Today, the news broke that beyond user emails, the salted and hashed password data of more than 60M Dropbox users were also leaked in the 2012 incident. Switch to end-to-end encryption! Sign up with the promo code DROPDROPBOX until September 8th and use Tresorit for Business free for a year. The learning: always use strong passwords and never re-use passwords for different services. On the contrary, weak passwords could be reversed and so files could be accessed. If users have strong passwords and admin accounts are not leaked, user files are safe in both server-side and end-to-end encrypted models because properly hashed and salted strong passwords are practically impossible to reverse. Strong passwords are essential in cases when the user’s login data (email addresses and salted hash passwords) get leaked. 2) Having strong passwords is vital in all cases To have this protection, users should have strong passwords as well – as the danger of a data breach may provide access to users’ hashed login credentials and weak passwords could be reversed. This is why end-to-end encryption matters: files are encrypted at the users’ side before being uploaded to the cloud, so the service provider does not have access to the encryption keys. On the other hand, if a system admin from a company using end-to-end encryption (like Tresorit or SpiderOak) gets hacked, hackers will only find an encrypted format of the files stored in the cloud and will not be able to access them in a readable form. As server-side encryption involves encrypting and decrypting files on the provider’s servers, their system admins might have access to the encryption keys and the files – and so can hackers. When a system admin from a company using server-side encryption (like Dropbox) gets hacked, hackers might possibly be able to access, decrypt and read users’ files, regardless of the strength of users’ passwords. 1) End-to-end encryption protects users’ files in cases when login details of admins are leaked In our article, we explain what difference end-to-end encyrption can make to avoid cyber attacks. This means that, depening on the employee's role, user data might be also affected. A Dropbox employee used the same password for LinkedIn, which were also compromised. It was announced today that hackers have stolen hashed passwords from over 60 million Dropbox users.

Alternative to dropbox encrypted