Evernote For Iphone cache issue

[Sawm Nexen 0]

Hi. I saved all my accounts information on my evernote, include my passwords.

But some of my friend said, it is not safe. Because some of my recent notes are saved in my Phone,

so that anyone who took my phone could open my files, no matter it jailbroken or not.

than I've read an blog article about this,

http://erik.io/blog/2014/01/03/watch-that-cache-dropbox-evernote-insufficiently-protecting-ios-6-data/

and told my friend that, 'Hey this blog said it is safe on IOS7'

But he said, "It is just temporary solution, and the problem is still remained. Because the format of evernote data is 'clear data' (Im sorry but im not familiar with computer, so I didnt understand what he meant.)

So

'My question is this.

Is it safe my accounts information??

[ScottLougheed 1,316]

If you have a pass code on your iPhone, the data are encrypted and cannot be easily accessed unless a person with physical access cracks your pass code or intercepts your data as it is transmitted. Also, data stored on Evernote's servers is not super well encrypted (unless you instruct a desktop Evernote client to encrypt the contents). In general, for most things, your data are reasonably safe. About as safe as a cloud service can be (with a few exceptions).

That said, it is a terrible idea to keep passwords in Evernote. Evernote is pretty secure, but in my opinion not secure enough to store my passwords. I need to store my passwords in a location where the encryption is extremely good and where I am the ONLY person who knows the decryption passphrase. For me, this is 1password. LastPass is another option. Check out both of those programs and get your passwords out of Evernote.

[ScottLougheed 1,316]

Just to follow up, Evernote has pretty solid security. As has been discussed elsewhere, there is definitely room to improve, but Evernote is not trailing behind any mainstream cloud providers (with the exception, perhaps, of a few such as Sugarsync) too badly, and it is constantly improving it.

 

Now, Evernote can use the most top-of-the-line security available, but all of that is meaningless if someone has physical access to your non-password-protected device, or is able to crack the password on the device. As such no matter how much Evernote does, you need to secure your devices. 

 

Evernote will never match the type of security offered by password managers because Evernote needs to be reasonably conveniently accessible very quickly. VERY high security is usually the exact opposite of convenient and quick. Password managers such as 1Password use security strategies that would handicap or prohibit many of the features that make Evernote useful.

 

Some general discussion about Evernote and securing your data (not just on mobile, but the principles apply):

https://discussion.evernote.com/topic/40113-request-passcode-lock-for-evernote-desktop-app-windowsmac/

https://discussion.evernote.com/topic/32488-windows-app-password-protect-lock-it-without-logging-out/

https://discussion.evernote.com/topic/33178-evernote-desktop-passcode-lock/

 

Especially regarding storing sensitive data such as passwords:

https://discussion.evernote.com/topic/58034-feature-request-password-protected-notebook/page-2

 

On encrypting and passcodes, generally protecting your Evernote stuff:

https://discussion.evernote.com/topic/36764-encrypt-a-whole-notebook/

A monstrous thread on the same topic:

https://discussion.evernote.com/topic/23725-request-additional-encryption-options-for-notebooks-and-syncing/page-24

 

And some more about protecting your stuff when it is stored locally on devices:

https://discussion.evernote.com/topic/55168-open-text-in-evernote-data-files/

 

hope you find these discussion I linked to illuminating!

[Sawm Nexen 0]

Just to follow up, Evernote has pretty solid security. As has been discussed elsewhere, there is definitely room to improve, but Evernote is not trailing behind any mainstream cloud providers (with the exception, perhaps, of a few such as Sugarsync) too badly, and it is constantly improving it.

 

Now, Evernote can use the most top-of-the-line security available, but all of that is meaningless if someone has physical access to your non-password-protected device, or is able to crack the password on the device. As such no matter how much Evernote does, you need to secure your devices. 

 

Evernote will never match the type of security offered by password managers because Evernote needs to be reasonably conveniently accessible very quickly. VERY high security is usually the exact opposite of convenient and quick. Password managers such as 1Password use security strategies that would handicap or prohibit many of the features that make Evernote useful.

 

Some general discussion about Evernote and securing your data (not just on mobile, but the principles apply):

https://discussion.evernote.com/topic/40113-request-passcode-lock-for-evernote-desktop-app-windowsmac/

https://discussion.evernote.com/topic/32488-windows-app-password-protect-lock-it-without-logging-out/

https://discussion.evernote.com/topic/33178-evernote-desktop-passcode-lock/

 

Especially regarding storing sensitive data such as passwords:

https://discussion.evernote.com/topic/58034-feature-request-password-protected-notebook/page-2

 

On encrypting and passcodes, generally protecting your Evernote stuff:

https://discussion.evernote.com/topic/36764-encrypt-a-whole-notebook/

A monstrous thread on the same topic:

https://discussion.evernote.com/topic/23725-request-additional-encryption-options-for-notebooks-and-syncing/page-24

 

And some more about protecting your stuff when it is stored locally on devices:

https://discussion.evernote.com/topic/55168-open-text-in-evernote-data-files/

 

hope you find these discussion I linked to illuminating!

Wow you have been amazingly helpful!! I've never seen someone like you full of kindness! Thank you for your useful and wonderful advice. I'll keep that in my mind and save your advice in my evernote too^^

I'll

[ScottLougheed 1,316]

Haha great! Glad I could help. Of course, nothing in those links is a real, definitive, answer. It's mostly just "food for thought", ideas to mull over as you consider the best way to secure your own personal data. 

 

And, good call on storing this advice in Evernote! 

 

Good luck!