Which open-source alternative to Dropbox fits your file sharing needs
For most file sync and sharing needs, Nextcloud is the right open-source replacement for Dropbox, and it runs in your own cloud account, data center or air-gapped network. Teams that also need a full office or groupware suite should look at openDesk or OX App Suite, which bundle documents, calendars and email around the file layer. The decision usually comes down to whether file sharing is the main problem or one part of a wider workplace move. Teams usually start this search because of a renewal, a price change, a data residency requirement or a wish to avoid lock-in. Nextcloud Hub is licensed under the AGPL and is free to self-host, so the software itself carries no license fee. Costs come from infrastructure, storage, administration and any support you buy. Nextcloud GmbH sells Standard, Premium and Ultimate enterprise subscriptions for support and extra features, and offers Nextcloud One managed hosting for organizations under 100 users. Ask which of these your organization would need, and what the subscription covers compared with what your own team can run.
Before you commit, check three things in your environment: how many users and how much data you hold, whether your sharing rules depend on specific Dropbox features, and who will operate the platform after go-live. Confirm current subscription tiers, managed hosting limits and feature sets directly with Nextcloud GmbH, since packaging can change between releases. A short pilot with a representative group of users, covering desktop sync, mobile access and external sharing links, will show you more than a feature comparison table.
Open-source options for replacing Dropbox
Dropbox replacements in this list share one requirement: the files, sync service and sharing links run inside infrastructure you control. The four options differ in how much of the office and email stack they bring along, so the choice depends on whether you need only file sync or a full workplace. Check each option against your client count, file volume and existing identity system before committing.
Nextcloud Hub as the core
Nextcloud Hub is the most direct replacement for Dropbox's core workflow: desktop and mobile sync clients, public share links, password-protected links, and external storage mounts that can point at existing network shares or object storage. Nextcloud Hub is licensed under the AGPL and is free to self-host, while Nextcloud GmbH sells enterprise subscriptions for support and extra features. Hub 25 Autumn was released on September 27, 2025. Confirm sync client versions and share-link expiry options against your own policy before rollout.
Nextcloud with Collabora Online
Dropbox itself does not edit Office files in the browser, so this pairing adds in-browser editing of .docx, .xlsx and .pptx files to your Nextcloud instance. Collabora Online is licensed under the Mozilla Public License 2.0, and the free CODE edition is available for development, while the enterprise edition adds support, SLAs and signed security updates. The trade-off is an additional service to size, patch and put behind your reverse proxy. Test co-editing and large-file behavior with your real document types before users depend on it.
openDesk for public administration
openDesk is an office and collaboration suite managed by ZenDiS, the German federal Centre for Digital Sovereignty, and built for public administration. Its deployment uses Helmfile and Helm charts on Kubernetes, with both a Community and an Enterprise Edition, and the deployment repository is licensed under Apache 2.0. The main trade-off is operational weight: you take on a Kubernetes platform and a multi-service stack rather than a single file-sync application. Choose it when you want a complete suite and already run Kubernetes, not when you only need Dropbox-style sync.
OX App Suite with Drive
OX App Suite from Open-Xchange provides email, calendar, documents, drive and tasks in one product, so Drive sits next to mail and calendar instead of as a separate tool. It can run on premises, in a public cloud, or as the managed OX Cloud service, and Dovecot is part of the Open-Xchange product line. The trade-off is that a team moving only file sharing gets a broader platform than it needs, and the sync and link features should be tested against your Dropbox usage patterns. Confirm which deployment model and licensing terms apply to your organization.
