Offline MBOX conversion: security and privacy

Where does my mailbox data go?

The converter reads MBOX files from the location you select and writes PST files to the destination you select. A network location sends data over that network even though the utility runs on your PC. Cloud-synced folders and connected Outlook accounts can also generate separate traffic. Check both the storage location and its sharing settings before converting sensitive mail.

Swipe or scroll to compare all columns.

Local conversion means the mailbox does not need to be uploaded to this site. Downloads, updates, license activation and support may use the internet. This describes the conversion workflow, not all network activity on your computer.

Verify the installer before running it

Get the installer from our Download page and use the details there to compare its version, file size, SHA-256 hash, and signer. A SHA-256 hash is a digital fingerprint for the downloaded file. The Authenticode signer is the company name recorded in the Windows digital signature.

We update the installer at the same download address, so a different hash can simply mean that the installer has changed. Stop before running it, confirm the version on our download service, and check that Windows shows a valid signature from the expected publisher.

Protect the source and destination

Create and check the working PST on a local drive outside cloud-synced folders. Close Outlook and the converter before copying the finished file to network or cloud storage for backup. See Microsoft’s guidance on PST files over a network and avoiding OneDrive as an export destination.

• Convert a copy and keep the original MBOX archive unchanged until the PST has been checked.
• Store sensitive mail on a device or drive protected with suitable encryption.
• Limit who can open the source folder, network share, and destination PST.
• Keep real mail out of screenshots, public test files, and support tickets unless it is necessary and approved.
• Record the converter version, settings, file hashes, start and finish times, and any reported errors when you need an audit trail.
• Follow the PST verification checklist before deleting a source archive.

What changes with an online converter?

A server-based converter requires you to upload your mailbox. Some browser-based tools process selected files on your device instead; the browser File API supports local file access. Check where the specific tool processes mail and whether it sends any mailbox content to a server. Before uploading, find out who operates the service, where the files are stored, how long copies and backups remain, who can access them, which other companies help provide the service, and how deletion or a security incident is handled. Also check file-size limits and the service's contract and privacy terms. Ask your organization's security or privacy contact before uploading confidential or regulated mail.

What does this website collect?

The public MBOX2PST pages have no visitor accounts, analytics, tracking cookies, or support form. The only cookie is the one that remembers your answer to the cookie notice. Links for product support and purchases take you to our support form on reliefjet.com or checkout with our authorized reseller, PayPro Global. See the Privacy Policy for details.

Primary sources

• ReliefJet: Convert MBOX to PST product documentation
• Microsoft: Get-FileHash
• Microsoft: Authenticode signatures

FAQ