Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

What are the risks? Where are the vulnerabilities?

Is my Dropbox encrypted?

share|improve this question

closed as not constructive by Ƭᴇcʜιᴇ007, Mike Fitzpatrick, Nifle, Sathya Jul 10 '11 at 16:31

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
Read this link: superuser.com/questions/304415/… –  KCotreau Jul 9 '11 at 1:04
    
Dropbox uses AES 265 encryption...dropbox.com/help/27 –  Moab Jul 9 '11 at 2:35

3 Answers 3

up vote 3 down vote accepted

Your Dropbox is encrypted during transmission and while stored on their servers. Dropbox themselves do, however, have access to there files but it is against their policy to look at your files (note that it's against policy though technically possible).

If you're concerned with the security of your files on any of these services, the solution is to encrypt your files locally inside an encrypted disk image and then sync that image with dropbox. You'll lose the ability to read your files on mobile devices but on any computer you'll be able to mount the image and get access to your files.

share|improve this answer

It all depends on just how sensitive your information is. If you're looking for real security for your files, encrypt them before you upload them.

As others have already mentioned, Dropbox encrypts anything that isn't in your public folder for you with AES using a 256-bit password, which would take longer than the age of the universe to crack by brute force. This works for protecting your files against hackers, but if anyone gets your dropbox login information it's game over. Also, Dropbox can decrypt these files and view them, and will hand your unencrypted files over to the government if it is required of them.

However, if you encrypt these files yourself with something strong (like the aforementioned AES 256), have a sufficiently long password and take proper steps to protect your password, your files will be very secure.

Amazon doesn't do any encryption for you, so if you want any protection if Amazon's services get hacked, you'll need to encrypt the files yourself.

So, long story short - if you really care about protecting your files, you'll encrypt them yourself using a strong encryption method (like AES 256) and a long password that you take proper steps to protect. Any sort of built-in encryption on online services still leaves you vulnerable to hackers and the government seeing your files. Anyone can get into your files if your username and password are stolen. However, if you encrypt those files yourself, it becomes much, much, much harder for them to view your files.

share|improve this answer

Dropbox uses AES 256 encryption.

Amazon S3 does not encrypt, you must do it before uploading.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.