How to protect your Dropbox account if it’s been compromised

Updated Jan 15, 2024

The information in this article applies to all Dropbox users, unless otherwise stated.

There are several things you can do to protect your Dropbox account. If your computer was lost or stolen, or you're worried about the security of your data, here are some things you can do if your account is compromised. 

Change your password

You can change your password on the account settings page of your Dropbox account. Be sure to use a strong password that you don't use for any other service.

Learn more about choosing a strong password.

Set up two-step verification

Two-step verification is a highly effective way to protect your account from unauthorized access. When you log in to Dropbox, you'll be required to enter the code sent to your phone or a mobile authenticator app.

Learn how to set up two-step verification.

Look up a device's last known IP address

A computer's or mobile device's last known IP address is recorded when Dropbox connects to the internet on that device. The IP address can be used to identify the approximate geographical location where the device connected through an internet service provider.

You can view this information on the Security tab in your account settings. Roll your mouse over the "i" icon to see the last IP address that was recorded. We currently show the country of the last known IP address, but you can use any IP address lookup service for more detailed information.

Remotely log out of devices, web sessions, and apps

You can log out of devices, web sessions, and apps remotely. This will help prevent unauthorized changes to your account.

  • By logging out of a computer or mobile device, you'll stop recording any new IP addresses from that device, and you'll also turn off syncing to and from that device
  • If you're logged in to Dropbox through a web browser, logging out of a web session will log you out and require your password to log in again
  • If a third-party app is linked to your account, logging out of the app means you can no longer use the app access your Dropbox account. To log into the app again, you’ll be required to re-enter your password.

Learn how to log out of devices, web sessions, and apps remotely

Remotely delete Dropbox files from a device

If you’re on a paid Dropbox plan, you can remotely delete Dropbox files from a device when you log out of a device remotely.

Learn how to remote wipe Dropbox files from a device

Dropbox team admins and team members

Dropbox team admins can log in to the accounts of team members using the Log in as user feature to do the following:

  • View a team member's folder structure
  • Share files and folders with others
  • View, open, and download files
  • If you're a Dropbox team member who’s concerned your account has been compromised, contact your team admin for assistance.

Learn how to find your team admin.

Was this article helpful?

Thanks for your feedback!

Other ways to get help