Dropbox status: access issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Dropbox reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Dropbox users through our website.

• Errors (60%)
• Sign in (20%)
• Website Down (20%)

Live Outage Map

The most recent Dropbox outage reports came from the following cities:

City	Problem Type	Report Time
Nottingham	Errors	21 days ago
Guayaquil	Website Down	21 days ago
Flumet	Errors	1 month ago
Irapuato	Errors	1 month ago
Bournemouth	Sign in	3 months ago
Paramaribo	Errors	4 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Dropbox Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Kyle Harrison (@kwharrison13) reported 8 minutes ago

  Maybe. Maybe you'd be fine without data centers. But let me ask you this. Do you use credit cards, debit cards, tap-to-pay, gas pumps, vending machines, parking meters, parking apps, ATMs, online banking, mobile banking, mobile check deposit, Zelle, Venmo, PayPal, Cash App, Apple Pay, Google Pay, splitting a dinner bill, autopay on your bills, payroll that isn't a paper check, direct deposit, digital 401(k), Robinhood, Coinbase, credit score checks, loan applications, mortgage applications, car loan approval at the dealership, insurance quotes, filing an insurance claim, e-filing your taxes, gift cards, store loyalty accounts, digital coupons, rebates, buy-now-pay-later, tipping on a screen, email, text messages, iMessage, WhatsApp, Signal, group chats, voicemail transcription, spam call blocking, FaceTime, Zoom, Google Meet, Discord, Slack, video calls with grandparents, phone number lookups, checking your data usage, paying your phone bill, two-factor codes, push approvals to log in, password managers that sync, "sign in with Google," resetting a forgotten password, digital IDs in your wallet app, gym check-in apps, apartment smart locks, hotel keys on your phone, office badge apps, patient portals, seeing your test results, booking a doctor's appointment, telehealth visits, prescription refill requests, the pharmacy knowing what you're on, insurance verification at the front desk, prior authorization, continuous glucose monitors, insulin pump apps, remote pacemaker checks, CPAP data reports, hearing aid apps, therapy apps, period trackers, fertility trackers, medical alert buttons for elderly parents, symptom checkers, finding an in-network doctor, the weather app, radar, hurricane warnings, tornado warnings, flood alerts, earthquake early warning on your phone, wildfire maps, smoke maps, air quality, pollen counts, Amber alerts, emergency alerts, road closure info, Google Maps, Apple Maps, Waze, live traffic, rerouting around a crash, transit apps, real-time bus and train arrivals, tapping your phone to ride the subway, Uber, Lyft, rental car reservations, Turo, bike share, scooter share, EV charging networks, paying for a charge, phone-as-car-key, remote start, finding your parked car, over-the-air car updates, in-car navigation, in-car voice assistants, stolen vehicle tracking, road trip planning, booking flights, checking in for a flight, mobile boarding passes, seat selection, flight status, rebooking after a cancellation, bag tracking, TSA PreCheck lookups, airport wifi, booking hotels, Airbnb, Vrbo, checking into a hotel, cruise bookings, theme park tickets, ride reservations, airline miles, hotel points, currency conversion, Amazon, all online shopping, order tracking, delivery notifications, returns and exchanges, price checks in-store, self-checkout, store apps, curbside pickup, Instacart, DoorDash, Uber Eats, ordering ahead at a restaurant, OpenTable, Resy, waitlist texts, QR code menus, tipping on delivery, subscription boxes, eBay, Etsy, Facebook Marketplace, Craigslist, Poshmark, StockX, Ticketmaster, StubHub, getting into a concert with a phone ticket, Alexa, Siri, Google Assistant, smart thermostats, video doorbells, security cameras, alarm monitoring, smart locks, smart lights, robot vacuums, garage door openers, baby monitors, pet cameras, automatic pet feeders, GPS pet collars, smart sprinklers, smart fridges, app-connected air fryers, cloud printing, printer ink subscriptions, routers you manage from an app, checking if you left the stove on, iCloud, Google Photos, every photo you've taken in ten years, Dropbox, Google Drive, OneDrive, shared albums, phone backups, setting up a new phone, notes apps, calendars, contact syncing, reminders, to-do apps, document scanning, e-signing a lease, Netflix, YouTube, Hulu, Disney+, Max, Prime Video, Twitch, cloud DVR, on-demand cable, Spotify, Apple Music, podcasts, audiobooks, Kindle books, library ebook borrowing, online multiplayer games, matchmaking, cloud saves, game downloads, game patches, single-player games that phone home for a license check, Steam, PlayStation Network, Xbox Live, Nintendo Online, Roblox, Minecraft servers, fantasy football, sports scores, sports betting apps, movie tickets, Google search, Wikipedia, ChatGPT, Claude, every other AI app, Instagram, TikTok, Facebook, X, Reddit, LinkedIn, Snapchat, Pinterest, dating apps, Yelp reviews, Google reviews, news sites, Substack newsletters, blogs, forums, checking if a business is open, looking up a phone number, recipes, translation apps, Duolingo, Google Docs, Sheets, Gmail, Outlook, Microsoft 365, Teams, Notion, Figma, Canva, shared calendars, scheduling links, VPNs into work, remote desktop, timeclock apps, shift scheduling apps, requesting time off, expense reports, job applications, LinkedIn recruiters, video interviews, Canvas, Blackboard, checking your kid's grades, school lunch accounts, attendance notifications, online homework, Khan Academy, Coursera, FAFSA, student loan portals, tutoring apps, Fitbit, Apple Watch health data, Strava, Peloton, sleep tracking, smart scales, calorie tracking, meditation apps, workout apps, DMV appointments, renewing your license online, paying a parking ticket, jury duty portals, checking your property tax bill, utility accounts, outage maps, paying rent through an app, HOA portals, storage unit access codes, wedding registries, baby registries, funeral arrangements, Ancestry, 23andMe results, church livestreams, volunteer signups, or GoFundMe? If you said yes to ANY of those then you do, in fact, NEED data centers.

