We Want to Hear From You! What Do You Want to See on the Community? Tell us here!

WoofGrrrr's avatar
WoofGrrrr
Helpful | Level 6
7 months ago
Status:
Closed

Allow the invoice page to timeout on the Dropbox site

When you view an invoice for one of your payments, it opens up a new page.

If you happen to leave that page up when you leave the PC you were using, that page just remains... forever.  This leaves your personal information exposed.

The page should time out and disappear when your browser session for the web site times out.  There isn't even a "Close" Button on the page.  Just a "Print receipt" Button.

I submitted this to Customer Support and they merely responded that this works as designed.  If so, then I say it's a very flawed "design" and needs to be changed.

security
Web

3 Comments

Comments have been turned off for this idea
  • Jay's avatar
    Jay
    Icon for Dropbox Community Moderator rankDropbox Community Moderator
    7 months ago
    Status changed:
    New
    to
    Closed

    Hi WoofGrrrr, thanks for messaging the Community.

    As there is already a similar idea regarding automatically timing out on the Dropbox site, could you add a vote to this idea on the Community?

    This will help others by voting on the same post.

  • WoofGrrrr's avatar
    WoofGrrrr
    Helpful | Level 6
    7 months ago

    done

    I hadn't noticed that the ENTIRE web site has no session timeout!!!

  • Rich's avatar
    Rich
    Icon for Super User II rankSuper User II
    7 months ago
    WoofGrrrr wrote:

    I hadn't noticed that the ENTIRE web site has no session timeout!!!

    The website remains accessible until the browser (not just the tab) is closed. If you used the Remember Me option when signing in, it will remember you and remain signed in until you sign out of the site yourself, or clear cookies in your browser.

    The first step in security is you. Just be mindful to not use the Remember Me option and close the browser when you finish, and your Dropbox account will never remain signed in. This is especially important if you're accessing your account on a shared computer, as even an automatic timeout wouldn't be enough to protect your account if you just walk away from the computer while still signed in.