Dropbox practically invented effortless file sync, and it's still one of the best at it. It's also a drive where Dropbox holds the keys. Here's a fair, feature-by-feature look at where each one wins — and which trade-off is actually right for your files.
Let's be fair up front: Dropbox is a brilliant product. It practically invented effortless file sync — drop a file in a folder and it's on every device seconds later, with version history, delta sync that only uploads the bytes that changed, and an ecosystem of integrations built up over more than a decade. For keeping files in step across machines, it's still one of the best in the business.
But all of that rests on one design decision most people never notice: Dropbox can read everything you store. Sync, previews, full-text search, abuse and copyright scanning, account recovery — they all work because your files are readable on Dropbox's servers. Vault Desk makes the opposite choice. This post lays both side by side so you can decide which trade-off fits which files.
Dropbox encrypts your files in transit (TLS) and at rest (AES-256) — but Dropbox holds the keys. That's not a scandal; it's how the product is designed to work. Those keys let Dropbox sync efficiently, generate previews, index your documents for search, scan for malware and copyright matches, and restore your account when you forget your password.
Vault Desk is zero-knowledge: your files — and even your filenames — are encrypted on your own device with keys that never leave it. Our servers only ever see scrambled bytes. The simplest way to tell the two models apart is one question — “if I forget my password, can you recover my files?” Dropbox's answer is yes. Ours is no, because we never had the keys to begin with.
| Feature | Vault Desk | Dropbox |
|---|---|---|
| Who can read your files | Only you. Ever. | You — and Dropbox's systems |
| Encryption model | Zero-knowledge, end-to-end (keys stay on your device) | AES-256 at rest, TLS in transit, but provider holds the keys |
| Filenames & folders | Encrypted — structure stays private | Visible to the provider |
| Content scanning & copyright/AI use | None possible — files are unreadable to us | Files hashed and scanned for abuse, malware, and copyright |
| Sync efficiency | Whole encrypted files | Block-level delta sync |
| Search inside files | Limited (metadata is private by design) | Full-text (paid plans) |
| Real-time doc collaboration | Not the focus | Dropbox Paper & co-editing |
| Secure sharing & public links | Keys sealed to the recipient; tamper-evident | Link-based, readable by the provider |
| If servers are breached | Attacker gets useless ciphertext | Readable files are exposed |
| Password recovery | Your one-time recovery key — held only by you | Provider can reset and restore access |
| Free storage | 5 GB | 2 GB |
Read that table honestly and a pattern jumps out: the columns where Dropbox wins — block-level sync, full-text search, live collaboration — are exactly the features that require Dropbox to read your files. The columns where Vault Desk wins are the ones that come from us not being able to (and, this time, a bit more free space to start). You can't have both at once, because they're the same trade-off seen from two sides.
We're not going to pretend otherwise. Reach for Dropbox when the convenience genuinely matters and the contents aren't sensitive:
Switch to Vault Desk for the files that would do real damage if they leaked — and that's a longer list than most people think:
For these, “the provider can read it” isn't a footnote — it's the risk. Breaches — and Dropbox confirmed one in 2016 that exposed tens of millions of account credentials — over-broad legal requests, careless internal access, and quiet content scanning all start from the same place: your files being readable on someone else's server. Vault Desk removes that starting point entirely.
It's not marketing. Files are encrypted with XChaCha20-Poly1305 before they leave your browser; your password never reaches us thanks to OPAQUE (RFC 9807); shared files are sealed to the recipient with X25519 and verified against a tamper-evident Key Transparency log. The crypto core ships with 53 passing tests, including one that proves a stored blob contains no plaintext. Read the deep dive →
The most realistic setup isn't either/or. Keep using Dropbox for collaborative, low-stakes work where its sync and co-editing shine — and move the files that genuinely need to stay private into a vault only you can open. Convenience where it helps; zero-knowledge where it counts.
Vault Desk gives you 5 GB free — more than double Dropbox's free tier — secure sharing, public links, and the same total encryption on every plan, running in your browser today, with mobile apps sharing the exact same crypto core. Setting up an encrypted vault takes under a minute, and the keys are yours from the first file. Privacy you have to take on faith isn't privacy. Ours is something you can check.
Free to start, zero-knowledge by design. Your files are encrypted before they ever leave your device — and only you hold the keys.