Skip to content

Help shape the future of Box

Welcome to Box Pulse, our product feedback tool powered by UserVoice. Got an idea for how to improve Box? Share it with us and gather support or vote on other people's ideas. Your feedback is essential to informing roadmap decisions and shaping the future of our products. Thanks for joining our community!

See user guide here.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback

378 results found

  1. I don't want to receive an email that says "1 application removed" when I change my password.

    I don't want to receive an email that says "1 application removed" when I change my password.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  2. 2FA when logging in using external password

    When SSO is enabled, users can use external passwords to access services that do not support SSO login. Security teams want to be able to enforce 2FA on logins using external passwords.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  3. Shared link permissions enterprise default

    A way to force reset everyone to the enterprise default for shared link permission level.
    +
    A setting that would allow only a subset of users to have the broader level of sharing – say there is opt 1 – people in company / opt 2 people in company + invited / opt 3 people in company + invited + anyone with the link

    Ex. So the enterprise default for all users would be locked down to a max of option 2 (giving users opt 1 & 2 as choices) – we could allow a small subset option 3 (giving…

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  4. Device Trust Whitelisting

    Provide ability to whitelist devices while Device Trust is enabled. We would like to enable Device Trust requiring both Domain and Certificate. But we also have lab hosts that are not domain members or have issued certificates. We would like to be able to allow hosts not meeting the Device Trust settings to login.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    on roadmap  ·  1 comment  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  5. Add "Edit" permission to shared link options

    We needs to share a link of many Word documents in Box with a large number of people, problem is we can't make it editable to the people who have the link. (only view and download or View only)

    would be awesome to have this option !

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  6. So we used a password on a shared link that contains a greater than symbol and the link does not work

    If you create a shared link with a password that contains a greater than symbol > it will not work.
    Such as:
    T^>&4zjbFzV

    At the very least they should make it so that when you try to save a password with that symbol it throws an error right there on the form.

    Thanks

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  7. Sign in with Google Across the Platform

    Sign in options are inconsistent across the Box platform. If SAML/SSO or Sign in with Google is set up with an account, it should always be accessible in any place any user attempts to authenticate. I had an account without a password created via the Sign in with Google process and this meant there was one less password floating out there for account access. In order to sign in in certain parts of box.com or in Box Drive, I am required to set a password.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  8. Additional permission options for files

    Hello:

    The documentation for Collaborator Permission Levels at https://support.box.com/hc/en-us/articles/360044196413-Understanding-Collaborator-Permission-Levels is very substantially incorrect. At the start of that article it says (capitalization mine):

    "When inviting a person as a collaborator within a folder OR FILE, or sending a shared link, you have the ability to set the level of access that person has to your content. Refer to the following chart to review the different permissions that accompany each permission level:"

    This is completely incorrect--the permissions in that article only refer to permissions for folders, not files. Files only get "Viewer" or "Editor" permissions.

    Ideally it would be nice if…

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  9. embed code

    Option to remove the security feature when embedding folders into website.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  10. Automated way to manage 2 Step verification for external collaborators

    Provide API support to manage 2 Step verification settings for external collaborators .
    Our use case is to "enable only for select domains/users". It is difficult to impossible to manage this for 1000's of external collaborators via the admin console. looking for an API support here to automate the process of managing the external user's 2 Step verification settings. The API should offer
    1. Add external collaborator domain and specific email id to the 2 step verification
    2. Query status given a domain or user email address
    3. API to remove a given user / domain

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  11. pdf on box is downloadable, so the hard work of authors is not protected and can be distributed. Box must prevent this.

    I was able to download a protected pdf on box. I obtained it from Cambridge. I am a school teacher, they gave me a box link to their book which they said I can use for a free months. But I was able to download the pdf. Box must make its embedded pdfs more protected to prevent illegal distribution of ebooks.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  12. Box.COM doesn’t identify PaloAlto Traps as an Enterprise AV/EDR vendor for Mac devices

    Box.COM doesn’t identify PaloAlto Traps as an Enterprise AV/EDR vendor for Mac devices

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  13. Device Trust documentation and error message should explicitly describe encryption requirements for external drives

    The Device Trust message is misleading as it states “All internal disks must be encrypted” when it should state “All disks must be encrypted”. In addition, the language under Setting-Up-Device-Trust-Security-Requirements here https://support.box.com/hc/en-us/articles/360044194993 states "Require all disks to be encrypted: Helps protect against data loss by requiring disk encryption software" but it only describes in detail internal disk encryption. It would be helpful if it stated here that all external disks must also be encrpyted.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  14. capture admin role changes in event stream

    currently we receive the same event (‘Change admin role: privilege Admin role for user’) in event stream for any admin role change,
    although we performed a different action
    we would like a more detailed log
    i.e. activities like remove/add and providing the specific role as well

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  15. (Drop) Box Vault - Password Protect File Feature

    Enable password protection for individual files or at master level for sensitive data (ie: Dropbox Vault).

    https://www.dropbox.com/features/security/vault

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  16. Copy All Folder Settings when copying a Folder

    When copying a folder, all folder settings should be copied over as well (or have the option to do so). As is, some settings do copy over while others don't. For example:

    Can Copy: Restrict Collaboration to within ETF, Disable Commenting, Shared Link Access, Watermarking, Uploading (Overwrite files) and Email notifications
    Won't Copy: Only Folder owners and co-owners can send collab invites, Hide Collaborators, Allow Uploads to this folder

    This would be especially useful when copying a template folder with a folder structure that needs the same settings when copied for a new project/customer/etc.

    12 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  17. Device Pinning, "Last Check-In"

    instead of "install time" for device pinning, the customer would like to see "Last check in".

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  18. SSO exception

    Ability to have exceptions for SSO for specific amdin accounts/test users. Use case: there's a series of admin accounts we use that own folders/content in Box but aren't actual users. Now when we want to turn on SSO - we now have to have OKTA accounts for those accounts and test users, when we'd prefer to just do Box 2FA for those vs. SSO enabled for all

    28 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  19. Add more details in device trust logs

    If device trust is checking for a setting (for example OS version), then the logs should show the actual version detected. This should be for every setting Box enables you to validate. It should also have more detail about the login attempt (hostname (not just IP address), OS, Box Drive vs Box web vs etc).

    Further there should be a new event in the logs, DEVICETRUSTCHECKPASSED, with similar details so that we know the check happened and what values Box found when authorizing the device. Only having DEVICETRUSTCHECKFAILED provides no audit trail for showing…

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  20. Get details on shared link without owner

    Airbnb and other companies when going through a large
    deprovision of accounts run into issues where someone shares a link of the file after the owner is
    no longer there and the collaboration is removed. But with just the file link, there is no way for the admin to get anymore details on the file.

    The feature request is the ability to get more details on a file through the link.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
1 2 5 7 9 18 19
  • Don't see your idea?

Feedback and Knowledge Base