News

Two-Step Verification Available to All Users

Two-Step Verification Available to All Users

Posted by Andrew Sinkov on 04 Oct 2013

Posted by Andrew Sinkov on 04 Oct 2013

We take the security of your data very seriously. Several months ago, we introduced two-step verification along with several other security features. Today, we’re opening two-step verification up to everyone.

Set up Two-Step Verification »

Two-step verification, also known as two-factor authentication, adds an additional layer of security to the login process, requiring you to enter a special code from your phone, in addition to your regular username and password. The goal of this extra step is to combine something you know (your password) with something only you would have access to (your phone).

Setting up two-step verification is straightforward. Just follow the steps in the Security section of Evernote Web. Free users will be required to install an authenticator app on their phones. We recommend Google Authenticator. Premium users can choose to have the code delivered as a text message via Telesign.

One very important thing to note. As part of the set up process, you will be given a set of one-time codes to use in the event that you are unable to access your phone. Don’t keep these codes in Evernote since you’ll need them when you don’t have access to your Evernote account.

Premium

Evernote Premium

Upgrade for features to help you live and work smarter.

 Go Premium
View more stories in 'News'

68 Comments RSS

  • Will Adan —

    Thanks for this added layer of security! Setup was very straightforward.

  • Anshuman Bhartiya —

    I have texts disabled on my iphone. I tried to sign up for the two-factor authentication. The first step required me to verify my email which I did. The next step required me to provide a phone number that I have my google voice number. Then I was asked to provide another backup phone number which I don’t have. I was never asked to scan the barcode using Google Authenticator. How am I supposed to implement this for my account?

    • Oliver Ortega Chua —

      The backup phone number is optional. There’s a link to “Skip” it. Right after that is the setup for Google Authenticator.

      • Anshuman Bhartiya —

        Makes sense. I saw that and now I have implemented it. The “skip” option was not present when I was first trying it hence the comment.

        • Eric Pardee —

          Anshuman, did your Google Voice number stop receiving Evernote verification texts? My was working but stopped mysteriously today.

      • Wolfgang Scheibelhofer —

        I swear there is no “skip” option and as I am a free user I can not receive the text message. So I am stuck without the possibility of two factor verification. Perhaps I should mention I live in Austria.

  • Dietrich Duke —

    Hmm. it seems ive had this for a while.

    • Rob —

      DD – you’re probably a premium user. I think the Evernote just opened this to freebies too.

  • Robert Rood —

    Please add Yubikey integration and/or Duo Security (www.duosecurity.com).

    • erok —

      Please add Yubikey support

      • Gert —

        +1 for Yubikey or U2F support

  • Frank Bradley —

    So I guess if you do not have a phone you are screwed.

  • Rod Sherwin —

    Would be great if you supported Yubikey authentication as well.

  • WacoJohn —

    Glad for the level of concern for safety but validating via cell phone does not work well for me. Has to be a better way.

  • westmeadboy —

    How to access the barcode after already successfully going through the process? I want to setup Authenticator on other devices.

  • Bert Seinstra —

    Text on my phone, text on a second phone. And again, text on my phone, text on a second one… and then.. ios, android or a blackberry phone…I have a blackberry tablet, doesn’t work.

    How can I, make this work with my tablet?

  • Aries Truong —

    Can I use Authenticator of Microsoft for Windows Phone

    • mgnoonan —

      It does work with the Windows Phone Authenticator. Just follow the iOS path when you get to it, scan the barcode using Authenticator, and you should be good to go!

  • Mark Stanislav —

    Just in case anyone is looking for a Google Authenticator alternative, keep in mind that Duo Security’s “Duo Mobile” is available for free and supports Evernote’s method of two-factor authentication natively.

  • FC —

    Does this work with IPAD? I use the Google Authenticator’s Iphone app to scan the bar code and obtain the 6 digit number. However, Evernote give an error message saying that’s not the expected number. Does this only work with Iphone’s IOS and not IPAD?

  • FC —

    Does this work with IPAD? I use the Google Authenticator’s Iphone app to scan the bar code and obtain the 6 digit number. However, Evernote give an error message saying that’s not the expected number. Does this only work with Iphone’s IOS and not IPAD?

  • Mufri —

    If you are an Android user you could try Authenticator Plus too, which supports backup/restore and seamless sync across devices.

    Link – https://play.google.com/store/apps/details?id=com.mufri.authenticatorplus

  • Wekadent —

    Is it available for users of Evernote 4 for Windows?

  • Patrick Ahles —

    I have Google Authenticator set up on more than 1 device (Android phone, iPod Touch, even a Blackberry). How can I setup more than one device?

  • Patrick Ahles —

    I have Google Authenticator set up on more than 1 device (Android phone, iPod Touch, even a Blackberry). How can I setup more than one device?

  • Dean Smith —

    When I try to do this, it is for text only. I wish to use my authenticator app.

  • Dean Smith —

    When I try to do this, it is for text only. I wish to use my authenticator app.

  • Eric L Beyer —

    (1)Two factor authentication is a start, but it would be ideal if we had the option for high-level encryption of some or all of our notes. Then I would feel comfortable using Evernote for personal data. (2) Perhaps you might consider supporting Yubikeys? They’re like $7 and are cross-platform. No phones or codes necessary.

  • Casper Pieters —

    Does this mean using the two step method and providing you with more personal details, that with the next hack, not only my password and email address are taken, but my mobile phone number as well?!?!

  • bradavon —

    Please increase (or disable) the really annoying one week auto-logout of accounts. I’d be prefer to use Two-Step verification but it’s annoying as it is to have to log back in every week. I leave Evernote as a Pinned Tab on two PCs.

