Security

Emberly applies multiple layers of security at both the file and account level.

VirusTotal Scanning

Every uploaded file is checked against 71+ antivirus engines.

HaveIBeenPwned Check

Password Reuse Prevention

Prevents reusing old passwords when you update your credentials.

Security Layers

File Upload Security

User uploads file
       ↓
Extension + MIME type check
       ↓
Zip bomb detection (max 100:1 ratio)
       ↓
VirusTotal hash scan (71+ AV engines)
       ↓
OCR processing (images, background)
       ↓
File stored & URL returned

Account Security

Feature	How It Works
HIBP	Checks your password against breached credential databases on login
Password reuse prevention	Blocks reuse of the last 5 passwords
Two-factor authentication	TOTP-based 2FA available for all accounts
Email verification	Required before uploading with custom domains

Reporting a Vulnerability

See our Security Policy on GitHub or email [email protected].

Responsible disclosure is appreciated and rewarded.