Dropbox Rewind - Can a malicious attacker delete the version history?

[banderstone]

Hi all,

A friend and I were discussing Dropbox's ability to handle malicious attacks. I know that the "Rewind" feature allows you to revert your account 30-180 days, depending on Dropbox plan. However, he was concerned that a malicious hacker could encrypt your files and delete the Dropbox Rewind history somehow. Would it be possible for a malicious attacker to delete Rewind history?

[Hannah]

Hey @banderstone, thanks for posting your question!

The version history of an account cannot be manually deleted, actually.

It will expire after 30-180 days, as you mentioned, but it cannot be deleted.

I hope this helps, but let me know if you have any additional questions.

[anonymous]

Best thing to do is to test Rewind by filling your account with numerous files and simulating usage by adding and deleting data for a few days. After a couple of weeks make a note of what is stored and delete everything from your Dropbox account as if your files had been deleted/encrypted, leave it for a few hours and then rewind. 

Probably just me but I couldn't get Rewind to work correctly without contacting support.  (Website threw up an error message when rewinding)