Jump to content

Idea

Recommended Posts

  • 0
On 28/8/2018 at 20:38, Shane D. said:

Ciao a tutti,

Potresti aver notato che tutti i thread che richiedono Notebook protetti da password sono stati uniti in questo thread, indipendentemente dalla specificità della piattaforma.

(Questa è una richiesta separata dalla possibilità di proteggere con password l'app Evernote stessa)

Ciò è stato fatto al fine di consentirci di quantificare e qualificare meglio le richieste degli utenti e di amplificare la loro voce.

Sebbene ciò non significhi che questa è una funzionalità che arriverà, sicuramente vorremmo inoltrare feedback / sentimenti degli utenti ai nostri vari team.

Andando avanti, inserisci qui tutti i commenti e i voti per i Notebook protetti da password!

Questa impedisce l'utilizzo di evernote! criptare notebooks interi o singole note(con contenuto è fondamentale!)

Share this post


Link to post
  • 0
3 minutes ago, RgaDawg said:

Encrypting text is certainly useful, but clumsy
Encrypting an entire Notebook would be so very awesome

Encrypting the entire database would be so very secure

Share this post


Link to post
  • 0
1 hour ago, DTLow said:

Encrypting the entire database would be so very secure

You can do this on local disk with a tool like VeraCrypt, though that doesn't help with EN servers.  Mount the volume that contains EN (VeraCrypt speak), use EN as per usual for however long, dismount the volume when done and your EN data is just a blob on the disk.  You can do this for your whole disk if you like, not a place I need to go.  FWIW.

Share this post


Link to post
  • 0
On 9/13/2019 at 3:40 PM, CalS said:

You cado this on local disk with a tool like VeraCrypt, though that doesn't help with EN servers

I have no concern with security on my devices; I have protection at the OS and Evernote account levels

My concern is with database security at the server level.  I require encryption before I allow the upload of sensitive data to the servers

Share this post


Link to post
  • 0
16 hours ago, DTLow said:

My concern is with database security at the server level.

My understanding is that your EN dB is encrypted at the server level already, as well as transport.

Share this post


Link to post
  • 0
3 hours ago, RgaDawg said:

My understanding is that your EN dB is encrypted at the server level already, as well as transport.

At the server, Evernote data is "encrypted at rest"; but not encrypted while the data is being processed (OCR, indexing, ...)

Also, users do not hold the encryption key to their data

Share this post


Link to post
  • 0

+1 for this feature request. I can't keep a daily journal or save personal things because there are things I wouldn't like my BF to see.

Share this post


Link to post
  • 0

Would love to see the ability to encrypt a note or notebook this would allow us to keep secure images, tables and attachments. 

And with Evernote wanting to sell a business platform this would help keep information from certain users on a business plan viewing notes etc
And give piece of mind to security and IT teams for the safe storage of information offsite. 

Share this post


Link to post
  • 0

This thread was created in 2013 and there are many replies on 2018. My current posting date is Oct 2019 and still this basic feature is not implemented. This is very basic and important feature for privacy and still not done yet in Evernote. Are all Developers or Support members sleeping?

  • Thanks 1

Share this post


Link to post
  • 0
1 hour ago, TheTechGuy said:

This thread was created in 2013 and there are many replies on 2018. My current posting date is Oct 2019 and still this basic feature is not implemented. This is very basic and important feature for privacy and still not done yet in Evernote. Are all Developers or Support members sleeping?

Indeed!

Share this post


Link to post
  • 0

I submitted a comment to this thread a long time ago. I'm frustrated that we can't encrypt our EN databases on Google Cloud with our own security keys. It's not enough that the data is encrypted in transit. And it's not enough that EN databases are encrypted at rest by Google Cloud. Users need to hold the encryption keys. Otherwise, I can't put sensitive information in my EverNote notebooks. I sent an email to EverNote support yesterday pointing out the fact (100% certain) that the addition of encryption would triple their sales. Here's the response:   "Our development team regularly reviews feedback submitted through our Forums in hopes of creating the best product and experience for our users. We can’t commit to getting all feature requests into the product.  I hope this information was helpful and solved the issue."

Share this post


Link to post
  • 0
34 minutes ago, AWS_solution_architect_DC said:

Otherwise, I can't put sensitive information in my EverNote notebooks.

You can certainly put encrypted attachments into an Evernote note. Not as convenient, but I know for a fact that some folks do this.

35 minutes ago, AWS_solution_architect_DC said:

 I sent an email to EverNote support yesterday pointing out the fact (100% certain) that the addition of encryption would triple their sales.

That sounds like something that would be interesting to all of us. Care to share?

