If you use an authenticator app to receive your verification codes, please add primary and secondary backup phone numbers. Any app that supports the Time-based One-Time Password (TOTP) protocol should work, including: Most authenticator apps can generate security codes even when cellular/data service is not available, which can be useful when traveling or where coverage is unreliable. The authenticator app you choose will need to generate a unique time-sensitive security code. If you choose to receive your security codes through an authenticator app, you’ll first need to download one. A text message containing a security code will be sent to your phone each time you sign in to Dropbox.
If you choose to receive your security codes by text message, you need a phone capable of receiving text messages (carrier rates may apply).
This means you might not be able to use two-step verification with Dropbox.