Security

The strongest protection for your documents is not having them. We don't operate storage for user files, so there is no file database to breach.

Safeguards in the tools

• Files are identified by their content signature; mismatched or executable files are rejected.
• Archive extraction sanitises paths (no ../ traversal) and stops when an archive expands beyond safe limits.
• Office documents are parsed without running macros or scripts. HTML is converted without loading scripts or remote resources.
• PDF passwords use AES-128 encryption (ISO 32000); file encryption uses AES-256-GCM with PBKDF2 key derivation (600,000 iterations); password-protected ZIPs use AES-256.
• Pages are served over HTTPS with security headers (content-type sniffing protection, frame protection, strict referrer policy).

What we won't do

We don't provide tools to remove passwords you don't know, bypass DRM, or crack encryption.

Reporting a vulnerability

Please report security issues privately through the contact page. We aim to respond within five working days.