OpenPGP signature verification failed with Debian Trixie.

I am having the same issue, and I find the use of the SHA1 signatures very concerning in terms of trusting the security commitments of Dropbox. As a loyal customer who has been paying for Dropbox for twenty years or so, I hope this issue is given priority as a security concern.

I fully agree with the previous posters. While it is technically possible to relax the cryptographic policies of our platforms to keep using the Dropbox repository with its deprecated SHA-1 signature, Debian and other modern distributions are flagging said signatures as insecure for good reasons. This is quickly becoming a blocking problem for those who want to keep Dropbox integrated without compromising our system security.

Having said that, we appreciate that this issue has been escalated internally, and we'd be very grateful if it could be prioritized so the repository is re-signed with a stronger algorithm, ensuring continued compatibility and security across all supported platforms.

Thanks in advance.

Hannah​ : Is there any progress on this?

I’m afraid there are currently no updates on this, dan s.3.

The messaging in "sudo apt update --audit" indicates that Dropbox will be broken in Debian on February 1st 2026.

This error persists, meaning we will lose Dropbox in Debian by February if it's not actioned...

Hi ObsidianR, just to clarify, could you confirm that you've followed the previous steps in this thread in relation to removing and redownloading the package?

Please understand that this situation currently affects all users of Debian Stable or newer.

There is a deadline, after which no updates will be accepted from the Dropbox repository.

This situation will very likely migrate to downstream Linux Distributions, including Ubuntu.

I did, it does not fix the issue for me. 

To be fair, the error clearly states what the issue is and what the solution is too. It just needs to be changed to an up to date file format.

If this is not done soon, Dropbox will cease to function in all Debian-based distros, including Ubuntu which is listed as compatible in your documentation.

It is a genuinely simple fix if the dev team is notified.

Is anyone talking to the Ubuntu devs about this? Like at some point this will be in Ubuntu. Maybe it is already in a dev version. Dropbox should care about that even if they don't care about Debian directly.