<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account in Security and Permissions</title>
    <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647621#M6604</link>
    <description>&lt;P&gt;"Someone has access to your password but don't worry they can't yet get to your dropbox account" is not a good message to receive in an email.&lt;/P&gt;</description>
    <pubDate>Mon, 02 Jan 2023 09:14:55 GMT</pubDate>
    <dc:creator>arana</dc:creator>
    <dc:date>2023-01-02T09:14:55Z</dc:date>
    <item>
      <title>Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646428#M6527</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;A strange thing happened today, I've received 3 emails&amp;nbsp; in sequence with content:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;Hi [MY FIRST NAME],

Finish signing in to Dropbox with this one-time security code:

[ 6 DIGIT CODE]

If you didn't try to sign in, don't worry. You can safely ignore this email.&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I freaked out because you can receive 2FA only if you enter the correct password. Upon investigating I figured out that &lt;STRONG&gt;my account does NOT have 2FA enabled&lt;/STRONG&gt;!!!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Adding headers here (redacted):&lt;/P&gt;
&lt;PRE&gt;From: Dropbox &amp;lt;no-reply@dropbox.com&amp;gt;
To: [MY EMAIL]
CC: 
Subject: [6DIGITS CODE] is your Dropbox security code
Date: Mon, 26 Dec 2022 11:03:37 +0000
Message-ID: &amp;lt;010001854e1a3116-24a80716-e9c4-40f4-94d3-1ebadcdc1fa9-000000@email.amazonses.com&amp;gt;
X-Dropbox-Message-ID: 16683002164785652191
Feedback-ID: 1.us-east-1.syWQ1+fF8Wo1tY8y/+s85ptiAKu7bILK6PHyxwpB+xo=:AmazonSES
X-SES-Outgoing: 2022.12.26-54.240.39.228&lt;/PRE&gt;
&lt;P&gt;Headers look legit, it seems that email is not spoofed.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Is this some sort of bug, can someone from dev/support can explain what happened? There was this Lastpass breach a few days ago and I am not sure if those are connected.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;TLDR; Received 2FA emails, however 2FA is not enabled on my account.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Just in case I updated my password once again (was changed a week ago).&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 26 Dec 2022 21:50:52 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646428#M6527</guid>
      <dc:creator>radenkovic</dc:creator>
      <dc:date>2022-12-26T21:50:52Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646438#M6530</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1603203"&gt;@radenkovic&lt;/a&gt;&lt;STRONG&gt;&amp;nbsp;wrote:&lt;/STRONG&gt;&lt;BR /&gt;
&lt;P&gt;Received 2FA emails, however 2FA is not enabled on my account.&lt;/P&gt;
&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;That's not a &lt;A href="https://help.dropbox.com/account-access/enable-two-step-verification" target="_blank"&gt;two-step verification&lt;/A&gt; email. That's a &lt;A href="https://help.dropbox.com/account-access/one-time-code" target="_blank"&gt;one-time security code email&lt;/A&gt;. Similar, but different. You don't need to have two-step verification enable to receive the one-time security code. Dropbox will request a code if they feel a login attempt is suspicious.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Even though they didn't get in to your account, you probably should review the active sessions and devices linked to your account, and change your password. You can do both from your &lt;A href="https://www.dropbox.com/account/security" target="_blank"&gt;Security page&lt;/A&gt;.&lt;/P&gt;</description>
      <pubDate>Mon, 26 Dec 2022 14:03:58 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646438#M6530</guid>
      <dc:creator>Rich</dc:creator>
      <dc:date>2022-12-26T14:03:58Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646444#M6531</link>
      <description>&lt;P&gt;Thanks Rich! Does that mean that the malicious actor entered the correct password?&amp;nbsp;&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;Just FYI I changed my password after the incident and enabled 2FA. Also, there are no suspicious sessions/logins on my account (active sessions).&lt;/P&gt;</description>
      <pubDate>Mon, 26 Dec 2022 14:52:20 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646444#M6531</guid>
      <dc:creator>radenkovic</dc:creator>
      <dc:date>2022-12-26T14:52:20Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646524#M6536</link>
      <description>&lt;P&gt;Hey &lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1603203"&gt;@radenkovic&lt;/a&gt;!&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Is there any chance that you had previously stored your Dropbox password somewhere that was accessible by another user/person?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If you don’t see any trace of another device/browser on your Security tab though, it means that no one else managed to log in to your Dropbox account.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Also, good thinking on resetting your Dropbox password/enabling 2FA; that should do it.&lt;/P&gt;</description>
