Jump to content
  • 693

Password Protected Notebooks


EvernoteLover9

Idea

Recommended Posts

  • 0
  • Evernote Expert

Actually, you can choose to log out and then your password is required to access your data. A very basic password feature had always been in place. Just most users don't use it. ;)

The encryption of individual notebooks is a much more complex thing which would, I think, require a bigger piece of work since it would affect the whole structure of Evernote data. So, what we have available is whole account level or text level.

Link to comment
  • 0
  • Level 5

If is beyond my comprehension why people use complex apps, but obviously do not know anything about how they work in first place.

EN relies in a lot of server side functions to perform advanced (= subscribers) features. If you really encrypt - without EN holding a master key -, these functions will stop to work. Probably this is why EN resorts to allow only selected text inside of a note to be encrypted.

This does not mean that your data is in the big wide open of the web, readily read by anybody. Search engines can’t access the user notes. The server content is encrypted, just EN bots allowed to read it to perform their magic. To protect the account, there is the usual user & password combination, plus for all accounts 2 factor authentication. It is highly recommended to enable it.

If in a situation where you do not want the creation of local data, on desktops you can decide to delete your user data on leaving the app. If you can’t install an app (work computer), you can use the web client instead.

Personally I would like to get a feature to select an entire notebook, and encrypt it. Maybe we will see something like this one day.

Link to comment
  • 0
  • Level 5

You don't give a damn, you don't know how it works, and in consequence you document your ignorance here.

First principle of information processing: GIGO - Garbage in, garbage out.

So we make it easy: Just take a look at which services are executed on the EN server working on the content of your notes. You don't need to understand how, you just need to look what is processing your data there, trying to make sense of it. Now put a solid encryption on top of it - of the kind where EN does not hold a master key any longer.

Easy to understand: The services stop to perform magic.

About EN staff commenting here: They rarely do, and (up to now) they have never told why they did NOT implement A or B. They implemented C and D, for everybody to see and use, and that is it, take it or leave it.

If you want an answer from EN, ask support. I would be surprised if you come out of it with more insight than today. They just tend to be much nicer than me, because they honor this sort of support professionalism. Since I am just another user, not related to EN, I can say as I do.

Link to comment
  • 0
  • Level 5
1 hour ago, JKST said:

If Evernote’s issue is that encryption would prevent their server side functionality then I would be happy to share a common key with the application or allow some admin access some how.  My desire to password protect a notebook is mainly driven by a desire to prevent casual unauthorised observers, …

 

OK, maybe some reading stuff:

https://evernote.com/intl/en/security/

Read especially the parts about transport encryption and encryption at rest. It means your data is encrypted both while transferred between client and server, and while stored on the server.

These functions work as you wish: They encrypt, with a key shared between you and EN. The key is generated when you open your account, and used from that moment on all data. It works automatically and in the background, which may be the reason may users are not aware of it.

To make sure the data on your local drive is encrypted, use the tool provided with your operating system. It is called BitLocker for Windows and FileVault for Mac. It will encrypt the data on your drive, only unlocking them when you are logged in. Encryption is usually enabled as well on mobile devices.

Conclusion: The type on encryption you want to have is already in place.

Hint: To further beef up account security, make sure you use a unique, strong password and have 2FA enabled.

 

 

 

 

Link to comment
  • 0
  • Level 5

Password protected notebooks would be good, but in daily use they would be a burden. If you put everything in there for daily use, you would have to unlock and lock up again. Looks would probably serve better for less frequently used, but important stuff.

There is a much easier solution for your specific issue: Set up a second, Free account. Use a different password for it, and use it for the documents you want to pass on. Put 2FA on your main account - without a code generator it is practically impossible to break.

Link to comment
  • 0

This is a must have feature for me, but given the number of people that have requested it and the age of this request I can assume this feature is never coming. I really like EN, but there are some minimum requirements these days and it looks like they aren't keeping up.

Link to comment
  • 0
  • Level 5

Explain why this is a minimum requirement for you ? If we don’t have use cases, the arguments have been exchanged already about it pretty much.

About whether it will arrive one day: I won’t bet against your assumption…

Link to comment
  • 0

Hello, as many others here, I use Evernote for both professional and personal content. I would need make sure that the two are not mixed, e.g. when I share the screen with colleagues. Having a notebook that can blocked and then unblocked only via password would give me peace of mind. Of course this means that locked entries do not have to appear in searches or any other visible way. 

Link to comment
  • 0
  • Evernote Expert
1 hour ago, gc-7p183 said:

Of course this means that locked entries do not have to appear in searches or any other visible way. 

And this is one of the challenges. One of the major strengths of Evernote is its search functions. If notebooks were locked and unsearchable then when you ask to locate a particular note it would not be available. If, instead, you want search to be accessible only when a particular notebook is unlocked then that would be a significant piece of work to implement. Feel free to suggest it. I can see the reason why you might want it. But don't expect an early answer ;)

Link to comment
  • 0
  • Level 5

No search …

No OCR …

No filtering for notes …

It makes completely no sense to drop content into EN when all these functions are crucified for a subjective feeling of security. A folder on a drive or cloud server would do when these functions are not needed.

Objectively all user data is encrypted in transport and on the server. The access happens only by bots (programs) that use the master key EN holds to perform the miracles that makes EN stand out. For me no lack of anything.

For a restricted use a encrypted notebook would be a nice addition - for a few documents, no more.

Link to comment
  • 0

This is preventing me from buying Business. How does EverNote not have this? I'm trying to switch from OneNote to EverNote and this is one of the few things holding me back.

Link to comment
  • 0

My thoughts on the matter:

  • It would already make me happy if I could password protect text with the web version (I'm using linux so there is no desktop version).
  • Protecting entire notes would be great. I would use that on a handful of notes that contain extra private stuff (passwords etc.).
  • For me it would be enough to just put a password on a note, without the note being really super encrypted or save from a person with technical knowledge. I would like the password to protect from a person happening to use my computer with evernote open and clicking around. So just superficial protection would be enough for me. 
  • I'd be curious what's the difficulty in adding such a feature.
Link to comment
  • 0
  • Evernote Expert

The whole encryption model in Evernote is at best flakey. Far better to use an external encryption program. For the very, very few times I need to encrypt I put the content in a program such as word or a PDF and use the encryption there. That ensures that the note content never appears unencrypted inside Evernote. Remember that prior to encrypting the unencrypted text is synchronised. Using and l an external program works with the web version too.

For the simple solution you suggest you can simply log out of Evernote and your notes are then password protected.

Link to comment
  • 0

So, nine (9) years now and this super important and dev-wise, super simple feature is not added yet. I don't see any reason on sharing more possible scenarios on why and how this is so important for people who want to use Evernote for serious reasons, but yeah... there are plenty more scenarios to share. But yet, after nine (9) years, we're still on step zero.

Link to comment
  • 0
  • Level 5

Possible ways to look at it:

  • The app is still living and growing, so obviously no need for that feature.
  • We now waited so long, it must have moved up on the priority list year by year. Where is it ... ?

I think we all who would like to get this extension probably underestimate the technical side of implementation, and at the same time overestimate the sales potential of such a feature.

I would like to see it coming, but I do not really expect to see it. Meanwhile, I use another solution (my password manager, having a "secure notes" section) to store that little amount of information that I don't want to entrust to my EN account.

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...