Security

Wherever possible, files never leave your device because the tool runs in your browser. For tools that do need our servers, we treat every uploaded file as untrusted input and validate it before processing:

• File type is checked against its actual signature, not just its extension or claimed MIME type.
• File size limits are enforced per tool.
• Filenames are sanitized before use on the server.
• Each job gets its own temporary workspace, deleted when you download the result, if processing fails, or by an hourly-expiry cleanup that runs every ten minutes.
• Uploads are limited in size and number, and PDF encryption tools and calls to external services have time limits so a stuck job cannot run forever.
• Traffic to processing endpoints is rate-limited.

Found a security issue? Please report it to security@ihatepdf.net.