Hacked ?

[Nigel kibble 0]

Hi my account seems to always be accessed by an apple iPhone, yet I don't own an iPhone. I can't sign in now because I've removed it twice in one month. Can you please help ?

 

[Dave-in-Decatur 4,002]

This sounds like the problem that happens when your Evernote password is identical to a password used for other services, and is stolen from one of the other services. This has been reported a number of times. The solution, of course, is to change the password to something unique to your Evernote account.

[Gryfon 0]

I had the same problem today. My account also had an iPhone connected that I don't have and that I never authorized to access. I would like to investigate this with the assistance, but I can't send the report because the submit form button is NOT A BOTTON and can't be clicked. The link of the page I am referring to is this one: https://help.evernote.com/hc/it/requests/new?ticket_form_id=254668 .
How can I explain the situation to the assistance and receive support?

[DTLow 5,744]

5 hours ago, Gryfon said:

My account also had an iPhone connected that I don't have and that I never authorized to access.

To access your account, the user has your password
You need to change your password to one which is only used at the Evernote service

[Gryfon 0]

On 1/24/2020 at 1:21 AM, DTLow said:

To access your account, the user has your password
You need to change your password to one which is only used at the Evernote service

The problem is that I did not receive any communication that this new device had been connected to my account. When I added my PC and smartphone, I received emails notifying me of this. Why not in this case?

[PinkElephant 8,741]

Probably the weird approach happens through an interface, maybe there is no notification then. Why or why not, obviously it is there, and if I were you, I would look after rapidly changing my password (something unique = only used for EN, and strong = long and complex) and throw the strange device out. You can use the web client to do that if you have problems with one of the other clients.

[Gryfon 0]

35 minutes ago, PinkElephant said:

Probably the weird approach happens through an interface, maybe there is no notification then. Why or why not, obviously it is there, and if I were you, I would look after rapidly changing my password (something unique = only used for EN, and strong = long and complex) and throw the strange device out. You can use the web client to do that if you have problems with one of the other clients.

I've already done all this. But there's still the problem of not notifying the connection. And that's serious. If I hadn't noticed at the time, who knows how long it would have been.

[PinkElephant 8,741]

Personally I do not get a notification if a new device is connecting with my account. And I have a number of them, no limit ... From time to time I go to the settings in the client I am using at that moment, and take a look.

I just checked the settings - I have not found an option where notifications of an account access could be activated or deactivated.

However I have 2FA active, so I probably would be notified if somebody would try and fail.

 

[Gryfon 0]

23 minutes ago, PinkElephant said:

Personally I do not get a notification if a new device is connecting with my account. And I have a number of them, no limit ... From time to time I go to the settings in the client I am using at that moment, and take a look.

I just checked the settings - I have not found an option where notifications of an account access could be activated or deactivated.

However I have 2FA active, so I probably would be notified if somebody would try and fail.

 

This is part of the email notifying me of new access:

Quote

Why are you displaying this message?
At Evernote, protecting your account is our top priority. When you sign in from a new device, app or location, you'll receive emails like this.

I can't tell you why I'm receiving it or what settings I put on it, whether it was selectable or default. The fact is that every time I change device I receive it.

[PinkElephant 8,741]

Maybe I didn’t get notifications because 2FA is active. So I got mobile messages with the code, that serve as notifications as well.

[pppp44 0]

i have active 2FA, i have changed the password and the logins from other countries still happen without notification. sorry, evernote has a problem...