Fax Encryption: TLS, AES-256 & How to Verify Your Provider
Not all fax services encrypt your documents the same way. Learn how TLS and AES-256 protect faxes in transit and at rest — and how to verify your provider's security before sending sensitive data.
Frequently Asked Questions
Are traditional faxes encrypted?
No. Traditional fax machines send data as unencrypted analog signals over the public telephone network (PSTN). Anyone with access to the phone line can intercept the transmission. Only online fax services add encryption.
What encryption should a HIPAA-compliant fax service use?
HIPAA requires TLS 1.2 or higher for data in transit and AES-256 (or equivalent) for data at rest. See our [HIPAA fax requirements checklist](/blog/hipaa-fax-requirements/) for the full list of safeguards.
Is faxing more secure than email?
It depends on the setup. A properly encrypted online fax service with TLS 1.2+ and AES-256 is comparable to encrypted email. Traditional fax over PSTN is harder to intercept remotely but has no encryption. Read our [fax vs. email comparison](/blog/fax-vs-email/) for a detailed breakdown.
How do I send an encrypted fax?
Use an online fax service that supports TLS 1.2+ encryption. Upload your document, enter the recipient's fax number, and send. The service encrypts the transmission automatically — no extra steps required.
What is the difference between TLS and SSL for faxing?
SSL is the predecessor of TLS and is now considered insecure. TLS 1.2 and TLS 1.3 replaced SSL with stronger encryption algorithms and better handshake protocols. Any fax service still advertising "SSL encryption" may be using outdated security.