Evernote
Evernote stores searchable notes, documents, pictures, recordings and tasks, and syncs them across devices. It’s made by Evernote.
Criminals have used its name in fake downloads or scams, so get it only from evernote.com.
What it is
People use Evernote for school notes, household records, meeting notes and project planning. Notes can contain text, pictures, files, recordings and tasks.
It can read files you attach to notes. Recording features use microphone access, while meeting detection also asks for screen and system audio access. Evernote says meeting detection happens on the device and does not send detection audio or screen data to its servers.
The official app is available from Evernote’s website and the Mac App Store. Notes are private by default, but the service stores your data in the United States. Evernote says it encrypts data during transfer and on its servers.
Who makes it
Evernote makes note-taking software and has been owned by Italian technology company Bending Spoons since January 2023. Its legal name is Evernote Corporation. Its website is evernote.com.
Is it the real one?
Every Mac app carries a signature from the developer who made it. Apple checks who the developer is before handing out the certificate, and macOS refuses to open an app whose signature has been tampered with.
HARD hasn’t yet recorded the signature on a real copy of Evernote. Its Mac app shows who signed the copy you have.
Its bundle ID, the name macOS knows it by, is com.evernote.Evernote. Download it only from evernote.com or the Mac App Store, not from an ad or a link someone sends you.
Fakes. In February 2026, Bitdefender reported that criminals used shared Evernote notes as fake software installation guides linked from malicious Google ads. The notes instructed Mac users to run Terminal commands that installed MacSync information-stealing malware.
What it connects to
In normal use, Evernote talks to these places on the internet. A firewall that asks before apps connect, like the one in HARD’s Mac app, will show them.
| Address | Why |
|---|---|
accounts.evernote.com | Account sign-in |
api.evernote.com | Connecting to the note service |
www.evernote.com | Signing in and syncing notes |
notifications-service-http.svc.evernote.com | Notifications |
share.evernote.com | Note sharing |
update.evernote.com | App updates |
What it can see
macOS asks you before an app can use these. You can change them any time in System Settings → Privacy & Security.
| Permission | What it’s for |
|---|---|
| Microphone | Records voice notes and meetings, and detects microphone activity for meeting reminders. |
| Screen & System Audio Recording | Captures internal audio for remote meeting recordings and detects browser-based calls. |
| Notifications | Shows meeting recording reminders. |
| Camera | Takes pictures to attach to notes; Mac app metadata declares camera access. |
| Contacts | Older Mac app metadata declares access to select, add or update contacts. |
Security record
Problems with Evernote or Evernote in the last three years, newest first. Keeping the app up to date covers the ones that were fixed.
| When | What happened | Source |
|---|---|---|
| Evernote fixed CVE-2023-50643 in version 10.74.1; Electron’s maintainers disputed the remote-attack claim and said attackers already needed to run commands on the Mac to abuse the app’s permissions. | ↗ |
References
- Evernote — Mac App Store apps.apple.com
- A New Phase in the History of Evernote evernote.com
- Does Evernote work on Apple Silicon? — Mac app metadata doesitarm.com
- Download Evernote evernote.com
- Add a file to a note help.evernote.com
- Audio recording in Evernote help.evernote.com
- Meeting Detection help.evernote.com
- Evernote Terms of Service evernote.com
- Evernote Security Overview evernote.com
- Update the Evernote app help.evernote.com
- Evernote release notes evernote.com
- Using Evernote with VPNs, Adblockers, and firewalls help.evernote.com
- Evernote 10.74.1 release notes evernote.com
- Electron statement regarding runAsNode CVEs electronjs.org
- Bitdefender: Hijacked Google Ads push fake Mac software downloads via Evernote pages bitdefender.com