If you get a password or email change notification but didn't reset it yourself

Updated Apr 25, 2025
person icon

The information in this article applies to all Dropbox users.

If you unexpectedly received a password or email change notification, first verify that the email really came from Dropbox. To be safe, don't click any links in the email—there's always a chance that the email is a fake, sent by phishers trying to access your Dropbox account.

Instead, go to dropbox.com and see if you can log in to your account using your original password. (You may need to log out first if you're already logged in.)

  • If you can log in, then your password was never changed, and you should ignore that (likely) fake email. Forward the entire email to abuse@dropbox.com and we'll investigate.
  • If you can't log in, then you should go to the Dropbox Forgot your password? page and try to reset your Dropbox password as soon as possible. (Don't use a link in the email or any other source to reset your password.)

What if the email address on my account was also changed?

If both your email address and password have been changed, you may need additional help from us. However, we can only give additional help if you follow these exact instructions:

  1. If you haven't yet done so, submit a ticket.
  2. If you submitted a ticket, and then arrived at this article via an automated email response from us, reply to that email.
highlighter icon

Note: Be sure to let us know that you've already tried each of the steps listed in this article

We'll then do our best to assist. However, please note that if you shared your Dropbox account with someone else, or you shared your email account with someone else (which would have enabled the other person to reset the password to the Dropbox account), we might not be able to take any action on your behalf.

What should I do if I suspect an unauthorized person accessed my Dropbox account?

If you suspect that an unauthorized person may have accessed your Dropbox account, take the following precautions as soon as possible:

  • Change your Dropbox password on dropbox.com. Be sure to use a strong password that you don't use for any other service.
  • Change the password to the email account you use for your Dropbox account.
  • Remotely log out of any old, duplicate, or unknown devices on your security page.

Also, consider setting up two-factor authentication, which adds an extra layer of security to your account even if your password is somehow compromised.

Was this article helpful?

Let us know how why it didn't help:

Thanks for letting us know!

Thanks for your feedback!

Related Articles

Accessing Dropbox from a new location

When you access Dropbox from a new location, you'll get a notification to confirm. Learn what to do if you suspect someone else has accessed your account.

View article

Dropbox Passwords breach monitoring

Dropbox Passwords breach monitoring notifies you if one of your linked accounts is compromised. Learn how to use and disable breach monitoring.

View article

Dropbox team accounts and Windows Information Protection

View article

How to protect your Dropbox account if it’s been compromised

There are several ways to protect your Dropbox account if you think it’s been compromised, from changing your password to remote wiping devices.

View article

Other ways to get help

Icon depicting two people
Community
Twitter Icon
X
Icon depicting a speech bubble
Contact support