This was just carelessness on Evernote’s part. Now, before you panic that someone is attempting to phish your Evernote credentials with a craftily-designed email, just relax. Uh-oh, in the same email that Evernote tells users not to click on ‘reset password’ requests sent via email, they have clickable links.Īnd what might make some recipients pause for thought is that the links don’t go directly to, but instead link to a site called mkt5371. That’s a very sound piece of advice, because of the obvious threat – after millions of Evernote customers had their usernames and email addresses stolen – of phishing email attacks.īut take a closer look at the email that Evernote has sent out, with the subject line “Evernote Security Notice: Service-wide Password Reset”: Never click on 'reset password' requests in emails - instead go directly to the service.

The email goes on to give some password advice – including a warning: After being hacked, Evernote, quite responsibly, has sent out emails to its users informing them of the security breach – and letting them know that it has decided to reset all passwords.

What is evernote for paypal