Well, _my_ ssh and gpg keys are password protected;) I agree though, there is only so much Dropbox could do. Since you can already deauth a computer, it doesn

Well, _my_ ssh and gpg keys are password protected;) I agree though, there is only so much Dropbox could do. Since you can already deauth a computer, it doesn't need to be done by password resets. I think if Dropbox detects two host_id's at the same time (not just in the same time, but both after each other in, say, double the sync period) then it should deauth the host and alert the user to what's going on.