> The fact that I can change my password and then still have instant access to all of my data (ie - it is not batch re-encrypted with new key) all but confirms

> The fact that I can change my password and then still have instant access to all of my data (ie - it is not batch re-encrypted with new key) all but confirms this, correct? I don't know what Dropbox does, but it is possible to encrypt all data with a random session key, and then encrypt that session key with a password. Then a change of password simply needs the stored encrypt session key to be replaced. This is what LUKS does, for example.