How to protect your Dropbox account if it’s been compromised

There are several things you can do to protect your Dropbox account. If your computer was lost or stolen, or you're worried about the security of your data, here are some things you can do if your account is compromised. 

Change your password

You can change your password on the account settings page of your Dropbox account. Be sure to use a strong password that you don't use for any other service.

Learn more about choosing a strong password.

Set up two-step verification

Two-step verification is a highly effective way to protect your account from unauthorized access. When you sign in to Dropbox, you'll be required to enter the code sent to your phone or a mobile authenticator app.

Learn how to set up two-step verification.

Look up a device's last known IP address

A computer's or mobile device's last known IP address is recorded when Dropbox connects to the internet on that device. The IP address can be used to identify the approximate geographical location where the device connected through an internet service provider.

You can view this information on the Security tab in your account settings. Roll your mouse over the "i" icon to see the last IP address that was recorded. We currently show the country of the last known IP address, but you can use any IP address lookup service for more detailed information.

Remotely sign out of devices, web sessions, and apps

You can sign out of devices, web sessions, and apps remotely. This will help prevent unauthorized changes to your account.

• By signing out of a computer or mobile device, you'll stop recording any new IP addresses from that device, and you'll also turn off syncing to and from that device
• If you're signed in to Dropbox through a web browser, signing out of a web session will sign you out and require your password to sign in again
• If a third-party app is linked to your account, signing out of the app means you can no longer use the app access your Dropbox account. To sign into the app again, you’ll be required to re-enter your password.

Learn how to sign out of devices, web sessions, and apps remotely.

Remotely delete Dropbox files from a device

If you’re a Dropbox user on the Plus, Family, Professional, or Business plans, you can remotely delete Dropbox files from a device when you sign out of a device remotely.

Learn how to remote wipe Dropbox files from a device.

Dropbox Business team admins and team members

Dropbox Business team admins can sign in to the accounts of team members using the Sign in as user feature to do the following:

• View a team member's folder structure
• Share files and folders with others
• View, open, and download files
• If you're a Dropbox Business team member who’s concerned your account has been compromised, contact your team admin for assistance.

Learn how to find your team admin