Encryption used by Dropbox?

[adoo]

Hi,

I would like to know what level of encryption if any is used by Dropbox for user space on the DB servers or during file transmission between different computers. Also does DB encrypt the data on the user hard drive? I work for a company and some files are classified. I want more peace-of-mind while using DB.

[Elixir · Accepted solution]

Hi @adoo, here are some of the facts as far as I know on the topic: 

1. On transit, your data is encrypted using 128-bit or higher Advanced Encryption Standard (AES) encryption and travels via TLS/SSL.
2. Your data is stored in the Dropbox servers as random data blocks and encrypted using 256 bit AES.
3. Note that the data is encrypted by Dropbox on your behalf and therefore not end-to-end encrypted.
4. Dropbox maybe forced to hand over your data to law enforcement/governments if provided with a court order.
5. If you are worried aobut No. 4 scenario, you must encrypt your data yourself prior to uploading to Dropbox server. For example, you may use a third party tool like Truecrypt, Veracrypt etc. But this comes as a price of convenience.
6. Your data are not encrypted localy on your device hard drive by Dropbox. You should protect the local data yourself. Most operating sysmtems give ways to do this, for example, in Windows you may turn on BitLocker; in MacOS you have File Vault. As far as your OS account is secured by password, and/or biometric, and/or 2FA, your local data is safe.

You may read more about Dropbox business security here https://www.dropbox.com/business/trust/security/architecture

[oscarcbas · Accepted solution]

On transit, your data is encrypted using 128-bit or higher Advanced Encryption Standard (AES) encryption and travels via TLS/SSL.

[Jay · Accepted solution]

You can read up more details about how your data is protected on our servers here.

Regarding the second query, local encryption on your hard drive isn’t offered by Dropbox, you’d need a third party app to encrypt your files for you.