Child Item

I want to review sign in attempts

Hello,

I received "one-time security code" from no-reply@dropbox.com 3 times yesterday. I didn't try to login anywhere using my password.I also don't have 2FA enabled.

From the previous posts I read on this topic it seems someone has stolen my dropbox password. This is a password that is unique and long specifically for dropbox and I'm not sure how someone could have found it.I haven't recently logged into dropbox using my password.

I'm trying to find out login attempts in the security tab however there are no logs for this. I'm currently a free plan user and can't open a ticket. Can you please inform me if there is a way for me to review log in attempts?

Right now even if I change the password they might figure it out again, so not sure what to do. I appreciate any help on this issue.

Find more posts tagged with

Security

Account Access

Disagree

Accepted answers

Walter

Hey @arana, sorry to jump in here, but I just wanted to mention that the email seems to be coming from an official Dropbox domain, so you might want to change your account's password.

Apart from that, there's not much we can do here as it's not possible to check the logs for the one time code that was sent or see which IP caused this in the first place.

I hope this helps to some extent.

All comments

Mark

There is no such log available I'm afraid.

All I can suggest doing is setting up 2FA and changing password to a secure one using something like 1Password etc.

Also consider trying the Security Checkup: https://help.dropbox.com/security/security-checkup

Jay

Hi @arana, you can see successful login attempts on your security page for browser logins, which will also include an approximate location based on the IP address.

Do you use any VPN software or proxy, which could be changing your location, or clearing the cache / using incognito mode on your browser?

arana

I checked the successful ones, I'm the only one there. If dropbox security doesn't have problems that email tells me someone has access to my dropbos password. I haven't yet changed it as I don't know how they have access to that password. I don't use VPN, or any proxy with my dropbox account. My account is set up in 2 computers, I was using 1 of them and the other one was being used by my wife but nothing related to dropbox. We were both browsing safe web sites. In any case neither of us used password at that time or try to log in somewhere. If the attempt was from the same IP, I could conclude it was some misconfiguration with the software maybe but I'm not sure.

Walter

Hey @arana, sorry to jump in here, but I just wanted to mention that the email seems to be coming from an official Dropbox domain, so you might want to change your account's password.

Apart from that, there's not much we can do here as it's not possible to check the logs for the one time code that was sent or see which IP caused this in the first place.

I hope this helps to some extent.

radenkovic

@arana please follow up on my thread:
https://www.dropboxforum.com/t5/Security-and-Permissions/Received-3-2FA-emails-in-one-minute-but-2FA-was-not-enabled-on/m-p/647264#M6587

Same thing happened to me, and it may be a bug/dropbox security issue. Thanks!