a link when you know who should receive it.
2. Use a password for anything private, and share the password through a different channel.
3. Prefer view-only for documents people need to read but not keep.
4. Check the domain before clicking any "you have received files" email.
5. Turn the link off when the job is done instead of waiting for it to expire.

Quick answers

Go deeper

• Password-protect a file you share
• Does WeTransfer tell you when files are downloaded?
• How Link in Seconds keeps files safe