Showing results for 
Show  only  | Search instead for 
Did you mean: 
Are you interested in hearing how one of our Community members uses Dropbox for sailing trips? Read all about it here.

Dropbox API Support & Feedback

Find help with the Dropbox API from other developers.

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Access token js , security ?

Access token js , security ?

Stefano B.3
New member | Level 1

HI sorry for english :

i use this script to upload file directly  on my dropbox app with javascript:

<form onSubmit="return uploadFile()">
<input type="hidden" id="access-token" value="<?=$token ?>" />
<label>Seleziona il file da caricare</label>
<input type="file" id="file-upload" />

<button type="submit">Esegui l'upload</button>

in this way the access token is show in souce code .

if a developer use this access token can create an app and manage the file of my folder ,
it's true ?
if it's true how can i secure it ?

1 Reply 1

Stephen C.14
Dropbox Staff

If you're trying to build an app for clients to upload files to one Dropbox account (say your personal account), then there is no client-side solution that will allow clients to securely upload directly to your Dropbox. Your access token will always be exposed client-side.

If you want to use your personal Dropbox account as a place for users to upload content, then you will need to implement a server-side solution. For example, you can have clients upload content to your server and then from your server, you can upload the content directly to your personal Dropbox account. In this case, you would not want to use the JavaScript SDK, instead perhaps the Java SDK (

Does this answer your question? 

Need more support?
Who's talking

Top contributors to this post

  • User avatar
    Stephen C.14 Dropbox Staff
What do Dropbox user levels mean?