Dropbox Now Offers Two-Step Authentication
Summary: Dropbox began offering two-step authentication less than a month after the compromise of a Dropbox employee's account exposed many user email addresses. Users enable it under the Security tab, receiving codes by text message or through TOTP apps such as Google Authenticator, Amazon AWS MFA, and Authenticator for Windows Phone 7, and must run Dropbox client version 1.4.17 on Windows or Mac to reach files through the desktop software afterward.
Why it matters: The article notes that a Cloudflare executive's Gmail two-step verification was defeated when attackers convinced an AT&T customer service representative to forward his text messages to another account, which is the exposure that comes with the text-message option Dropbox now offers.
Read the original at Krebs on Security ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026