Before you enable SSO, you first need to go to your identity provider and follow their configuration instructions. Then, go to your admin console, select Settings, and select Single sign-on under Authentication settings. Select whether you want SSO to be optional or required, then follow the instructions.

What can I do to make my team’s account even more secure?

Q: How do I protect my Dropbox account?

There are plenty of ways you can further protect your account. In addition to changing passwords and setting up two-step verification, you can unlink devices, manage web sessions and apps, and you can remote wipe Dropbox from other devices.

Q: How do I recover deleted files?

Dropbox makes recovering deleted files easy. Just sign in to the Dropbox website (dropbox.com) and select Deleted files. Find the file you want to recover, select its name, and click Restore.

We know how important security is to you and your company. That’s why Dropbox offers plenty of features to help keep your team’s Dropbox account safe.

12 minute read

Customize security to your team's needs

Dropbox is designed with safety features that keep your organization’s data safe. If you’re a Dropbox admin, you can add and customize these features to fit your team’s security needs.

Built-in security

With so much work taking place online, we can understand how security is a top priority. That’s why Dropbox works behind the scenes to protect your data, intellectual property, and IP address.

Here are some of the security features Dropbox team accounts offer:

Learn more about these and other security features.

Protect your data

Interested in how you can keep your organization's data safe and secure your team’s activity?

User-managed sharing

Enterprise Data Protection (EDP) integration

Fight ransomware

Getting some extra help

As an admin, you might use other tools and software to help create a more robust and secure environment for your team.

If you already use third-party security software or apps, it may be one of the many security partners available for integration with Dropbox.

Want to see if your favorite app or software is included? Check out our app integration page.

Super secure log-in

We know that keeping your data safe is critical, which is why we have two options for making sure log-ins are secure.

Check out both options, and choose the best fit for your team. Keep in mind that these options are designed to be used separately, not combined.

Two-step verification

One great optional security measure is two-step verification. When it’s enabled, Dropbox requires a six-digit security code or key in addition to a password at log in. This gives all of your users an added layer of security.

Single sign-on (SSO)

Single sign-on (SSO) allows users to access Dropbox team accounts by logging into a central identity provider. If your organization uses one, you can put the identity provider you already trust in charge of authentication.

It makes things easier and more secure for everyone, with one less unique password to remember.

If you set up SSO, some Dropbox security features (like two-step verification or self-serve password resets), will no longer be in effect.

This is because your identity provider is now handling all aspects of authentication, letting you add more layers of security.

Account security tools for Dropbox Enterprise teams

If you’re the admin of an Enterprise account, Dropbox offers even more ways to keep all your data and your teams secure. Get to know some of the Enterprise-only security features that you can enable.

Remote wipe

If someone loses a device or leaves the company, admins can delete files and folders from mobile devices and computers once they come back online.

To remote wipe files from a team member’s device:

Log in to dropbox.com with your admin credentials.
Click Admin console in the left sidebar.
Click Members.
Click the name of the member whose files you want to remote wipe.
Under Devices, click the X next to the device you'd like to remove.
Check Delete files from [Organization name] Dropbox the next time this computer comes online.
Click Sign out.

Having trouble with remote wipe?
Check our guide to remote wiping devices for more help. You will also learn how to view the remote wipe status of team member files, or remove access to Dropbox Paper files.

Enterprise mobility management (EMM)

To combat the increased risks of security breaches posed by employees using their own smartphones, laptops, tablets, and more to access company systems, companies often adopt an EMM framework.

EMM refers to the systems that companies use—including software, people, and processes—to manage their data when employees use it across a wide range of mobile devices. With EMM, team admins can restrict mobile app usage to managed devices, gain visibility into app usage, and remote wipe lost or stolen devices.

To use this feature, admins need to engage with a third-party EMM provider to manage mobile device access at their company.

To turn on this feature in Dropbox:

Log in to dropbox.com with your admin credentials.
Click Admin console in the left sidebar.
Click Settings.
Under Security, click Enterprise Mobility Management (EMM).

Get started with EMM

If you have an EMM set up, you can start creating usage reports to see which team members have active sessions with the Dropbox EMM or regular mobile apps.

To create a usage report:

Log in to dropbox.com with your admin credentials.
Click Admin console in the left sidebar.
Click Settings.
Under Security, click Enterprise Mobility Management (EMM).
Next to Usage report, click Create report.

Network control

Network control allows admins of Enterprise teams to manage which Dropbox accounts can be used on the corporate network. This is particularly useful when it comes to protecting your organization’s data.

