Child Item

Received unrequested 6-digit verification code on my phone

Hi, so I was recently hacked (someone gaine access to all of my (unique) passwords) which I changed from a secure device promptly after.

A couple of hours ago I received 6-digit verification code on my phone which I did not request.

Does this neccessarily mean that my account password is compromised again? Or could this request to my phone have been produced by the attacker without him having to my new password? (E.g. by attempting to reset the password only with my known email address and a currently logged in phone? I have not been able to reproduce this).

I'm not so much worried about the failed login attempt itself, but the fact that all of my passwords could be compromised again.

Thanks in advance

Find more posts tagged with

Security

Account Access

Disagree

Accepted answers

Jay

The security code can be triggered by different events, so it could have been things other than a valid email and password combination.

To be certain for your own security, however, I'd recommend resetting thee Dropbox password.

All comments

Jay

Hi @kdsnflk987 , thanks for bringing this to our attention.

First of all, are you able to see the login attempt on this page on your account?

This will help me to assist further!

kdsnflk987

Hi Jay, thanks for the quick reply. All I can see are the currently logged in devices, which are all mine.

Jay

Is that the same for the browser sessions? Do the IP addresses match your own device?

kdsnflk987

Yes

kdsnflk987

If at all possible I'm really just looking to receive a definite yes or no answer on the question whether the authorization request today at 2:18AM UTC could have been triggered by any other event other than the correct entry of the email/password combination.

In that case I'd have to (again) reset over 100 other passwords as well, so it's an important question to me.

2FA was disabled at that time and I did not receive an email. Only the authorization request on my phone.

Jay

The security code can be triggered by different events, so it could have been things other than a valid email and password combination.

To be certain for your own security, however, I'd recommend resetting thee Dropbox password.

Ajay796

Not received 6 digit security code

Megan

Hey @Ajay796, thanks for posting here today!

Do you have access to the email address linked to the Dropbox account you're trying to access?

If so, could you try adding no-reply@dropbox.com to your inbox in order to see if you can receive the email when attempting to sign in again?

Let me know more, and we'll take it from there!