      <pubDate>Mon, 26 Dec 2022 21:54:42 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646524#M6536</guid>
      <dc:creator>Nancy</dc:creator>
      <dc:date>2022-12-26T21:54:42Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646578#M6538</link>
      <description>&lt;P&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1446775"&gt;@Nancy&lt;/a&gt;, thanks for your input! I don't have any files on that dropbox account and have decent security practices (using password manager, not reusing passwords etc), it may be that I'm compromised, but I doubt it, that's why I am checking.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is it possible to check logs with timestamp from my first post and confirm that someone actually tried to login with correct pw?&lt;/P&gt;</description>
      <pubDate>Tue, 27 Dec 2022 07:36:26 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/646578#M6538</guid>
      <dc:creator>radenkovic</dc:creator>
      <dc:date>2022-12-27T07:36:26Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647246#M6584</link>
      <description>&lt;P&gt;Hey &lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1603203"&gt;@radenkovic&lt;/a&gt;, sorry to jump in, but I just wanted to confirm that the email you received seems to have come from an official Dropbox domain.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Just in case, you can change your account's password as the one time code that was sent to you would indeed only be sent if the password entered was correct.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The only timestamps about this incident you can check are the ones from any email you may have received during that time while you could also check your account's Security page for any web sessions that you don't recognize etc.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I hope this helps!&lt;/P&gt;</description>
      <pubDate>Fri, 30 Dec 2022 10:15:56 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647246#M6584</guid>
      <dc:creator>Walter</dc:creator>
      <dc:date>2022-12-30T10:15:56Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647262#M6586</link>
      <description>&lt;P&gt;Thanks Walter! I've already updated the password, second time this week.&lt;/P&gt;&lt;P&gt;There were no suspicious sessions on my account (also there are 0 files in my dropbox so nothing really to compromise).&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Just to mention that I am well-seasoned with OpSec and worked on many anti-fraud/phishing/scam projects, and was genuinely worried if I'm targeted as a revenge or something. The password itself was brute-force proof and autogenerated (16+ chars, a-Z0-9 and symbols), not stored anywhere except in my password manager (I suspected that it was compromised but it's unlikely), no traces of malware on my computer, and no other accounts from the manager were compromised (although I changed all the passwords and moved to local pw manager).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 30 Dec 2022 13:08:47 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647262#M6586</guid>
      <dc:creator>radenkovic</dc:creator>
      <dc:date>2022-12-30T13:08:47Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647264#M6587</link>
      <description>&lt;P&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/364291"&gt;@Walter&lt;/a&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1850"&gt;@Rich&lt;/a&gt;&amp;nbsp;sorry guys for bugging you again but It's &lt;U&gt;very likely&lt;/U&gt; that you have some bug/security issue on the platform.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;In this reddit post, more people are complaining about the same thing:&lt;BR /&gt;&lt;A href="https://www.reddit.com/r/dropbox/comments/y3rl64/dropbox_spamming_dropbox_security_code_emails/" target="_blank" rel="noopener"&gt;https://www.reddit.com/r/dropbox/comments/y3rl64/dropbox_spamming_dropbox_security_code_emails/&lt;/A&gt;&lt;/P&gt;&lt;P&gt;- I also received 3 emails in one minute&lt;/P&gt;&lt;P&gt;- No signs of compromise&lt;/P&gt;&lt;P&gt;- Reddit post (screenshot is dated 27Dec), mine happened on 26Dec&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;ANOTHER UPDATE:&lt;/P&gt;&lt;P&gt;&lt;A href="https://www.dropboxforum.com/t5/Security-and-Permissions/I-want-to-review-sign-in-attempts/td-p/646015" target="_blank" rel="noopener"&gt;https://www.dropboxforum.com/t5/Security-and-Permissions/I-want-to-review-sign-in-attempts/td-p/646015&lt;/A&gt;&lt;/P&gt;&lt;P&gt;Exactly the same behavior reported during the last week on your forums.&lt;/P&gt;&lt;P&gt;- Also 3 emails in one minute&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="radenkovic_0-1672405577750.png" style="width: 400px;"&gt;&lt;img src="https://www.dropboxforum.com/t5/image/serverpage/image-id/34063i9C63E5B231BC2671/image-size/medium?v=v2&amp;amp;px=400" role="button" title="radenkovic_0-1672405577750.png" alt="radenkovic_0-1672405577750.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Please report this to developers/security, this incident should be reviewed because there may be a way to compromise user accounts and bypass password.&amp;nbsp;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 30 Dec 2022 13:17:01 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647264#M6587</guid>
