Blog

How secure is Dropbox? This can be an uncomfortable question for Dropbox users who save sensitive files or other valuable data in their accounts. Think of business plans, legal documents, financial projections and, er, personal photos that you wouldn’t want to fall into unfriendly hands. This data is stored in “the cloud” — remote Internet servers that neither you nor Dropbox fully controls.

While Dropbox goes through great lengths to reassure users that it takes security seriously (it points to technologies such as Secure Sockets Layer and heavy-duty encryption, and claims employees are prohibited from viewing the content of users’ files) there have been security incidents, including a bug that allowed any Dropbox account to briefly be accessible without passwords a few years ago. The company quickly fixed the problem and claims additional safeguards were put in place. The company now offers the option of using two-factor identification. Nevertheless, there is no guarantee that some other bug, error, or hack might expose Dropbox user data in the future.

In addition, Dropbox users themselves may be the source of problems. If you are sharing a folder with 100 users, a couple of them are bound to be using easily guessed passwords to guard their accounts (the names of pets or first-born children, “password”, etc.). Sharing links can also lead to problems, if the wrong link is shared or someone posts the link online or in some other public forum.

Despite these issues, millions of people use Dropbox every day. They’re aware that there’s a risk, but are basically making a tradeoff. They are putting more value on the convenience of accessing and sharing files over the Internet for free (or for a low cost), and discounting the chances that the data may be lost, stolen, or exposed.

As I said earlier, it’s an uncomfortable feeling for some people. If it’s too much for you, don’t use Dropbox — or only use it for non-sensitive data. Also be sure to set a passcode lock on the Dropbox mobile app, be careful of who you share links with, and regularly delete old Dropbox links by following these steps.

In addition, be very cognizant of local laws and workplace regulations governing storage of files. I recently received an email from a reader who asked about sharing sensitive workplace files. He claimed he worked for a local state agency. In my response, I said:

“If this is truly sensitive or valuable data, I urge you to think carefully about putting it on Dropbox. As I pointed out in the book, there have been security breaches affecting Dropbox in the past, and when it comes to sharing confidential state financial information, there may be rules or laws that govern how it can shared/transmitted electronically. Making a call to the state CIO or senior IT manager to see how they recommend handing this situation would be an advisable move.”

Even if your  company allows Dropbox in the workplace, it may forbid ex-employees from keeping old files. If you leave the job, be sure to go into Dropbox and leave shared folders and delete copies of files as required.

How do you delete Dropbox links? There are lots of situations in which you might want to get rid of a link and make sure no one is able to use it ever again. Maybe the link is to a file in Dropbox that is sensitive and you are worried about it being shared with strangers. Or perhaps the file is outdated and you don’t want people to see it anymore. Whatever the reason, this post explains how to delete Dropbox links.

The post was prompted by a message I received from a Dropbox user who was worried about an old video she had created and stored on Dropbox. She wrote:

“What if I sent an email and attached a dropbox video, but, it turned-out the incorrect version and I needed to “delete” it so no versions of it can be replayed. Is there a way to make that video “Unplayable”? I learned that we can delete “shared” folders and remove shared users … but what about a dropbox video that was “attached” to an email. The next time the email is opened, I need the video link to be broken. Is there a way to do this?”

It’s actually very easy to delete Dropbox links. Here’s what I told her to do:

1. Go to Dropbox.com and log in
2. On the left side of the window click “Links”. You’ll see a list of all of the links you’ve created.
3. On the right side of each link is an “X”. Click the X to delete that link. You’ll be prompted to confirm each deletion.
4. Once the link is gone, no one can use that link, but you will still have the file in Dropbox (and can create a new link for it later, if you want)

On Dropbox.com, here is what the Links screen looks like. I am hovering my mouse over the “X” that let’s me delete the link in question:

If you are interested in learning more about how to manage shared folders and links in Dropbox, please see Chapter 4 of Dropbox In 30 Minutes, Second Edition. Download/purchasing instructions are located on this page.