How Dropbox capabilities map to self-hosted options
This table maps the main Dropbox capabilities to Nextcloud, Collabora Online and the other options in this pillar. Read the coverage column as a starting point for a pilot, not a sign-off, because feature depth changes between Nextcloud releases and depends on your apps and configuration. Confirm the items marked for verification against the current release before you commit.
| Capability | Nextcloud with Collabora Online | Coverage and what to confirm |
|---|---|---|
| Desktop and mobile sync | Native desktop clients for Windows, macOS and Linux, plus iOS and Android apps | Covered for standard two-way sync. Confirm client behavior on your OS versions and any Dropbox-style Smart Sync placeholder files in the current release. |
| File and folder sharing links | Public share links with optional password, expiry and download restrictions | Covered. Confirm which link options your admins can enforce centrally. |
| Granular permissions | User and group shares with read, edit, reshare and upload-only rights | Covered for most cases. Test nested folder permissions against your current access model. |
| Version history | File versioning kept by the server, with restore from the web interface | Covered. Confirm retention settings and how many versions are kept by default. |
| Deleted file recovery | Trash bin with a configurable retention period | Partial. Confirm the default retention window and whether it is set by policy in your deployment. |
| File requests | Upload-only shares let outside users send files to a folder | Covered in a basic form. Confirm whether your workflow needs request forms or notifications. |
| Team folders | Group folders with per-group quotas and permissions | Covered through the group folders capability. Confirm the app is enabled and supported in your release. |
| Admin controls | Central user, group and quota management, with sharing policies | Covered. Map your Dropbox admin policies to Nextcloud settings before cutover. |
| Sharing audit logs | Activity and audit logging through built-in or add-on apps | Verify. Confirm log scope, export options and retention against the current release. |
| Document preview and editing | Collabora Online edits .docx, .xlsx and .pptx inside the browser | Covered for Office formats. Dropbox preview of many file types is not guaranteed to match, so test your file mix. |
| Bulk export out of Dropbox | Not a Nextcloud feature. Use the desktop app or a scripted copy | Dropbox offers web .zip downloads only under 250 GB and 10,000 files, so plan large moves with the desktop app. |
Which option fits your situation
When a regulator, contract or internal policy dictates where files may be stored, self-hosting Nextcloud lets you choose the region, data center or private cloud account that holds every file, backup and log. Data residency is the most common reason teams leave a multi-region SaaS file service, and it changes the work more than the software does. Your team or DeployOpen would design the storage layout, replication and backup targets inside your own boundary, so no copy of your data leaves it unless you configure that.
- Location control: You select the facility, cloud region or on-premises site, and you decide whether backups and search indexes stay in the same jurisdiction.
- Sub-processor clarity: Your own infrastructure replaces a vendor's sub-processor list, so the question becomes which of your own providers touch the data.
- Local access paths: Users on your network reach the service directly, which can simplify firewall and identity rules.
- Operator access: You define who can reach the storage hosts and database, and you log that access yourself.
- Ongoing duty: Patching, certificate renewal and restore testing become your obligations in that region.
Before you commit, confirm with legal counsel exactly which data categories the residency rule covers, including metadata, logs and backups, and ask whether any Nextcloud feature you plan to use sends data to an external service.
Nextcloud Hub is licensed under the AGPL and is free to self-host, so the software line item is zero. What you pay for is the infrastructure, the people who run it and any support you choose to buy. Nextcloud GmbH sells Standard, Premium and Ultimate enterprise subscriptions for support and additional features, and Nextcloud One is a managed hosting option for organizations under 100 users, according to the Nextcloud pricing page. Each option moves costs between one-time setup, recurring hosting and recurring staff time.
- Self-hosting: Lowest license cost, with recurring infrastructure, storage growth, patching and on-call effort carried by your team or a services partner.
- Enterprise subscription: Adds vendor support and extra features while you keep running the servers.
- Nextcloud One: Shifts operations to a managed provider, which suits small organizations that want less administration.
- Services effort: Initial design, migration and hardening are one-time costs that DeployOpen scopes in writing before work starts.
- Storage growth: Retained file versions and large media libraries usually drive recurring storage cost more than users do.
Ask for a quote that separates one-time migration effort from recurring hosting, support tier and staff time, and compare it against your current Dropbox seat and storage costs over the same period.
Nextcloud is extensible through its app ecosystem, so workflows such as custom sharing rules, automated tagging, external storage mounts and integrations with identity or ticketing systems can often be added without changing the core. Nextcloud Hub 25 Autumn was released on September 27, 2025, according to the Nextcloud blog, and it is worth checking current app compatibility against that release before you lock in a design. If your needs extend past file sync into a full office suite, OX App Suite or openDesk cover email, calendar and documents at the suite level, though they change more of the user experience.