      <dc:creator>radenkovic</dc:creator>
      <dc:date>2022-12-30T13:17:01Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647388#M6595</link>
      <description>&lt;P&gt;Hi,&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I had the exact same problem, 3 emails within 1-2 minutes. And it was definetely not me.&lt;BR /&gt;&lt;BR /&gt;I contacted support and they were completely useless. I even upgraded my account just to be able to chat to support, as someone having my password would require me to update a lot of accounts not just dropbox, but nobody was able to give me a straight answer.&lt;BR /&gt;&lt;BR /&gt;Here is what i have found so far per dropbox's own FAQs.&lt;BR /&gt;&lt;BR /&gt;&lt;A href="https://help.dropbox.com/account-access/one-time-code" target="_blank" rel="noopener"&gt;https://help.dropbox.com/account-access/one-time-code&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;There are 2 types of emails, one that says something like "if it was not you, click here to change your password", and the other one that says "if it was not you, don't worry".&lt;BR /&gt;&lt;BR /&gt;But why on earth would i not worry if someone compromised my password? Makes no sense.&lt;BR /&gt;&lt;BR /&gt;So i try to understand, in what situation would this email be triggered, unless someone has my password?&lt;BR /&gt;&lt;BR /&gt;On a final note: I did today try to log in myself, from an unusual browser and using a vpn, in order to trigger a warning on purpose. I did receive the email that says something like "if it was not you, click here". So this confirms, if someone has your password, you will receive that kind of email. But the question remains, what is the point of the other email that says "don't worry"?&lt;BR /&gt;&lt;BR /&gt;If anyone can answer this question would be great, because i totally freaked out over the last few days trying to find the answer to this.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;thank you!&lt;/P&gt;</description>
      <pubDate>Sat, 31 Dec 2022 01:14:55 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647388#M6595</guid>
      <dc:creator>willywonka</dc:creator>
      <dc:date>2022-12-31T01:14:55Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647621#M6604</link>
      <description>&lt;P&gt;"Someone has access to your password but don't worry they can't yet get to your dropbox account" is not a good message to receive in an email.&lt;/P&gt;</description>
      <pubDate>Mon, 02 Jan 2023 09:14:55 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647621#M6604</guid>
      <dc:creator>arana</dc:creator>
      <dc:date>2023-01-02T09:14:55Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648253#M6650</link>
      <description>&lt;P&gt;Hey guys, I hope you're all doing well!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Would it be okay for me to reach out via email, in order for us to have a closer look into this?&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Let me know!&lt;/P&gt;</description>
      <pubDate>Wed, 04 Jan 2023 17:45:11 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648253#M6650</guid>
      <dc:creator>Megan</dc:creator>
      <dc:date>2023-01-04T17:45:11Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648268#M6652</link>
      <description>&lt;P&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1148275"&gt;@Megan&lt;/a&gt;&amp;nbsp;feel free to reach me via email (it's the same I'm using to login to this account).&lt;/P&gt;</description>
      <pubDate>Wed, 04 Jan 2023 18:33:12 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648268#M6652</guid>
      <dc:creator>radenkovic</dc:creator>
      <dc:date>2023-01-04T18:33:12Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648302#M6656</link>
      <description>&lt;P&gt;Hi &lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1603203"&gt;@radenkovic&lt;/a&gt;, I just sent you an email.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Reply back to me, and we'll take it from there!&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 04 Jan 2023 20:36:55 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648302#M6656</guid>
      <dc:creator>Megan</dc:creator>
      <dc:date>2023-01-04T20:36:55Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648331#M6658</link>
      <description>Hi Megan, You can email me as well.</description>
