Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Secure Evernote for Mac application data Apps
Evernote is a combination of an application and a cloud based service to save notes, reminders, images and other data that can be accessed from a Mac, PC, iPhone or other mobile devices. This hint is about encrypting the local data store from the Mac version of the software.

Here's how to do it:
  • Quit Evernote from the Menu bar shortcut.
  • Make an encrypted disk image using Disk Utility and mount it. (You may want to put it in your login items to open on login.)
  • Move the folder: ~/Library/Application Support/Evernote folder over to the disk image.
  • Use the SymbolicLinker Service (10.6) or plug-in (10.5 and earlier) or make the symbolic link yourself via Terminal in the disk image from the moved Evernote folder (just making an alias does not work).
  • Move the Symbolic Link to: ~/Library/Application Support/ to replace the original Evernote folder and be sure it's named 'Evernote.'
  • Restart Evernote.
[crarko adds: I don't use Evernote, but I tested this with other files. The author originally used the commercial software Knox for the secure store, and that's a slicker method, but it also works using an encrypted disk image. This method obviously has applicability for things besides Evernote, but test carefully for whatever application(s) you use it with. SymbolicLinker is a nice find, too.]
    •    
  • Currently 2.27 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (22 votes cast)
 
[9,548 views]  

Secure Evernote for Mac application data | 8 comments | Create New Account
Click here to return to the 'Secure Evernote for Mac application data' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Secure Evernote for Mac application data
Authored by: Reaper Man on Jul 23, '10 07:56:53AM

It seems nice to have the local data protected, but the data sent to the Evernote servers is still in the clear. It's sent using SSL (via HTTPS), but the data on the other end is still in the clear.

Any one with access to the Evernote server database can view that data.

I'm still looking for a cloud solution where the data is secure by me on my machine(s) and is not in the clear anywhere else.



[ Reply to This | # ]
Secure Evernote for Mac application data
Authored by: PatrickS on Jul 23, '10 08:39:14AM
Wuala does encryption on the cloud side.

.

Edited on Jul 23, '10 08:40:44AM by PatrickS


[ Reply to This | # ]
Secure Evernote for Mac application data
Authored by: LewInVT on Jul 23, '10 09:02:41AM

Many cloud services will keep data encrypted. Users would like Evernote to offer encrypting of notes and notebooks within the program and on their servers so they can safely sync sensitive documents with iPhones and iPads.

Currently only plain text can be encrypted. Evernote needs to get with it and allow encrypting of PDFs, JPGs, etc.



[ Reply to This | # ]
Secure Evernote for Mac application data
Authored by: Reaper Man on Jul 23, '10 09:52:15AM

I think many of the services offer "encryption on the cloud side."

So what does that mean? Who has the password? Who has the keys? Oh, they do, not you.

When a subpoena is filed for your files, they can still get the data in the clear. The company will be obliged to hand over the keys.

Real security means that I have the keys and no one else. It's a shame that these services don't realize that this is really best for their own protection as well.

Your recommendations are great, and I'll keep reviewing them one day, I'll either do it myself, or I'll find the solution.



[ Reply to This | # ]
Secure Evernote for Mac application data
Authored by: Reaper Man on Jul 23, '10 09:54:12AM

I guess, I should review before responding. :-)

Wuala looks like the kind of service I am looking for.

Thanks!



[ Reply to This | # ]
Secure Evernote for Mac application data
Authored by: jasonsurfing79 on Jul 26, '10 08:12:22AM

Given the client-side encryption, Wuala is certainly more secure than most other cloud storage sites (and I like that).

However, for my own edification (since the topic of subpoena'ing of files was raised), how difficult would it be for one to break the encryption, given that it was encrypted client-side?

After typing this question, I realize that it makes me look like I'm trying to store some sort of illegal/confidential files - although I somewhat sadly have nothing that interesting or valuable...just wondering.

---
Jason Russ



[ Reply to This | # ]
Secure Evernote for Mac application data
Authored by: hobson1957 on Jul 23, '10 12:42:13PM

The alcohol and pad did not work due to a mechanical problem with the Mighty Mouse. Turns out, the axis mechanism that control the x-y movement of the mouse had a broken magnet. What an experience trying to open the Mighty Mouse! This is one problem that needs to go back to the drawing board. Why hasn't anyone addressed this? My remedy is to use a Logitech optical mouse. I know it's for a PC, but this is the best fix, for sure!!!



[ Reply to This | # ]
Secure Evernote for Mac application data
Authored by: murrayhenson on Jul 25, '10 04:21:48AM

This tip/trick works for nearly any application with sensitive data but instead of creating an encrypted disk image for each application it's far easier - and far more secure - to create a single encrypted, mountable image with TrueCrypt for Mac.

If you're not sure which other applications' data to move, just ask yourself the following question: "If confronted by a customs/police officer, other representative of the law or if my computer was taken by an unknown/hostile person... would I want them to have easy access to this data?"

You should probably already have TrueCrypt and that's probably where anything sensitive should live. The downside is that there is a small performance hit in accessing your data though it is usually not noticeable unless there is a LOT of disk activity e.g. multiple programs simultaneously reading or writing a considerable amount of data. Also: if you lose your TrueCrypt'd image's password then the data stored within is inaccessible forever.



[ Reply to This | # ]