A file extension is the suffix at the end of a filename, such as .exe, .docx, or .pdf. Operating systems, email gateways, and collaboration platforms often use it as a quick signal to guess a file’s type and decide whether it should open, preview, or be blocked.
In cyber security, extensions matter because attackers often choose formats that can carry code, macros, or scripts, or they disguise dangerous files with misleading names. Defenders use extension-based blocklists and filters to stop obvious high-risk attachments before they reach users. This is useful, but it is only a coarse control: the extension does not prove what the file actually contains. A strong defense combines extension checks with content scanning, sandboxing, endpoint protection, and policy review, especially when business users need uncommon file types.