      <pubDate>Wed, 04 Jan 2023 22:19:12 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648331#M6658</guid>
      <dc:creator>arana</dc:creator>
      <dc:date>2023-01-04T22:19:12Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648496#M6668</link>
      <description>&lt;P&gt;Hey &lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1602643"&gt;@arana&lt;/a&gt;, you've got mail as well!&lt;/P&gt;</description>
      <pubDate>Thu, 05 Jan 2023 14:15:30 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648496#M6668</guid>
      <dc:creator>Hannah</dc:creator>
      <dc:date>2023-01-05T14:15:30Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648521#M6670</link>
      <description>&lt;P&gt;Hi,&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;can you reach out to me via email as well? as the exact same thing happened to me. Thank you&lt;/P&gt;</description>
      <pubDate>Thu, 05 Jan 2023 16:06:01 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648521#M6670</guid>
      <dc:creator>willywonka</dc:creator>
      <dc:date>2023-01-05T16:06:01Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648576#M6671</link>
      <description>&lt;P&gt;Not a problem, &lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1604441"&gt;@willywonka&lt;/a&gt;!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I just sent you an email as well, so make sure to get back to me, when you have a chance.&lt;/P&gt;</description>
      <pubDate>Thu, 05 Jan 2023 18:09:47 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/648576#M6671</guid>
      <dc:creator>Hannah</dc:creator>
      <dc:date>2023-01-05T18:09:47Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/649083#M6689</link>
      <description>Just chiming in to say I have also been hit with the 3 emails in the span of less than a minute.&lt;BR /&gt;&lt;BR /&gt;This is happening too many times now to be a coincidence, fortunately I don’t have any sensitive files on my account but that’s not the point, a LOT of people are getting these 3 OTP emails in quick succession for it to just be brushed off, as someone said in this thread earlier there has to be either a bug/glitch or a security flaw with Dropbox itself.</description>
      <pubDate>Sat, 07 Jan 2023 21:06:43 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/649083#M6689</guid>
      <dc:creator>Randy90</dc:creator>
      <dc:date>2023-01-07T21:06:43Z</dc:date>
    </item>
    <item>
      <title>"Finish signing in to Dropbox with this one-time security code" - DropBox bug or LastPass Breach?</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/649173#M6698</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've received two emails on 19/12/2022 requesting to finish singing up by providing the one-time password.&lt;/P&gt;&lt;P&gt;- I haven't logged in or used my Dropbox account for more than an year&lt;/P&gt;&lt;P&gt;- My password is very complicated and was generated by LastPass and is not shared between any accounts&lt;/P&gt;&lt;P&gt;- I've already conducted all counter-measures such as changing password (I already have 2FA turned on).&lt;/P&gt;&lt;P&gt;- Lastly, I didn't use Dropbox on&amp;nbsp;19/12/2022 in anyway&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;My one and single concern is - Did someone manage to enter correct credentials to my account, or was a glitch/bug from DropBox?&lt;/P&gt;&lt;P&gt;This is very important for me as it's close to the dates LastPass was breach and I need to understand if the email from DropBox was a legitimate login attempt with my password or a bug from DropBox.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please don't simply suggest to change password/2FA as I have already done that.&lt;/P&gt;&lt;P&gt;My only question is if someone managed to actually enter my correct password to DropBox on&amp;nbsp;19/12/2022.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We can further elaborate over email if required.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;Michael&lt;/P&gt;</description>
      <pubDate>Mon, 09 Jan 2023 03:40:58 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/649173#M6698</guid>
      <dc:creator>MichaelEngstler</dc:creator>
      <dc:date>2023-01-09T03:40:58Z</dc:date>
    </item>
    <item>
      <title>Re: Received 3 2FA emails in one minute, but 2FA was not enabled on my account</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/649258#M6697</link>
      <description>&lt;P&gt;I think you should open support tickets, as for now Dropbox support is clearly ignoring the issue, I am getting only generic responses to change my password and other usual stuff. However, there are a lot of indications that the problem actually exists on Dropbox side.&lt;/P&gt;</description>
      <pubDate>Mon, 09 Jan 2023 12:23:45 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/649258#M6697</guid>
      <dc:creator>radenkovic</dc:creator>
      <dc:date>2023-01-09T12:23:45Z</dc:date>
    </item>
  </channel>
</rss>

