Last night I posted this tweet about a TechCrunch.com article on several compromised Dropbox accounts.
[Two-factor auth is overdue -BW] Dropbox Reports User Accounts Were Hijacked, Adds New Security Features http://t.co/6vRJCT8E via @zite
— Bill Winterberg, CFP®️ (@BillWinterberg) August 1, 2012
Unlike an issue last summer (see Bug Affects Dropbox Security: What Advisers Need To Know), you need to know that Dropbox’s security was not compromised.
Username and password credentials were stolen from a third-party website, which were then used to log in to associated Dropbox accounts.
In response, Dropbox said in a blog post that it will add new security features in the coming weeks, with two-factor authentication being the most noteworthy (see Boost your online security with two-factor authentication).
Events like this should be a lesson to you, even if you’re not a Dropbox user. Remember to follow good security practices to keep your account credentials safe, such as:
- Avoid using the same username and password for multiple websites/accounts. Make each password unique for each account.
- Avoid using unfamiliar or shared computers, as keystroke logging programs or other trojans may be installed without your knowledge.
- Verify website addresses before typing in your login credentials. Look for the https:// address prefix and make sure you’re not redirected to a phishing website (see Cloud computing for financial advisers: How to stay safe)
In a few weeks, Dropbox should be rolling out the new security features. When they appear for your account, be sure to activate and use two-factor authentication. It’s one additional layer of protection you can add to better protect all the information you keep in your Dropbox account.







