"We noticed a new sign in to your Dropbox."

I write to suggest that Dropbox has taken the wrong approach in this matter and needlessly causes anxiety for its users while encouraging hacking/phishing expeditions from outside sources.

I received the "new sign in" email yesterday. The information noting the date, time and browser matched my dropbox access. However, the device I had used was one that I have frequently used over the years for Dropbox access.

I assumed the email was a phishing expedition. On the off chance that it was not and Dropbox was going to terminate my account, I logged into the account from my browser using a reliable password keeper application.

I there learned that the "alleged/nominal" domain name from which I had received the email was from an approved domain name for Dropbox communication by email. I do not know how easily domain names can be imitated, but I have many acquaintances whose identities have been hacked and seen email appear in my inbox that seem to be a from my acquanitance but was decidedly not.

To address my concerns, I obtained a user name for community inquiries and learned that the issue has been recently raised by a user. I then returned to the original email and pressed the "Yes" button. The button did nothing.

In response to the noted inquiry of a user, "AgentJay Dropboxer" acknowledged that it can be annoying and suggested that the complainant could change the settings. AgentJay added "Dropbox … wants to let you [know?] of any possible unauthorized access!"

Changing those settings would only create opportunity for a user to be hacked and the victim being unaware of the issue because of the suggestion from "AgentJay". I assert that this pandering to one user's "annoyance" is an unacceptable approach to Dropbox's policing unauthorized use.

There are better ways to address the issue of unauthorized access than following the misguided suggestion of AgentJay J.

I look forward to Dropbox taking a less flippant approach to this issue and resolving it in an appropriate way.

(Second try, first post got marked as spam for some reason.)

Too Long; Didn't Read: Does it matter if I *never* click on the "yes it's me" link in these emails?

I find the content of the "We noticed a new sign in to your Dropbox" email annoying.

When I log onto Dropbox, I put in my email and password. I get a text for two factor authentication. I put in the code and access my dropbox. I also get an email (because I have the preference on) that Dropbox noticed a new sign on.

That's all fine and if I didn't like it, I have settings I can change.

But I find the fact that Dropbox asks me to open the mail and click on a link to verify it is, in fact, me annoying. It would be much better design to say: If it's you, do nothing. If it's not you, or if you're not sure, click this button.

So I ignore the "yes it's me", but I don't know if Dropbox actually does anything with the responses (or non-responses) from the "we noticed a new sign on" emails. Will Dropbox somehow limit my account if I ignore too many of these emails?

Thank you. Insight apprecitated.

Hi simple_question. Nice user name! 

Thank you for your feedback. The simple answer is to de-activate this notification, as suggested in this discussion and this is why I merged you feedback and questions here. 

I also wanted to add that your account will not be limited in any way if you ingore these emails, however if a security email comes in one day, and you are not signing in at the time, for unauthorized activity clicking the "No" option in this email, will save the day and disconnect the unknown browser session. 

Hope this info, makes you like this security feature just a little bit. :slight_smile:

In any case, thank you again for your feedback! 

See you around in the Community.