Yesterday I got the email that millions of other people got in regards to Evernote resetting my password due to someone hacking into their user data system.
The investigation has shown… that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts, and encrypted passwords. Even though this information was accessed, the passwords stored by Evernote are protected by one-way encryption. (In technical terms, they are hashed and salted.)
After following the very geeky discussion about it in /r/netsec I was left wondering if I was placing too much faith in Evernote to protect all the brain dumps, notes, files, and private information I like to store in it.
Cloudy with a chance of security breach
After stumbling across this blog post entitled “Evernote doesn’t really care about security” I became convinced that it was time to leave Evernote. The security breach was actually the last straw in a number of things that have been bugging me more often than not — frequent crashes being the chief one.
Sometime around when Evernote added Skitch, the whole shebang started crashing on me frequently. I’m a premium Evernote user, and dealing with the app crashing multiple times a day quickly became aggravating. It has been almost unusable at times. That does not bode well for something you need to access frequently throughout a given day.
Then there were the issues where my notes were not synching between my laptop and my desktop, which I don’t really need to go into. You’ve probably had them too, if you are an Evernote user on more than one computer.
Lastly, I mentioned I was a paid Evernote user, but I never found myself using the paid features. The other big issue for me was with tagging – I would add tags to notes but then forget about them and never use them to find things. The inability to organize notes hierarchically is very necessary to me as someone who thinks that way due to my years as a sysad and developer, and I couldn’t get used to everything having to be arranged with tags.
Faith In The Cloud?
So my question yesterday became: “Where do I put all this info I have in Evernote that is more secure and can be synched and access between my phone, laptop, and desktop?”
Security experts mostly agree that putting secure information in the cloud is not a very good idea. But I want to have faith that it can be, and there are companies making an effort in that regard. I turned to a solution that was right under my nose: Google Drive.
Why Google Drive over Dropbox or some other service? Because it integrates easily with everything I already use, and more and more features and interactions with it are becoming available. I, for one, welcome our new Google overlords.
I’m still working on moving everything over from Evernote to Google Drive, and it’s not a simple process, but I think I will be able to live with it. I’ll also be able to rest a little better knowing that, while my data is still in the cloud, Google seems to value it more than Evernote.
Other fed up users are coming up with their own solutions for replacing their faith in Evernote.
What will be yours?
I’ve been considering the same. I started using google drive a couple weeks ago, and your article got me thinking that I can probably pull off similar functionality with it. Security must be taken seriously. Thanks Will.
I’m in the process of leaving too, as a two-year premium member who’s completely fed up with the app crashes and sync errors. I’m heading to Dropbox, I think, as I already use it extensively. I did love Evernote, but it doesn’t love me back any more.
I’m curious to know how the move goes. For me, it took some time, but I’m on Google Drive now and am totally digging it.
I’ve decided on OneNote from Microsoft. It just works, and the interface and features are great. Their web app is 100x better than the disaster that is Evernote’s web app. Highly recommended!
I liked OneNote in theory, but I’m not a Microsoft person, so it is pretty impractical as a cross-device, cross-platform solution. Since I wrote this article, however, Evernote took steps to improve their security, and that was my main concern. I found myself going back to them.