Is a fax's journey encrypted end to end?

Summary

Two stretches, two treatments. The PDF reaches Faxeroo over an encrypted HTTPS connection, then erases itself once the fax has passed. But the last kilometre, over the public telephone network to the correspondent's machine, stays in the clear: the fax standard never provided for encryption, with no provider.

A limit of the protocol, not of a provider

Faxing works through a dialogue of tones between two modems — a protocol standardised at the end of the 1970s, and left without encryption ever since. The arrival machine expects a printable signal: it would hold no key to unlock encrypted content. Promising encryption right down to the printed page is therefore impossible, for any provider.

The segment Faxeroo secures

From your browser to our servers, the file travels under HTTPS: neither a snooper on your Wi-Fi, nor your access provider can read its content. On our machines, it serves to compose and send the fax, then disappears without intervention.

Translated into a fax signal, it then continues its route over the telephone line, right up to the arrival machine — without protection, like every fax in the world.

Where the everyday risk lurks

Planting a tap on a telephone line presupposes physical access to the network, hence specialist equipment. Everyday leaks are more ordinary: a digit swapped in the number, sheets left lying in the tray of a shared machine. Re-read the number, warn the correspondent, then write their name and "confidential" in the text of your cover page.

Truly sensitive document? Ask your counterpart whether they offer a protected channel — secure portal, encrypted professional messaging. The fax security guide reviews the options.

Key points

  • The PDF reaches Faxeroo under HTTPS.
  • Then the file erases itself, without intervention.
  • The final telephone line stays in the clear, for every fax service.
  • Concrete risk: a wrong number, an openly accessible fax machine.

Back to help