Account security settings, 2FA, and changing your password

Keeping your WeTransfer account secure helps protect your transfers and personal information. You can manage your security settings from Account Settings > Profile & Security on the WeTransfer website.

Account security settings

Two-factor authentication

Two-factor authentication (2FA) adds an extra layer of security to your account by requiring a verification code from your phone when signing in.

To enable 2FA:

1. Go to Account Settings > Profile & Security.
2. Under Password and security, select Two-factor authentication.
3. Click Turn on and follow the instructions to connect your phone or authenticator app.

Once enabled, you’ll need both your password and your verification code to access your account.

If you can’t access your account because of two-factor authentication

For security reasons, we cannot disable two-factor authentication on a WeTransfer account if it has already been enabled.

If you’re unable to sign in, try the following:

• Recover access to the phone or device used to set up two-factor authentication.
• Reinstall your authenticator app if you previously removed it, then check whether WeTransfer appears in your list of connected accounts.
• If you use Google Authenticator, you may be able to restore your accounts by signing in to the same Google account in the app. Your connected accounts and verification codes may then become available on your new device.

If you’re still unable to access your account, it will need to be deleted before you can create a new account.

For free accounts, you can request deletion of your data (including your account and transfers) here: Manage your rights for WeTransfer. Once your data has been deleted, which can take up to 14 days, you can create a new account with the same email address. Alternatively, you can use a different email address.

If you have a subscription, please contact our support team for assistance.

Change your password

You can change your password at any time from your security settings.

To change your password:

1. Go to Account Settings > Profile & Security.
2. Under Change your password, select Send email.
3. Follow the link sent to your registered email address to set a new password.

If you forgot your password:

1. Go to WeTransfer.com and select Log in
2. Select Forgot password?
3. Enter the email address you used to create your WeTransfer account.
4. Use the password reset link sent to your email address to create a new password.

Log out of all devices

If you think someone else may have accessed your account, or if you want to sign out everywhere, you can log out from all devices.

To do this:

1. Go to Account Settings > Profile & Security.
2. Under Log out of all devices select Log out.

This will sign you out of your account on all currently active devices.

Data Processing settings

Your Profile & Security settings also include options related to how WeTransfer processes certain types of data.

Research Purpose

You can choose whether to authorize WeTransfer to access and use your transfer data for research purposes.

Enabling this option allows WeTransfer to use transfer data for research purposes as described in our data processing terms.

Health-related data

Some files you upload may contain health-related information. Depending on applicable privacy laws, we need your consent before we can process transfers that include this type of data.

Why do we ask for consent?

Your transfers may include files that contain medical or health-related information, such as .dcm files. These files may qualify as health data under applicable data protection laws.

WeTransfer does not access, read, or inspect the content of your files, and we do not process medical information contained within your files. However, because you may upload and share files that include health-related data, we need your explicit consent to provide the file transfer service and to confirm that you are authorized to share this data, including when it relates to another person.

What happens when you upload health-related files?

• This option is disabled by default.
• The first time you upload files that may contain health-related data, you’ll be asked to review and provide consent.
• If you do not provide consent, uploads containing this type of data cannot be processed and will be blocked.
• Transfers containing health-related files will automatically expire after a maximum of 60 days and cannot be extended, including on paid plans.

Managing your consent

Once provided, your consent preference will be saved. You can review or withdraw your consent at any time in your account notification settings.

Choosing to allow WeTransfer to use your transfer data for research purposes does not change how we handle health-related files. We still do not read or inspect your file content, and you remain the owner and controller of the data included in your transfer.