How to require two-factor authentication for Dropbox teams

Dropbox team admins can require all or some team members to use two-factor authentication. You can do this through the admin console or through your identity management provider if you use single sign-on (SSO). Each team member has to enable two-factor authentication on their own account. However, you can request that members enable this feature, and then ensure that it stays on once enabled.

How to require two-factor authentication for team member

1. Log in to dropbox.com with your admin credentials.
2. Click Admin console.
3. Click Settings.
4. Under Authentication, click 2-factor authentication.
5. Toggle the setting next to 2-factor authentication from Optional to Required.
6. Click Save changes.

How will required two-factor authentication affect my team?

Newly invited members will be required to enable two-factor authentication after accepting the invitation to join your team. 

Existing members will be required to enable two-factor authentication the next time they log in. Requiring two-factor authentication won't log your team member out of their devices or web sessions, and won't interrupt their workflow. Existing team members who try to connect a new computer or mobile device as their first log-in after two-factor authentication is enabled will be directed to the Dropbox website to log in (and set up two-factor authentication).

What will a team member see when setting up two-factor authentication?

When team members log in to Dropbox, they will see a Get Started prompt.

1. Team members can choose to receive verification codes via text message, or to use an authenticator app, and then click Send code.
2. Team members will next be required to verify that two-factor authentication is working— they will receive a text message to the phone number entered, or else need to enter the two-factor authentication code generated via the authenticator app.
3. Lastly, team members will receive an emergency backup code, which can be used if they ever lose their mobile phone.
   • Alternatively, team admins can reset two-factor authentication for team members as needed
4. Click Turn on 2-factor authentication.

How to add users to the exception list

If you choose to require two-factor authentication for your team, you can waive the requirement for individual team members by adding them to the exception list. To do so:

1. Log in to dropbox.com with your admin credentials.
2. Click Admin console.
3. Click Settings.
4. Under Authentication, click 2-factor authentication.
5. Next to Optional for specific members, click either No one added or Optional for [x] members.
6. Type the emails or names of users you would like to add.
7. Click Save changes.