thefaxonline.com › Resources › Is fax secure?
Is fax secure?
Fax has a reputation for being safe, and in some ways it earns it: a fax travels from one number to another rather than through shared email servers. But the security of a fax depends heavily on what happens at each end. This thefaxonline.com guide looks at the weak spots in traditional fax machines, what an online fax service changes, and the simple habits that matter most whichever method you use.
Get Started NowWhere traditional fax machines fall short
The phone call that carries a fax is hard to intercept casually, but the paper on either side is not. Most real-world fax leaks are physical or human, not technical.
- Printed faxes sit in a shared output tray where anyone walking past can read or take them.
- A single wrong digit sends a document to a stranger, and you usually cannot recall it.
- Many machines store recent pages in memory, which can be printed again or left on a device when it is discarded.
- There is rarely a record of who picked up or copied a received fax.
What an online fax service changes
An online service replaces the tray and the machine with an account. FaxToFax.com, which thefaxonline.com recommends, encrypts documents in transit with TLS 1.2 or higher and encrypts them at rest. Received faxes go to a private, encrypted browser inbox and are never emailed, so copies do not spread across mail servers and phones.
Access is controlled too. Sign-in uses your email and a one-time code rather than a password, two-step verification is available, and accounts sign out after 30 minutes of inactivity by default (the owner can pick 15, 30 or 60 minutes). An append-only audit log records every view, download and send, and can be exported as a CSV file.
Habits that keep a fax secure
Technology covers part of the risk. These steps cover the rest, and they apply whether you use a machine or a browser.
- Confirm the recipient's fax number from a trusted source, such as their official letterhead or a phone call, not an old email signature.
- Use a cover page with the recipient's name and a confidentiality notice so a misdirected fax is easier to handle.
- Send only the pages the recipient needs. Remove unrelated records before you attach the file.
- Check each number on the confirmation screen before sending. FaxToFax asks you to confirm every recipient number first.
- Keep the delivery receipt, and delete or purge old documents you no longer need using retention controls.
Fax security and regulated industries
Healthcare providers covered by HIPAA must protect patient information they send by fax, and they generally need a business associate agreement (BAA) with any vendor that handles it. FaxToFax offers a BAA on its Business and Enterprise plans and builds its safeguards around HIPAA and HITECH, along with rules such as the GLBA Safeguards Rule for financial firms and ABA Model Rule 1.6(c) for lawyers.
No tool makes you compliant on its own. Your own policies, staff training and access decisions still matter, so review them with whoever handles compliance in your organization.
A useful exercise is to list who in your office can see received faxes today. With a shared machine, the honest answer is often anyone who walks by. With an online inbox, you can limit access through roles (owner, admin, member and viewer) and check the audit log to see who opened what.
Is Fax Secure? Paper vs Online Fax: questions
Is fax more secure than email?
Standard email often passes through several servers and stays in many inboxes. A fax goes directly to a number. An online fax service that encrypts files and keeps received faxes in a private inbox avoids the paper-tray problems of a machine as well.
Can a fax be intercepted?
Intercepting a fax call is technically possible but uncommon. Misdialed numbers and unattended printouts are far more common causes of exposure, which is why number checks and cover pages matter.
Is online fax HIPAA compliant?
A service can provide safeguards and a BAA, but compliance also depends on how your practice uses it. FaxToFax offers a BAA on Business and Enterprise plans.
What happens if I fax the wrong number?
With a machine, the pages print at the wrong place. With FaxToFax you confirm each number before sending, which reduces the chance. If it still happens, follow your organization's breach or incident process.
More guides on thefaxonline.com
Send a fax to Japan from the US ›
Dialing code +81, 2 plan pages per page, and the best time to send.
Send a fax to Israel from the US ›
Dialing code +972, 2 plan pages per page, and the best time to send.
Send a fax to Sweden from the US ›
Dialing code +46, 1 plan page per page, and the best time to send.
Get a Georgia fax number ›
10 area codes (229, 404, 470, 478…) and how to get a local number.
Get a Wisconsin fax number ›
8 area codes (262, 274, 353, 414…) and how to get a local number.
Get a Kentucky fax number ›
5 area codes (270, 364, 502, 606…) and how to get a local number.
More from thefaxonline.com
How it works ›
Step by step: get a number, send, receive and track faxes with thefaxonline.com.
Pricing ›
thefaxonline.com plans from $4.99 for the first month, extra numbers and faxing abroad.
Security ›
Encryption, audit log and the compliance programs behind thefaxonline.com.
FAQ ›
Answers to the questions people ask most about thefaxonline.com.
Guide ›
A step-by-step guide to sending your first fax with thefaxonline.com.
Resources ›
Country guides, fax numbers by state and province, and how-to guides on thefaxonline.com.
Start faxing online with thefaxonline.com
Get your fax number in minutes and send your first fax today. $4.99 for your first month, cancel online any time.
Get Started Now →