If you unexpectedly received a password change notification, first verify that the email really came from Dropbox. To be safe, don't click any links in the email—there's always a chance that the email is a fake, sent by phishers trying to access your Dropbox account.
Instead, go to dropbox.com and see if you can sign in to your account using your original password. (You may need to sign out first if you're already signed in.)
- If you can sign in, then your password was never changed, and you should ignore that (likely) fake email. Forward the entire email to email@example.com and we'll investigate.
- If you can't sign in, then you should go to the Dropbox Forgot your password? page and try to reset your Dropbox password as soon as possible. (Don't use a link in the email or any other source to reset your password.)
What if the email address on my account was also changed?
If both your email address and password have been changed, you may need additional help from us. However, we can only give additional help if you follow these exact instructions:
- If you haven't yet done so, submit a ticket.
- If you submitted a ticket, and then arrived at this article via an automated email response from us, reply to that email.
- Note: Be sure to let us know that you've already tried each of the steps listed in this article
We'll then do our best to assist. However, please note that if you shared your Dropbox account with someone else, or you shared your email account with someone else (which would have enabled the other person to reset the password to the Dropbox account), we might not be able to take any action on your behalf.
What should I do if I suspect an unauthorized person accessed my Dropbox account?
If you suspect that an unauthorized person may have accessed your Dropbox account, take the following precautions as soon as possible:
- Change your Dropbox password on dropbox.com. Be sure to use a strong password that you don't use for any other service.
- Change the password to the email account you use for your Dropbox account.
- Unlink any old, duplicate, or unknown devices on your security page.
Also, consider setting up two-step verification, which adds an extra layer of security to your account even if your password is somehow compromised.