We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.

Forum Discussion

bertzander's avatar
bertzander
New member | Level 2
7 years ago

[security] Got a Dropbox security code email, but 2-factor verification is *off*. Reasons?

Hey

 

I received the following email yesterday, sent to the email address used for registering my Dropbox account:

 

Hi [first name]

[6-digit code] is your one-time Dropbox security code.

Happy Dropboxing!
- The Dropbox Team

 

However, 2-factor authorization is turned off for my account. I just checked it again, 2FA was, and still is, disabled.

 

A cursory glance at the source suggests the email was sent by Dropbox. I know sender addresses can be spoofed, but the URL in the email was the real one, so I don't see a reason to believe it's a scam/phishing mail.

 

My question is then:

 

Are there any other cases (other than on accounts with 2FA enabled) when Dropbox would send a one-time security code by email?

Account Access
Notifications
Security
  • Jane's avatar
    Jane
    7 years ago
    Hi again to all, I have some more info to share with you on your security-related inquiry that will shed some light on why you received this email from us. 
     
    I can confirm that the email that you have received is a legitimate email from Dropbox. You were sent this message because you have recently attempted to log in to your account. You will need to enter this verification code to complete the sign in process.
     
    We have implemented this to prevent abuse on your account. If you continue to receive these emails and you are not attempting to log in, we would recommend changing the email address connected to your account and securing your account by doing the following:
     
    #1. If you haven't done so already, you can change your Dropbox account password, which you can do by clicking this link & following the on-screen prompts.
     
    (Note: Dropbox recommends strong passwords that are not used for any other website or service. Once you change your password, the change will become effective immediately on all computers and devices linked to your account.)
     
    #2. For added security, we recommend that you enable two-step verification, which protects your account even if your password is compromised. Once enabled, Dropbox will require a six-digit code in addition to your password when signing in to the Dropbox website or linking a new device. 
     
    When it comes to the open ticket you had submitted Jdzaffuto, I’ve located your open support request on our system & I’ve made sure to reply to you there. Whenever you find some time, please check your inbox for my latest email & let me know here in case you’re unable to locate this reply. 
     
    Of course, if any of you is having trouble logging in or if you have any further questions, please let me know here & I’ll make sure to reach out on my end to anyone having additional questions or concerns!
     
    [Mod edit 2023, edited Help Center link]
  • frankmu's avatar
    frankmu
    New member | Level 2
    7 years ago

    Exact same situation happend to me yesterday. Did you get a reply from Dropbox? Is this part of a large scale attack?

    • Jane's avatar
      Jane
      Icon for Dropbox Staff rankDropbox Staff
      7 years ago
      Hey frankmu, as this is an account-specific matter, I’ve made sure to run a search on our system on my end, I’ve located your open support request & I’ve made sure to reply to you there asking some details, in order to determine what’s happening together. 
       
      Whenever you find some time, please check your inbox our latest email & let me know here in case you’re unable to locate this reply. 
       
      Hopefully this is helpful to you & I’ll be awaiting your next reply on that email chain. Until we talk again, have a great rest of your day! 
      • artaxerxes's avatar
        artaxerxes
        Explorer | Level 4
        7 years ago
        Yeah me too. I’ve had 5+ in the last few hours
  • Jdzaffuto's avatar
    Jdzaffuto
    New member | Level 2
    7 years ago
    I just got that same email too at 5:55am while I was sleeping. Freaked me out. I changed my password and enabled 2FA. Looked it up to find others having the same issue. Someone is doing something.
    • Jane's avatar
      Jane
      Icon for Dropbox Staff rankDropbox Staff
      7 years ago
      Hi again to all, I have some more info to share with you on your security-related inquiry that will shed some light on why you received this email from us. 
       
      I can confirm that the email that you have received is a legitimate email from Dropbox. You were sent this message because you have recently attempted to log in to your account. You will need to enter this verification code to complete the sign in process.
       
      We have implemented this to prevent abuse on your account. If you continue to receive these emails and you are not attempting to log in, we would recommend changing the email address connected to your account and securing your account by doing the following:
       
      #1. If you haven't done so already, you can change your Dropbox account password, which you can do by clicking this link & following the on-screen prompts.
       
      (Note: Dropbox recommends strong passwords that are not used for any other website or service. Once you change your password, the change will become effective immediately on all computers and devices linked to your account.)
       
      #2. For added security, we recommend that you enable two-step verification, which protects your account even if your password is compromised. Once enabled, Dropbox will require a six-digit code in addition to your password when signing in to the Dropbox website or linking a new device. 
       
      When it comes to the open ticket you had submitted Jdzaffuto, I’ve located your open support request on our system & I’ve made sure to reply to you there. Whenever you find some time, please check your inbox for my latest email & let me know here in case you’re unable to locate this reply. 
       
      Of course, if any of you is having trouble logging in or if you have any further questions, please let me know here & I’ll make sure to reach out on my end to anyone having additional questions or concerns!
       
      [Mod edit 2023, edited Help Center link]
      • UMFClass2019's avatar
        UMFClass2019
        New member | Level 2
        6 years ago

        Good day! I am trying to log in my class' dropbox account from a new device and I am prompted to enter a 6 digit code as a second step to be able to go further, now when I log in to that same account from an old device the 2 step verification is disabled. In addition, when I try to access the email address inbox linked to the dropbox account (gmail address) in order to find the code, I am told "this account doesn't exist". 

  • jkproctor's avatar
    jkproctor
    New member | Level 2
    7 years ago

    Trying to login with HP printer with 2fa turnnerd off howerver I keep getting a security coded to finish loggin in.  HP printer has no setting to enter security code.  

    • Jane's avatar
      Jane
      Icon for Dropbox Staff rankDropbox Staff
      7 years ago
      Hey jkproctor, I’ve moved your post under this discussion, as this has been reported before on the Community. Have you been able to resolve your concern on your end? 
       
      If you’re still facing this issue, would you mind sending me the details I had asked quanta above, in order to follow-up with you a bit more closely? Thanks in advance & I’ll be awaiting your next message! 
    • shieldstd's avatar
      shieldstd
      New member | Level 2
      7 years ago

      Yes, I'm having the same issue. 2fa is turned off. I'm logged into Dropbox on my PC. I try to add details to my HP printer. I receive a notice within Dropbox to use this code to continue, but I can't enter it into the printer.

      What is the resolution?

      Google Drive lets you authenicate the printer from within your account on your computer.

      • Jane's avatar
        Jane
        Icon for Dropbox Staff rankDropbox Staff
        7 years ago
        Hey there (shieldstd), as we can only proceed with account-specific matters via our Official Support channel (& it's highly likely that I’ll need to forward your request to a specialized colleague, who’ll further investigate whether this is possible), I’ve made sure to reach out to you on my end, since I couldn’t locate an open support request on our system.  
         
        Whenever you have some spare time, please have a look at your inbox for my email & I’ll make sure to promptly follow-up with you asap. Thanks again for checking in with us on the Forum & I’ll be awaiting your next email! 

About Security and Permissions

Start a discussion in the Dropbox Community forum to get help with your account security and permissions. Find support from Community members.

Need more support

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!