We're making changes to the Community, so you may have received some notifications - thanks for your patience and welcome back. Learn more here.

Forum Discussion

Henri2's avatar
Henri2
Explorer | Level 4
6 years ago

Automatic log out when browser is closed

First of all, "Select category" does not have "security" - option which is related to this my topic. Dropbox has several ideological and practical security issues and if security is not even a category it tells much about the ideology. Anyhow I love to use Dropbox but this one major issue bugs me:

"Remember me" on login page does not do anything. Whether it is selected or not my browser (Chrome/Win7) remembers the last session and lets me or anyone using the same PC get in. Automatic Login happens even after several days of the last usage of Dropbox on the browser.  The only way around this issue is to remember to Log out, every time.

Dropbox is the only service I know which works like this and this is a very critical security issue. Even activated Two-Step-Authentication does not help and browser let anyone in. 

In my opinion, if the user is so concerned about the security that Two-Step-Authentication is activated, should "Remember me" be disabled always as default and automatic Logout should take place once the browser is closed. Or just let the user select the security level.

Dropbox is the awesome system for professional and cautious users alone as a single user but this and other security issues are reasons why I would not select or recommend it for a larger team ever.

 

 

Account Settings
Security
Web
  • Lusil's avatar
    Lusil
    6 years ago
     
    nancymjohnson wrote:

    So, the point of dropbox is so that I can access files from anywhere, change them, and get to them somewhere else, right?

    Yes, that is how syncing, one of the core Dropbox features, functions, in order to keep your files up-to-date across connected devices and the website. 
     
    However, when you unlink a device, it is no longer connected to your account, which in turn means that new changes applies to files won’t be shown on the device that you unlinked your account on. 
     
    nancymjohnson wrote:

    If I click on the icon, dropbox opens automatically.

    Yes, because the desktop app is running and is connected to your account. If you don’t want your desktop app to run, you can unlink your account from your computer. 
     
    Let me know if you’d like something to be further clarified and I'll make sure to get back to you as soon as possible. :slight_smile:
     
     
    [This thread is now closed by moderators due to inactivity. If you're experiencing a similar behavior or have a question, feel free to Ask for help from the Community here.]
  • Mark's avatar
    Mark
    Icon for Super User II rankSuper User II
    6 years ago

    Out of interest Henri2 do you have Dropbox installed on your device? If so that keeps you logged in.

    • Henri2's avatar
      Henri2
      Explorer | Level 4
      6 years ago

      Hi, I've seen this issue with three different computers. One of them does not have Dropbox installed.

  • Lusil's avatar
    Lusil
    Icon for Dropbox Staff rankDropbox Staff
    6 years ago
    Hi there, Henri2. 
     
    Initially, it sounds like your browser continues to pick up cookies. Could you try clearing your browser’s cache, as well as giving incognito a try? If you’re still experiencing this behavior though, could you please try logging in through another browser and let me know if you’re still encountering the same result?
     
    Furthermore, we recommend that you follow good security practices to protect your entire computer. For this reason, and if you’re sharing your device with someone else, I’d recommend creating another user profile on your computer for additional security. 
     
    If you’re still encountering some trouble with this, we’d have to take this to email, in which case, I can contact you to your email address that’s associated with your Forum profile. 
     
    Let me know how it goes!
    • nancymjohnson's avatar
      nancymjohnson
      New member | Level 2
      6 years ago

      I have the same issue.  My work computer was infected with ransomware, and they got into my dropbox account and infected all my files there, including sensitive information.  I have now changed my dropbox account to need a password and a code in order to get into it...the first time.  However, when I hit the icon on my computer (either at work or at home), dropbox automatically opens without asking for any confirmation.  How do I change it so that every time I open dropbox, it asks for the additional protections?

       
       
      • Lusil's avatar
        Lusil
        Icon for Dropbox Staff rankDropbox Staff
        6 years ago
        Hey there, nancymjohnson. 
         
        Initially, please note that if you’re referring to two-step verification, then enabling it means that Dropbox will require a 6 digit security code (in addition to your password) when you sign in to your account or link a new device. 
         
        Furthermore, please remember that by signing into your account through the desktop app, you link the device to your account. If you’d like for the device to stop being linked to your computer and to ensure that it’s not connected to your account, you can unlink your device. This way, the desktop app will ask you every time you want to sign back in for your credentials.
         
        However, please bear in mind that this means that files in your Dropbox folder will not be syncing and any changes you apply there or through other devices and the website will not be reflected. Moreover, even when you unlink the desktop app, your Dropbox folder will continue to exist on your device, but instead be just another folder without any syncing capabilities. 
         
        I hope this helped clarify a bit more on this. Let me know if you have any other questions. 
    • Henri2's avatar
      Henri2
      Explorer | Level 4
      6 years ago

      Lusil,

      How Dropbox should work in this specific case?

      I'm not reading this email linked to Dropbox. I had an idea to use the very random address as the username for additional login security. This was unnecessary though because Dropbox username is distributed for all I'm working with / share folders because the email address is publicly shown.

      • Lusil's avatar
        Lusil
        Icon for Dropbox Staff rankDropbox Staff
        6 years ago
        Hey again, Henri2. 
         
        It sounds like you’re referring to shared folders, is that right? If so, then please note that currently there isn’t a way to hide the members of the shared folder who have access to it, although I’d be more than happy to pass your comments along to the dev team. 
         
        If you have any other thoughts, or if I’ve misunderstood your concern, please let me know. Cheers!

About Settings and Preferences

The Dropbox Community is here to help if you have questions about your account settings and preferences. Learn and share advice with members.

Need more support

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!