Need to see if your shared folder is taking up space on your dropbox 👨‍💻? Find out how to check here.

Forum Discussion

kdsnflk987's avatar
kdsnflk987
New member | Level 2
2 years ago
Solved

Received unrequested 6-digit verification code on my phone

Hi, so I was recently hacked (someone gaine access to all of my (unique) passwords) which I changed from a secure device promptly after.

 

A couple of hours ago I received 6-digit verification code on my phone which I did not request.

 

Does this neccessarily mean that my account password is compromised again? Or could this request to my phone have been produced by the attacker without him having to my new password? (E.g. by attempting to reset the password only with my known email address and a currently logged in phone? I have not been able to reproduce this).

 

I'm not so much worried about the failed login attempt itself, but the fact that all of my passwords could be compromised again.

 

Thanks in advance

  • Jay's avatar
    Jay
    2 years ago

    The security code can be triggered by different events, so it could have been things other than a valid email and password combination. 

     

    To be certain for your own security, however, I'd recommend resetting thee Dropbox password.

8 Replies

Replies have been turned off for this discussion
  • Jay's avatar
    Jay
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    2 years ago

    Hi kdsnflk987 , thanks for bringing this to our attention.

     

    First of all, are you able to see the login attempt on this page on your account?

     

    This will help me to assist further!

  • kdsnflk987's avatar
    kdsnflk987
    New member | Level 2
    2 years ago

    Hi Jay, thanks for the quick reply. All I can see are the currently logged in devices, which are all mine.

  • Jay's avatar
    Jay
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    2 years ago

    Is that the same for the browser sessions? Do the IP addresses match your own device?

  • kdsnflk987's avatar
    kdsnflk987
    New member | Level 2
    2 years ago

    If at all possible I'm really just looking to receive a definite yes or no answer on the question whether the authorization request today at 2:18AM UTC could have been triggered by any other event other than the correct entry of the email/password combination.

     

    In that case I'd have to (again) reset over 100 other passwords as well, so it's an important question to me. 

     

    2FA was disabled at that time and I did not receive an email. Only the authorization request on my phone.

  • Jay's avatar
    Jay
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    2 years ago

    The security code can be triggered by different events, so it could have been things other than a valid email and password combination. 

     

    To be certain for your own security, however, I'd recommend resetting thee Dropbox password.

  • Megan's avatar
    Megan
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    2 years ago

    Hey Ajay796, thanks for posting here today! 

     

    Do you have access to the email address linked to the Dropbox account you're trying to access? 

     

    If so, could you try adding no-reply@dropbox.com to your inbox in order to see if you can receive the email when attempting to sign in again?

     

    Let me know more, and we'll take it from there!

About Security and Permissions

Start a discussion in the Dropbox Community forum to get help with your account security and permissions. Find support from Community members.

The Dropbox Community team is active from Monday to Friday. We try to respond to you as soon as we can, usually within 2 hours.

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X, Facebook or Instagram.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!