VirusTotal in MITorrent

Simple guide: how to get an API key, what the security module does, and what data it sends.

In short: what this module is

VirusTotal module checks downloaded files for threats. First by hash (SHA-256). If hash is unknown and you enabled the option, file may be uploaded for analysis.

Privacy tip

If you do not want file uploads to third-party servers, keep hash-only mode and disable upload on unknown.

How to get VirusTotal API key

Step 1Go to VirusTotal website and create an account.
Step 2Verify your email and sign in.
Step 3Open your VirusTotal profile and find API Key section.
Step 4Copy your API key.
Step 5In MITorrent: Settings -> Security -> VirusTotal -> paste key -> Save.

How scanning works in the app

  1. After download completes, MITorrent calculates file SHA-256.
  2. Client requests VirusTotal report for this hash.
  3. If report exists, app shows status (clean / warning / blocked).
  4. If result is unknown, behavior depends on your option: notify only or upload file for analysis.
  5. During scan, torrent can be temporarily paused, then resumed automatically (except explicit block).

VirusTotal Public API limits

  • About 4 requests per minute.
  • About 500 requests per day.
  • Roughly up to 15.5k requests per month.

Exact limits may change on VirusTotal side.

What payload is sent to VirusTotal

  • API key (request header).
  • File hash (SHA-256) for lookup.
  • Actual file — only if upload-on-unknown is enabled.
  • Standard technical HTTP request fields.

What the module does not send

  • Your passwords and logins.
  • Browser history.
  • Complete list of all user torrents.
  • Personal documents automatically (except selected file if unknown-upload is enabled).

Status meanings

Clean

Low or zero detections. Torrent continues normally.

Warning

Some detections, but not critical. App shows warning.

Blocked

Many detections. Torrent is paused until user decision.

Unknown

No hash data in VT. File upload may be used if enabled.

API limit

VirusTotal temporarily rate-limited requests. Retry later.

API error

Check key, network, and API access.

FAQ

Do I need upload-on-unknown enabled?

Not required. If privacy is priority, keep hash-only mode.

Why do I sometimes see “unknown”?

Because this hash is not yet in VirusTotal DB or analysis is not completed yet.

Can I continue torrent after block?

Yes, user can click “Resume” manually.

Is VirusTotal key paid?

There is free Public API with limits. Higher usage needs commercial plan.

Where are settings in MITorrent?

Left menu -> Settings -> Security -> VirusTotal block.

Go to home Release page
Updated: 2026-07-20