 

Share this post


Link to post
  • 0
3 hours ago, AWS_solution_architect_DC said:

Users need to hold the encryption keys. Otherwise, I can't put sensitive information in my EverNote notebooks

I also believe my sensitive data has to be encrypted

There's noting preventing us from encrypting our data
Evernote has a text encryption feature, and I use the native encryption in attachments; pdfs, office/iWork documends, ...

Share this post


Link to post
  • 0
On 10/10/2019 at 11:27 AM, TheTechGuy said:

Are all Developers or Support members sleeping?

Nobody is sleeping. Developers develop the features that they're told to develop. Support folks report when there's some news. The company -- obviously -- hasn't prioritized this feature, so the developers are working on other stuff, and there's no new news to report here on the feature.

Share this post


Link to post
  • 0
10 hours ago, AWS_solution_architect_DC said:

I submitted a comment to this thread a long time ago. I'm frustrated that we can't encrypt our EN databases on Google Cloud with our own security keys. It's not enough that the data is encrypted in transit. And it's not enough that EN databases are encrypted at rest by Google Cloud. Users need to hold the encryption keys. Otherwise, I can't put sensitive information in my EverNote notebooks. I sent an email to EverNote support yesterday pointing out the fact (100% certain) that the addition of encryption would triple their sales.

I fully trust the encrypted transmission and Google's could platform to keep data encrypted on servers. I don't think Google has ever had any issues with data breeches, encryption breeches. Encrypting an entire Notebook, or especially a note, rather than just selected text would be convenient, but It's just not that hard to select text > encrypt for the sensitive pieces. You can even (windoze) Ctl+A to select entire note, encrypt. However, it will not encrypt if there are images, attachments embedded.

This feature REQ has been around a very long time and my take is that EN development team just doesn't see encryption breeches as much of a real threat. Encrypting selected text is just for client side and I have my PC pswd protected in addition to encrypting selected sensitive text. Just my 2 cents worth.

Share this post


Link to post
  • 0
8 hours ago, RgaDawg said:

I fully trust the encrypted transmission and Google's could platform to keep data encrypted on servers. I don't think Google has ever had any issues with data breeches, encryption breeches. Encrypting an entire Notebook, or especially a note, rather than just selected text would be convenient, but It's just not that hard to select text > encrypt for the sensitive pieces. You can even (windoze) Ctl+A to select entire note, encrypt. However, it will not encrypt if there are images, attachments embedded.

This feature REQ has been around a very long time and my take is that EN development team just doesn't see encryption breeches as much of a real threat. Encrypting selected text is just for client side and I have my PC pswd protected in addition to encrypting selected sensitive text. Just my 2 cents worth.

I also trust the EV and Google encryption, but there's still a local privacy matter, at least that's my only concern. For example, I've my digital personal journals in EV and I don't want my boyfriend to read it in my PC. Encrypting every note for this kind of things is just overkill. If I could encrypt the entire notebook, that would be much easier.

  • Like 2

Share this post


Link to post
  • 0
5 hours ago, Zenaida said:

but there's still a local privacy matter, at least that's my only concern. I've my digital personal journals in EV and I don't want my boyfriend to read it in my PC.

My computer is  secure
I use password protection for my computer login (each user)

Also password protection for my Evernote login

  • Like 1

Share this post


Link to post
  • 0
24 minutes ago, DTLow said:

My computer is  secure
I use password protection for my computer login (each user)

Also password protection for my Evernote login

I have seen this argument raised in the past against the need for this feature, and clearly the majority of people who have asked repeatedly for this feature don't find it compelling. If you don't see the need to provide an additional level of client side security on certain notebooks then fine, but a lot of people do. If I step away from my computer for a few minutes and the screen lock doesn't kick in, I don't want others to gain access to this information. Sure, I could cut the screen-lock time down but then I end up unlocking it a million times a day. I also don't want to log out of Evernote every time I use it as most of the information that I keep isn't sensitive. I am also sure that I would forget to logout and again the information in left open. Computer login and Evernote login capabilities are possibilities but they certainly aren't convenient or realistic in my environment. All we want is a simple password, how hard can it be?

