Is Pandafile encrypted? HTTPS explained
Yes, every connection to Pandafile uses HTTPS, so uploads, downloads and sign-in codes are encrypted on the way between your browser and our servers. Pandafile is not end-to-end encrypted, so for very sensitive files, encrypt them yourself first.
Encryption is one of the first things people ask about when sending files. Here is what Pandafile does, in plain terms.
HTTPS everywhere
Every page on pandafile.co is served over HTTPS. That means everything travelling between your browser and our servers is encrypted: the files you upload, the files you download, your email address and the 6-digit sign-in codes. Someone on the same café Wi-Fi cannot read it.
How to check
- Look at the address bar. It should show a padlock or a similar secure icon.
- Click or tap the padlock. Your browser should say the connection is secure.
- Check the address is exactly pandafile.co, with nothing extra in front of or after the name.
What HTTPS does not cover
We want to be clear about the limits, so you can decide what is right for your files:
- Pandafile is not end-to-end encrypted. Files are protected in transit, and stored on our servers in the EU with access limited to the people who run the service, but they are not locked with a key only you hold.
- We do not scan files for viruses, so recipients should only open files from people they trust.
- Anyone with the download link can open the transfer until it expires, unless you add a Plus or Pro password.
Signing in safely
There is no account password to steal. You sign in with a one-time 6-digit code or a magic link sent to your email, and these expire quickly. Never share a code with anyone, including someone who says they work for Pandafile.
