Safetensors Format (.safetensors)
Hugging Face's zero-copy tensor serialization format that cannot execute arbitrary Python pickle code.
Updated Oct 17, 2026 · 1 min read
- Term
- Safetensors Format (.safetensors)
- In Short
- Hugging Face's zero-copy tensor serialization format that cannot execute arbitrary Python pickle code.
- Applies To
- ComfyUI SD 1.5, SDXL, Flux & Video
Definition: Safetensors Format (.safetensors)
Hugging Face's zero-copy tensor serialization format that cannot execute arbitrary Python pickle code.
ComfyUI defaults to .safetensors for checkpoints, LoRAs, VAEs, and ControlNets because they load faster via memory mapping on Windows and prevent malicious code execution.
How to tune this in your ComfyUI workflow
Every parameter in ComfyUI is exposed directly on its node rather than hidden behind global settings tabs. You can inspect or override this behavior per pass in ComfyUI Studio.
New to node graphs? Grab the Windows installer at /download and open a built-in template from the workflow menu.
FAQs
What does Safetensors Format (.safetensors) do in ComfyUI?
Hugging Face's zero-copy tensor serialization format that cannot execute arbitrary Python pickle code. ComfyUI defaults to .safetensors for checkpoints, LoRAs, VAEs, and ControlNets because they load faster via memory mapping on Windows and prevent malicious code execution.
Where do I adjust this setting on the canvas?
Check the corresponding loader or KSampler widget in your active workflow graph.
Run on your hardware. Free forever.
The full ComfyUI engine: open source, fast, extensible, and yours to run however you want. Download the desktop app and open this workflow on your own machine.
