Guide
Is YouTube to MP3 safe? How to spot a risky converter
Fake download buttons, notification spam and .exe files: the real risks of YouTube to MP3 sites, a safety checklist, and the legal basics.
The real risks
The audio itself is rarely the problem. Free converters are expensive to run, and some cover the cost with aggressive or deceptive advertising. That's where the risk comes from:
- Fake download buttons. Large green "Download" or "Start" buttons that are actually ads, often placed next to the real one.
- Notification spam. A prompt to "click Allow to continue" or "confirm you're not a robot". Allowing it lets the site send pop-up ads long after you've left, often for fake antivirus warnings or prize scams.
- Redirects and pop-unders. Clicking anywhere opens a new tab with a different site, sometimes showing a fake "your device is infected" warning.
- Installers instead of audio. A download that ends in
.exe,.msi,.dmg,.pkgor.apk, or a message saying you need a "player" or "downloader" to continue. - Over-reaching extensions and apps. Extensions that ask to "read and change all your data on all websites", and phone apps outside the official stores.
A five-point safety checklist
- You should only need a link. No account, no email address, no payment and no software. If a site asks for any of these to convert a public video, leave.
- Block notifications. A converter never needs them. Always choose Block.
- Look at the file name before opening it. It should end in the format you chose, such as
.mp3or.m4a. Anything else, delete it. - Watch for redirects. If clicking the page opens new tabs, close them without clicking anything inside them.
- Keep your browser up to date. Current versions of Chrome, Safari, Edge and Firefox block many malicious downloads and pop-ups automatically.
How to check the file you got
A real MP3 has a predictable size, because size is just bitrate × length. A 4-minute song should be about 3.8 MB at 128 kbps, 5.8 MB at 192 kbps or 9.6 MB at 320 kbps. A tiny file, or one that's far larger than the math says, deserves suspicion.
- Windows: File Explorer hides extensions by default, so
song.mp3.execan appear as "song.mp3". Turn them on with View > Show > File name extensions (on Windows 10, tick File name extensions on the View tab). - Mac: Select the file and press Command+I. Kind should say MP3 audio or similar.
- iPhone and Android: Open it from the Files app. A real audio file plays in the built-in viewer. Phones won't run Windows or Mac installers, but never install an APK a converter offers you.
If you clicked something you shouldn't have
- Allowed notifications? Remove the site in your browser's settings. In Chrome, go to Settings > Privacy and security > Site settings > Notifications. In Safari on a Mac, go to Settings > Websites > Notifications.
- Downloaded an installer but didn't run it? Delete it and empty the Trash or Recycle Bin.
- Ran an installer? Uninstall anything you don't recognize, check your browser's extensions, and run a scan with your system's built-in protection (Microsoft Defender on Windows; macOS has XProtect built in).
- Entered a password or card details? Change that password and contact your bank. No real converter needs either.
How Konvert handles this
Here's what you can expect from Konvert, so you can check us against the list above:
- You paste a link. There's no account, no app and no browser extension.
- The download is the audio file in the format you chose, named after the video.
- We never ask for notification permission, and clicking the page doesn't open other tabs.
- The site is supported by Google AdSense ads, which follow Google's ad policies. No ad is a download button, and the page where you download your file carries no ads.
- Files are deleted automatically about 30 minutes after you start a conversion. The privacy policy has the details.
Is it legal?
Safety and legality are separate questions. A safe site can still be used to convert something you don't have the right to keep. In general:
- Usually fine: your own videos, public-domain recordings, Creative Commons content whose license allows it, and anything you have the rights holder's permission to use.
- Not fine: commercial music and other copyrighted content you don't have permission for. Converting isn't a way around paying for music.
- YouTube's own rules: YouTube's Terms of Service don't allow downloading content unless YouTube shows a download button or link for it, or you have permission from YouTube and the rights holder. YouTube Premium offers offline playback inside the app.
Copyright law differs by country, so this is general information rather than legal advice. Our copyright basics guide explains each case in more detail.
Questions about converter safety
Can an MP3 file contain a virus?
An MP3 is audio data, and opening one in a normal, up-to-date music player is very low risk. The danger is a file that only looks like an MP3, such as song.mp3.exe, or a site that pushes you to install a program. If what downloads isn't a .mp3 file, delete it.
Is it safe to allow notifications from a converter site?
No. A converter has no reason to send you notifications, and many risky sites use the permission to push scam ads later. Choose Block, and remove any site you allowed by mistake in your browser's notification settings.
Is YouTube to MP3 legal for personal use?
It depends on what you convert and where you live. Converting your own uploads, public-domain works, or Creative Commons content that allows it is generally fine. YouTube's Terms of Service also restrict downloading without permission. This is general information, not legal advice.
Are YouTube to MP3 browser extensions safe?
Be careful with them. An extension can read and change the pages you visit, which is far more access than converting a video needs. A website in a normal browser tab can't see your other tabs or install software.