Ask HN: Is Evernote creating confusion with password reset e-mails?
Subject: Your Adobe password may have been compromised, please don’t reuse it
Body: There were published reports recently of a security breach at Adobe that may have exposed private information, including Adobe passwords, email addresses and passwords hints of millions of users. The list of compromised Adobe accounts has been uploaded to the web. We compared this list to our user email addresses and found that the email address you used to register for an Evernote account is on the list of exposed Adobe accounts.
Evernote has not been compromised and is not connected to this incident, but if you used the same password for Adobe and Evernote, then you should change your Evernote password now.
Here are some additional tips for keeping your information in Evernote, and other websites, safe:
• Avoid using simple passwords based on dictionary words • Never use the same password on multiple sites or services • Never click on ‘reset password’ requests in emails — instead go directly to the service For additional security, you can set up Two-Step Verification for your Evernote account in Evernote Web Settings. For more information about Two-Step Verification, read our blog post:
http://blog.evernote.com/blog/2013/10/04/two-step-verification-available-to-all-users/
If you have any questions or concerns, Evernote Support is here to help.
The Evernote Security Team
Now, this caused me some initial alarm, until I read it completely.
What does everyone else think? Is Evernote going to far overboard here or is their proactive e-mail welcome?