cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Share your feedback on the Document Scanning Experience in the Dropbox App right here.

Security and Permissions

Start a discussion in the Dropbox Community forum to get help with your account security and permissions. Find support from Community members.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Received unrequested 6-digit verification code on my phone

Received unrequested 6-digit verification code on my phone

kdsnflk987
New member | Level 2

Hi, so I was recently hacked (someone gaine access to all of my (unique) passwords) which I changed from a secure device promptly after.

 

A couple of hours ago I received 6-digit verification code on my phone which I did not request.

 

Does this neccessarily mean that my account password is compromised again? Or could this request to my phone have been produced by the attacker without him having to my new password? (E.g. by attempting to reset the password only with my known email address and a currently logged in phone? I have not been able to reproduce this).

 

I'm not so much worried about the failed login attempt itself, but the fact that all of my passwords could be compromised again.

 

Thanks in advance

1 Accepted Solution

Accepted Solutions

Jay
Dropbox Staff

The security code can be triggered by different events, so it could have been things other than a valid email and password combination. 

 

To be certain for your own security, however, I'd recommend resetting thee Dropbox password.


Jay
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join!

View solution in original post

8 Replies 8

Jay
Dropbox Staff

Hi @kdsnflk987 , thanks for bringing this to our attention.

 

First of all, are you able to see the login attempt on this page on your account?

 

This will help me to assist further!


Jay
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join!

kdsnflk987
New member | Level 2

Hi Jay, thanks for the quick reply. All I can see are the currently logged in devices, which are all mine.

Jay
Dropbox Staff

Is that the same for the browser sessions? Do the IP addresses match your own device?


Jay
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join!

kdsnflk987
New member | Level 2

Yes

kdsnflk987
New member | Level 2

If at all possible I'm really just looking to receive a definite yes or no answer on the question whether the authorization request today at 2:18AM UTC could have been triggered by any other event other than the correct entry of the email/password combination.

 

In that case I'd have to (again) reset over 100 other passwords as well, so it's an important question to me. 

 

2FA was disabled at that time and I did not receive an email. Only the authorization request on my phone.

Jay
Dropbox Staff

The security code can be triggered by different events, so it could have been things other than a valid email and password combination. 

 

To be certain for your own security, however, I'd recommend resetting thee Dropbox password.


Jay
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join!

Ajay796
Explorer | Level 3
Not received 6 digit security code

Megan
Dropbox Staff

Hey @Ajay796, thanks for posting here today! 

 

Do you have access to the email address linked to the Dropbox account you're trying to access? 

 

If so, could you try adding no-reply@dropbox.com to your inbox in order to see if you can receive the email when attempting to sign in again?

 

Let me know more, and we'll take it from there!


Megan
Community Moderator @ Dropbox
dropbox.com/support


Heart Did this post help you? If so, give it a Like below to let us know.
:arrows_counterclockwise: Need help with something else? Ask me a question!
:pushpin: Find Tips & Tricks Discover more ways to use Dropbox here!
:arrows_counterclockwise: Interested in Community Groups? Click here to join!

Need more support?
Who's talking

Top contributors to this post

  • User avatar
    Megan Dropbox Staff
  • User avatar
    Ajay796 Explorer | Level 3
  • User avatar
    Jay Dropbox Staff
  • User avatar
    kdsnflk987 New member | Level 2
What do Dropbox user levels mean?