Encrypt Your Dropbox Files So Only You Can Read Them

Why Encrypt Files Before They Reach Dropbox?

Dropbox has solid security engineering: AES-256 encryption at rest, TLS in transit, two-factor authentication. But like most mainstream clouds, Dropbox encrypts your files with keys that Dropbox manages — which means your content is technically readable on their side.

• 🔑 Dropbox holds the keys — server-side AES-256 protects against outside attackers, not against the provider itself. Dropbox's own architecture can decrypt your files.
• 👥 Access is policy, not math — Dropbox states that employee access to file content is restricted and audited. That's an organizational promise; encryption with your own key is a mathematical one.
• 🧩 No personal end-to-end option — Dropbox acquired encryption vendor Boxcryptor's technology for its business tiers, but personal accounts have no built-in end-to-end encryption.
• 🎣 Account breaches expose readable files — a phished Dropbox login means every file is immediately usable by the attacker. Encrypted files are worthless without your vault password.
• 📄 Sensitive files sit in sync folders — contracts, scans of IDs, financial exports often end up in Dropbox by habit. Those are exactly the files worth encrypting first.

What OurClone's Encrypted Vault Actually Does

OurClone's Encrypted Remote wraps your Dropbox in a password-only encryption layer. Dropbox stays your storage — but inside the vault folder, it stores ciphertext it cannot interpret.

• 🔐 Encrypted before upload — files are encrypted on your computer; Dropbox only ever receives ciphertext.
• 🕵️ File names hidden too — names and contents are both encrypted; the vault folder on dropbox.com shows only scrambled text.
• 🔑 Your password is the only key — it never leaves your device, and OurClone keeps no recovery copy.
• 🧰 Open format, not lock-in — built on rclone crypt, an open and documented standard.
• 📁 One folder, not the whole account — the vault lives in a folder you pick; your shared folders and synced projects stay untouched.
• ⚙️ Behaves like a normal remote — transfer into it, sync it, mount it, or use it as a backup destination.

The Encrypted Remote is an OurClone Pro feature, and a vault can't be nested inside another vault — it always wraps a plain remote directly.

How to Create an Encrypted Vault on Dropbox

Setup happens in one dialog; here's the full path from zero.

• 🔗 Connect Dropbox — Open OurClone and go to Add. Select Dropbox; a browser window opens for login and authorization. Already connected Dropbox for mounting or transfers? Skip ahead.
• 🧭 Open the Encryption Category — In the Add page, the Encryption section sits above the provider grid. Click the Encrypted Remote card (marked Pro).



• 🛠️ Create the Vault — Name it (e.g. dropbox-encrypted), pick your Dropbox account as the base storage, then choose or create a folder inside it — the vault must live in a folder, not the account root, and only that folder will hold encrypted data. Set your password (plus an optional salt password for extra filename obfuscation) and click Create Encrypted Remote.



• 📦 Move Files Into the Vault — Open Migrate, pick a local folder (or another cloud) as the source and the vault as the destination, then run a copy, move, or sync. Encryption happens on the fly during upload.



• 📊 Watch It in the Task Center — The Task tab shows live progress, speed and any failed files, and history survives app restarts.

One habit before the first big transfer: put the vault password in a password manager. If it's lost, no one can bring the data back.

Check What Dropbox Can See Now

Log in at dropbox.com and open the vault folder. Every file and subfolder appears with scrambled names, and previews are blank — Dropbox is faithfully storing data it cannot read. The same is true in the Dropbox desktop and mobile apps.

In OurClone's Manage page, the vault (marked with a lock badge) lists your real file names — decryption happens locally on your machine. Prefer a folder view? Mount the vault as a local drive and browse it in Finder or File Explorer (requires macFUSE on macOS or WinFsp on Windows).

Frequently Asked Questions

Is the encrypted vault free?

No — it's an OurClone Pro feature. Connecting Dropbox, transferring and backing up work on the free plan within its limits; see pricing.

What if I forget the vault password?

The data becomes permanently unreadable — by design. There is no reset and no backdoor, so keep the password in a password manager.

What is the salt password?

An optional second password that strengthens file-name obfuscation. It must be kept as safely as the main password — both are needed to open the vault.

How is this different from Dropbox's own encryption?

Dropbox encrypts your files with keys Dropbox controls, so its systems can still process your content. The vault encrypts with a key only you hold — Dropbox stores ciphertext and nothing more.

Can I keep using the rest of my Dropbox normally?

Yes. Only the folder you picked holds encrypted data. Shared folders, team spaces, and everything else sync and share exactly as before.

Can I open the vault from another computer?

Yes — install OurClone, connect the same Dropbox account, and add an Encrypted Remote pointing at the same folder with the same password (and salt, if set).