Evernote cloud note-taking service users can now protect their access via a two-step verification system, although this extra security measure is currently only available to paying customers (Evernote Premium and Business).

Those who have a free account will benefit from two other security features. Firstly, the web interface now informs users about which IP addresses have logged into the Evernote account at what time and, secondly, Evernote's web account settings now allow users to revoke the access permission of any Evernote application that logs in automatically; this will cause the password to be requested when the application is next launched.

After enabling the two step log in, users will be asked for a password; the service sends these passwords to the user's designated phone number via SMS text messages. If a user's access data falls into the wrong hands, The two-step verification feature will still protect the account. If a user loses access to a smartphone with a number registered with Evernote for obtaining the one-time password (a mandatory requirement), Evernote say they run the risk of being permanently being locked out of their account, though there are one time backup codes issued to users that can be used to regain access.