Dropbox has already received a lot of criticism from various people, including Edward Snowden, a former employee of the Central Intelligence Agency (CIA) and the National Security Agency (NSA), not take adequate steps to protect the data of its users.
See also : Project Ara: the deployment in Puerto Rico on hold
Dropbox has now announced it is using USB authentication key, in order to add an additional layer of security to its service cloud . The decision means that users on the storage service cloud can plug a USB stick into their laptop instead of manually entering a six-digit code sent by SMS or created through dedicated applications.
This new authentication option in two steps, that supports the standard Universal Second Factor (U2F) will allow users to have better security, while having the ability to enter a 6-digit code. They can now have a dedicated USB device that will serve as a key to connect to their accounts.
Better security but ...
Unlike other authentication, the U2F protocol does not require a network connection or battery to operate . It produces an authentication system in two steps which can be used by Chrome, to prevent phishing or malicious software attack. This key is also used by Google and WordPress, but it is only available for Dropbox.
The company mentioned in an article on his blog that even if you use two-step verification with your smartphone, some the more adventurous hackers can still use fake websites to lure Dropbox you to enter your password and your verification code. They can then use this information to access your account. In other words, it is important to remain extremely vigilant on websites you visit and what you are doing.
It has recently been proven by researchers that if hackers access to a user's authentication token, they can easily steal all the data they want, or they can inject a rançongiciel in an account. Once hacked, the only way to get rid of is the removal of the account.
See also : Project Ara: the deployment in Puerto Rico on hold
Dropbox has now announced it is using USB authentication key, in order to add an additional layer of security to its service cloud . The decision means that users on the storage service cloud can plug a USB stick into their laptop instead of manually entering a six-digit code sent by SMS or created through dedicated applications.
Better security but ...
Unlike other authentication, the U2F protocol does not require a network connection or battery to operate . It produces an authentication system in two steps which can be used by Chrome, to prevent phishing or malicious software attack. This key is also used by Google and WordPress, but it is only available for Dropbox.
The company mentioned in an article on his blog that even if you use two-step verification with your smartphone, some the more adventurous hackers can still use fake websites to lure Dropbox you to enter your password and your verification code. They can then use this information to access your account. In other words, it is important to remain extremely vigilant on websites you visit and what you are doing.
It has recently been proven by researchers that if hackers access to a user's authentication token, they can easily steal all the data they want, or they can inject a rançongiciel in an account. Once hacked, the only way to get rid of is the removal of the account.