NFiles is designed for a trusted private network. Its server component deliberately has no authentication layer: any device that can reach the NFiles server can upload, download, or clear NFiles-managed archives.

• Do not expose NFiles or Tiny File Manager to the public internet.
• Restrict access to trusted local-network devices only.

Please do not include sensitive host addresses, credentials, or personal data in a public issue. Use a private GitHub security advisory for this repository instead.