How to encrypt files on Dropbox

Your files, readable

Like almost every cloud service, Dropbox encrypts files on its own servers, but with keys it manages itself. To whoever runs the service they remain technically readable.

Whoever gets into your account

One stolen password or unauthorised sign-in, and the files open just as they are.

Whoever breaches the service

If the provider’s systems are breached, what leaks may be readable by anyone.

Only blocks reach Dropbox

Files are encrypted on your computer with AES-256-GCM before they leave. File and folder names too.

The key stays with you

It unlocks only with your password, or your 24 recovery words. Dropbox does not know them.

You keep using Dropbox

Same account, same storage. No need to switch provider or take out another subscription.

Sign in in your browser

Sign-in happens on Dropbox’s site. CryptoUpload does not see your password.

From several computers

The same vault opens from several devices. If two of them change the same file, both versions are kept.

Go back to yesterday

Saved over something by mistake? Version history gives you the earlier copy back.

Install CryptoUpload

Free, for Windows and Linux. No account to create.

Create a vault

Choose a password and put the 24 recovery words away.

Connect the storage

Then pick a folder to keep in sync, or open the vault as a drive.

Full getting started guide

What stays visible

How many files you have, how big they are, when you upload them and from which address. The private profile blurs sizes and name lengths.

What you have already uploaded

Files that sit there in the clear today stay in the clear until you move them into the vault and delete the originals.

No independent audit, for now

CryptoUpload has had an internal security review only. The code is public and anyone can check it.

What it protects and what it does not