• 
  Justin Kalland (@justinkalland) reported 11 minutes ago

  If you store files on @Dropbox, it may have been compromised between August 4th and 21st. Short version: they trusted @Lenovo to connect Dropbox accounts, and Lenovo had an email verification flaw. Allowing an attacker to create a Lenovo account, add your dropbox account, and gain access. Check if you got a "Your Lenovo Code" email followed by a Dropbox "we noticed a new sign in to your Dropbox account". That happened to me on August 7th, and today Dropbox is confirming the incident:

• 
  Nell AI Labs (@nellaiorgs) reported 15 minutes ago

  Three traits make a startup idea look bad because most founders run from all three, which leaves the idea sitting there for whoever doesn't. 1. Hard to get started Stripe is the textbook case. Thousands of developers hit the exact same broken credit card integration and knew it sucked. Nobody built the fix, because it required a special bank deal and deep infrastructure knowledge nobody wanted to acquire. That friction wasn't a warning sign. It was the moat. 2. Boring Gusto makes payroll software. Nobody's passionate about payroll. That's precisely why it sat unsolved — every "fun" idea gets fought over by ten founders, every boring one gets ignored by all of them. And here's the part people miss: six months into any startup, fun or boring, you're doing the same thing — writing code, fixing bugs, talking to users. The initial excitement of the idea has almost no correlation with how much you'll enjoy running the company. 3. Already has competitors Dropbox was the 20th file storage company at launch. Founders read "20 competitors" as a red flag. It's the opposite and evidence of real demand which nobody's nailed it. Zero competitors usually means zero market, not first-mover advantage. Founders optimize for what looks easy, not what actually works. The gap between those two is exactly where the good ideas live.

• 
  Agbaje Automation. (@digital_ab98389) reported 16 minutes ago

  Cut manual data entry time by 80% with one n8n workflow: trigger on new CSV in Dropbox, parse, map to Google Sheets, flag errors, alert Slack, log runs. Automate, reduce errors, save hours. DM me for demo.

