You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
bhagmeister
2 years agoExplorer | Level 3
How to select Hardware Token (key) as primary 2FA method
Just registered two Yubikeys. However, when logging back in to the account, the SMS method is used. How does one select instead the hardware token? If not, how do I remove my mobile number from my ac...
bhagmeister
Explorer | Level 3
thanks for the reply. I’ve logged out of the (web) app as well as mobile app. The options presented for primary method is either SMS or Mobile Authentication app - there is no option to promote hardware token(s) as primary method.
Nancy
2 years agoDropbox Staff
Hey bhagmeister!
Does the key you wish to use as a 2FA method follow these standards; ‘FIDO Universal 2nd Factor (U2F)' or 'Web Authentication (WebAuthn)', also known as 'FIDO2’?
Can you send me a screenshot of what you see when visiting your Security page, under the Two-step verification section?
- bhagmeister2 years agoExplorer | Level 3
Hmmm. I’ve tried again on both iPhone and iPad to log back into the web app (dropbox.com) and…. both properly asked for my hardware key. Go figure. That said, here are the screenshots in question (see below). You’ll see the choice of only SMS or Mobile App.
- bhagmeister2 years agoExplorer | Level 3
FYI: i’m using (2) Yubi 5C NFC keys
- Hannah2 years agoDropbox Staff
Thanks for the screenshots, bhagmeister.
Does this mean that your issue is now resolved, despite what the screenshots show?
Are you required to present your YubiKeys when trying to login, say, from a private browsing window?
- weka8 months agoNew member | Level 2
Hi, I have to agree with the previous speaker. The hardware key is not offered in the security settings under "preferred method". It would be nice if you could change this. DropBox will only be really secure when I can deactivate all insecure methods. An attacker tests until he finds something to get in. And somehow we all don't want that. For this reason: "preferred" e.g. YubiKey and "backup" sms.
About Security and Permissions
Start a discussion in the Dropbox Community forum to get help with your account security and permissions. Find support from Community members.
Need more support
If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.
For more info on available support options for your Dropbox plan, see this article.
If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!