Comments on: Password Safety Reminder

By: Dave Engberg

Dave Engberg — Sun, 04 Nov 2012 10:32:01 +0000

See the prior reply to Vladimir.
An optional second factor authentication scheme would be good for the relatively small percentage of users who will be willing to set it up.

By: juan

juan — Sun, 04 Nov 2012 10:21:34 +0000

why not use Google authentificator as security reinfocement for evernote? I think is the most secure way, user + password + GA code every 30 days

By: mahi

mahi — Thu, 18 Oct 2012 14:50:23 +0000

hi….
1)i need the evernote software which has also reminder which will remind a particular data in the stored data which we selected by giving alarming.

2) the data should be accessible fastly even the storage is more.

please reply quickly………

By: Ann

Ann — Tue, 16 Oct 2012 12:34:54 +0000

Thanks Evernote team.

By: Dave Engberg

Dave Engberg — Mon, 15 Oct 2012 19:50:01 +0000

I agree. It’s great that Google implemented Authenticator using RFC standards and then published the code. That’s a great way to improve overall Internet security.

By: Sterling Zumbrunn

Sterling Zumbrunn — Mon, 15 Oct 2012 19:42:57 +0000

Thanks for the PSA Dave! And thanks Vladimir, I just came to this page to make exactly the same comment! I completely agree, 2-step authentication is not only highly desirable, it’s becoming a must-have for critical services with important data like Evernote. Glad to hear it’s on the list! I think the way Dropbox handled it, leveraging the existing Google Authenticator is quite elegant. I like having all of my tokens in one app.

By: Dave Engberg

Dave Engberg — Thu, 11 Oct 2012 15:01:47 +0000

Thanks, this is on our list. But we want to make sure that we have a solution that won’t cause people to accidentally lose access to years of memories. That’s a bit of a tough balance, so we’re going slowly.

By: Dave Engberg

Dave Engberg — Thu, 11 Oct 2012 15:01:02 +0000

Of course.

By: Bob McDowell

Bob McDowell — Thu, 11 Oct 2012 11:34:11 +0000

I hope that EverNote is NOT storing our passwords as plain text.
They should be only saved as a salted hash!

By: Vladimir Campos

Vladimir Campos — Thu, 11 Oct 2012 11:26:35 +0000

Please consider implementing an optional second step of security with Google Authenticator. I’m using it on my Gmail an Dropbox accounts for a while. It is a nice, simple and save solution. Let it as an option for those that whant it.