Let the PW-manager pick a completely random PW, 15+ digits, mixed lower/upper case, numbers and symbols.Īpply it to your account. Open the first account (sequence should be 1) E-Mail services 2) money bearing/online shopping 3) social media, cloud services 4) the rest) I can pretty much guarantee if you have a account, information was leaked. You can check if your email was part of any published leak data sets. But, the hackers are smart and can work-around some of these, such as using botnets or limiting their throughput to stay underneath our limits.Īs has been mentioned, the number one thing users can do is change their password and not share passwords with any other account or reuse passwords that have been potentially leaked/compromised.Ī good website to visit is. We have various tools in effect to help protect our users, such as limiting the amount of failed attempts allowed by a user, IP, etc. If they determine it's a valid account, they test out passwords they have based on the leaked data. Presumably these are coming from previous leaks/hacks. They're testing lists of emails/usernames to see if they are valid Evernote accounts. Much like many large websites, hackers are pretty much constantly testing out credentials in two ways: Then, even if someone learns your password, they won’t be able to access your account without also stealing your phone.

Setup two-factor authentication on your account, especially if you don’t want to use a unique password on your Evernote account. Install an anti-malware application on your computer and run it periodically to clean up any known malware. Revoke any Authorized Applications that you are suspicious about or that accessed your account from an IP address you don’t know

Consider using a password manager to keep track of your passwords. Make it one that you don’t use on another web site. You need to take some actions to protect access to your account.Ĭhange your password to a unique one. This isn’t a bug in our apps or service, it’s an unauthorized user connecting to your account. If this person had the correct password for your account, they connected an iPhone app to it and then used that app to search for cryptocurrency credentials. The Evernote service and our apps are still secure however, we discovered an unauthorized person testing a list of usernames and passwords that they stole from a site not associated with Evernote.

Evernote hack 2 device