Someone accessed my Dropbox account and I can't get help

Hi phla​, 

Thank you for reaching out to us and for your patience while we’ve investigated this situation.

We know how stressful it can be to face issues with your Dropbox account, and we want to help you get back on track as quickly as possible. We’re also looking into your support requests and you’ll be hearing directly from a support agent shortly to troubleshoot further.

From our investigation, it looks like there are few possible reasons that could explain what happened here. Below, we’ve outlined the most likely scenarios along with clear steps you can follow right away to secure your account.

How this might have happened

Someone would need both your email address and password to access your Dropbox account or change your login details. This can happen in a few ways:

• Phishing: Attackers sometimes create very convincing emails or websites that look legitimate, making it difficult to spot they’re fake. If this happened, they may have obtained your login details that way.
• Email account access: If someone gained access to your email, they could reset your Dropbox password.
• Reused passwords: If you used the same password on another service that was breached, attackers may try it on Dropbox. (I note that this is not your case, phla​, as you didn’t use your Dropbox password anywhere else).
• Shared passwords: If you gave your login details to someone else, they may have used them to sign in.
• Password guessing: Someone could have correctly guessed your password.

Steps to secure your Dropbox account

Here are some important actions to take:

1. Change your Dropbox password:
   • Use this link to reset it.
   • Choose a strong, unique password that you don’t use anywhere else.
2.  Update your email password:
   • Make sure the email linked to your Dropbox account also has a strong, unique password.
3.  Turn on two-factor authentication (2FA)
   • This adds an extra layer of protection by requiring a six-digit code in addition to your password when signing in. Learn more here: Enable 2FA.
   • I see you have 2FA enabled, phla​, but worth double checking it’s all working correctly.
4. Check your account activity:
   • Review devices and web sessions: Manage devices.
   • Review connected apps: Manage apps.
   • Review shared folders: Manage shared folders.
   • Review shared links: Manage shared links.
5.  Secure the Dropbox mobile app:
   • Add a passcode so it’s required every time you open the app. Learn how: Set up a passcode.
6. Secure your computer:
   • Always require a password to log in, and set your device to require it again when waking from sleep or unlocking the screen.

We recommend that you go through these steps to ensure your account is secured.

If you notice anything else unusual after going through these steps or have additional details that could shed light on what happened, we'd appreciate you sharing them with us. We’re here to work with you to get this resolved and to keep your account safe.

Emma