RSA key recovery

MEGA’s login process leaks hints about your private RSA key if attackers (with server access) modify your encrypted key. Initially requiring 512 logins, researchers later reduced this to just six. Once obtained, the key allows attackers to access files, chats, and more.

Plaintext recovery

With your RSA key, attackers can exploit MEGA’s AES-ECB encryption to access node, chat, and signing keys—granting full access to files and messages.

Framing attack

An attacker can plant fake, incriminating files in your account that appear as legitimate uploads, potentially framing you.

GaP-Bleichenbacher Attack

A “Guess-and-Purge” technique targets MEGA’s flawed RSA padding checks during encrypted chat key exchanges. After ~100,000 login attempts, attackers can decrypt secret messages. 

Open source and transparent

Internxt is an open-source alternative to MEGA, as the code for all our products and services is available on GitHub. MEGA does not publish the backend source code that stores your data and enforces encryption policies, so there’s no way of being sure how your data is protected.

Security audited

Internxt successfully passed a security audit carried out by security experts from a leading European penetration testing company. Past security audits on MEGA found vulnerabilities that could give hackers access to user data, but MEGA has since fixed these issues.

Fully open source

Internxt makes all its source code available on GitHub. This transparency offers you peace of mind that our encryption protects your files, and there are no backdoors that could decrypt and access your data.

GDPR-compliant

Internxt is a European-based company regulated by the GDPR to guarantee your information is handled securely and according to strict regulations.

Advanced encryption

Internxt includes post-quantum encryption, the most secure and advanced cryptography available for free and paid accounts. We only store the encrypted version of your data, and only you have the key to decrypt and access it.

Flexible storage plans

Internxt includes post-quantum encryption, the most secure and advanced cryptography available for free and paid accounts. This protects your data from the future threats of quantum computers, which could break current encryption methods. MEGA has yet to implement PQE.