  • Like 1

Share this post


Link to post
  • 0

It is extremly disheartening to read the email in September from Evernote's CEO.  He was proudly talking about progress they have made so far in 2019. In January he had announced 2029 would be a year they would "run dark" by not pushing out intermediate small updates so their brainiacs could concentrate on a major rethink/overhaul of the entire evernote platform and services. NOWHERE in his laundry list of things they are working on is anything about encryption.  I use EN because i use it on multiple devices i use daily. While i use their clunky single file encryption to lock my password vault file...by far the most important thing i do with EN...it does not work on each platform the same way.  Worst thing for me is i cant edit the file through the windows browser portal. I can read it OK using the file's pwd, but cant edit it. That really undercuts what i need the vault for...to keep up with the neverending requirements to change pwds frequently on some websites. Nor can i add new user ids with a pwd which happens frequently. Having to remember the my new info and wait until i get to the "right" platform is EXACTLY what i need a vault for in the first place. If i could remember the darn thing i would'nt need a vault to begin with

Share this post


Link to post
  • 0
50 minutes ago, Abter1 said:

NOWHERE in his laundry list of things they are working on is anything about encryption.

Agreed; additional encryption resources does not seem to be a priority for Evernote

>>While i use their clunky single file encryption to lock my password vault file...

I wasn't aware of a "single file encryption" feature

I encrypt/decrypt file attachments using the feature in the native applications

>>Nor can i add new user ids with a pwd which happens frequently. 

I don't know what this means

Share this post


Link to post
  • 0

From how I see it, it may be no priority because it would not be easy to integrate.

Basically each note is something like a little web page. A notebook is a collection of pages. If the notebook would need to be encrypted, it would need to be de-cryptable on all devices. This would mean to get this into all clients, plus build a robust key-exchange process to make sure the lock is there when the user inserts his key (the private code to decrypt).

From the structure of EN it seems it is much easier to encrypt something in a note (=web page) than a whole structure of web pages.

This is not to tell it would not be good to have it (I added my vote to this quite a while ago), or that I do not think it should be pushed up the list. It looks like one of the changes that do not go well when you try to de-complex and straighten your existing code base.

P.S. Even when it is possible to manage passwords in EN, I think there is much more to a decent password manager than just an encoded space into which I can save my passwords. If I have this need, I would always go for the real stuff. There are no-cost solutions that are quite powerful, and others that will cost a buck, but offer more comfort / functions. Personally I use 1Password and would not switch to EN even if full encryption would be available there.

  • Like 1

Share this post


Link to post
  • 0
6 hours ago, DTLow said:

My computer is  secure
I use password protection for my computer login (each user)

Also password protection for my Evernote login

Many thanks for the advice! 

My PC is secure too, I mean my User is password-protected. However, I´m the only User here because I really don't see the need of creating a new Guest user that would be barely used. It´s not as if my BF asks, "hey, what´s the PC login so I can run a music playlist or check something in Google" and I won't tell him (I don´t have NASA-worthy information in here haha).

All in all, to be honest, this feature is not really a deal-breaker for me - I can certainly leave without it. I know it is important for many people though. (Actually, I tested OneNote for about a week - ON does have this feature, among other cool features like text-to-speech - but I switched back to EN and I´m happy about my decision - I was mainly frustrated by ON tags and sync issues.

What I'm really doing is, I removed the EV desktop shortcut, removed the taskbar shortcut, and removed the "Recently Used Software" feature in the Start Menu. I added a keyboard shortcut to EV and I make sure of closing the EV window when I´m leaving my PC.  So no, I didn't password-protect EV login because I want to access it quickly too. My main thinking is, if he doesn't know that I'm using this app, there's no reason for him to check it out of curiosity lol. 

5 hours ago, Pastor-Luke said:

I have seen this argument raised in the past against the need for this feature, and clearly the majority of people who have asked repeatedly for this feature don't find it compelling. If you don't see the need to provide an additional level of client side security on certain notebooks then fine, but a lot of people do. If I step away from my computer for a few minutes and the screen lock doesn't kick in, I don't want others to gain access to this information. Sure, I could cut the screen-lock time down but then I end up unlocking it a million times a day. I also don't want to log out of Evernote every time I use it as most of the information that I keep isn't sensitive. I am also sure that I would forget to logout and again the information in left open. Computer login and Evernote login capabilities are possibilities but they certainly aren't convenient or realistic in my environment. All we want is a simple password, how hard can it be?

Indeed!

I found the "note presentation" feature in EV quite cool; I don´t see myself using it like never ever, but surely many people find it useful. The same with password protected notebooks in EV - a feature 450+ people have voted up for. 

I also don´t see myself adding a password in EV login because I want to access it quickly. It´s just overkill for the kind of information I store in there.
 

2 hours ago, PinkElephant said:

Even when it is possible to manage passwords in EN, I think there is much more to a decent password manager than just an encoded space into which I can save my passwords. If I have this need, I would always go for the real stuff. There are no-cost solutions that are quite powerful, and others that will cost a buck, but offer more comfort / functions. Personally I use 1Password and would not switch to EN even if full encryption would be available there.

