To help protect our customers and their most critical data, we're adding an extra layer of verification when logging in on an unrecognized device. This feature will help mitigate one of the most common ways attackers gain unauthorized access to enterprise accounts, by leveraging compromised credentials.
Box has begun rolling out new verification for users attempting to access Box from an unrecognized device, a one-time prompt asking the user to verify their identity before gaining access. This control is designed to catch bad actors who may have obtained valid credentials and are trying to use them from their own devices, stopping unauthorized access before it starts.
No action is required on your part. This feature will be enabled automatically across all Box organizations. If you have questions, reach out to your account team or contact Box Support.