• 
  David Simpkins (@DavidSimpkins88) reported 20 minutes ago

  URGENT!!! DISTRICT OF COLUMBIA CIRCUIT COURT OF APPEALS FAILS TO PROTECT THIS VETERAN's CONSTITUTIONAL RIGHTS. MY HOME SECURITY SYSTEM AND PHONES HAVE BEEN TAKEN OVER AND I AM PREVENTED FROM SEEING ANYTHING OUTSIDE MY HOME BECAUSE OF THE CURRENT ACTIVE ATTACKS ON MY PHONES AND SECURITY SYSTEM IN DIRECT VIOLATION OF TN AND FEDERAL LAW AND NO ONE IS STOPPING THEM. LINK TO PETITION FOR WRIT OF MANDAMUS: I went to get the link from Dropbox and my Dropbox appears to have been wiped out. TO THE D.C. APPELLATE CIRCUIT COURT TO REQUEST AN IMMEDIATE RULING ON A TRO TO PROTECT THE APPELLANTS. This subject is about the District of Columbia Circuit Court of Appeals has not issued a standard Stay of Proceedings to the State of TN for their malicious prosecution. By not doing so, they have left this Veteran and his Wife open to criminal attacks by unlawful Law Enforcement of the State of TN. Further the Appellate Court has allowed non-stop violations of the Appellants home computer, cell phones, A/C Units, Security System and any all other WiFi devices. And to this day the illegal cameras placed in the Appellants home have never been removed after the Local Police Department notified this Appellant that there were hidden camera's in his home. Further, the FBI, DOJ, OIG, D.C. US Attorney's Office and especially the Appellate Court have all been notified of the targeting and 24/7 harassment by allegedly unlawful Agents of more than one of our Alphabet Agencies, to include the FBI and DISA. FBI Director Patel has to know about this situation but has done nothing to stop the corruption in the State of TN and has not protected this Veteran and his Wife. We made it clear that on the night of February 18th, 2026, that 5 people in Police Uniforms had keys to this Appellant's home and attempted to unlock the locks and enter the home both at the front door and at the Garage Pedestrian Door. They never once made any statements or comments nor explained why they were there. They did not show any warrants for arrest or search. When they knew they could not get in with out breaking things, they left approximately 15 minutes later. I had called my Wife and let her know. I am facing the same potential attacks again even though when the State of TN conceding by defaulting by not filing a response Brief. They were effectively agreeing that everything stated in the Appellant Brief was accurate and that they could not contest it. That makes all the acts committed by all Law enforcement Four-Hundred and Ninety-Seven (497) Constitutional Rights Violations are valid. Further, in order to access the Security System and the Display, they have to be within 350ft of our home. Because there is no WiFi or Bluetooth installed in the Security System or the Display. Which means they are in close proximity of this Appellants property. Three (3) Emergency Motions have been filed with the D.C. Appellate Court on three separate dates to no avail. The D.C. Appellate Circuit Court has failed to issue a TRO to Stay the TN State malicious prosecution. And left this Appellant, Veteran to suffer the vices and current active ongoing criminal activities by the State of TN against this Appellant as he types in this post. This could include a potential unlawful arrest and incarceration again because the D.C. Appellate Court has not issued a TRO or a Protective Order to Protect the Appellants. That in and of itself is a direct Constitutional Rights Violation now by the very Appellate Court who has allowed further criminal activities to promulgate even further to allow harm and injury. The corruption appears to be rampant in our US Court Systems.

• 
  dreadnaught (@dr3dn0t) reported 20 minutes ago

  @priestessofdada this dude could have worked at dropbox, ibm, cnet, duolingo, etc. all of them offloaded people by that time in favor of AI. skids hadn't figured out what to do with AI yet because someone hadn't laid out instructions for them. by the time they were starting to flood social media, several companies had made some pretty large public facing fuckups due to their shift to AI, which seems to have slowed down mass adoption. now if we're gonna play the intentionally dishonest game of "AI took my exact job" then you are correct. every single company that did this crap ended up consolidating roles. so there is no exact position to fill.

• 
  Mapacho (@Mapacho111) reported 24 minutes ago

  @MajorianBTC But that’s the problem. Bitcoin in its current state is a decentralized Dropbox. Bitcoin failed and there’s no alternative.

• 
  Joachim Voth (@joachim_voth) reported 29 minutes ago

  @DropboxSupport why can I only use one core for indexing? Most machines have MANY nowadays. Download speed is not the issue, it is almost always the ultra-slow indexing that dropbox does with only one CPU core active. Am I seeing this right? Why can we not dedicate 5 or 8 cores to something that really slows down your users?

