Skip to content

Help shape the future of Box

Welcome to Box Pulse, our product feedback tool powered by UserVoice. Got an idea for how to improve Box? Share it with us and gather support or vote on other people's ideas. Your feedback is essential to informing roadmap decisions and shaping the future of our products. Thanks for joining our community!

See user guide here.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback

395 results found

  1. Restriction of the link icon for specific folders

    There have been cases of employees accidentally clicking the link icon for "Create and copy a shared link" while working on the web site.

    In order to prevent such cases, is it possible to implement a function to enable or disable the link icon for specific folders on Box?
    I would like to have a function that can be set for each folder.

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  2. Real time alert if user accesses Box from a new location/device

    Currently we get a Daily Login Activity report. This is a daily report and most important piece of information on it is report of new logins with information like user, device, time, and IP address..

    Unfortunately this is daily and can only be on or off.

    Requesting the ability to enable real time notification instead of the daily.
    As it relates to security, immediate notification is critical for unauthorized access.

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  3. Box to prompt for a large data or folder deletion.

    Box to prompt when a user is trying to delete more than X amount of data. OR Y amount of files from Box. Box to ask user to type something specific like “confirm”, “delete” or their email address in order to proceed with the file deletion.

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  4. Check the details of SSO for external collaborators

    We can require 2-FA for external collaborators, but for external collaborators using SSO, Box does not check for whether users pass multi-factor authentication.
Please add the ability what kind of authentications(ID/Pass, MFA, Device check, IP address limitation, etc) does external collaborators passed on SSO.

    20 votes
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  5. Need guest authentication by own AzureAD for external collaborators

    We can require 2-FA for external users, but it’s not enough security level to some customers. So, please add the ability to require guest authentication by own AzureAD for external collaborators.

    19 votes
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  6. Box session timeout with SSO

    We are currently considering implementing SSO. The SSO service we plan to use has a session timeout feature,
    This feature allows us to control the session time of the IdP.
    It would be great if we could log out the Box at the same time as the Idp session timeout.

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  7. Enable 2FA renewal requirement options for external collaborators

    Background:
    2FA for external collaborators does not require a re-2FA. The only way an external person will have to re-2FA is if they switch browsers or clear cache/history. I have an external user that set up 2FA in November of 2021 that hasn’t had to re-2FA to our box environment since. It has been so long that she didn’t even remember setting it up (it is Aug ’22 now). The current box 2FA implementation effectively moves the security away from box and on to the end user’s device / environment. Being external partners, we have no insight into how secure…

    12 votes
    1 comment  ·  Security  ·  Admin →
    How important is this to you?
  8. 2FA - Option to select SMS or Email as opposed to both

    Hi all,

    We would like to have the option to select SMS as a 2FA method without having to have email as an option.

    Back in April last year Box introduced the option to have email as a 2FA Method. Unfortunately we can’t have Authenticator app and SMS but no email as a setting. Either it’s Authenticator app only or we have to enable emails too.

    On productions we go for the Authenticator app as that’s the most secure option, but one of our subsidiaries would like to give the option for SMS too.

    Enabling emails is a major security…

    3 votes
    1 comment  ·  Security  ·  Admin →
    How important is this to you?
  9. Phone number format prompt

    When setting 2FA by SMS, Box should update this part of the web site to specify exactly what format the phone number needs to be entered in.
    E.g. "7797123456" and not +447797123456, 447797123456, +44(0)7797123456 etc.

    Although it seems to work with or without a leading zero, it would be better to not include it as it is not part of the "phone number"

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  10. Yubikey integration with Box MFA without SSO

    Yubikey integration with Box MFA without SSO

    2 votes
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  11. UX switching 2FA method

    Changing 2FA method requires removing first. This breaks existing shared feeds for others and is alarming.
    The way you need to re-accept then go back and forth between pages refreshing each time before it shows as re-established is far from "Simple" or intuitive.

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  12. Make 2FA by e-mail work for the accessible-site

    Make 2FA by e-mail work for the accessible-site

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  13. Password updates

    Login passwords currerntly enforce unnecessary format restrictions that are hindering the use of password generators. Characters < > cannot be used, and there also is a requiement to include at least two digits. Most hashing password generators use all printable characters (as they should), and ensure only the occurrence, but not the quantity, of character classes, i.e. 1 of each printable chartacter classes (uppercase, lowercase, numeric, special).

    Suggestion: allowing all printable characters and only requiring a minimum of 1 character from each intended class (occirrence only) would make Box login passwords compliant with the vast majority of hashing password generators…

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  14. Whitelist domains on External Collab folders

    We want the ability to be able to whitelist a domain on a specific folder for users for users of a business, within our External Collaboration folder which we use for our clients. EG, if the folder is to be collaborated with by our client "Acme", eg then:

    FOLDER: External Collaboration > Customer > ACME

    ACME Folder: Whitelist domain acme.com

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  15. Department of Defense (DoD) impact level 5

    Department of Defense (DoD) impact level 5

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  16. "Remember me" added to login

    The need to constantly log in multiple times throughout the day when using Box.com is just absolutely an awful experience. This is especially true with integrations. Every time I close a browser window and then click a link, I have to log in again. We use Box as a source for all of our content for an agency so the number of logins is high. And when we receive a link to a piece of content, we have to click "Go to my account" to log in again, which takes us to the homepage, forcing us to click the link…

    2 votes
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  17. Box Virus Scan turned on by default

    Box Virus Scan turned on by default

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  18. password reset scheduling during holidays

    I am writing to request consideration of scheduling password changes to avoid peak vacation times. As a citizen developer, I do not have a dedicated team to manage these changes and it can be difficult to find time to complete the updates while also taking time off for vacation.

    I understand the importance of regularly updating passwords for security purposes, but I believe that scheduling these updates during times when fewer people are likely to be on vacation would minimize disruptions and make it easier for everyone to stay on top of this important task.

    1 vote
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  19. Provide easier ways to extend collaboration expiration

    Similar to the existing post below but the request is a bit different.
    https://pulse.box.com/forums/909778-help-shape-the-future-of-box/suggestions/36108211-bulk-extend-collaboration-shared-link-expiration

    We have folders where there are over 100 collaborators to extend on a certain cadence and need to click the "clock" button over 100 times, which obviously is so painful. We would like to have the ability to click "checkbox" to select collaborators to extend and update them in one shot.

    2 votes
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  20. Require additional Multi-Factor Authentication for external collaborators using SSO

    We can require 2-FA for external collaborators, but for external collaborators using SSO, Box does not check for whether users pass multi-factor authentication. Please add the ability to require additional multi-factor authentication for external collaborators using SSO.

    4 votes
    0 comments  ·  Security  ·  Admin →
    How important is this to you?
  • Don't see your idea?

Help shape the future of Box

Categories

Feedback and Knowledge Base