Any file type up to 25mb. Wrong password will still let the user upload the encrypted file to be processed and returned for download, but without the correct password, returned file will always be corrupted. Password is not stored in file.