- App-level extension: Build or install apps for sharing policy, retention triggers or department-specific workflows.
- Document editing: Collabora Online, licensed under the Mozilla Public License 2.0, edits .docx, .xlsx and .pptx files inside Nextcloud.
- Suite-level needs: OX App Suite provides email, calendar, documents, drive and tasks, and openDesk targets a broader office and collaboration suite.
- Custom code ownership: Any in-house app becomes code you must maintain through Nextcloud upgrades.
- Upgrade testing: Each major release can break third-party apps, so plan a staging environment.
Confirm that every integration you depend on exists as a maintained app or can be built against the current API, and ask your implementation partner to list custom work as separate, scoped deliverables.
In regulated settings, the question is less about the software and more about whether you can show controls operate and leave evidence behind. DeployOpen prepares systems, controls and evidence for compliance assessments, including access reviews, encryption configuration, logging, backup restores and change records. DeployOpen does not issue audit reports, attestations or certifications. Independent auditors and certification bodies make those determinations, so the evidence package must be built for their review from the start.
- Control mapping: Map your obligations to controls in your own words and record which Nextcloud settings or hosting components meet each one.
- Evidence collection: Capture configuration baselines, access logs, backup and restore test results, and patch records on a repeatable schedule.
- Security testing: Application, API and infrastructure testing gives assessors independent findings and remediation records.
- Auditor involvement: Agree early with your auditor on evidence format and sampling, because they decide what is sufficient.
- Supported releases: Keep the platform on supported versions and document how security updates are applied.
Before starting, ask your auditor or regulator which framework applies, which evidence they accept and whether a self-hosted service needs to be listed in your existing scope.
What self-hosting Dropbox replacements costs over several years
This table compares what a Dropbox subscription spend covers with the cost components of a self-hosted Nextcloud deployment. Read each row for who gets paid, whether the cost is one-time or recurring, and what moves it up or down. No prices are shown because none were supplied; use the questions in the right-hand column to request comparable quotes.
| Cost component | Who is paid, one-time or recurring | What drives it up or down | What to ask for in a quote |
|---|---|---|---|
| Dropbox subscription (baseline) | Dropbox, recurring per seat and plan tier | Seat count, plan tier, storage needs and add-on features such as admin controls | Current per-seat annual total, plan features in use, and renewal terms |
| Nextcloud software license | Nothing for the AGPL Nextcloud Hub code, recurring only if you buy a subscription | Choosing Standard, Premium or Ultimate support tiers versus community support | Written confirmation of the subscription tier, included support hours and security notice terms |
| Infrastructure and storage | Cloud provider or data center, recurring | Total data volume, versioning and trash retention, replication, and user count | Storage sizing assumptions, egress charges for bulk exports, and backup storage separately |
| Backup and disaster recovery | Storage and tooling, recurring; design work, one-time | Recovery time and recovery point targets, data volume, and whether backups must sit off-site | Backup scope covering the database, data directory and configuration, plus a restore test plan |
| Implementation and integration | Implementation partner or internal team, one-time | Desktop and mobile client rollout, single sign-on, Collabora Online for document editing, and existing Dropbox links | Fixed scope with deliverables, milestones and acceptance criteria written before work starts |
| Migration out of Dropbox | Internal staff and partner, one-time | Folder count, file count, total size, and the Dropbox bulk download limits of 250 GB and 10,000 files per folder | Method for large folders, validation steps, and handling of shared links and permissions |
| Support, upgrades and administration | Internal staff or retainer, recurring | Release cadence, patch windows, number of integrations and administrator skill on hand | Upgrade procedure, staffing assumptions, and whether ongoing support is retainer-based |
What you give up when leaving Dropbox and the usual workarounds
Moving file sync and sharing to self-hosted Nextcloud trades a managed service for infrastructure your team runs. The gaps below cluster around integrations, client polish, very large sync sets and who answers when something breaks. Each has a workaround, but each carries a cost you should price before cutover.