  • Liam Greene —

    If i open evernote mobile app now the evernote app asks me to enter an email account for a username and password i enter my gmail details. What follow is that i get an error stating that there is something wrong with my internet bad connection and it stays on the log in screen.
    I have to press the home button on my galaxy s2 to close the app and use the phone.
    How can i get the app working again.
    To join this forum i have to register with Digus or something similar to this name. Are they part of evernote.

  • Francine M Seal —

    My phone can’t access the internet so the two stage authentication is a definite no-go for me.

  • c1329123 —

    What about using a voice phone call for those of us with basic phones and no text messaging plan? Google and Microsoft both use this option.

  • Heisenberg_Uncertain —

    Oh Noes I hear something of a security breach?

  • macpro —

    I don’t have and don’t ever plan on owning a cell phone. I don’t like leashes.

  • macpro —

    I don’t have and don’t ever plan on owning a cell phone. I don’t like leashes.

  • macpro —

    I don’t have and don’t ever plan on owning a cell phone. I don’t like leashes.

  • ergpj —

    The best thing to do is SCRUB Evernote ;that way those who broke into their accounts will get nothing.
    The Evernote suggestion seems a lot of BS
    I for one will quit this appl

    ERGPJ

  • ergpj —

    The best thing to do is SCRUB Evernote ;that way those who broke into their accounts will get nothing.
    The Evernote suggestion seems a lot of BS
    I for one will quit this appl

    ERGPJ

  • Heisenberg_Uncertain —

    This is cool

  • FaceVide0 . —

    I DELETED THIS APP

  • FaceVide0 . —

    I DELETED THIS APP

  • Tricia Forster —

    It said that some of our email addresses and password hints were hacked, does this mean our Facebook accounts could’ve been hacked because mine was and I already use a 2-step verification on FB. Any suggestions? I have Evernote installed on my phone, but haven’t ever used it much.

  • Debra Lynne —

    The Evernote Security Update is RIGHT ON. I did not change my password when I received notifacation of possible acount compromise although, I WAS thoroughly impressed to know Evernote researched names, email etc. for clients whose information has been been compromised.

    I assumed the best and did not begin the process of changing passwords of related accounts. Today I received an email, telephone call, and a text message from American Express. My Account information including password are not secure. Fraudulent charges occurred yesterday and American Express is wide awake – all over it!

    IF YOU RECEIVED NOTIFICATION FROM EVERNOTE regarding your Adobe Account – ACT NOW. Change Passwords – lock down – this is a widespread issue and could very likely affect you tomorrow.

  • ackthbbft —

    Can’t get this to work with Google Authenticator. Will submit a post on the Support page.

  • ackthbbft —

    Can’t get this to work with Google Authenticator. Will submit a post on the Support page.

  • Ka Pow —

    Why do I need to supply a phone number… why not _just_ use an Authenticator. The Phone number is completely unnecessary, and unwarranted. As a ‘premium user’ it now seems like its a dissadvantage.

  • Ka Pow —

    Why do I need to supply a phone number… why not _just_ use an Authenticator. The Phone number is completely unnecessary, and unwarranted. As a ‘premium user’ it now seems like its a dissadvantage.

  • TAREK —

    This is very cool

  • TAREK —

    This is very cool

  • Groseclose —

    When will AOL have 2 step verification? It is my idea !!!

  • john bond —

    It’s a good thing they added two-step verification. It’s important to keep high security. A lot of people complain about it but when they have an account stolen they realize how important it is.
    John Bond

  • Brandon —

    Is there an easy way to move the Google Authenticator codes to a new device?

    • Komrad —

      I have the same question.

    • Ricardo —

      Same here, just asked again!

  • Aweso —

    It never offers me Google Authenticator option. It only offers me SMS, which never arrives anyway.

    • Carlo Ledesma —

      Same here. SMS verification doesn’t arrive. Hope to use Google Authenticator even for the first time. I’m from the Philippines btw.

    • Nik —

      I’m also not getting the Google Authenticator option. I’d prefer to be able to use a Yubikey anyway. Is that in the works?

  • ale.com —

    I’m getting the authenticator option.. but it doesn’t recognize the code. Not registering with QR code, nor with alphanumeric code…

  • Gustav —

    Lately, the Evernote desktop app keeps asking me to verify my email address. If I click “verify”, I get an email with a link asking for my username and password, which seems like a terrible idea. If I click “cancel”, I get another prompt a few days later. How do I get rid of this prompt?

  • Nobufumi —

    Well, is it just me? I followed the whole process of setting up two-step verification as instructed on the screen, but found the function not enabled. So I clicked on “enable” and did another round of setting it up; still not enabled! How did it go wrong?

  • Sarah —

    If I already have 2-step verification for gmail, does that effect the way I set this up?

  • Scott —

    I’m very disappointed with this implementation of such an important security feature. Forcing me to either pay you with money or pay Google with my personal data just to get basic security is shameful. Security should not be a profit center.

  • Ann —

    I didn’t update my number in my evernote account and I know my password, but I can’t get a code to log in on my phone.

    • Taylor Pipes —

      Ann, reach out to our support team and they will be able to help assist you: https://evernote.com/contact/support/

  • Fred —

    WTF? I have to install an app to make evernote secure? No thanks, I’ll use other note apps instead.

  • Ricardo —

    How do I set it up in a new phone? I had it on the older one already.

  • Gati —

    This ”layer of security” is truly annoying. To ask too much work from user is a sure way to lose the trust of that user. In our case, almost any time i start evernote, it greets me with announcement about verification e-mail, then that e-mail has a clickable button that opens a page that asks to enter password anew… Seems that for somebody here the verification ends faster, with a click. Good news, evernote works without completed verification. If not – time to check OneNote, perhaps.