Saltar al contenido principal
Todos los artículos
Safety

Is it safe (and legal) to download YouTube videos?

Two separate questions. Why some downloader sites are risky, a six-point checklist for judging any of them, and what the law and YouTube's terms say about it.

Downloading a YouTube video is safe if the tool you use runs entirely in your browser, as vidstill does, installs nothing, and asks for nothing beyond the link. It is legal in the everyday sense that keeping a personal offline copy of a video you are allowed to watch is generally tolerated, although YouTube's own terms say you should only do it through YouTube's features, and redistributing what you download is never fine. Those are two different questions with two different answers, and most pages that rank for this topic blur them together. This one takes them separately: first the tool, then the act.

"Is it safe" is about the website or program you use: whether it can put software on your machine, show you something dangerous, or harvest your data. "Is it legal" is about what you do with the file afterwards and where you live. A perfectly safe tool can be used for something you should not do, and a legal download can be obtained from a site that infects your laptop on the way. Judge each on its own.

What makes a downloader site risky

The downloader category has a bad reputation for concrete reasons. These are the patterns that cause the actual harm:

Installable programs. A .exe or .dmg downloader has the same access to your machine as any other program you install. For years, this category has been one of the most common carriers of bundled adware, browser hijackers and "system optimisers" that piggyback on the installer. The downloader itself may even work; the trouble is what comes with it. Nothing about fetching a video from YouTube requires software on your computer.

Fake Download buttons. Many free downloader sites are paid by ad networks that render large green "Download" buttons which are advertisements. Click one and you get a different site, a different file, or an installer for something unrelated. The real button is usually the smaller, plainer one, which is the opposite of how a legitimate site behaves.

Notification permission prompts. A site that asks to "show notifications" the moment you arrive is planning to send you ads through your browser long after you close the tab, and those notifications are a common route for scam pages. No video download needs this permission. Decline it, or better, leave.

Redirect chains. Press Download and the tab jumps through two or three domains before anything happens. Each hop is an opportunity to show a pop-up, set a tracking cookie, or land you somewhere you did not intend to go.

Clone sites. The popular downloader names have dozens of copies, and the originals themselves change domains every few weeks as they are blocked or lose their hosting. You cannot tell the original from a clone by the name, and the clones are where the worst behaviour concentrates. If the site you used last month has a new address this month, you have no way of knowing who runs it now.

Browser extensions. A downloader extension needs permission to read the YouTube page, and most request permission to read every page. That means everything you type and view in that browser, including banking and email. Some extensions have been sold to new owners who then pushed a malicious update to every existing user.

A six-point checklist for any downloader

Before pasting a link into a site you have not used before, run through these. All six take under a minute.

  1. No install. The whole thing should work in the browser tab. If you are asked to download a program, a "helper", a codec or an extension, stop.
  2. No notification prompt. If the browser asks whether to allow notifications from the site, the answer is no, and the site has told you something about itself.
  3. One download button. There should be a single, obvious control for the thing you came for, and no other buttons that look like it.
  4. HTTPS. The address bar should show a padlock. This does not make a site trustworthy, but its absence in 2026 means nobody is maintaining it.
  5. A real privacy policy and a DMCA page. Not a template that never mentions what the site actually does. A downloader handles links you paste and files it prepares; the policy should say what it keeps. A DMCA page means the operator answers to rights holders and can be reached.
  6. It states what it keeps and for how long. Files, links, IP addresses. A site that will not say is keeping more than it admits.

How vidstill scores

vidstill is built to pass this list rather than to explain its way around it. It runs entirely in the browser with nothing to install. The download pages show no advertising and never ask for notification permission. There is one Download button per quality. Prepared HD and MP3 files are deleted automatically after about an hour, and the instant 360p option never touches vidstill's servers at all; the browser fetches it from YouTube directly. The privacy page lists exactly what is recorded and for how long, and the DMCA page is how rights holders get a page removed. That is the whole pitch; the checklist above is useful whichever tool you end up choosing.

This is the part that depends on who made the video, what you do with the copy, and where you live. In plain terms:

Personal offline use is generally tolerated. Saving a copy of a video you are allowed to watch, for yourself, on your own device, is the kind of private copying that most countries either permit outright or do not pursue. It is what YouTube Premium's own offline feature does, only inside the app.

YouTube's terms of service forbid it anyway. The terms say you may not download content except through the download button or a link YouTube itself provides. Breaking a site's terms is not the same as breaking the law; the consequence YouTube can impose is on your account, not in a court. But it is worth knowing that the official position is "don't", whatever the practical reality.

Your own uploads and Creative Commons content are always fine. If you made the video, you can keep it. Videos published under a Creative Commons licence (YouTube has a filter for them) can be downloaded, reused and even edited within the licence terms, usually with attribution.

Redistribution and re-uploading are not. Copying someone else's video and posting it on another channel, a website or a social account, selling it, or using it in your own monetised content is copyright infringement wherever you are, and it is the behaviour that takedowns and lawsuits actually target. The download is not the problem; the copy of the copy is.

The rules vary by country. Some jurisdictions have an explicit private-copying exception; others make it an infringement in theory but never enforce it against individuals; a few treat circumventing a platform's technical measures as its own offence. If it matters to you professionally, check the rules where you are.

None of this is legal advice. It is a plain description of how the situation is generally understood, written so you can decide for yourself.

A short version you can act on

  • Download for yourself, from a tool that installs nothing, and you are in the safest position on both counts.
  • Never install a downloader program, and never allow a downloader site to send you notifications.
  • Do not re-upload, sell or embed someone else's video in your own work without permission or a licence that allows it.
  • If you want the words rather than the video, a transcript raises none of the redistribution questions and is often what you actually needed.

Downloading a video for your own offline viewing is generally accepted for content you are allowed to watch, and it is always fine for your own uploads or for videos released under a Creative Commons licence. Re-uploading, selling or redistributing someone else's video is not, and the rules vary by country. Download what you have the right to keep, use a browser-based downloader to do it, and see the device-by-device guide for the steps on each device.

FAQ

Can a website download a video to my computer without my permission? No. A browser only saves a file when you click a download control, and it always saves to the folder you have chosen. The risk is in what you click, not in visiting the page, which is why fake Download buttons are the main trick.

Is a browser-based downloader safer than a desktop program? Yes, in the specific sense that it cannot install anything. A web page runs inside the browser's sandbox; an installer runs with your user account's access to files, settings and other programs.

Does YouTube know if I download a video? YouTube sees an ordinary request for the video's streams, the same kind its own player makes. It does not tell the creator, and there is no notification. Your account is only involved if you are signed in to a tool that uses it, which browser-based downloaders such as vidstill do not.

Is it legal to download a YouTube video to MP3? The same rules apply as for video: a personal copy of music you are allowed to listen to is generally tolerated, sharing or reposting it is not. Music rights holders are more active about enforcement than most, so treat downloaded audio as strictly personal.

Can vidstill see what I downloaded? Each request records the video id, what was asked for, and either your account id or a one-way hash of your IP address for the daily allowance, kept for twelve months. Prepared files are deleted after about an hour. The privacy page has the full list.