Yep, I also don´t believe one app should be used for everything. EN is a note-taking app, not a password manager. I've used Lastpass for about 2 years and I wouldn´t store my passwords in Evernote either.  Lastpass autofills login info automatically, it generates secure passwords, and has other login-security features that EV would never match, because EV isn´t designed for that!
 

Share this post


Link to post
  • 0
3 hours ago, PinkElephant said:

Personally I use 1Password and would not switch to EN even if full encryption would be available there.

 

6 minutes ago, Zenaida said:

I've used Lastpass for about 2 years and I wouldn´t store my passwords in Evernote either.

I've been using Bitwarden for password management, although Apple has sherlocked the function with keychain

I see no problem with storing passwords in Evernote if they're encrypted. Evernote has text encryption, and I use the native encryption of file attachments

Share this post


Link to post
  • 0
17 minutes ago, DTLow said:

I see no problem with storing passwords in Evernote if they're encrypted. Evernote has text encryption, and I use the native encryption of file attachments

Yep, but what about autofill and password generation?

Haven´t used file attachment encryption but definitively will check it out!

Share this post


Link to post
  • 0

DTLow asked "

>>Nor can i add new user ids with a pwd which happens frequently. 

I don't know what this means"

 

I keep a PWD-protected file in evernote with a list of all my log-in IDs and pwds.  There are quite a number of them;  vendors I do business with, utilities I pay bills to, by beloved backgammon site.  I frequently have to change the stored pwds for a particular site, and also have to enter login info for a new site periodically  My preferred way to access evernote is via the web access portal from a Windows computer.  I can open the file fine (after giving it the proper pwd), but cannot edit it via the Windows portal.  I can do it from my phone and tablet, but my fat fingers don't type nearly on  a small screen as well I can on a full keyboard.

Share this post


Link to post
  • 0

Using EN for Password management is like using a Multitool for a serious handcrafting job: It will do, but without excellence, and it will not spark joy while doing. I think there are many good reasons for encrypting entire notebooks - for storing passwords the note encryption feature is already enough, if one decides to use it for this purpose.

Share this post


Link to post
  • 0

Premium user for over 5 years and this has been my number one request for a long time. Please can we password protect entire notebooks. That was we can use Notebooks the way there were intended while securing sensitive subjects.

Share this post


Link to post
  • 0

I support this Idea v. strongly. Evernote may want to acquire or partner with Saferoom to proceed ahead with the implementation of this feature.

  • Like 1

Share this post


Link to post
  • 0

Needs improvement:  I would like to see Evernote's encryption capability increased.  Currently I can only encrypt text,  I would like the option to encrypt images, full pages and notebooks

  • Like 1

Share this post


Link to post
  • 0

This would be a great feature.  I was just looking for a way to password protect a whole notebook.

Share this post


Link to post
  • 0

I'm going to start by saying that: I think what people actually want when they say Privacy is client side encryption.

I've been an Evernote user for over ten years and I can happity imagine myself using it for a lifetime. Except for one key issue: my data is shared with Evernote.

I can't have a private journal or store any other potentially sensitive information in Evernote becuase that information is sat unencrypted on someone elses datastore.

The legal field has taken the stance that privacy essentially ends at the walls of our homes, data stored in the cloud doesn't have the same protections as a written diary kept at home.

Without attempting to quantify how much of a person's data is 'private' we can safely say it's non-zero.

As much as I love evernote I'm often looking on the market to find an alternative that is client side encrypted. If I ever find one I would migrate immediately, in fact I would probably become overnight a "one true fan" of that product and tell everyone I know about it because I wanted their business to succeed.

I love the idea of evernote - and the excellent implementation. I would dearly love for Evernote to also cater for my need for true privacy with some of my data.

Please implement client side encryption based passwords.

As a side note I'm guessing that Evernote's implementation of 'encrypted' data is fundametally flawed. I know of one person who lost in excess of a million dollars from storing credentials to access his accounts in 'encrypted' evernote notebooks. Would I be right in thinking that enencrypting a section of a note in one notebook broadcasts the unencrypted data to all connected devices? And of course to Evernote too.

Share this post


Link to post
  • 0
44 minutes ago, ryan1234 said:

I'm going to start by saying that: I think what people actually want when they say Privacy is client side encryption.

I'm using a Mac and iPad   
I have no concerns about my "client side"; my devices are secure   
My concern is for when my leaves my device for storage in the cloud

>>I know of one person who lost in excess of a million dollars from storing credentials to access his accounts in 'encrypted' evernote notebooks. 

I make sure my sensitive data is encrypted before storing in Evernote sync'd notebooks 

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...