Aug 23, 2013

A New Way to Secure Files on Dropbox

6 Comments · Posted by Robert Ambrogi in General

Lots of lawyers are using Dropbox to store files online and access them from multiple devices. According to the 2013 ABA Legal Technology Survey Report, it is not only the most popular cloud storage platform among lawyers, but also the most popular cloud-based application of any kind among lawyers. Even so, many lawyers remain concerned about the security of the files they load into Dropbox.

A new application released this week, Safebox, enables you to encrypt your files before you send them to Dropbox, so that they do not leave your computer until they are protected with what the company promises is military-grade security. (It uses AES-256, the advanced encryption standard with a 256-bit key.) Once the encrypted file is added to Dropbox, you can retrieve it from any other computer you use, provided you have also installed Safebox there.

The way it works is simple. When you download and install Safebox, it creates a Safebox folder on your computer, similar to the folder that Dropbox adds to your computer. To encrypt a file and send it to Dropbox, simply move the file to the Safebox folder. Safebox encrypts it and sends it to Dropbox. It even encrypts the file name as it appears on Dropbox.

To retrieve the file on another computer, you will have to install Safebox there and enter the password you created during the initial set-up. As it did on the first computer, Safebox will add a folder. Any file you send to Dropbox using Safebox will be synchronized across all your Safebox folders on all the computers where you install it. The file appears in the folder unencrypted and ready to use.

Note that there are several limitations in how you can use Safebox:

  • You cannot access the encrypted files directly on Dropbox. Although Safebox adds a folder to Dropbox where the encrypted files are stored, you can only access the unencrypted files through the desktop client.
  • You cannot use Safebox to share encrypted files with others. The developers tell me that sharing is “high on our planned feature list.”
  • You cannot access Safebox files from mobile devices. Here again, the developers tell me that this is a feature they are considering.

Safebox works with other cloud-storage platforms as well, according to its developers. They have tested it with Google Drive, Insync and Wuala, and say it should work with any service that uses a client-side synchronization folder.

For a limited period following this week’s launch, Safebox is being sold for $9.99. At some point, the price will increase to $19.99. Note that this is a one-time purchase, not a monthly subscription, and the single license can be used across all your computers.

You can also try Safebox for free in a limited trial mode. The trial mode limits you to securing no more than five files.

There are several other applications available that encrypt files before sending them to Dropbox or other cloud-storage platforms. You can find several with a quick Google search. At least some of them profess to include mobile access, but to mixed reviews. For now, Safebox is an application worth considering and certainly worth watching as its development continues.

 

Tags: No tags

6 comments

  • Jonathan I. Ezor · August 23, 2013 at 11:38 am

    Robert,

    Thanks for this–pairing security and convenience is always a challenge. Do you know if Safebox is open-source? I always prefer to use encryption software whose mechanics are verifiable, rather than just trusting vendors’ promises that something is secure. For myself, I would probably prefer using something like TrueCrypt to create an encrypted container within DropBox, but this certainly seems easier, especially as TrueCrypt currently lacks a user-friendly Android option. {Jonathan}

    Reply

  • Brian Focht · August 23, 2013 at 11:56 am

    For anyone wanting to know how serious the unmodified security risks on Dropbox are, check out my post from a couple weeks back: http://www.thecyberadvocate.com/2013/07/31/dropboxslittle-security-problem/

    Probably the most interesting research I’ve found while researching an article.

    Reply

  • Rob Perelli-Minetti · September 3, 2013 at 9:28 pm

    Does this work with iPad/iPhone? If I have a dropbox account and put things into it on my Windows desktop, I often want to read them on my iPad, or even iPhone. It isn’t clear that the application is available for iPad/iPhone.

    Reply

    • Shimon Lazarov · April 24, 2014 at 1:48 pm

      Although encrypted files on Dropbox are very secure – using bank grade encryption, the data synced to your devices (iPads, phones, laptops) isn’t. So if you lose a device your data may be at risk. Here at Sookasa we have developed a solution to this problem – encrypting your files before they get to Dropbox. That way, even if you lose a phone or iPad, your data is safe because nobody will be able to access it without the password to decrypt the files.

      Reply

  • BlawgWorld Rounds Up the Best of Legal Blogs · Robert Ambrogi's LawSites Robert Ambrogi's LawSites · September 5, 2013 at 11:18 am

    […] issue also highlights a “pick of the week,” and I am proud to say that a post of mine was this week’s […]

    Reply

  • David O'Connell · September 5, 2013 at 6:28 pm

    How does this program compare with Viivo? That program/service just updated its enryptions to 2.067 and appears to work just fine.

    Reply

Share your comments