The link, however, would share the URL when users clicked away from the shared document in a browser, or put the link in a search box and clicked on an ad.

Dropbox allows users to create shareable links that are only supposed to be accessible to people with the URL. One Dropbox vulnerability compromised tax returns, mortgage applications and other sensitive data. They could then steal, delete or vandalize anything on the account. The hacker would then be able to access the user’s account directly without even knowing their login credentials. A skilled hacker could steal the user’s synchronization token - a code that identifies the user to the cloud service. Additionally, Google only uses 128-bit AES keys for stored data - good, but not quite as strong as it should be.Ī recently-discovered security exploit called the man-in-the-cloud attack may allow hackers to bypass both Google Drive encryption and Dropbox Encryption. Therefore, it can be broken or weakened by a server that has been compromised by a hacker, or doesn’t support the latest version of encryption, potentially allowing a bad actor to steal your data or login information. SSL/TLS encryption depends on individual servers to protect data as it travels between the user’s computer and the cloud. Google Drive encryption is similar files in motion are protected using 256-bit SSL/TLS encryption, while those at rest are encrypted with 128-bit AES keys.ĭropbox and Google Security Vulnerabilitiesīoth Google Drive encryption and Dropbox Encryption have faced security exploits and threats in the past. Finally, both services use perfect forward secrecy, which prevents hackers from using old session keys to hack files stored in the cloud.ĭropbox encryption uses 256-bit AES keys to protect files at rest, and encrypts data in motion with 128-bit AES SSL/TLS encryption or better. Both also allow users to enable two-step verification, which requires an extra code texted to the user’s phone to access the account, making it harder for hackers to access a user’s data.

To their credit, both Dropbox and Google Drive protect user files with encryption. Here’s how Dropbox encryption and Google Drive encryption stack up. While both are useful, users need to look beyond features, and make sure the service they choose can adequately protect their data. While Drive is connected to the entire Google Apps (now known as G Suite) ecosystem, Dropbox is a lightweight, simple alternative for file storage. Dropbox and Google Drive are very different services that appeal to different users.

Is dropbox secure for tax returns