Evernote advertises itself as the best note-taking app. It goes far beyond just taking notes, however. Evernote lets users organize their notes into searchable notebooks, clip and send webpages, connect with collaborators and colleagues, as well as edit and format text to a level that rivals many mainstream word processors. This huge suite of features takes Evernote out of the realm of a note-taking app and turns it into a formidable workflow and collaboration tool.
A notepad app with focus issues
The devices you use, how you use Evernote, and how often you use Evernote will help us determine which betas you may be asked to participate in. Evernote Business customers aren't eligible for this beta program. However, there are occasionally Evernote Business features that are available for beta testing outside of this program. Continue with Google. Remember me for 30 days. Get organized and productive with the leading note-taking app. Download Evernote for Windows, Mac, iOS, or Android and create your free account. Every synced note in your account is stored in Evernote Web. In Evernote for Mac and Windows all of your notes are also stored in a local database on your computer’s hard drive. Conflicting changes. Occasionally, two copies of the same note will be found to be in conflict. This could arise when a given note is edited in two different. The Mac available on the Evernote site is still 6.3 and one would never expect a version change from 6.3 to 7.9, maybe 6.3 to 7.0. If you believe it's an error, do like I did on apps I have found they had wrong data. This happens probably because both versions of Evernote have the same name.
Evernote expands the typical notepad app with plenty of additional features, but more doesn’t always mean better.
Evernote is, in a single word, comprehensive. At its heart, Evernote is a note-taking app. You can have the app open on your desktop, and quickly access it to jot down text or notes. You can then save your notes into different “notebooks', organized in whatever fashion you desire. This is an area where Evernote shines: its organizational features are comprehensive, allowing you to search your documents and other files by keywords and categories. For business owners and office workers, this is a major plus. Evernote uses cloud-based storage, which allows you to quickly share and sync files between multiple contacts and devices.
Evernote offers a large library of sleek templates to suit your needs, from itemized lists to invoices and beyond. It's an exhaustive selection that makes it easy to quickly convey information without having to worry about taking the extra time to format a document in a way that makes sense. The features don't stop there: Evernote offers an instant messenger client, a web clipper that lets you save and send cached webpages, presentation tools, and document scanning capabilities. It's a comprehensive suite that rivals like Bear can't compete with.
The app has much to offer... arguably, too much. No matter what you use Evernote for, there will doubtless be features that you won't be using, which leads to the app feeling cluttered and clunky. The interface can be overwhelming for new users and feels crowded, which means you'll probably take a while to get the hang of using Evernote. Some of the extra features feel gimmicky and unnecessary, like a drawing tool that lets you translate sketches and doodles to your notepad. It's for this reason that Evernote feels like an app that doesn't know what it wants to be. It's not quite a notepad, not quite a workflow tool, and not quite an organizational tool. It's easy to see the difference when using other, sleeker note-taking apps like Bear or Simply Note. They may lack Evernote's features, but the overall experience feels much more directed and user-friendly.
Users should also be aware that there are a few privacy concerns to consider before installing the app. Evernote forces users to create an email-linked account that allows the app to access data to join. You won't be able to simply open the app and start typing. Evernote also has a controversial privacy policy that allows their team to read user's private documents at random in order to improve certain app features.
Though Evernote previously attempted to apply this policy to all users, they have since backtracked after public outcry and made the policy opt-in only. This is indicative of a generally lax attitude in regards to privacy on the part of Evernote; notes aren't encrypted and are stored on Evernote's cloud servers, meaning your data is vulnerable to third party access.
If you're using Evernote to store sensitive data, you may want to think twice before using the app to store your material.
Where can you run this program?
Versions of Evernote are available for Mac, Windows, iOS, and Android systems.
Is there a better alternative?
Bear does exactly what Evernote doesn't: it pares down additional features to provide a simple, streamlined note-taking app. The interface is easy to use and understand, search functions are quick, and it does away with much of the additional features that bog down Evernote. Simply Note does the same, paring down features even further and offering a no-frills, minimalist text editing app that's perfect for jotting down and organizing quick notes.
Our take
Evernote is a mixed bag. It isn’t a simple notepad app by any means; you won’t really be able to pop open the app to jot down a few reminders. Evernote sits somewhere between a full-fledged word processor and a notepad, and does lend itself well to those who like to keep their notes well organized.
Should you download it?
You’re probably safe to take a pass on Evernote. The app’s organizational features and templates are major pluses, but the bloated features make it hard to use.
