Dropbox uses several domains to run the service. Each domain serves a specific purpose, like running the Dropbox product, providing communications, or hosting marketing materials. Check the domains in this article if you’re unsure if it’s safe to go to a particular website or accept a communication from an email address that looks like it's from Dropbox.
dropbox.com and paper.dropbox.com
Most of the things you can do with Dropbox online happen on dropbox.com and paper.dropbox.com. dropbox.com is the only domain where Dropbox will ever ask for private information like the email address and password for your Dropbox account. Be wary of any other domains that look like Dropbox that ask you for your Dropbox email or password.
Official email from Dropbox
If you receive a communication that looks like it’s from Dropbox but doesn’t come from one of the domains listed, please be careful as it may contain malware or be a phishing attempt.
- All email from employees, support staff, and some service-related email (such as email verification, password reset confirmations, and Dropbox research study invitations) are sent from dropbox.com, dropboxmail.com, or dropbox.zendesk.com
- All Dropbox Business related email originates from dropbox.com or dropboxpartners.com
- All promotional and tip emails originate from dropboxmail.com
Verified Dropbox domains
All Dropbox content should originate from one of the following domains:
Other domains used for networking
URLs used to host user data
These paths are used to host content for users when they create links to their folders and files (for example, using shared links). Dropbox doesn't use these paths to ask you for private or personal information.