Hello,
during the last few months, I have received multiple emails from the Evernote support stating that someone logged into my account outside from my home country. The emails were legit, coming from "account.evernote.com". After each email, I've quickly changed my password and - after the first one - activated 2FA. However, sadly to no avail. Even though 2FA is activated on my account and I am using a randomly generated password, I've still gotten emails regarding foreign logins - the latest came this morning.
How is this possible? What can I do?
To me this looks like either an Evernote bug or a major oversight in their security.
Thank you and best regards
Edit: I was not using any VPN to connect to Evernote, so this is not the issue.