In early 2021, Box added support for time-based one-time passwords (TOTP) as a second factor for authentication.
If users have a 2FA device/app requirement and they do not have access to their 2FA device/app, they will not be able to login to Box. To ensure frictionless security and help with seamless account access in these scenarios, customers will now be required to provide a backup phone number when they register for TOTP.