How email verification works
When you open a link that requires verification, Box sends a one-time passcode (OTP) to your email address. You enter that code to prove the email address is yours, and then Box opens the content. To access the link:- Open the shared link. Box displays the Verify your email address page.
- Enter your email address and select Next. Box sends a 6-digit code from
noreply@box.com. - Open the email and copy the 6-digit code. The code is valid for 10 minutes.
- On the Enter One-Time Passcode page, enter the code and select Verify.
- If your email address is authorized for the link, Box opens the content.
If you’re already signed in to Box, including on the Box mobile apps or Box Drive, you usually don’t see a passcode prompt. Box recognizes your identity automatically and either opens the content or, if the link is restricted to specific people, lets you know that your account isn’t authorized.
After you verify
- Your verification stays valid for one hour. During that hour, you don’t need to verify again, and the same verified email address works across any Box links you’re authorized to open. You can move between shared files without entering a new code each time.
- If you use more than one email address, you can verify up to 5 addresses in the same session.
- After the hour is up, Box asks you to verify again the next time you open a protected link.
Troubleshooting
I didn’t receive the code
- Check your spam or junk folder for a message from
noreply@box.com. - Make sure your email filters don’t block
noreply@box.com. Box uses the same sender for sign-in security codes, so it’s often already allowed. If you use a company email system, your IT team can confirm that the address isn’t filtered. - Confirm that you entered your email address correctly, then select Resend code.
- You can request a new code once per minute, up to 15 times per hour. If you reach the limit, wait and try again later.
My code expired
Codes are valid for 10 minutes. If yours has expired, select Resend code and enter the new code promptly.I see an Invalid Verification Code message
Check that you entered the 6-digit code correctly. If the code has expired, select Resend code to get a new one.I see an Access Denied message
The person who shared the link limited access to specific email addresses or domains, and the email address you entered isn’t on the link’s Access List. You can:- Select Change email to verify a different email address. For example, use your work address if you first tried a personal one.
- Contact the person who shared the link and ask them to add your email address, or your domain, to the link’s Access List.