Dropbox Watchdog

Search issues

Search the Dropbox Watchdog archive

All issues

Declining paying users and stalling revenue: the core business in retreat

2024–2026 (ongoing)

HighStatus: Ongoing paying users fell from ~18.22M (Q2 2024) to ~18.07M (Q3 2025) affectedProduct: Core syncYear: 2025

After years of growth, Dropbox's paying-user count began falling and revenue turned negative year-over-year through 2025, as the company shrank managed-sales investment and exited product lines — raising questions about the durability of its core subscription business.

What happened

Dropbox built its business on a steadily rising base of paying subscribers, but by 2025 that base was contracting. The company's own quarterly results showed paying users slipping from roughly 18.22 million in Q2 2024 to 18.13 million in Q2 2025, and to about 18.07 million in Q3 2025 — sequential declines quarter after quarter. Revenue, long reliably growing, turned slightly negative year-over-year: down about 1.0% in Q1 2025, 1.4% in Q2 2025, and 0.7% in Q3 2025, with total annual recurring revenue also edging down.

Dropbox attributed much of the erosion to deliberate choices — reducing investment in managed sales, downsell within its managed-account base, and exiting businesses such as FormSwift — alongside broader softness in demand for its core file-sync-and-share product. But the trend lines tell a starker story than any single quarter: a maturing product in a market increasingly served for free by Google and Microsoft, where storage is a commodity and Dropbox's standalone value proposition is under pressure. The company has leaned on margin expansion and share buybacks to support its stock even as the top line stalls, a posture more typical of a business managing decline than one pursuing growth.

Impact

A shrinking paying-user base is the clearest signal yet that Dropbox's foundational business has peaked, and it intensifies the stakes of the company's AI pivot: if Dash does not generate meaningful new revenue, Dropbox risks slow, structural decline. For existing customers, a company optimizing for margin over growth raises legitimate questions about future investment in the core sync product, pricing, and long-term independence versus acquisition. These are developing dynamics; the trajectory through 2026 will determine whether the declines stabilize or accelerate.

Dropbox's Response / Official Position

Dropbox has characterized the declines as partly the result of intentional decisions — exiting lower-priority businesses and reducing managed-sales investment — while emphasizing improved profitability, free-cash-flow generation, and share repurchases. Management says it is simultaneously simplifying and strengthening the core FSS product and investing in Dash as its next growth engine, framing 2025 as a transition year.

Sources

Related guides

Spot an error, or have a source to add?
Report an error / suggest update

Related issues

9 sources
HighApproximately 5,000 accounts; files accessed in fewer than a third (about 1,500 by 9to5Mac's arithmetic)

The 2026 Lenovo ID sign-in flaw: ~5,000 Dropbox accounts entered without a Dropbox password

A flaw in how Lenovo verified account-holder email addresses let an attacker register a Lenovo ID on a victim's email, and Dropbox's Lenovo ID sign-in link then trusted that identity without ever asking for a Dropbox password — reaching roughly 5,000 accounts.

Security Incidents & Data BreachesCurrent / Ongoing Issues (2024–2026)
Read documentation

In an 8-K filed May 26, 2026, Dropbox disclosed that co-founder Drew Houston would step back as CEO after 19 years, with the Board appointing Ashraf Alkarmi — its General Manager, Core — as Co-Chief Executive Officer effective that date, ahead of Alkarmi becoming sole CEO and Houston moving to executive chairman 'following a transition period.' The handoff arrives as AI upends the software era Dropbox grew up in and the company's revenue sits near flat.

Product Changes & User BacklashCurrent / Ongoing Issues (2024–2026)
Read documentation

Dropbox's Q1 and Q2 2026 results both kept total reported revenue growth under 1% year-over-year, the company refinanced debt and repurchased hundreds of millions of dollars in stock over the same six months, and the period closed with a co-CEO handoff, a new product chief, and a routine, tax-related insider stock disposition reported by the Motley Fool.

Pricing & Business PracticesCurrent / Ongoing Issues (2024–2026)
Read documentation

ConsentFix, an OAuth-consent phishing technique first documented by Push Security in December 2025 and reported on independently through mid-2026, delivers its Microsoft 365 lures through trusted file-hosting platforms — reporting names both Dropbox and DocSend (a Dropbox company) as hosts for the password-protected files attackers use to get past mail filters.

Security Incidents & Data BreachesCurrent / Ongoing Issues (2024–2026)
Read documentation