Additional storage allowances can be activated through various 'achievements', but expire after 365 days.20 GB of base storage quota (5 GB of bandwidth per day).In response, Mega started a vulnerability reward program which offers a reward of up to €10,000 for reporting security problems to MEGA. In the first few weeks after the Mega launch, various security problems were found that researchers said an attacker could use to gain access to a logged-in user's files. This means that users can reconstruct data even when one of the parts is unavailable. They also store another part in yet another country recording whether the number of '1' bits at a certain position within all parts is even or odd. MEGA also uses CloudRAID technology, which means files are split into roughly equal-sized parts and stored in different countries. By encrypting files MEGA can work with a larger number of data hosting companies around the world, decreasing the likelihood of a Megaupload-style seizure of servers by one government. Therefore, they cannot be responsible for the contents of uploaded files. Since Mega does not know the encryption keys to uploaded files, they cannot decrypt and view the content. Data on Mega services is end-to-end encrypted client-side using the AES algorithm.

Megasync mega co nz