How to protect your Dropbox account if it’s been compromised

There are several things you can do to protect your Dropbox account. If your computer was lost or stolen, or you're worried about the security of your data, here are some things you can do if your account is compromised. 

Sections in this article:

Change your password

You can change your password on the account settings page of your Dropbox account. Be sure to use a strong password that you don't use for any other service.

Learn more about choosing a strong password.

Set up two-step verification

Two-step verification is a highly effective way to protect your account from unauthorized access. When you sign in to Dropbox, you'll be required to enter the code sent to your phone or a mobile authenticator app.

Learn how to set up two-step verification.

Look up a device's last known IP address

A computer's or mobile device's last known IP address is recorded when Dropbox connects to the internet on that device. The IP address can be used to identify the approximate geographical location where the device connected through an internet service provider.

You can view this information on the Security tab in your account settings. Roll your mouse over the "i" icon to see the last IP address that was recorded. We currently show the country of the last known IP address, but you can use any IP address lookup service for more detailed information.

Unlink devices, web sessions, and apps

You can unlink devices, web sessions, and apps from the Security tab by clicking the corresponding X. This will help prevent unauthorized changes to your account.

  • By unlinking a computer or mobile device, you'll stop recording any new IP addresses from that device, and you'll also turn off syncing to and from that device
  • If you're signed in to Dropbox through a web browser, unlinking a web session will sign you out and require your password to sign in again
  • If a third-party app is linked to your account, unlinking the app means you can no longer use the app access your Dropbox account. To relink the app, you’ll be required to re-enter your password.

Remote wipe the Dropbox folder from a device

If you're a Dropbox PlusDropbox Professional, or Dropbox Business user, you can use remote wipe to delete the Dropbox folder from a device when you unlink it.

Learn about how to use remote wipe.

Dropbox Business team admins and team members

Dropbox Business team admins can sign in to the accounts of team members using the Sign in as user feature to do the following:

  • View a team member's folder structure
  • Share files and folders with others
  • View, open, and download files
  • If you're a Dropbox Business team member who’s concerned your account has been compromised, contact your team admin for assistance.

Learn how to find your team admin

How helpful was this article?

We’re sorry to hear that.
Let us know how we can improve:

Thanks for your feedback!
Let us know how this article helped:

Thanks for your feedback!