How to protect your Dropbox account if it’s been compromised
The information in this article applies to all Dropbox users, unless otherwise stated.
Change your password
You can change your password on the account settings page of your Dropbox account. Be sure to use a strong password that you don't use for any other service.
Learn more about choosing a strong password.
Set up two-step verification
Two-step verification is a highly effective way to protect your account from unauthorized access. When you log in to Dropbox, you'll be required to enter the code sent to your phone or a mobile authenticator app.
Learn how to set up two-step verification.
Look up a device's last known IP address
A computer's or mobile device's last known IP address is recorded when Dropbox connects to the internet on that device. The IP address can be used to identify the approximate geographical location where the device connected through an internet service provider.
You can view this information on the Security tab in your account settings. Roll your mouse over the "i" icon to see the last IP address that was recorded. We currently show the country of the last known IP address, but you can use any IP address lookup service for more detailed information.
Remotely log out of devices, web sessions, and apps
You can log out of devices, web sessions, and apps remotely. This will help prevent unauthorized changes to your account.
- By logging out of a computer or mobile device, you'll stop recording any new IP addresses from that device, and you'll also turn off syncing to and from that device
- If you're logged in to Dropbox through a web browser, logging out of a web session will log you out and require your password to log in again
- If a third-party app is linked to your account, logging out of the app means you can no longer use the app access your Dropbox account. To log into the app again, you’ll be required to re-enter your password.
Learn how to log out of devices, web sessions, and apps remotely.
Remotely delete Dropbox files from a device
If you’re on a paid Dropbox plan, you can remotely delete Dropbox files from a device when you log out of a device remotely.
Learn how to remote wipe Dropbox files from a device.
Dropbox team admins and team members
Dropbox team admins can log in to the accounts of team members using the Log in as user feature to do the following:
- View a team member's folder structure
- Share files and folders with others
- View, open, and download files
- If you're a Dropbox team member who’s concerned your account has been compromised, contact your team admin for assistance.