Good morning. By default, for the operation of connecting to a Dropbox account with a Dropbox Basic subcription, not only a password as a first authentication factor is required, but also an additional authentication, therefore a second, operating by sending a six-digit security code to the e-mail address attached to the account and the devices linked to it. I observe that there is an option to define as trusted the computer on which this connection operation takes place, in order to avoid receiving such a code.
Today, it's with great delay that I decide to investigate the underlying cause of this second factor of authentication being enabled, which brings me to the account settings. We see that the Two-step verification* option is disabled by default. As you may have already guessed, this leads me to wonder how a second authentication factor can then be involved in the login operation. I would appreciate an official justification for this practice. Greetings.
* Also known as two-factor authentication, 2FA.
