Contents
The real risks, and how to spot them
1. Requests for your Threads or Instagram password
A downloader for public posts never needs your login. A site that asks for it, often with a promise to unlock private accounts, may be trying to take over your account. Never enter your Meta password anywhere except threads.com, instagram.com or the official apps.
2. Fake download buttons
Some sites place large ads styled as green "Download" or "Start" buttons near the real one. Clicking them opens a new tab with an unrelated offer or a misleading download. The real download link appears only after you paste a link, right next to a preview of the post's media. If a button shows up before you've pasted anything, it is almost certainly an ad.
3. Files that aren't videos
A Threads video downloads as a .mp4 file and a photo as .jpg. If you're offered a file ending in .exe, .apk, .dmg, .msi, .zip or .scr, don't open it. That is a program, not a video.
4. Browser extensions and "helper apps"
Extensions can read the pages you visit. Some downloader extensions have later been sold to new owners and turned into adware. Downloading a public video in your browser doesn't need any extension. Only install one if you have a clear reason to trust it.
5. Notification prompts
A pop-up asking you to "Allow notifications to continue" is a common trick for sending spam to your phone or computer later. A downloader doesn't need notifications. Click Block. If you already allowed them, you can remove the site in your browser's site settings.
6. Redirect chains
If clicking a button takes you through several unfamiliar addresses before anything happens, close the tab. A trustworthy site downloads the file without sending you elsewhere.
A 30-second safety checklist
| Check | Safe sign | Warning sign |
|---|---|---|
| Login | None needed for public posts | Asks for your Threads or Instagram password |
| Address | HTTPS padlock, the same domain throughout | Redirects through unknown domains |
| File type | .mp4 or .jpg | .exe, .apk, .dmg, .zip |
| Permissions | None | Notifications, extension install, "helper app" |
| Private posts | Honestly says they aren't supported | Promises to "unlock" private accounts |
| Policies | Clear privacy policy and contact page | No information about who runs the site |
What ThreadSave does with your data
Here is what happens on our side. We describe it in plain language so you can check it against our Privacy Policy:
- No account, no login. We never ask for a Threads, Instagram or ThreadSave login.
- The link you paste is used to find the media in that post. It is held in temporary memory for up to an hour so repeat requests are faster, and it is never written to our database.
- Download statistics record only that a download happened: the media type, the time and how long it took. They don't record the link or your IP address.
- Your IP address is used for rate limiting (up to 100 lookups per hour per connection). Those records are deleted automatically after an hour.
- Media files are not stored. When you press the download button, the file passes through our server to your device as it downloads and is not saved on our side.
- Files are plain .mp4 and .jpg. Nothing to install or run.
- No extension, no app, no notifications. ThreadSave works entirely in your browser.
Right now ThreadSave shows no ads. If we add advertising later, ads will be clearly separated from the download buttons and labelled. Our Privacy Policy will explain the cookies that ad networks use.
The bottom line
Using an online downloader is safe when the site downloads what you asked for and nothing else: no logins, no installs, no permissions, and an ordinary video or image file at the end. If a site asks for more than a link, leave it.
Safety covers your device and account. What you're allowed to do with the downloaded video is a separate question about copyright. Our guide to Threads video copyright covers that.
