{"id":2371,"date":"2014-06-26T09:50:38","date_gmt":"2014-06-26T14:50:38","guid":{"rendered":"http:\/\/www.poweradmin.com\/blog\/?p=2371"},"modified":"2015-10-21T12:50:17","modified_gmt":"2015-10-21T17:50:17","slug":"how-secure-is-dropbox","status":"publish","type":"post","link":"https:\/\/www.poweradmin.com\/blog\/how-secure-is-dropbox\/","title":{"rendered":"How Secure is Dropbox?"},"content":{"rendered":"<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-2399\" title=\"Is DropBox Secure?\" src=\"\/blog\/wp-content\/uploads\/2014\/06\/dropbox.jpg\" alt=\"Is DropBox Secure?\" width=\"189\" height=\"171\">More and more companies are looking to harness the cloud as a part of their business. For many this starts out with centralizing all files on a cloud based service. Of all these services, <a href=\"http:\/\/www.dropbox.com\/\" target=\"_blank\" rel=\"nofollow\">Dropbox<img class=\"extlink-icon\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/plugins\/external-links-nofollow-open-in-new-tab-favicon\/images\/extlink.png\"><\/a> is the most widely known, but is it suitable for use within your business?<\/span><\/p>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">The most important thing to consider is the kind of content that you are planning to store in Dropbox. If you\u2019re a consumer facing company, or deal with a lot of personal and financial information, then you need to make sure that any information you save on the cloud is properly protected. If you\u2019re just looking to store files in a centralized location, security is less key, but it\u2019s worth keeping in mind anyway.<\/span><\/p>\n<h2><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Security<\/strong><\/span><\/h2>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">Dropbox has a couple of features included with its service that help you to secure any data stored on it. First among these features is two-step verification, also known as two-factor authentication, which requires a user to provide both a password and a security code before being granted access to Dropbox. This security code is provided by the user\u2019s mobile device.<\/span><\/p>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">If you\u2019ve used <a href=\"http:\/\/www.google.com\/landing\/2step\/\" target=\"_blank\" rel=\"nofollow\">Google\u2019s<img class=\"extlink-icon\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/plugins\/external-links-nofollow-open-in-new-tab-favicon\/images\/extlink.png\"><\/a> two-step verification before you should have a good idea of how this process works. If you want to avoid having a bunch of apps on your phone, you can also receive the code via SMS. When you enable two-step verification you also <\/span><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">receive an \u2018emergency backup code\u2019 which is 16-digits long and can be used to log into Dropbox if you\u2019re unable to generate a code at all. It goes without saying that you should store this code somewhere safe, and not let anyone else see it.<\/span><\/p>\n<h2><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Email notifications<\/strong><\/span><\/h2>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">Dropbox can be set up so that, whenever a new device or app connects to it, the manager of the account is sent an email. This gives you up-to-date information about any new or unauthorized access to your Dropbox account, and allows you to respond accordingly should someone other than an employee or other authorized personnel access your storage.<\/span><\/p>\n<h2><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Manual disconnect<\/strong><\/span><\/h2>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">If you detect that there have been some unauthorized connections, or are unsure about whom a new connection belongs to, it\u2019s possible to manually \u2018unlink\u2019 these devices from your Dropbox. Obviously if you\u2019re a large company with hundreds of devices and apps connecting to your storage this can become unwieldy very fast, and you should probably be looking into other cloud options. If you\u2019re a small business however, it shouldn\u2019t be too difficult to manage.<\/span><\/p>\n<h2><a title=\"How to Create and Manage Stronger Passwords\" href=\"\/blog\/the-dos-and-donts-of-managing-your-password\/\"><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Strong passwords<\/strong><\/span><\/a><\/h2>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">Too often the reason files are accessed without permission is because the password used simply wasn\u2019t strong enough. There are some very simple steps that you can take that will ensure that your password is stronger than average (and for goodness sake, don\u2019t use Password or 12345678, they\u2019re the two most common passwords on the internet.)<\/span><\/p>\n<ul type=\"disc\">\n<li><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Make it long<\/strong><\/span><br>\n<span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"> \u2013 The longer a password, the harder it is to break. The minimum password length is usually 8, but you want to go above that and as high as is allowed while still being memorable.<\/span><\/li>\n<\/ul>\n<ul type=\"disc\">\n<li><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Make it random<\/strong><\/span><br>\n<span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"> \u2013 There are password <a href=\"http:\/\/mashable.com\/2013\/01\/22\/password-generators\/\" target=\"_blank\" rel=\"nofollow\">generators<img class=\"extlink-icon\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/plugins\/external-links-nofollow-open-in-new-tab-favicon\/images\/extlink.png\"><\/a> out there that can create something pretty random for you to use. But they can also be extremely hard to remember. Often you can create random passwords by starting out with a few words that are completely<\/span> <span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">unrelated to one another. For example, <strong>howitzerJudicious<\/strong>. This is a good start.<\/span><\/li>\n<\/ul>\n<ul type=\"disc\">\n<li><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Use numbers and symbols<\/strong><\/span><br>\n<span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"> \u2013 At the moment your password just consists of letters, but by adding numbers you can make it a lot harder to crack. It\u2019s popular to replace letters with numbers or symbols that look similar to the letter they\u2019re replacing, (<strong>h0w!tzerjud1cious)<\/strong>. But there is an argument that it\u2019s better to pick an unrelated number (<strong>5howitzer8judicious?)