Third-party integration breadth
Dropbox connects to a large catalog of SaaS tools, and many of those connectors are maintained by the vendor, not by you. Nextcloud has its own app store with many integrations, but the coverage for a specific tool may be thinner or depend on community maintenance. Inventory the integrations your teams use today, then confirm each one exists as a Nextcloud app or can be reached through its WebDAV or API interface. Budget for custom work on anything that does not.
Client and collaboration polish
Users notice differences in the desktop client, file previews, activity feeds and document collaboration first. Nextcloud pairs file sync with Collabora Online for editing Office formats, which covers much of the document workflow, but the experience differs from Dropbox's own Paper-style tools. Run a pilot with representative users and document which workflows change so training and help-desk scripts match the real product.
Very large sync sets
Dropbox handles very large folders through its managed sync service, while self-hosted sync depends on your storage backend, server sizing and client behavior on each device. Dropbox's own help documents a limit on zipped folder downloads, which shows that bulk operations need planning even on the vendor side. Before migration, measure total size, file counts and the largest folders, then test sync time and server load on a representative subset.
Uptime and patching ownership
With Dropbox, the provider runs the service, applies patches and handles availability. Self-hosting moves those duties to your team or a partner, including operating system updates, Nextcloud upgrades, database maintenance, backups and restore testing. Decide who holds on-call duty, what availability target you need, and whether a support subscription or a retainer covers vendor-level patch and incident response. Ask any partner to put these responsibilities in the written scope.
Support and rollout tooling
Dropbox admins have established support channels and centralized device rollout. A self-hosted deployment needs equivalent operational tooling: a documented sync client rollout method for managed devices, user provisioning tied to your identity provider, and a support path for escalations. Nextcloud GmbH offers enterprise subscriptions for support and additional features, and a partner can supply deployment runbooks. Confirm which option you are buying and what response times it includes.
How to move data out of Dropbox into Nextcloud
This sequence turns an unmanaged Dropbox estate into a documented, permission-checked set of Nextcloud folders, shares and groups that users have tested before Dropbox access is closed. Each step produces a record the migration owner can review.
Inventory shared folders, owners and external collaborators
Start by listing every Dropbox team folder, personal folder that is shared, and link that points to content people still use. Record the owner of each folder, its size and file count, and every external collaborator with access. The Dropbox admin console and the team's own folder list are the usual sources, and the migration owner should confirm both. This inventory is done when every folder has a named owner, a size estimate and a decision of migrate, archive or delete. Fixed timelines depend on data volume and scope, so ask for this figure before setting any dates.
Classify folders against the web download limit
Check each folder against the limit Dropbox documents for web downloads: a folder can be downloaded as a .zip from dropbox.com only if it is under 250 GB uncompressed and holds fewer than 10,000 files. Folders that exceed either limit should not be exported through the browser. Mark them for the desktop app or for a bulk method your administrators confirm with Dropbox. The output is a sheet that splits folders into browser-eligible and desktop-only groups, so nobody attempts a partial zip of a large folder.
Export data with the Dropbox desktop app
Use the Dropbox desktop app on a machine with enough free disk space and a stable network connection to sync the folders to a local staging location. Dropbox recommends the desktop app for large downloads, so this route is preferred over web zips for anything beyond the browser limits. Confirm that file names, folder paths and modified dates survive the copy by spot-checking a sample from each folder. The step is complete when every desktop-only folder exists in staging with a matching file count and size.
Map permissions and share links to Nextcloud
Translate each Dropbox access pattern into a Nextcloud construct before data is uploaded. Internal team folders usually become group folders or shared folders assigned to Nextcloud groups. Dropbox share links to individuals or external parties become Nextcloud user shares or public share links with expiry and password settings that your policy requires. Write the mapping as a table with columns for source folder, Dropbox audience, Nextcloud target and permission level. The table is complete when every folder and every external collaborator has one row and an owner has signed off on it.