• 
  RVCrypto (@RvCrypto) reported 30 minutes ago

  Every once in a while I have one of those moments as an investor where everything just clicks. I had that moment a couple of weeks ago with Leadpoet, $TAO subnet 71. What initially caught my attention was the team. To me, they represent what a Bittensor-first team should look like. They're deeply committed to the ecosystem, they execute quickly, and, most importantly, they seem to understand that in the end none of that matters if you don't build a product customers actually want. The product appears to be working really well. Winning the OKX product competition and attracting an inbound pilot with Dropbox are the latest two independent signals that suggest they're solving a real problem for enterprise sales teams. The opportunity they're pursuing is also enormous. Enterprise sales is a market worth billions, and if Leadpoet continues executing the way it has so far, I genuinely believe they have a realistic path to building an eight-figure revenue business next year. And the best part here is that all of that value ultimately flows back into the token. I've also spent quite a bit of time talking with Gavin over the past few weeks and months. Those conversations gave me a very similar feeling about Leadpoet to the one I had with Score when talking with Max. I don't make that comparison lightly. It's great to see Leadpoet finally getting the attention it deserves, and the recent price action reflects that. Although, if I'm being completely honest, I would have loved one more dip to accumulate a bigger position, and I know I'm not the only one thinking that.

• 
  Daniel Foerster (@pydsigner) reported 30 minutes ago

  @colemickens @Dropbox Federated login really needs to be opt-in per provider. I shouldn't be able to log in using Lenovo (or Google, Facebook, Microsoft...) unless I used that provider during account creation or added it afterwards.

• 
  Farmer henkenson (@FarmerJenkenson) reported 31 minutes ago

  @colemickens @Dropbox So if you had a lenovo account with a soecific emial, and a dropbox account had the same email, you could just login with lenovo and it would assume you own the dropbox account?? Insane

• 
  Callitlikeitis (@Callittlikeitis) reported 32 minutes ago

  @iAnonPatriot Yeah no.. That’s even more piracy. I will Dropbox if it comes down to this drone diarrhea. Or better yet bypass lameazon all together

• 
  StockStorm (@StockStormX) reported 33 minutes ago

  Dropbox $DBX says about 5,000 accounts were compromised in an August hack tied to a Lenovo ID login flaw

• 
  Founder Tribune (@Founder_Tribune) reported 39 minutes ago

  Drew Houston, founder of Dropbox, on the day the scoreboard gets switched off: For your entire life, the water has come out of one hose. Then, as he put it to MIT's graduating class: "Today, one valve shuts off and now your job is to go out and find a new hose." His hose was Dropbox. Yes, building the company was "the most exciting and interesting and fulfilling experience of my life." But he immediately flagged the half nobody hears: "What you probably don't know, and what I haven't really talked about, this has also been the most painful and humiliating and frustrating experience, too." Not hard. Humiliating. He said he could look back over the years and not even count the number of things that had gone wrong. Then: it doesn't matter. Nobody has a 4.0 in real life. Once you're done with school, Houston said, the whole idea of a GPA just goes away. Bill Gates's first company made software for traffic lights. Steve Jobs's first company made plastic whistles that let you make free phone calls. Neither was successful, and in Houston's words, "it's hard to imagine these guys were too worried about it." Here's why that lands harder than the usual fail-fast sermon: A GPA is an average, every error permanent, weighted, dragged forward forever. It rewards never being wrong. What comes after is a maximum. The misses are discarded. Only the peak is scored. Most people struggle after graduation because they keep playing an average game inside a maximum game. "From now on, failure doesn't matter. You only have to be right once."

• 
  Phillip Shoemaker (@pbsIdentity) reported 40 minutes ago

  India just ordered hundreds of Google Firebase accounts shut down after authorities found scammers using the platform to impersonate major banks. At least 57 Firebase-hosted websites and databases were targeted for takedown this month alone. Some mimicked banks. Others distributed malicious Android apps. Some were designed to steal financial information from phones. Here's what I find interesting. Firebase isn't some shady hosting company operating out of a basement. It's Google infrastructure. That's exactly why criminals want it. We've spent years teaching people to look for obvious signs of scams. Weird domain. Broken English. Sketchy hosting. Browser warning. No HTTPS. But increasingly the attacker doesn't need to build suspicious-looking infrastructure. They borrow legitimate infrastructure. Google. Microsoft. Cloudflare. GitHub. Dropbox. Whatever gives the attack credibility and reliability. Now imagine the average person inspecting the link. They recognize Google. The connection is encrypted. The page loads perfectly. The certificate is valid. Everything their brain has been trained to interpret as: SAFE may technically be true. Except the person controlling the page is a criminal. That's an important distinction. HTTPS proves your connection to the website is encrypted. It does not prove the person operating the website is honest. A Google URL proves Google is providing infrastructure. It doesn't necessarily prove Google created the content you're looking at. The little padlock was never a morality detector. We just accidentally trained an entire generation to treat it like one. India says scammers have increasingly shifted toward Firebase because its legitimate development tools and database functionality make it useful infrastructure for fraudulent sites and apps.

