All posts

Is Dropbox End-to-End Encrypted? What Dropbox Says (2026)

Dropbox encrypts files with 256-bit AES and manages the keys, and says it doesn’t offer client-side encryption. What Dropbox says, with sources, and the encrypted team folders exception.

Checked against Dropbox’s own pages on 22 October 2026. If Dropbox changes them, we update this post.

The short answer

By default, no. Dropbox encrypts your files at rest with 256-bit AES and in transit with TLS, but Dropbox manages the encryption keys, and its help page says “Dropbox doesn’t offer client-side encryption.” That is not what most people mean by end-to-end encryption (E2EE), where only you hold the keys.

There is one exception: encrypted team folders, an option for teams on Business Plus, Advanced and Enterprise. In those folders only the folder members hold the key, and Dropbox says it cannot access the private keys or the plaintext files.

What Dropbox says

Encrypted does not mean private from Dropbox

Encryption at rest protects against someone walking off with a disk. Encryption in transit protects against someone watching the network. Neither says who can read the file once it arrives, and that depends on who holds the key.

Because Dropbox manages the keys on its side, it follows that Dropbox is technically able to decrypt files it stores by default. Dropbox does not use those words, so treat that sentence as our reading of key custody, not as a Dropbox statement. This page also makes no claim about what Dropbox does or does not do with that ability.

The exception: encrypted team folders

Dropbox does offer end-to-end encryption inside a narrower feature. According to its encrypted team folders page:

  • It is available for teams on Dropbox Business Plus, Advanced and Enterprise, and only team admins can create and manage encrypted team folders.
  • “Only folder members have access to the encryption key, while excluding anyone else, including Dropbox.” Admins can also create recovery keys.
  • File content is always encrypted, but metadata remains visible in plain text.
  • It restricts features: Dropbox lists shared folders, shared links, content search and Dropbox AI among the unsupported features, says sharing with another team needs both teams to enable end-to-end encryption, and says encrypted files are not available in the mobile app.

Outside encrypted team folders, the answer above applies: Dropbox’s help page says it doesn’t offer client-side encryption.

Encrypting files yourself first

Dropbox’s guide says customers may encrypt files before uploading them, but then they are responsible for managing those keys, and doing so “may also reduce the functionality of some features.” (Shared Responsibility Guide, page 9)

What zero-knowledge changes

With Beebeeb, files are encrypted on your device before they are uploaded, with keys we never receive, so what we store is ciphertext. The file encryption is AES-256-GCM and your key material is derived with Argon2id; the detail is on our encryption page, and the client code is open source so you can read it.

It has costs, and we state them. We cannot recover your files if you lose both your password and your recovery phrase. The server is not open source (the apps are). There has been no independent security audit yet. Files are stored in the EU. For a point-by-point look at where Dropbox is still the better pick, see Beebeeb vs Dropbox.

Common questions

Is Dropbox encrypted? Yes. Dropbox says files are encrypted at rest with 256-bit AES and in transit with TLS.

Is Dropbox end-to-end encrypted (E2EE)? Not by default. Dropbox manages the keys, and its help page says it doesn’t offer client-side encryption. Encrypted team folders on Business Plus, Advanced and Enterprise are end-to-end encrypted, with the limits listed above.

Can Dropbox read my files? By default Dropbox manages the keys, so it is technically able to (our reading, see above). In encrypted team folders, Dropbox says it cannot access the private keys or plaintext files.

Does Dropbox encrypt at rest? Yes: each block is encrypted with 256-bit AES.

Is Dropbox zero-knowledge? Not by default. Only inside encrypted team folders does Dropbox say it is excluded from the key.

Files only you can read

Beebeeb is end-to-end encrypted, zero-knowledge cloud storage — stored in Europe, open source, with a 14-day free trial on Starter, Basic and Pro. Encryption happens on your device; we only ever hold ciphertext we can’t read.

Start a 14-day trial See pricing How the encryption works