7.13
Evernote makes products that are the go-to apps for millions of people worldwide accomplishing their most important work. It's important to us that your experience be both private and secure. We proactively test our products for security issues and regularly squash bugs that could create vulnerabilities in our apps.
Here you'll find a list of the most recent security bugs that we've fixed. We'll update this page anytime we release an app that has a security update. (Note: Reporting began on March 1st, 2015. Fixes released prior to this date do not appear.)
To stay up-to-date with security patches, check back here or in our app release notes.
Evernote for Mac
| Ticket Id | Description | Fixed Release |
|---|---|---|
| MACOSNOTE-28956 | Added com.apple.quarantine attribute to attachment files to prevent potential one click execution. | Evernote for Mac 7.13 GA |
| MACOSNOTE-28914 | Fixed a potential dylib hijacking issue. | Evernote for Mac 7.12 GA |
| MACOSNOTE-28840 | Fixed a regression and added the prompt before opening any file:// URIs. | Evernote for Mac 7.10 Beta 1 and 7.9.1 GA |
| MACOSNOTE-28634 | Fixed a local file path traversal issue on attachment previewing. | Evernote for Mac 7.6 |
| MACOSNOTE-12400 | Added a prompt before opening any file:// URIs. | Evernote for Mac 6.6 |
| MACOSNOTE-18729 | Improved NSConnection usage with NSProtocolChecker to protect the cross application IPC channel. | Evernote for Mac 6.3 |
Evernote for Windows
| Ticket Id | Description | Fixed Release |
|---|---|---|
| WINNOTE-20063 | Fixed a stored cross site scripting (XSS) vulnerability in modified external web links. | Evernote for Windows 6.19 GA |
| WINNOTE-19941 | Fixed a vulnerability in the protocol handler, specifically Evernote client installed on Windows 10, 7 or 2008 can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. | Evernote for Windows 6.18 beta 2 and 6.17.7 GA |
| WINNOTE-19568, WINNOTE-19620 | Fixed a stored cross site scripting (XSS) issue in rendering attachment filenames. | Evernote for Windows 6.16 beta 1 and 6.16 GA |
| WINNOTE-19377 | Improved security by always generating HTTPS URLs to Evernote services. | Evernote for Windows 6.15 beta 1 and 6.15 GA |
| WINNOTE-19299 | Fixed an issue in versions 6.4 - 6.7 where the app would send authentication tokens over HTTP when contacting certain portions of the Evernote Service. The vulnerability did not affect note content, usernames, or passwords and those continued to be securely encrypted in transit. | Evernote for Windows versions 6.7.6 (Hotfix) and 6.8.6 (First GA release) |
| WINNOTE-15870 | Fixed a potential stored cross site scripting (XSS) issue on Google Drive integration. | Evernote for Windows 6.4 |
| WINNOTE-15637, WINNOTE-8970 | Fixed DLL hijacking/preloading vulnerabilities on installer and other binaries. | Evernote for Windows 6.3 |
| WINNOTE-14610 | Delete the local data in the original folder when the local folder configuration is changed. | Evernote for Windows 6.1.2 |
| WINNOTE-13340, WINNOTE-13475, WINNOTE-13472 | Fixed several stored XSS (cross-site scripting) issues in activity view and other web views. | Evernote for Windows 5.9.5 |
| WINNOTE-8997 | Added a warning to users before opening local files. | Evernote for Windows 5.8.11 |
| CE-735 | Fixed a stored XSS (cross-site scripting) issue in Related Context by properly rendering the context note snippet. | Evernote for Windows 5.8.4 |
Evernote for iOS
| Ticket Id | Description | Fixed Release |
|---|---|---|
| IOSNOTE-27747 | Fixed an issue that saved screenshot might show up prior to PIN lock screen for a short time period. | Evernote for iOS 8.16 |
| IOSNOTE-28074 | Fixed a PIN lock bypass issue. | Evernote for iOS 8.2 |
| IOSNOTE-22342 | Updated the keychain items accessibility attribute in iTunes/iCloud backups. | Evernote for iOS 7.14 |
| IOSNOTE-19688, CP-3280 | Fixed the WebViews that disables same-origin policy using file:// URLs. | Evernote for iOS 7.7.7 |
| IOSNOTE-19338 | Upgraded vulnerable SDWebImage library to 3.7.2. | Evernote for iOS 7.7.2 |
Evernote for Android
| Ticket Id | Description | Fixed Release |
|---|---|---|
| DRDNOTE-30711 | Fixed an issue where certain third party content providers were identified by their package names rather than package signatures. | Evernote for Android 8.12.2 |