• 
  virgin loser (@stonershelb) reported 43 minutes ago

  He put a photo of their 2 yo daughter naked with exposed genetalia in a Dropbox folder that “received more than 400,000 combined views or interactions. ... and it was publicly accessible for 23 hours before she says Minc acknowledged responsibility and took it down.”

• 
  Lalit Dhalia (@lalit_dhalia) reported 45 minutes ago

  @GrokInsider U are acting exactly like that hackernews comment who was shitting on Dropbox launch, "u can setup your own ftp server". Same energy guy. If u have to ask this, u are NOT the audience bro. Come on.

• 
  Alvin (@Alvin1492840) reported 48 minutes ago

  Kill the startup apps that have been draining your battery since day one. She opened System Settings → General → Login Items & Extensions. 14 apps were set to launch automatically every time he turned on his Mac. Spotify. Zoom. Adobe Creative Cloud. Google Drive. Microsoft Teams. OneDrive. Dropbox. A VPN he used once. A screenshot tool he forgot about. A calendar widget. And 4 more he didn't recognize. Every one of them was running in the background 24/7 consuming RAM, CPU cycles, and battery life whether he was using them or not. She said: "You turn on your Mac and within 30 seconds, 14 apps are fighting for resources before you've even opened your first document. Your fan spins up because your CPU is processing a traffic jam of apps you're not using. Your battery dies by 2pm because half your power is going to background processes you don't see." She removed 11 of the 14. Kept only the ones he actually needed at startup. The Mac booted in half the time. The fan stayed quiet. The battery lasted 3 extra hours. She said: "Check this list right now. If you see apps you don't use daily, remove them. They've been silently eating your Mac alive since the day you installed them."

• 
  Ouriel (@OurielOhayon) reported 48 minutes ago

  @mntruell You seem to have substantial connector issues with Dropbox and Calendly.

• 
  Abhishek Singh (@0xlelouch_) reported 49 minutes ago

  Asked: design Dropbox-style file sync. 1) Clarify requirements - Devices: desktop + mobile, multiple per user - Semantics: eventual consistency, conflict handling, offline edits, rename/move - Scale targets: #files/user, max file size, p95 sync latency, bandwidth caps - Security: per-user auth, sharing model, at-rest + in-transit encryption 2) Core APIs + data model - UploadChunk(sessionId, part#, bytes), CommitUpload(sessionId, fileHash, path, mtime) - ListChanges(cursor) -> {ops}, Ack(cursor) - Download(path, version) with range support Tables: - File(id, ownerId, logicalPath, currentVersion, deleted) - Version(fileId, versionId, contentHash, size, createdAt) - Block(contentHash, refCount, location) - DeviceCursor(deviceId, lastSeq) - OpLog(seq, userId, type, path, fromPath, versionId) 3) Architecture - Client watcher computes hashes, does chunked upload to object store (S3/GCS) - Metadata service is the source of truth for paths, versions, ACLs - Change log per user (or per share) drives fanout to devices - Long-poll/WebSocket to push invalidations; client pulls deltas via cursor - Dedup by contentHash; store blocks, assemble manifests per version 4) Scaling - Partition metadata by userId; keep OpLog append-only with monotonically increasing seq - Cache hot metadata (folder listings, latest versions) in Redis - Use CDN for downloads; throttle uploads per device; resumable sessions - Background GC for unreferenced blocks using refCount + tombstones 5) Tradeoffs interviewers look for - Push vs pull: push invalidation, pull data is simpler and cheaper than pushing bytes - Strong vs eventual: strong per-file commit, eventual across devices is fine - Rename as metadata op; avoid copying data, but watch for path conflicts - Dedup saves storage, costs CPU and can leak info unless scoped per user/tenant 6) Failure cases - Offline edit + concurrent edit: create conflicted copy or keep both versions with merge UI - Out-of-order ops: apply by seq, idempotent commits, retry-safe APIs - Partial upload: orphaned chunks; TTL cleanup; commit is the only visibility point - Device clock skew: never trust mtime for ordering; server seq is ordering - Network *****: exponential backoff, cursor-based replay, checksums on download to detect corruption

• 
  OneToothTeXan (@OneToothTeXan) reported 50 minutes ago

  I'm so sorry I left my zipper down and my sanity got loose. If found: Men, there's a dropbox. Women: please return to original source.

