Evernote beefs up security with two-step verification and access controls

The service designed to help you "remember everything" suffered a security breach in March. Now, three new security features seek to ensure the privacy of users' data.

Evernote beefs up security with two-step verification and access controls

Evernote was hacked  a couple of months ago, requiring all of its users to reset their passwords. This shook my confidence in the online note-taking and archiving service, which I use to store lots of personal information. 

I am pleased to report that Evernote announced three new security features to ensure the security and privacy of our data.

The three new security features include two-step verification (two-factor authentication), access history, and authorized applications. Let's take a closer look at these new security features.

Two-step verification

This method of security is designed to help keep your account secure if someone happens to obtain and enter your password. In addition to just your password, a verification code is required and that comes to you via a text message or app on your phone. Thus, someone would have to have both your password and your phone to hack into your account.

Evernote also states they will give you a set of one-time backup codes in case you are traveling or do not have access to your phone and need to enter a verification code.

Two-step verification is optional and before you enable it make sure you have access to your selected secondary verification method or you could be locked out of your account. This security level is available to Evernote Premium and Evernote Business user only. As they refine and establish the process, they will open it up to free account users.

Evernote warns that you may find partner apps stop working with two-step verification. If that happens, you need to set up application passwords for each app in the security section of Evernote.

Access history

My bank has an access history list where it shows when and from where my online account was accessed for a certain period of time. Evernote now lets you view your access history for the past 30 days. Access history includes all versions of Evernote, which is important for someone like me who uses Evernote on a number of computers, tablets, and smartphones.

Authorized applications

If you lose your computer or phone, you can attempt to wipe it remotely before the thief gets your data. With the new Evernote security settings, you can view where you have Evernote installed and remotely revoke access on that computer or phone. The next time you launch Evernote on that device you will need to enter your password.

I am pleased to see Evernote take security and privacy seriously and offer up the latest and greatest tools for maintaining control of our data. With the new reminder functionality for iOS, Evernote is becoming vital to my daily work flow and my confidence in data security is fully restored.

Show Comments