Upload and validate a pilot team's folders
Pick one team with a bounded set of folders and load them into Nextcloud, using the desktop sync client or the Nextcloud web interface for the initial upload. Ask the pilot users to open, edit and share files, and to confirm that the Nextcloud desktop and mobile clients sync as expected on their devices. Compare file counts and checksums against staging for a sample set. The pilot is closed when the team lead confirms their daily work runs in Nextcloud and the reconciliation shows no unexplained gaps.
Run a parallel period with reconciliation
Keep Dropbox read-only or active for the migrated folders while the remaining teams work from both systems, and reconcile changes at the end of each working cycle. Decide in advance which system is the source of truth for each folder so users are not editing the same file in two places. Track sync errors, permission complaints and missing shares in a single log. The parallel period ends when the log shows no open defects for the migrated folders and the owner accepts the reconciliation report. Its length depends on the scope you agreed in writing.
Cut over and decommission Dropbox access
Announce the cutover date to all users, make the migrated folders read-only in Dropbox, and point remaining links to Nextcloud. Remove external collaborators from Dropbox folders once their Nextcloud shares are confirmed, and revoke linked devices and team member access as each group finishes. Keep the final Dropbox export and the reconciliation records under your retention policy, and confirm the retention period with your compliance lead. The step is done when Dropbox access is removed, the export archive is stored and the decommission record is signed by the migration owner.
Why bulk downloads from Dropbox need planning
Plan the Dropbox export before you choose a cutover date, because the browser route has hard limits. According to Dropbox's help documentation, a folder can be downloaded from dropbox.com as a .zip file only if it is under 250 GB uncompressed and holds fewer than 10,000 files. Any folder above either threshold cannot be pulled this way, and a team with deep project trees or large media libraries will hit the file count limit well before the size limit. Dropbox recommends the desktop app for large downloads, so the desktop sync client becomes the primary export path for anything bigger than a small folder.
Map every shared folder and team space against those limits in a single inventory. Record the uncompressed size, file count, owner, and sharing settings for each top-level folder, then split anything over the thresholds into smaller subfolders. Run a test export of a representative sample, including a large folder, a folder with long file names, and a folder with mixed file types, and verify file counts, modified dates and nested paths on the destination. Ask your Dropbox account team to confirm which export options are available for your plan and whether any admin-side export or migration tooling applies to your tenant, since these options change over time.
Box is a useful comparison point for teams weighing several exit routes. Box documents FTPS and SFTP access for Business and Enterprise customers, describes that access as intended for bulk migration and occasional bulk download, and caps files transferred over FTPS at 32 GB. Dropbox does not offer an equivalent protocol for bulk pulls in the same documented form, so the export plan should assume a sync-client or API-based transfer. Schedule the bulk copy in waves, keep the source read-only during the final pass, and reconcile checksums or file lists against the source before users are moved to Nextcloud.
Questions teams ask before replacing Dropbox
What does it cost to replace Dropbox with self-hosted Nextcloud?
The Nextcloud Hub software is licensed under the AGPL and is free to self-host, so the cost is in the components around it. Those are the servers or cloud compute, storage capacity, backup, the people who run and upgrade the platform, and any support contract. Nextcloud GmbH sells Standard, Premium and Ultimate enterprise subscriptions for support and additional features, and Nextcloud One for managed hosting for organizations under 100 users, so you can choose between paying for a subscription and paying an implementation partner. Storage volume, user count, the number of office editing sessions, and how long you keep backups are the main drivers. Ask any quote to split one-time work (design, migration, hardening) from recurring work (hosting, patching, support).
How long does a Dropbox to Nextcloud migration take?
No duration is fixed by the platform, so the timeline depends on the data and the people involved. The main factors are the total volume of data, the number of files and folders, how many shared links and team folders must be recreated, how much version history you need to keep, and how many users must be trained and moved in waves. Dropbox limits folder downloads as .zip files to folders under 250 GB uncompressed with fewer than 10,000 files, so larger sets need the desktop app or another transfer method, which adds time. Ask for a written scope with phases and acceptance criteria before agreeing to a date.
