diff --git a/lib/options.js b/lib/options.js
index b5032bd..8d96b34 100644
--- a/lib/options.js
+++ b/lib/options.js
@@ -18,6 +18,7 @@ module.exports = function getOptions(argv) {
       passphrase: argv.passphrase || process.env.npm_package_remotedev_passphrase || null
     },
     dbOptions: dbOptions,
+    maxRequestBody: argv.passphrase || '16mb',
     logLevel: argv.logLevel || 3
   };
 }
diff --git a/lib/worker.js b/lib/worker.js
index 0e2ea4f..6c4a21d 100644
--- a/lib/worker.js
+++ b/lib/worker.js
@@ -8,6 +8,7 @@ module.exports.run = function(worker) {
   var httpServer = worker.httpServer;
   var scServer = worker.scServer;
   var store = createStore(worker.options);
+  var limit = worker.options.maxRequestBody;
 
   httpServer.on('request', app);
 
@@ -19,8 +20,8 @@ module.exports.run = function(worker) {
   });
 
   app.use(cors({ methods: 'POST' }));
-  app.use(bodyParser.json());
-  app.use(bodyParser.urlencoded({ extended: false }));
+  app.use(bodyParser.json({ limit: limit }));
+  app.use(bodyParser.urlencoded({ limit: limit, extended: false }));
   app.post('/', function(req, res) {
     if (!req.body) return res.status(404).end();
     switch(req.body.op) {