up vote 3 down vote favorite
share [g+] share [fb]

I use dropbox a lot, and I'd like to start using my dropbox account on my work pc, however I want to prevent anyone else from being able to access the files in my dropbox folder other than me on my work pc.

Eg, double clicking my dropbox asks for a password or something on my work pc.

Is this possible? If so, any suggestions?

Cheers, John.

link|improve this question
75% accept rate
feedback

4 Answers

up vote 5 down vote accepted

Password-protecting the folder won't really do a whole lot if they can just log in as an administrator and claim ownership of the directory themselves.

I'd suggest installing TrueCrypt, and using that to create a file-based encrypted volume. Then put your DropBox directory inside that, and only folks who know the decryption password can get to it.

Note that they could easily install a keylogger on your PC to learn your decryption password without your knowledge.

Also, the requisite disclaimer: Check with your IT department, and don't do anything contrary to established IT policy. Oftentimes organizations frown on personal use of work property (your PC) and resources (the bandwidth used to download from/upload to DropBox), so make sure you aren't violating any rules that could land you in trouble.

link|improve this answer
I am the IT department ;) I work in a very small office with two other people. It doesn't need to be massive security, I just dislike the idea my boss could easily snoop through my personal files. – John Hunt May 13 '11 at 0:08
Do you mean put the encrypted volume inside the Dropbox folder? – sblair May 13 '11 at 0:10
@sblair Nope, I mean the DropBox folder inside the encrypted volume. In this way you have to decrypt and mount the volume before any of the DropBox data is available. – Kromey May 13 '11 at 0:16
@Kromey Ok, but what if an "attacker" simply launched the Dropbox application? Dropbox would start syncing files to the local machine, completely bypassing the encryption container. I think it would be more secure to have a single file-based encrypted volume, containing all sensitive data, inside the Dropbox folder. – sblair May 13 '11 at 0:31
@sblair As I don't use Dropbox, I can't speak to the specifics of how it works, but I would be shocked (and appalled!) if there were no option to not remember a user's password to sync files -- i.e. you'd have to enter the password every time you launched the application. If Dropbox is incapable of doing this, I would have to conclude that it is inherently an unacceptable security risk. ...Just looked this up, and apparently Dropbox will remember your password automatically, with no option not to. Not cool, not safe, not secure. – Kromey May 13 '11 at 0:37
show 7 more comments
feedback
up vote 1 down vote

I think the best way to do this to ensure you are protected from work bosses to look at your files or use a keylogger is to use a VMware image of Windows XP and install VMware player. Then add dropbox to that windows user. This is the best in my opinion as it encapsulates EVERYTHING. Put a really good password on that windows install, encrypt the file contents. There is no way in hell anyone is getting access to that. Also, use a onscreen keyboard to login to that version of windows. Then you don't have to worry about the keylogger. Let me know if anyone thinks there is a way to get access to those dropbox files and if you have a better idea.

link|improve this answer
feedback
up vote 0 down vote

Dropbox itself doesn't offer the functionality you're looking for. I was going to suggest using Dropbox Portable, but according to the forums it's been discontinued. You can simply use the web version on the computers that don't belong to you. Otherwise you'd need a third-party app to password protect the Dropbox folder.

link|improve this answer
feedback
up vote 0 down vote

SecretSync is another option. It gives you a folder to drop things into that encrypts them before being synced by Dropbox. (Lifehacker review)

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.