<\/strong><\/span><\/li>\n<\/ul>\n<ul type=\"disc\">\n<li><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Make it complex<\/strong><\/span><br>\n<span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"> \u2013 As well as creating complexity with a variety of symbols, you can also create complexity with higher and lower cases. So, in the case of our example password: <strong>5hoWitZer8jUdiCiouS?<\/strong> At this point, it\u2019s a much more secure password than you started out with, and much less at risk to attack.<\/span><\/li>\n<\/ul>\n<h2><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Encryption<\/strong><\/span><\/h2>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">Dropbox doesn\u2019t offer <a title=\"Perfect Forward Security and SSL Encryption\" href=\"\/blog\/perfect-forward-security-and-ssl-encryption\/\">encryption<\/a> with its service, but there are plenty of third parties who make it possible. <a href=\"http:\/\/www.completelyprivatefiles.com\/\" target=\"_blank\" rel=\"nofollow\">SecretSync<img class=\"extlink-icon\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/plugins\/external-links-nofollow-open-in-new-tab-favicon\/images\/extlink.png\"><\/a> is a popular solution for Windows users that encrypts any files placed into a specific folder before sending them to Dropbox. It\u2019s a pretty painless solution and works well for those who are lacking in tech savvy and are comfortable putting the security of their cloud-based files in the hands of another cloud-based service. If you\u2019re more tech savvy, however, or have an <a title=\"How Can Server Monitoring Improve Performance?\" href=\"\/blog\/how-server-monitoring-can-improve-performance-2\/\">IT department<\/a> available<\/span><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">, you could also consider manually encrypting specific files that you want to have that extra protection.<\/span><\/p>\n<h2><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\"><strong>Secure For Some<\/strong><\/span><\/h2>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">Dropbox is certainly not the Fort Knox of cloud storage providers, but for businesses only looking to store non-essential documents or ease the difficulty of sharing files with one another, it is likely secure enough. However, if your business regularly deals with personal and financial information, we would recommend you look elsewhere for a service to store this information. That is, unless you\u2019re planning to seriously invest a lot of time into correctly encrypting and monitoring all of the files you store on it.<\/span><\/p>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">Dropbox isn\u2019t an enterprise level cloud storage system. It\u2019s really designed for consumers to share things like photos online. While it can be useful for sharing files easily across different departments, this is only the case for non-confidential material.<\/span><\/p>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">There have been many incidences of employees using Dropbox without authorization which has put company (or worse, customer) data at risk, so if you don\u2019t want workers using it, include this in your IT policies. Employees that are poorly trained and don\u2019t understand the risks associated with unprotected data could after all end up costing the company a good amount of cash. This is especially the case when it comes to PCI DSS requirements, although in theory not every employee should be able to access sensitive customer information, let alone save it to a different location.<\/span><\/p>\n<p><span style=\"font-family: tahoma,arial,helvetica,sans-serif; font-size: 12pt;\">What are your feelings toward business use of Dropbox. Do you use it? Do you use something else? Let us know below.<\/span><\/p>\n<p>\u00a0<\/p>\n<p><a title=\"\" href=\"http:\/\/www.twitter.com\/home?status=RT:%20@poweradmn%20How%20Secure%20Is%20Dropbox%20?%20\/blog\/how-secure-is-dropbox\/?ref=blog\" target=\"_blank\" rel=\"nofollow\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1028\" title=\"\" src=\"\/blog\/wp-content\/uploads\/2013\/11\/tweet-this-article-button-large-300x75.png\" alt=\"Tweet this\" width=\"300\" height=\"75\" srcset=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2013\/11\/tweet-this-article-button-large-300x75.png 300w, https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2013\/11\/tweet-this-article-button-large.png 310w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\"><img class=\"extlink-icon\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/plugins\/external-links-nofollow-open-in-new-tab-favicon\/images\/extlink.png\"><\/a><\/p>\n<p><a title=\"\" href=\"https:\/\/plus.google.com\/share?url={\/blog\/how-secure-is-dropbox\/?ref=blog}\" target=\"_blank\" rel=\"nofollow\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-1053\" title=\"\" src=\"\/blog\/wp-content\/uploads\/2013\/11\/google-plus-this-article-button-large2-300x75.png\" alt=\"Share on Google+\" width=\"300\" height=\"75\" srcset=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2013\/11\/google-plus-this-article-button-large2-300x75.png 300w, https:\/\/www.poweradmin.com\/blog\/wp-content\/uploads\/2013\/11\/google-plus-this-article-button-large2.png 310w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\"><img class=\"extlink-icon\" src=\"https:\/\/www.poweradmin.com\/blog\/wp-content\/plugins\/external-links-nofollow-open-in-new-tab-favicon\/images\/extlink.png\"><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>More and more companies are looking to harness the cloud as a part of their business. For many this starts out with centralizing all files on a cloud based service. Of all these services, Dropbox is the most widely known, but is it suitable for use within your business? The most important thing to consider [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":2404,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,13,9],"tags":[],"class_list":["post-2371","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general-it","category-pc-security","category-technical"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/2371","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/comments?post=2371"}],"version-history":[{"count":5,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/2371\/revisions"}],"predecessor-version":[{"id":4230,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/2371\/revisions\/4230"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/media\/2404"}],"wp:attachment":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/media?parent=2371"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/categories?post=2371"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/tags?post=2371"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}