Dropbox has announced that they have added Universal 2nd Factor (U2F) security keys as an additional method for two-step verification, giving you stronger authentication protection.
Security keys are an easy way to use two-step verification when signing in to dropbox.com. After typing in your password, just insert your key into a USB port when you’re prompted, instead of typing in a six-digit code.
Security keys provide stronger defense against credential theft attacks like phishing. Even if you’re using two-step verification with your phone, some sophisticated attackers can still use fake Dropbox websites to lure you into entering your password and verification code. They can then use this information to access your account.
Security keys are designed to protect against these types of attacks. By using cryptographic communication, they will only work when you’re signing in to the legitimate Dropbox website.
To use it, you’ll need a security key that follows an open standard called “FIDO Universal 2nd Factor (U2F)†from the FIDO Alliance. This U2F key can then be set up with your Dropbox account and any other U2F-enabled services, such as Google.
Once you have a key, go to the Security tab in your Dropbox account settings and click Add next to Security keys.
Currently, U2F is only supported for dropbox.com using the Chrome web browser.
