diff --git a/frappe/website/js/webform.js b/frappe/website/js/webform.js
index 7775ea4c2e..e0033e5a9c 100644
--- a/frappe/website/js/webform.js
+++ b/frappe/website/js/webform.js
@@ -51,6 +51,10 @@ export default class WebForm {
 				df.options = null;
 			}
 
+			if (df.fieldtype==='Attach') {
+				df.is_private = true;
+			}
+
 			// Set defaults
 			if (query_params && query_params["new"] == 1 && df.fieldname in query_params) {
 				df.default = query_params[df.fieldname];