• 
  DAX : TV (@daxtv) reported 52 minutes ago

  @0x00_dev @ProtonMail have been using dropbox for years- never an issue - thought it might be smart to move to Proton Drive - but not now me thinks - hey ho :)

• 
  Christopher Bailey (@LexBaileyAI) reported 53 minutes ago

  @TetraspaceWest At Fitbit we hired a half dozen people from Jawbone who brought everything cleverly hidden in Dropbox. They got prosecuted. Decade later, companies kaput but Fable found it, processed it and now it’s intermixed in various *** repos and Huggingface. Is nVidia now in trouble?

• 
  Ryan Babbs (@buckybabbs) reported 56 minutes ago

  Hello @Dropbox, Just this week I have decided to switch cloud service from Google Drive to you and less than 1 week I'm having an issue. I run a wedding film business and am trying to move the same 200GB file to two separate editors for two separate kind of films and one of them is encountering a "link temporarily disabled" message. I tried to research online and made a new folder and copied over the original folders contents and cannot share that either as it says I've exceeded bandwidth limits. This is maddening as I thought I'd picked the good plan (3TB) and was all set. Please advise asap as I need these files in my editors hands stat.

• 
  Sridhar Katakam (@srikat) reported 57 minutes ago

  @YannDecoopman How about putting the vault in Dropbox? Same problem as syncing with iCloud?

• 
  Martin (@martin_valchev_) reported 1 hour ago

  Small feature, real problem: Handing a WordPress site to someone else usually means FTP credentials, database dumps, or a shared Dropbox folder that stays there forever. A link that expires and can be revoked is just... better. Security shouldn't require discipline. It should be the default.

• 
  Hiten Shah (@hnshah) reported 1 hour ago

  @varadh @NotionHQ Bunch of markdown. Google Docs handled it well, but some of my markdown files can get gnarly and even docs chokes a bit. I’m also a minimalist with tools and workflows, trying to get away with the least amount of tools which helps a lot with speed and efficiency. I should be a power user of Notion. Since we’re here, I have plenty of folks (like you) that I know who work there now who I’ve met and like. I’m always rooting for you folks, as a result. Here are some unsolicited thoughts from holding it in for too long. I’ve used every document and notes app under the sun and spent a lot of time in Dropbox Paper and Hackpad before it. Early user of writely which became Google Docs. There are core product principles around a product like Notion that Notion breaks or seemingly optimizes for Notion over the user’s experience. At @CrazyEgg, where I haven’t worked full-time for 17 years until about a year ago, the team loves Notion. So I’m forced to use it. My most common activity is to export things out of Notion into my a chatbot or agent of choice. That has little pricks in the process than paper cuts. But all ouchies count against you. For example, in chrome, when trying to print a page (i am weird and print web pages to convert them to pdf), I can’t trust that all the content will come through. And the issues are inconsistent. I understand this is likely an edge case of an edge case, but all ouchies count, prickle or stabbing. If you got this far, thanks for reading my rant. I one shotted it with the agent between my ears.

• 
  Digita (@digitaworld1) reported 1 hour ago

  Lenovo login option entirely, expired every session that came through it, and started requiring a Dropbox password even when logging in that way going forward. Shares dipped about 2.4% after the news broke. The real lesson here has nothing to do with Dropbox's own security.

• 
  davidsong (@bitplane) reported 1 hour ago

  Has @Dropbox been breached again? I just got this but it can't be me. At least I hope not. I have a randomly generated, unique password that's made in an offline password manager, I used it once on this machine when I first set it up. If I'm getting hacked the rest of you are in serious trouble.

• 
  MEGA (@MEGAprivacy) reported 1 hour ago

  Dropbox users just got hacked through a Lenovo login, not their Dropbox password. A stolen session should still hit a locked box. That’s what end-to-end encryption is for, and how MEGA is built. Without E2EE, stealing the session is stealing the files. With it, they only get scrambled data.