News

Two-Step Verification Available to All Users

Two-Step Verification Available to All Users

Posted by Andrew Sinkov on 04 Oct 2013

Posted by Andrew Sinkov on 04 Oct 2013

Comment

We take the security of your data very seriously. Several months ago, we introduced two-step verification along with several other security features. Today, we’re opening two-step verification up to everyone.

Set up Two-Step Verification »

Two-step verification, also known as two-factor authentication, adds an additional layer of security to the login process, requiring you to enter a special code from your phone, in addition to your regular username and password. The goal of this extra step is to combine something you know (your password) with something only you would have access to (your phone).

Setting up two-step verification is straightforward. Just follow the steps in the Security section of Evernote Web. Free users will be required to install an authenticator app on their phones. We recommend Google Authenticator. Premium users can choose to have the code delivered as a text message via Telesign.

One very important thing to note. As part of the set up process, you will be given a set of one-time codes to use in the event that you are unable to access your phone. Don’t keep these codes in Evernote since you’ll need them when you don’t have access to your Evernote account.

Premium

Evernote Premium

Upgrade for features to help you live and work smarter.

Go Premium
View more stories in 'News'

59 Comments RSS

  • Will Adan

    Thanks for this added layer of security! Setup was very straightforward.

  • Anshuman Bhartiya

    I have texts disabled on my iphone. I tried to sign up for the two-factor authentication. The first step required me to verify my email which I did. The next step required me to provide a phone number that I have my google voice number. Then I was asked to provide another backup phone number which I don’t have. I was never asked to scan the barcode using Google Authenticator. How am I supposed to implement this for my account?

    • Oliver Ortega Chua

      The backup phone number is optional. There’s a link to “Skip” it. Right after that is the setup for Google Authenticator.

      • Anshuman Bhartiya

        Makes sense. I saw that and now I have implemented it. The “skip” option was not present when I was first trying it hence the comment.

        • Eric Pardee

          Anshuman, did your Google Voice number stop receiving Evernote verification texts? My was working but stopped mysteriously today.

  • Dietrich Duke

    Hmm. it seems ive had this for a while.

    • Rob

      DD – you’re probably a premium user. I think the Evernote just opened this to freebies too.

  • Robert Rood

    Please add Yubikey integration and/or Duo Security (www.duosecurity.com).

  • Frank Bradley

    So I guess if you do not have a phone you are screwed.

  • Rod Sherwin

    Would be great if you supported Yubikey authentication as well.

  • WacoJohn

    Glad for the level of concern for safety but validating via cell phone does not work well for me. Has to be a better way.

  • westmeadboy

    How to access the barcode after already successfully going through the process? I want to setup Authenticator on other devices.

  • Bert Seinstra

    Text on my phone, text on a second phone. And again, text on my phone, text on a second one… and then.. ios, android or a blackberry phone…I have a blackberry tablet, doesn’t work.

    How can I, make this work with my tablet?

  • Aries Truong

    Can I use Authenticator of Microsoft for Windows Phone

    • mgnoonan

      It does work with the Windows Phone Authenticator. Just follow the iOS path when you get to it, scan the barcode using Authenticator, and you should be good to go!

  • Mark Stanislav

    Just in case anyone is looking for a Google Authenticator alternative, keep in mind that Duo Security’s “Duo Mobile” is available for free and supports Evernote’s method of two-factor authentication natively.

  • FC

    Does this work with IPAD? I use the Google Authenticator’s Iphone app to scan the bar code and obtain the 6 digit number. However, Evernote give an error message saying that’s not the expected number. Does this only work with Iphone’s IOS and not IPAD?

  • FC

    Does this work with IPAD? I use the Google Authenticator’s Iphone app to scan the bar code and obtain the 6 digit number. However, Evernote give an error message saying that’s not the expected number. Does this only work with Iphone’s IOS and not IPAD?

  • Mufri

    If you are an Android user you could try Authenticator Plus too, which supports backup/restore and seamless sync across devices.

    Link – https://play.google.com/store/apps/details?id=com.mufri.authenticatorplus

  • Wekadent

    Is it available for users of Evernote 4 for Windows?

  • Patrick Ahles

    I have Google Authenticator set up on more than 1 device (Android phone, iPod Touch, even a Blackberry). How can I setup more than one device?

  • Patrick Ahles

    I have Google Authenticator set up on more than 1 device (Android phone, iPod Touch, even a Blackberry). How can I setup more than one device?

  • Dean Smith

    When I try to do this, it is for text only. I wish to use my authenticator app.

  • Dean Smith

    When I try to do this, it is for text only. I wish to use my authenticator app.

  • Eric L Beyer

    (1)Two factor authentication is a start, but it would be ideal if we had the option for high-level encryption of some or all of our notes. Then I would feel comfortable using Evernote for personal data. (2) Perhaps you might consider supporting Yubikeys? They’re like $7 and are cross-platform. No phones or codes necessary.

  • Casper Pieters

    Does this mean using the two step method and providing you with more personal details, that with the next hack, not only my password and email address are taken, but my mobile phone number as well?!?!

