Dropbox uses several domains to run the service. Each domain serves a specific purpose, like running the Dropbox product, providing communications, or hosting marketing materials. Check the domains in this article if you’re unsure if it’s safe to go to a particular website or accept a communication from an email address that looks like it's from Dropbox.
Most of the things you can do with Dropbox online happen on www.dropbox.com. www.dropbox.com is the only domain where Dropbox will ever ask for private information like the email address and password for your Dropbox account. Be wary of any other domains that look like Dropbox that ask you for your Dropbox email or password.
Official email from Dropbox
If you receive a communication that looks like it’s from Dropbox but doesn’t come from one of the domains listed, please be careful as it may contain malware or be a phishing attempt.
- All email from employees, support staff, and some service-related email (such as email verification, password reset confirmations, and Dropbox research study invitations) are sent from dropbox.com, dropboxmail.com, or dropbox.zendesk.com
- All Dropbox Business related email originates from dropbox.com or dropboxpartners.com
- All promotional and tip emails originate from dropboxmail.com or dropboxteam.com
Verified Dropbox domains
All Dropbox content should originate from one of the following domains or a subdomain of the following domains:
Other verified domains
These are other verified domains Dropbox uses. You typically won’t see these domains in your browser address bar, but they are used for things like protecting account login pages and DNS requests.
URLs used to host user data
These paths are used to host content for users when they create links to their folders and files (for example, using shared links). Dropbox doesn't use these paths to ask you for private or personal information.