How to turn 2-factor authentication on and off

2-factor authentication (also known as multi-factor authentication, MFA, two-step verification, or 2FA) is a highly recommended security feature that helps protect your Dropbox account. By turning 2-factor authentication on, you add an extra layer of protection that helps keep your personal information and files safe from unauthorized access.

To use 2-factor authentication, you need a mobile device that can receive text messages, or run a compatible authenticator app.

Already use 2-factor authentication and locked out? Learn how to regain access to your account.

How to turn on 2-factor authentication

1. Log in to dropbox.com.
2. Click your avatar (profile picture or initials) in the bottom-left corner.
3. Click Settings.
4. Click the Security tab.
5. Toggle 2-factor authentication to On.
   • If you see Managed by single sign-on under the Security tab, your team admin has enabled single sign-on (SSO). This means you don’t have to use 2-factor authentication with Dropbox and can access your account by logging in to a central identity provider. Contact your admin to learn more.
6. Click Get started.
7. Re-enter your password. 
8. Choose if you want to receive your security code by text message or via an authenticator app, and follow the instructions for your choice below.

How to change my 2-factor authentication phone number

1. Log in to dropbox.com.
2. Click your avatar (profile picture or initials) in the bottom-left corner..
3. Click Settings.
4. Click the Security tab.
5. Click Edit next to your phone number, in the 2-factor authentication section. 
   • You'll be prompted to enter your password to continue.

How to add a backup method for 2-factor authentication

After enabling 2-factor authentication, we highly recommend you add a backup phone that can receive text messages as well. If you ever lose your primary phone, or can't use your authenticator app, you can send a security code to your backup phone number instead.

1. Log in to dropbox.com.
2. Click your avatar (profile picture or initials) in the bottom-left corner.
3. Click Settings.
4. Click the Security tab.
5. Under 2-factor authentication, click Add next to Backup method.
6. Enter your password.
7. Enter the phone number of your backup device.

How to use an emergency backup code for 2-factor authentication

When enabling 2-factor authentication, you'll receive 10 backup codes. Each eight-digit code can be used once to access your Dropbox account in case of emergency. 

How to find your backup codes

1. Log in to dropbox.com.
2. Click your avatar (profile picture or initials) in the bottom-left corner.
3. Click Settings.
4. Click the Security tab.
5. Click Show next to Recovery codes.
6. Enter your password.
7. Use or save the code that appears.

How to use a backup code

1. Log in to dropbox.com.
2. Click Having trouble getting a code?
3. Click Enter emergency backup code.
4. Enter one of your emergency backup codes.
5. Click Enter.

How to use a security key for 2-factor authentication

You can use a security key for 2-factor authentication, rather than a six-digit security code. A security key is a small USB, Bluetooth, or Near Field Communication (NFC) device that follows one of the open standards:

• FIDO Universal 2nd Factor (U2F)
• Web Authentication (WebAuthn), also known as FIDO2

Unlike SMS or mobile app verification, a security key doesn’t require a separate battery or network connection. Most importantly, security keys use authenticated communication to defend against phishing attacks.

How to set up a security key for your Dropbox account

1. Log in to dropbox.com.
2. Click your avatar (profile picture or initials) in the bottom-left corner.
3. Click Settings.
4. Click the Security tab.
5. Under 2-factor authentication, click Add next to Security keys. If you don't see this section, follow the "How to turn on 2-factor authentication" instructions above before proceeding.
6. Enter your password.
7. Insert your security key into a USB port, then click Begin setup.

Where can I use my security key?

Once you have a security key, it can be enabled for both your personal and work Dropbox accounts. It can also be used with other WebAuthn or U2F enabled services, such as Google apps.

Currently, security keys are only supported on select devices and browsers, so you must first set up 2-factor authentication for your Dropbox account and select to receive codes via SMS messages or a mobile app. This step ensures that you have a backup method, in case a device doesn't support your security key.

Dropbox only supports using a security key when logging in to dropbox.com on Chrome or Firefox web browsers. You can’t use a security key to log in to the Dropbox desktop or mobile apps. Don’t worry, you still have the option to use text or mobile app 2-factor authentication on devices and platforms that don’t support U2F or WebAuthn, or if you don't have your security key available.

How to turn off 2-factor authentication

You can turn off 2-factor authentication for your Dropbox account at any time. To do so:

1. Log in to dropbox.com.
2. Click your avatar (profile picture or initials) in the bottom-left corner. 
3. Click Settings.
4. Click the Security tab.
5. Toggle 2-factor authentication to Off.

How to reset a team member’s 2-factor authentication method

If you're a Dropbox team admin, you can reset a team member’s 2-factor authentication method. You may need to do this if they change their phone number or mobile device.

To reset a team member’s 2-factor authentication method:

1. Log in to dropbox.com with your admin credentials.
2. Click Admin console.
3. Click Members in the left sidebar.
4. Click the ☑ (more options) next to the team member who needs their 2-factor authentication method reset.
5. Select Reset two-factor authentication.
6. Click Reset.

Your team member will receive an email notification that their 2-factor authentication method has been reset.