Need to see if your shared folder is taking up space on your dropbox 👨💻? Find out how to check here.
Forum Discussion
Solved
Potential security problem with Google Sign-In, even with 2FA when accessing my account.
I have an Android phone with a Google account. If I install the Dropbox app, the login screen prompts me to use Google Sign-In to log in to my Dropbox account. If I accept, I get automatically logged...
icab_80 wrote:
Ideally what I want is to completely disable Google Sign-In ...
There is no option for that within Dropbox.
Auto sign-in is disabled ... Despite this, it still lets me auto sign-in in the Dropbox app.This sounds like an issue with your Google account or phone, rather than a problem with Dropbox. If you're signing in with Google and Google isn't allowing you to confirm the sign-in, that's on Google. Dropbox can't control that.
Perhaps it's happening because you've already signed in using Google and allowed access, so it's remembering that connection and just signing in. If so, disable the connection between Google and your Dropbox account (in your Google account settings).
Fix your Google auto sign-in and your issue is resolved.
Rich
Super User II
Super User II
icab_80 wrote:
Yes, the phone is secured with the usual screen lock, but if someone were to bypass that ...
Disable the auto sign-in on your Google account so you have to provide confirmation before signing in, use a secure passcode for the device itself, and don't use SMS for the Dropbox two-step verification. Use an authenticator app that you can further secure.
Any service is only as secure as the weakest link. If you're that worried about the device being compromised, you shouldn't have anything set up for auto sign-in, and you shouldn't be using a simple SMS message for multi-factor authentication.
Hello Rich,
Thanks for your advice. Auto sign-in is disabled on my Google account, and there are no passwords saved in Google's password manager. Under the third party apps settings in Google, "Sign in prompts" is also disabled. Despite this, it still lets me auto sign-in in the Dropbox app.
As for your suggestion of using an authenticator app instead of SMS for 2FA: it's sound advice, but Google's Authenticator app cannot be further secured, it can be accessed like any other app. I'm not sure if other authenticator apps can be secured with passwords or other features.
Ideally what I want is to completely disable Google Sign-In, or alternatively, have no access to my Dropbox account from my phone. As it stands right now, this is not possible: because of Google Sign-In, anyone with access to my phone automatically has access to my Dropbox account, whether 2FA is enabled or not, with SMS or an authenticator app.
Thanks for your help.
- Rich
icab_80 wrote:
Ideally what I want is to completely disable Google Sign-In ...
There is no option for that within Dropbox.
Auto sign-in is disabled ... Despite this, it still lets me auto sign-in in the Dropbox app.This sounds like an issue with your Google account or phone, rather than a problem with Dropbox. If you're signing in with Google and Google isn't allowing you to confirm the sign-in, that's on Google. Dropbox can't control that.
Perhaps it's happening because you've already signed in using Google and allowed access, so it's remembering that connection and just signing in. If so, disable the connection between Google and your Dropbox account (in your Google account settings).
Fix your Google auto sign-in and your issue is resolved.
Hello Rich,
I'll try fixing it with Google. Thanks for all your help.
Kind regards
