LetterAgent
Mail physical letters by just asking your AI assistant.
Home > Guides > Is fax encrypted?
No. A traditional fax travels as an unencrypted audio signal over the public phone network, and anyone with access to the line can intercept it. Online fax services encrypt the web and email portions of the trip, but the final hop from the service to a physical fax machine is still plain old analog fax.
Group 3 fax, the protocol behind nearly every fax machine, negotiates a connection with handshake tones and then sends the page as encoded audio. There is no key exchange and no cipher: the signal is about as private as a phone call on a party line. Tapping it takes physical or network access to the line, which is why faxes felt safe for decades, not because the protocol protects the content. When a fax travels over the internet part of the way, as with FoIP (fax over IP), the audio packets can pass through routers and servers unprotected unless the carrier applies its own safeguards, which you cannot verify from your desk.
| Leg of the journey | Typical fax method | Encrypted? |
|---|---|---|
| Your computer to the online fax service | HTTPS web upload or API call | Usually yes (TLS) |
| Email-to-fax submission | Email with attachment | Only if your mail server uses TLS |
| Service to the recipient's fax machine | Analog phone line or FoIP | No |
| Machine-to-machine phone fax | Direct phone call | No |
The reputation of fax as "secure" comes from two properties that are real but have nothing to do with encryption. First, it is point to point: the document goes from one machine to another with no inbox, no forwarding rule, and no copy sitting on a mail server, which shrinks the number of places it can leak. Second, U.S. health privacy rules treat fax as an acceptable transmission method under their flexible security standards, and regulators have simply never required encryption for it. The weak point is not the line, it is the destination: healthcare breach reports regularly involve faxes sent to wrong numbers, where a misdialed digit lands patient records on a stranger's machine. The fix there is procedural, not cryptographic.
It covers the parts the service controls. Uploading your document through a browser or API is protected in transit, stored documents are typically encrypted at rest, and the service's own networks are hardened. What it cannot cover is the analog last mile: the recipient's machine answers a phone call and receives an unencrypted signal, and there is no fax protocol extension that would change that. Also, once the fax prints, it sits in a physical output tray, which is arguably the least secure storage medium of all. So an online service can truthfully advertise encrypted handling of your documents while your fax still arrives unencrypted at the far end. Both statements are true; they describe different legs.
Since you cannot add encryption, reduce the other risks. Pre-program recipient numbers in the machine or service so nobody hand-dials a ten-digit number from memory. Send a cover sheet with a callback number and a confidentiality notice so a wrong recipient knows what to do. Confirm arrival by phone when the document truly matters. Ask the recipient whether their machine sits in a shared space, because a fax tray in a hallway is open reading for everyone who walks by. And for genuinely sensitive material, consider whether the recipient would accept a password-protected file by another channel instead, fax is a habit, not a requirement, in most industries now.
Ready to fax it? Fax with LetterAgent: describe it to your AI assistant, approve the exact quoted price, and it is sent.
LetterAgent is a working name. Prices include print, postage, and our service fee. US prices in USD, Canadian prices in CAD (Canadian prices exclude applicable sales tax, added at checkout). Currently in private testing.
Need help? Ask your assistant: it can check a job's status any time. If it ever can't handle something: hello@getletteragent.com