Using your proxy or CASB vendor, you can specify which team member accounts can log in and sync via dropbox.com or the Dropbox desktop app.

For example, if your organization has a policy related to conducting personal activities during work, network control lets you block access to personal Dropbox accounts.

Web session control

In your admin console's Settings, under Security, you can also find Web session control. Turning this feature on allows admins to:

T erminate active browser sessions
Unlink connected computers and mobile devices
Revoke third-party app access for any team members via the admin console
Set how long members can stay logged in to Dropbox

Managing web sessions can be particularly helpful if your company needs to limit web sessions for compliance. If users attempt to stay signed in longer than the set session, they’ll be automatically signed out.

Remote wipe

If someone loses a device or leaves the company, admins can delete files and folders from mobile devices and computers once they come back online.

To remote wipe files from a team member’s device:

Log in to dropbox.com with your admin credentials.
Click Admin console in the left sidebar.
Click Members.
Click the name of the member whose files you want to remote wipe.
Under Devices, click the X next to the device you'd like to remove.
Check Delete files from [Organization name] Dropbox the next time this computer comes online.
Click Sign out.

Enterprise mobility management (EMM)

To combat the increased risks of security breaches posed by employees using their own smartphones, laptops, tablets, and more to access company systems, companies often adopt an EMM framework.

To use this feature, admins need to engage with a third-party EMM provider to manage mobile device access at their company.

To turn on this feature in Dropbox:

Log in to dropbox.com with your admin credentials.
Click Admin console in the left sidebar.
Click Settings.
Under Security, click Enterprise Mobility Management (EMM).

Get started with EMM

If you have an EMM set up, you can start creating usage reports to see which team members have active sessions with the Dropbox EMM or regular mobile apps.

To create a usage report:

Log in to dropbox.com with your admin credentials.
Click Admin console in the left sidebar.
Click Settings.
Under Security, click Enterprise Mobility Management (EMM).
Next to Usage report, click Create report.

Network control

Using your proxy or CASB vendor, you can specify which team member accounts can log in and sync via dropbox.com or the Dropbox desktop app.

For example, if your organization has a policy related to conducting personal activities during work, network control lets you block access to personal Dropbox accounts.

Web session control

In your admin console's Settings, under Security, you can also find Web session control. Turning this feature on allows admins to:

T erminate active browser sessions
Unlink connected computers and mobile devices
Revoke third-party app access for any team members via the admin console
Set how long members can stay logged in to Dropbox

Remote wipe

If someone loses a device or leaves the company, admins can delete files and folders from mobile devices and computers once they come back online.

To remote wipe files from a team member’s device:

Log in to dropbox.com with your admin credentials.
Click Admin console in the left sidebar.
Click Members.
Click the name of the member whose files you want to remote wipe.
Under Devices, click the X next to the device you'd like to remove.
Check Delete files from [Organization name] Dropbox the next time this computer comes online.
Click Sign out.

Setting global permissions

Imagine that as the team’s admin, you’ve decided you want to block the sharing of files and folders outside of your team. Watch how to set global permissions.

Personal accounts stay personal

If any of your team members have linked their personal and work accounts, you won’t be able to see files or folders in their personal accounts, even though you’re the team admin.

So, if your team comes to you wondering if you’ve seen their personal accounts, you can reassure them you only have visibility and control over Dropbox team accounts.

Adjusting your security settings

Now that you know about the security settings you can put in place, try adjusting your own settings now.

Start at the admin console

As always, start at the admin console, then click Settings and scroll down to Security.

Common questions about securing your Dropbox team account

Got a question about how to secure your team’s account? We’ve likely got an answer. If you have a question that’s not listed here, check our help center for more answers.

What can I do to make my team’s account even more secure?

We know how important security is to you and your company. That’s why Dropbox offers plenty of features to help keep your team’s Dropbox account safe.

Customize security to your team's needs

Built-in security

Protect your data

User-managed sharing

Enterprise Data Protection (EDP) integration

Fight ransomware

Getting some extra help

Super secure log-in

Two-step verification

Single sign-on (SSO)

Account security tools for Dropbox Enterprise teams

Enterprise mobility management (EMM)

Setting global permissions

Personal accounts stay personal

Adjusting your security settings

Start at the admin console

Common questions about securing your Dropbox team account

How do I set up SSO?

How do I protect my Dropbox account?

How do I recover deleted files?

Continue learning about Dropbox security settings with a live instructor, and join the Dropbox Community to share resources with others.