  • bradavon

    Please increase (or disable) the really annoying one week auto-logout of accounts. I’d be prefer to use Two-Step verification but it’s annoying as it is to have to log back in every week. I leave Evernote as a Pinned Tab on two PCs.

  • Liam Greene

    If i open evernote mobile app now the evernote app asks me to enter an email account for a username and password i enter my gmail details. What follow is that i get an error stating that there is something wrong with my internet bad connection and it stays on the log in screen.
    I have to press the home button on my galaxy s2 to close the app and use the phone.
    How can i get the app working again.
    To join this forum i have to register with Digus or something similar to this name. Are they part of evernote.

  • Francine M Seal

    My phone can’t access the internet so the two stage authentication is a definite no-go for me.

  • c1329123

    What about using a voice phone call for those of us with basic phones and no text messaging plan? Google and Microsoft both use this option.

  • Heisenberg_Uncertain

    Oh Noes I hear something of a security breach?

  • macpro

    I don’t have and don’t ever plan on owning a cell phone. I don’t like leashes.

  • macpro

    I don’t have and don’t ever plan on owning a cell phone. I don’t like leashes.

  • macpro

    I don’t have and don’t ever plan on owning a cell phone. I don’t like leashes.

  • ergpj

    The best thing to do is SCRUB Evernote ;that way those who broke into their accounts will get nothing.
    The Evernote suggestion seems a lot of BS
    I for one will quit this appl

    ERGPJ

  • ergpj

    The best thing to do is SCRUB Evernote ;that way those who broke into their accounts will get nothing.
    The Evernote suggestion seems a lot of BS
    I for one will quit this appl

    ERGPJ

  • Heisenberg_Uncertain

    This is cool

  • FaceVide0 .

    I DELETED THIS APP

  • FaceVide0 .

    I DELETED THIS APP

  • Tricia Forster

    It said that some of our email addresses and password hints were hacked, does this mean our Facebook accounts could’ve been hacked because mine was and I already use a 2-step verification on FB. Any suggestions? I have Evernote installed on my phone, but haven’t ever used it much.

  • Debra Lynne

    The Evernote Security Update is RIGHT ON. I did not change my password when I received notifacation of possible acount compromise although, I WAS thoroughly impressed to know Evernote researched names, email etc. for clients whose information has been been compromised.

    I assumed the best and did not begin the process of changing passwords of related accounts. Today I received an email, telephone call, and a text message from American Express. My Account information including password are not secure. Fraudulent charges occurred yesterday and American Express is wide awake – all over it!

    IF YOU RECEIVED NOTIFICATION FROM EVERNOTE regarding your Adobe Account – ACT NOW. Change Passwords – lock down – this is a widespread issue and could very likely affect you tomorrow.

  • ackthbbft

    Can’t get this to work with Google Authenticator. Will submit a post on the Support page.

  • ackthbbft

    Can’t get this to work with Google Authenticator. Will submit a post on the Support page.

  • Ka Pow

    Why do I need to supply a phone number… why not _just_ use an Authenticator. The Phone number is completely unnecessary, and unwarranted. As a ‘premium user’ it now seems like its a dissadvantage.

  • Ka Pow

    Why do I need to supply a phone number… why not _just_ use an Authenticator. The Phone number is completely unnecessary, and unwarranted. As a ‘premium user’ it now seems like its a dissadvantage.

  • TAREK

    This is very cool

  • TAREK

    This is very cool

  • Groseclose

    When will AOL have 2 step verification? It is my idea !!!

  • john bond

    It’s a good thing they added two-step verification. It’s important to keep high security. A lot of people complain about it but when they have an account stolen they realize how important it is.
    John Bond

  • Brandon

    Is there an easy way to move the Google Authenticator codes to a new device?

    • Komrad

      I have the same question.

  • Aweso

    It never offers me Google Authenticator option. It only offers me SMS, which never arrives anyway.

    • Carlo Ledesma

      Same here. SMS verification doesn’t arrive. Hope to use Google Authenticator even for the first time. I’m from the Philippines btw.

    • Nik

      I’m also not getting the Google Authenticator option. I’d prefer to be able to use a Yubikey anyway. Is that in the works?

  • ale.com

    I’m getting the authenticator option.. but it doesn’t recognize the code. Not registering with QR code, nor with alphanumeric code…

  • Gustav

    Lately, the Evernote desktop app keeps asking me to verify my email address. If I click “verify”, I get an email with a link asking for my username and password, which seems like a terrible idea. If I click “cancel”, I get another prompt a few days later. How do I get rid of this prompt?

  • Nobufumi

    Well, is it just me? I followed the whole process of setting up two-step verification as instructed on the screen, but found the function not enabled. So I clicked on “enable” and did another round of setting it up; still not enabled! How did it go wrong?

  • Sarah

    If I already have 2-step verification for gmail, does that effect the way I set this up?

  • Scott

    I’m very disappointed with this implementation of such an important security feature. Forcing me to either pay you with money or pay Google with my personal data just to get basic security is shameful. Security should not be a profit center.