Can our internal IT team run the migration without outside help?
A capable internal team can run a small Nextcloud deployment, but a move off Dropbox adds work beyond installing software: sizing storage, configuring authentication, mapping sharing and team folder permissions, setting backups, testing sync clients on every device, and documenting controls for auditors. Teams with limited Linux, database and storage operations experience often use an implementation partner for the design and cutover while keeping day-to-day operations in-house. DeployOpen plans, implements, integrates, hardens, backs up, documents and supports self-hosted open-source platforms inside your own cloud accounts or data centers, under a fixed scope agreed in writing before work starts. Compare that model with building the skills in-house.
Do Dropbox sharing links and permissions carry over to Nextcloud?
Not automatically. Dropbox shared links are not files you can copy, so each sharing relationship must be inventoried and recreated as a Nextcloud share, group or team folder permission. Start by exporting a list of shared folders, owners and recipients, then decide which links expire, which need passwords, and which external recipients still need access. Check how Nextcloud handles link expiry, password protection and external users in your version, because the exact options should be confirmed in the release you deploy. Give users a clear list of which links were replaced and when the old ones stop working.
Do Nextcloud desktop and mobile sync match Dropbox behavior?
Nextcloud provides desktop clients for Windows, macOS and Linux and mobile apps, and they cover the core job of keeping local folders in step with a server. Behavior still differs in areas such as selective sync defaults, handling of file conflicts, how large folders are first synchronized, and which file types are excluded. Test each platform with real folder structures, a sample of large files and the laptops your staff actually use before cutover. Confirm client versions, server version compatibility and any admin settings for locking or device control against the current Nextcloud documentation rather than assuming parity.
What happens to our data during a parallel run?
During a parallel run, users keep working in Dropbox while a copy is kept current in Nextcloud, so the first decision is which system is the source of truth for each team and folder. Define the sync direction, how changes made in the new system are reconciled, and the date when Dropbox becomes read-only. Keep Dropbox data for the agreed retention period, and do not delete it until the migrated copy has been verified against file counts, checksums or sampled content and the recovery procedure has been tested. Record the verification evidence, because it supports later compliance reviews.
Is moving data out of Dropbox a compliance or security concern?
Yes, because exports can copy sensitive files to laptops or transfer servers, and sharing and retention settings may be lost along the way. Plan where exported data is stored during transit, who can access it, how it is encrypted, and how it is deleted afterward. Document the access controls and logging you apply to the new platform so they can be shown to an auditor. DeployOpen prepares systems, controls and evidence for compliance assessments, but independent auditors and certification bodies issue any audit report or certification.
How DeployOpen plans and hands over a Dropbox replacement
DeployOpen plans, implements, customizes, integrates, hardens, backs up, upgrades, documents and supports self-hosted open-source platforms inside your own infrastructure. For a Dropbox replacement, that means a Nextcloud deployment in your cloud account, data center or air-gapped network, with the sync, sharing and migration steps agreed in writing before work begins.
How we scope
- Inventory which Dropbox folders, team spaces and shared links must move, and who depends on them
- Agree the storage backend, identity integration and desktop and mobile client rollout in one written scope
- Define how bulk export from Dropbox will run, including the desktop app route for folders over the web limits
How we build
- Deploy Nextcloud Hub and any Collabora Online document editing in the client environment, with configuration documented
- Test sync behavior, sharing link permissions, quota settings and restore paths against a representative sample of data
- Run application and access security testing on the sharing and external link features before users arrive
How we hand over
- Deliver runbooks for administrators covering backups, upgrades, user onboarding and external share review
- Document the migration record, including what was moved, what was verified and what was left for users to re-share
- Provide compliance readiness evidence for controls you select, noting that independent auditors issue any attestation
How we support
- Agree the support model in writing, with ongoing support, upgrades and continuous testing available as a retainer
- Schedule Nextcloud and Collabora upgrades against the release notes you confirm with your own change process
- Ask any quote to separate one-time migration work from recurring retainer and infrastructure costs

