Want to know more about Dash? Check out how Amy uses Dropbox and Dash to make her day easier here!
Forum Discussion
Solved
Lost Access due to 2FA and old email with no access
I've been using a password app with a dropbox sync feature. For years, I've been using an old email as the username because it was just the username to me. While I had connected with a PC when I was first doing password syncing, eventually I just went all-mobile ... and somewhere in there the move to mandated MFA seems to have gone into effect. I only noticed this due to a recent phone upgrade. After reestablishing the paid feature in the app to do the dropbox sync - I couldn't connect because it locks me into needing an emailed code after I authenticate.
I don't have that email (old job), and never setup a phone or backup codes as far as I know since I was not using the account that way. I know the password, and can change the email once in but cannot get in. There's not a lot of data in my account - how I do get to it; or ensure that the account/data is destroyed? (I found a "work around" since I still had two devices with active connections through the app and could copy them off).
Thanks for any help or guidance.
Thanks Jay, I'll try that.
The apparent issue seems to perhaps be a cache feature in the app used (from the restored app, that wasn't visible until any valid dropbox id was authenticated).
10 Replies
Replies have been turned off for this discussion
...and I appear to have noticed a security issue. A very curious occurrence indeed.
- Jay
Dropbox Community Moderator
Hi KBro67, thanks for messaging the Community.
I’d recommend getting in contact with our support team directly to look into this matter in more detail.
You can do this by opening an incognito/private browsing window, while not signed into your account, and accessing this link.
From there you should be able to contact support. Make sure to pick an email to which you can receive and send emails from.Keep me updated with any progress.
Thanks Jay, I'll try that.
The apparent issue seems to perhaps be a cache feature in the app used (from the restored app, that wasn't visible until any valid dropbox id was authenticated).
- Rich
Super User II
KBro67 wrote:
... and somewhere in there the move to mandated MFA seems to have gone into effect. I only noticed this due to a recent phone upgrade.
That's why you're being asked for a one-time security code; Dropbox doesn't recognize your device. Two-step verification wasn't enabled on to your account (unless you enabled it). Dropbox simply sees a new device being added to your account and to verify that it's really you, it's asking you to provide a one-time security code.
Rich,
I haven't enabled it. Haven't been on any thick client since circa 2007, so I'm unsure how that would have happened - and if I have a phone on it, those numbers haven't changed since that time -- but nothing is giving an option to send a code there: just that it has been emailed and sent to any enrolled devices (does that mean text to mobile or call to other numbers listed?) It doesn't seem so because mobile has nothing coming in nor does the voice line. I have one of the tickets open as per Jay, hopefully they can help more and review the settings -- history, etc. While I get the fraud concern, someone there could see details of logins attempted from the same location on thick/web client where the sync logins are coming from......location is an other factor -- how do I enable that?
- Mark
Hi KBro67
As Rich said you havent enabled it. This is not 2FA. You cannot set this up on your account it is a security tool Dropbox has set up on ALL accounts. It is not possible to turn this off and on.
The only people who can possibly help are via the ticket. Note, however, that often you cannot regain access if you have lost access to your email.
Thanks, Mark.
I get that...it is just unfortunate that if there is no other method to verify the account (no mobile had been set, etc.) that some leeway in permitting a login via the valid credentials should be permitted to update the account so that 2FA could be permitted. As you note, they put it on all accounts, but also put which other factor(s) are supported. I'll see if someone from Jay's link can help or not. Here's hoping for the best!HI @Megan,
I don't see a way to PM, so I'm presuming just paste it here. It is case 233-66-108 and I now see an email on it that I need to reply to. I'm going to do that now and see what the next step is.
Thanks.
