How to set up 2FA on Dropbox
Checked against Dropbox's own help on 10 October 2026. Menus change, so follow the nearest label if yours differs.
Short answer
Open Dropbox's security settings (Avatar, Settings, Security tab), choose the authenticator app option, and scan the QR code Dropbox shows with KeyNesta (or enter the setup key by hand). Type the six-digit code KeyNesta shows back into Dropbox to finish, and save the recovery material Dropbox gives you before you close the page.
Before you start
Have KeyNesta open and unlocked before Dropbox shows the QR code, so the code is ready the moment it appears. KeyNesta needs no account to do this. It stores authenticator-app codes only: it does not do passkeys or hardware security keys, and where Dropbox offers those you set them up in Dropbox directly.
Steps
- Sign in at dropbox.com, click your avatar, then Settings.
- Open the Security tab and switch 2-factor authentication on. (If it says "Managed by single sign-on", your admin controls it.)
- Enter your password, then select Use an authenticator app.
- Dropbox shows a QR code and the secret key. Leave it on screen.
- Add it to KeyNesta. Open the KeyNesta web app (or the app on your phone once it is released), unlock your vault, choose Scan QR and point the camera at the code on screen. If you cannot scan, use Import QR image, or choose Add entry to paste the setup key.
- Click Next, enter the six-digit code from KeyNesta, and click Next again.
- Optionally add a secondary phone number, then save your recovery codes, tick the box confirming you stored them, and click Finish and Done.
| Dropbox | What to know |
|---|---|
| Where to start | Avatar, Settings, Security tab |
| Setup key as text | Add a new account in KeyNesta by hand and enter the secret key Dropbox shows beside the QR code. |
| Recovery material | Dropbox gives you 10 eight-digit recovery codes, each usable once. |
| Source | Dropbox Help: Enable two-step verification |
Backup and recovery for Dropbox
Dropbox gives you 10 eight-digit recovery codes, each usable once. View them later under Settings, Security, Show beside Recovery codes (password required). Turning 2FA off and on again resets them, so save the new set each time.
Save whatever Dropbox gives you somewhere that is not the phone holding your codes. Where to store your 2FA backup codes compares the options, and 2FA backup and sync covers backing up the KeyNesta vault itself.
Source
Menu paths on this page come from Dropbox Help: Enable two-step verification, read on 10 October 2026. KeyNesta is not affiliated with Dropbox.
Frequently asked questions
Can I use KeyNesta as the authenticator app for Dropbox?
Yes. Dropbox asks for a standard time-based code, and KeyNesta reads the same QR code or setup key and generates that code on your device, offline. Dropbox does not learn which app you chose. KeyNesta holds authenticator-app codes only; it has no passkey or hardware security key support. How to add the code is in How do I add a 2FA code to KeyNesta?
What happens to my Dropbox 2FA if I lose my phone?
On the sign-in screen click "Having trouble getting a code?" and choose the emergency backup code option. If your KeyNesta vault is synced or you made an encrypted backup, you can restore the codes on another device; the lost phone guide covers the order to do things in.
How do I add Dropbox to KeyNesta if I cannot scan the QR code?
Add a new account in KeyNesta by hand and enter the secret key Dropbox shows beside the QR code. In KeyNesta you can also upload a screenshot with Import QR image, paste an otpauth:// link, or add the entry by hand with the secret. Delete any screenshot of the QR afterwards: it works like a password.
Can I use the same Dropbox code on two devices?
Codes come from a shared secret, so any app that holds the secret shows the same codes. The tidy way is KeyNesta's optional end-to-end encrypted sync, which carries the vault to a second device. The alternative is to add the secret to a second app while the QR code is still on screen; once Dropbox stops showing it, you cannot get it back without re-enrolling.
Do my Dropbox recovery codes change when I switch 2FA off and on?
Yes. Dropbox says turning two-step verification on or off resets the recovery codes, so the old set stops working. Re-enrolling a new authenticator is one of those moments: save the fresh codes straight away.
Why is the Dropbox 2-factor authentication switch missing for me?
Dropbox shows "Managed by single sign-on" when your admin controls the setting. In that case you cannot change it yourself, and the authenticator is handled by the organisation's identity provider.
Try KeyNesta free. The web app needs no sign-up.
Open the web app All platforms