Cut the Clutter: Test Ignore Files Feature - sign up to become a beta tester here!
Forum Discussion
Solved
Why is it Ever Safe to Ignore Unprompted One-Time Security Code Emails?
According to https://help.dropbox.com/account-access/one-time-code there are two versions of the "one time sign-in code" email.
They are identical except that one of them includes a link for "I didn't try to sign in," presumably to secure the user's account via resetting one's password and such, while the other simply says "If you didn't try to sign in, don't worry. You can safely ignore this email." Neither the email nor that help page elaborate on why it's safe to ignore the email, though.
If I receive an email with a security code and I haven't tried to sign in at all recently, wouldn't it always mean someone else is attempting to sign in to my account? Furthermore, because the code is only sent if you type the correct email and password, wouldn't it mean that this person has my Dropbox account password? I'd think that would always be cause for alarm, even if they weren't actually able to get into the account.
So what's the difference? In what circumstances is one of those two emails sent vs the other?
Hi Shadowmech
Thanks for reporting this issue, and for your patience while I looked into the matter.
I brought this to the attention of the appropriate team. I understand that the messages can be confusing without further context, and as such we are actively exploring options for clearer messaging around login attempts. I can't share the exact logic behind the different messages, but I can assure you that they represent an appropriate approach to account security.
Regards,
Ben
3 Replies
Replies have been turned off for this discussion
- Walter
Dropbox Community Moderator
Hi Shadowmech, thanks for using Dropbox and welcome to the Community!
I'm not quite concrete on this, so let me check with the team and I'll get back to you on that ASAP.
Let me know if you have any other questions in the meantime.
Any luck, Walter?
BenDBXCommunity Manager
Hi Shadowmech
Thanks for reporting this issue, and for your patience while I looked into the matter.
I brought this to the attention of the appropriate team. I understand that the messages can be confusing without further context, and as such we are actively exploring options for clearer messaging around login attempts. I can't share the exact logic behind the different messages, but I can assure you that they represent an appropriate approach to account security.
Regards,
Ben
