We’re sorry about this, and have put additional controls in place to help make sure it doesn’t happen again,” the company said at the time. We believe this improper access is what led to the spam. “A stolen password was also used to access an employee Dropbox account containing a project document with user email addresses. The compromise was the result of a Dropbox employee reusing an internal password. When Dropbox first disclosed the breach in 2012, company officials said that the attackers had taken users’ email addresses and some users were receiving spam on those accounts. The cache comprises passwords that are hashed with either SHA-1 or bcrypt and none of them are in plaintext. Users can sign up to be notified when Dropbox Passwords is available.The scope of a compromise of Dropbox four years ago that the company initially said only involved customer email addresses being stolen has now expanded, with more than 68 million user passwords dumped online. Dropbox Passwords is available as a desktop app on macOS and Windows, mobile app on iOS and Android, and browser extension across Safari, Chrome, Firefox, and Microsoft Edge.

Similar to 1Password, Dropbox Passwords is a password manager that allows you to save your account usernames and passwords and sync them across your devices, with autofilled or suggested passwords when you sign into websites and mobile apps.

These limits are likely in place to incentivize users to start paying for a Dropbox Plus or Dropbox Professional plan, but as The Verge notes, Bitwarden offers unlimited password storage and syncing for free. The feature launched last year for paying subscribers only.ĭropbox Basic users will be able to store up to 50 passwords, with automatic syncing on up to three devices.

Dropbox today announced that it will be rolling out a limited version of its Dropbox Passwords password manager to users with a free Dropbox Basic account in early April.

Dropbox passwords