Before You Upload Documents to an App or Website: A Checklist

Illustrative photo of a person crouching on a floating wooden platform on a calm lake with an evergreen forest behind

VisaNow.AI

Is it safe to upload documents online? No page can promise that, but before you upload documents to an app or website you can settle a few questions: is the service really who it says it is, how will it use your information, what can it reach on your device, and is your account protected. This checklist gathers those questions from consumer advice pages of the Federal Trade Commission (FTC), so you can copy it and run through it each time. It is general information only: those pages give general privacy and security advice, not advice about uploading documents in particular, and this checklist does not rate any app or website or tell you whether a given service is safe for your documents.

Is the service the real one?

  • If a message sent you to the service, ask whether you have an account with the company. When an email or text asks you to click a link or open an attachment, the FTC page on phishing suggests asking "Do I have an account with the company or know the person who contacted me?", because if the answer is no, it could be a phishing scam.
  • Open the service yourself instead of using a link in a message. The advice is to contact the company using a phone number or website you know is real, because attachments and links might install harmful malware.
  • Be wary of messages that ask you to confirm personal details. Scammers use email or text messages to try to steal passwords, account numbers or Social Security numbers, and saying you need to confirm personal or financial information is one of the common tactics the page lists.
  • Treat a link to update payment details as a warning sign. The page says legitimate companies will not email or text with a link to update your payment information.

What will the service do with your information?

  • Open the account settings before you upload anything. The FTC page on how websites and apps collect and use your information says to go to your account settings to see how apps use your information and adjust the settings to match your preferences.
  • Read the cookie notice instead of clicking past it. The notice may let you choose what type of cookies to allow, often between cookies needed for the site to function and cookies for advertising and other purposes, so you can pick the option that best fits your preferences.
  • Remember that more than one company may be tracking you. When a website lets another company track you, that is third-party tracking, and third-party tracking companies can track you across most websites you visit.
  • Know why services track you. Reasons the page lists include saving your username, gathering analytics about your visit, remembering what you searched for and showing personalized ads based on your browsing history or your location.
  • Turn off personalized ads if you do not want them. Your browser's privacy settings let you allow or block personalized ads, and if you use an advertising industry opt-out tool, the page says to opt out on each device and browser.

What can the app or browser reach on your device?

  • Check which permissions the app asks for. Some apps may ask for access to your location, your contacts or your photos, and the privacy settings on your smartphone show what information they can access.
  • Turn off access the app does not need. The page suggests considering turning off unnecessary permissions or deleting apps that request a lot of permissions they do not need to function.
  • Do not count on private browsing to hide you. A private browsing mode deletes your browsing history after you end your session, but it does not block websites from seeing your online activity.
  • Keep the app, the browser and your phone up to date. Update software as soon as possible when a newer version comes out, because updates often contain critical patches and protections against security threats; automatic updates can cover security software, your browser, your operating system and mobile apps.

Is your account protected?

  • Use a long, strong password. Online accounts may contain a lot of your personal information, so if you create your own password, aim for at least 15 characters with a mix of uppercase and lowercase letters, numbers and symbols.
  • Consider a generated password or a password manager. Your browser or device can create a password for you, and a third-party password manager can too; to find a reputable one, the page suggests reading expert reviews and making sure the password for the manager itself is strong.
  • Turn on two-factor authentication. A hacker who steals your password cannot log in without the second authentication factor, and an authenticator app or a security key are the more secure types.
  • Pick security questions only you can answer. Avoid questions with answers someone could find online or in public records, such as your birthplace or your mother's maiden name, and if you cannot avoid them, treat them like a password and use random, long answers.

Before you upload and if something goes wrong

  • Back up your data first. The phishing page says to protect your data by backing it up to an external hard drive or in the cloud, and to back up the data on your phone too.
  • Act quickly if you notice a problem. If you think someone is using your personal information, go to IdentityTheft.gov to report it and get a personalized recovery plan.
  • Scan your device after a bad click. If you think you clicked a link or opened an attachment that downloaded harmful software, update your security software, run a scan and remove anything it identifies as a problem.
  • Report phishing messages. Forward a phishing email to the Anti-Phishing Working Group, forward a phishing text to SPAM (7726) and report the attempt to the FTC at ReportFraud.ftc.gov, because the information you give helps fight scammers.

The picture with this page is illustrative only: one person crouches on a floating wooden platform with a teal hull on a calm lake, with tall evergreen trees on the far shore, a quiet pause like the one this checklist asks for before you upload documents.

Because these pages do not describe how any particular app or website handles the documents you upload, confirm on the official website of the agency or company you are dealing with how it asks you to send documents, and if you need help with your own situation, look for authorized help as explained in our guide on finding authorized immigration help.

VisaNow.AI is not a law firm and does not give legal advice. This page is general information taken from official government pages; it does not assess anyone's case. An attorney-client relationship arises only with an independent attorney. Check the official pages for current details.

Information current as of 2026-10-30