I thought dropbox data was unencrypted by default, lol. I use Mega, and while I don't fully trust the company, I believe that my data is safe. Also, I feel like 5k accounts are sp few compared to the amounts we usually see, lol
this post was submitted on 04 Sep 2026
81 points (98.8% liked)
Privacy
50904 readers
1036 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 6 years ago
MODERATORS
True, 5k isnât huge compared to some breaches, lol. What caught my attention was that files were actually accessed in some of those accounts. Makes me wonder how much a storage provider should be able to expose if an account gets compromised in the first place.
Their defaults are AES256 at rest
https://www.dropbox.com/features/security
That being said, thatâs not end to end encrypted because they have the keys, so if someone breaks into their infrastructure, they break into the files. It moreso prevents the datacenter owner/someone acquiring drives from getting in.
They do have support for end to end encryption, but thatâs not included on their standard plans, you need to pay for the âAdvancedâ plan for that feature
If you aren't the only one with the keys, it's basically unencrypted. Bake in your own encryption (rclone, cryptomator, etc), or treat it as unencrypted.