| DRDNOTE-31085 | Fixed an issue where the Widget4x1SettingsActivity/Widget4x2SettingsActivity activities may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31086 | Fixed an issue where the NewPhoneMainActivity activity may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31087 | Fixed an issue where the ContractNoUiActivity activity may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31088 | Fixed an issue where the URIBrokerActivity activity may be exploited through a malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31089 | Fixed an issue where the AuthorizeThirdPartyAppActivity activity may be exploited through malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31090 | Fixed an issue where the ClipActivity activity may be exploited through malicious Intent. | Evernote for Android 8.12.2 |
| DRDNOTE-31033 | Fixed an issue in an exported Activity that might be exploited through malicious Intent. | Evernote for Android 8.12 |
| DRDNOTE-30932 | Fixed a PIN lock bypass issue in Android's Google Search integration. | Evernote for Android 8.11 |
| DRDNOTE-30589, DRDNOTE-30753 | Fixed a PIN lock bypass issue. | Evernote for Android 8.9 |
| DRDNOTE-24142 | Fixed a PIN lock bruteforcing issue. | Evernote for Android 7.9.9 |
| DRDNOTE-23054 | Fixed a potential stored cross site scripting (XSS) issue on Google Drive integration. | Evernote for Android 7.9.5 |
| DRDNOTE-20794, DRDNOTE-22660 | Fixed a PIN lock bypass issue. | Evernote for Android 7.9.4 |
| DRDNOTE-20842 | Fixed an issue that some WebView could ignore SSL certificate errors in debug/internal builds. | Evernote for Android 7.6 |
| DRDNOTE-9500, DRDNOTE-11183 | Move notes stored in SD card to internal memory. | Evernote for Android 7.0.7 |
Evernote for BlackBerry
| Ticket Id | Description | Fixed Release |
|---|---|---|
| EFB-1836 | Fixed an issue that PIN lock can be bypassed. | Evernote for BlackBerry 5.6.2 |
Web Clipper 7 for Chrome
| Ticket Id | Description | Fixed Release |
|---|---|---|
| CLIPPER-2673 | Fixed several issues by validating events, adding clickjacking protection and etc. | Evernote Clipper 7 for Chrome 7.12.2.1 |
| CLIPPER-2582 | Fixed an issue that could cause browser's same origin policy to be bypassed. | Web Clipper 7 for Chrome 7.11.1 |
| CLIPPER-1371 | Fixed an issue regarding automated notebook suggestions. | Web Clipper 7 for Chrome 7.2.1 |
Web Clipper 6 for Chrome
| Ticket Id | Description | Fixed Release |
|---|---|---|
| CC-3860 | Fixed a potential cross site scripting (XSS) issue. | Web Clipper 6 for Chrome 6.13.2 |
| CC-2561 | Fixed a potential cross site scripting (XSS) issue while clipping from a malicious site. | Web Clipper 6 for Chrome 6.9.2 |
| CC-1729 | Fixed a potential HTML injection issue through the extension's login page. | Web Clipper 6 for Chrome 6.7 |
| CC-1693 | Fixed a potential stored cross site scripting (XSS) issue in releated search results. | Web Clipper 6 for Chrome 6.6 |
Web Clipper 6 for Safari
| Ticket Id | Description | Fixed Release |
|---|---|---|
| CC-3860 | Fixed a potential cross site scripting (XSS) issue. | Web Clipper 6 for Safari 6.13.2 |
| SAFARICLIP-992 | Fixed a potential stored cross site scripting (XSS) issue in releated search results. | Web Clipper 6 for Safari 6.7 |
Penultimate for iOS
Evernote 6 Mac
| Ticket Id | Description | Fixed Release |
|---|---|---|
| IOSPENULT-4056 | Updated adonit SDK to fetch all web content through HTTPS. | Penultimate for iPad 6.2 |
Evernote Food for iOS
| Ticket Id | Description | Fixed Release |
|---|---|---|
| IOSFOOD-4320 | Upgraded vulnerable SDWebImage library to 3.7.2. | Evernote Food for iOS 2.5.1 |
| We have ended support for this product and will not be providing any future security updates. | September 30, 2015 |
Skitch for iOS
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Evernote For Mac 64-bit
Skitch for Android
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Skitch for Windows Touch
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Skitch for Windows
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Evernote Clearly
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |
Evernote for Pebble
| Ticket Id | Description | Fixed Release |
|---|---|---|
| We have ended support for this product and will not be providing any future security updates. | January 22, 2016 |