After rolling out its password manager to a limited number of users in April, Proton has finally released the service to the general public. The tool, called Proton Pass, uses end-to-end encryption to keep your usernames and passwords away from third parties, including Proton itself. It also lets you create and store randomly generated email aliases that you can use in place of your real address.
I don’t care which password manager you use, as long as you use one (and it’s secure). It’s such a game changer.
Honestly, it’s just better to use bitwarden, as they have more reputation, or keepass and syncthing if you want to keep your passwords off the internet completely
It looks pretty good. I’m well ensconced in bitwarden, but I’d totally check this out too.
Security wise, there´s probably no reason to consider leaving Bitwarden. Feature wise, bitwarden already has almost all bases covered when it comes to being a password manager. UI is where it would probably be easiest to get ahead. Pricing on the other hand seems a bit expensive on Protons side. The have the “limited offer” now for 1€ a month, which is already 2€ more per year than Bitwarden, but they write that the regular price would be 4,99 a month, which would be beyond rough compared to BW.
I’d assume there’s a price tier that includes their other premium services though I think? So you’d also get multiple email addresses with them, 500gb cloud storage, and their VPN’s premium features. Not everyone will want all that but if you do it seems like a good deal as a bundle.
For extra 2€ a year you get to keep your passwords overseas……might be something worth considering.
If you have IOS, then their password manager has all the features proton has, fake emails, 2 factor encryption, for free, these are paid features on proton.
On the other hand proton is open source. and can use it on non apple devices, android, linux, windows.
Proton open source is mainly a marketing facade.
All the code is in a giant repo all mixed (drive, email, and so on) with no documentation whatsoever. Technically it’s open source, but you can’t take it and self host the service like you can do with a real open source product
Edit: I just watched and it’s even worse than I imagined. No server components are open sourced and the client parts are hard coded to access the official servers. It’s like if I say “this car is open source. Except the engine, all the parts are proprietary design to work only with the secret engine, and anyway there aren’t any instructions, good luck with your diy”
I guess to me, being open source is more about the ability that it can be audited. I don’t care whatsoever about hosting my own proton mail / drive / vpn (which I use constantly all the time) but I do care if it’s audited and secure.
That said, I know they claim to be open source and audited, but I’ve never double checked those claims. Probably should.
The point of open source isn’t necessarily that you can self host it for free. If you want to only use services you can host yourself that’s fine, but that doesn’t make proton’s model wrong or bad.
As for the server, you have no way to verify they’re running what is in the repo, so you have to trust them anyway. Open sourcing the server-side components doesn’t accomplish anything other than making their spam filtering easier to bypass.
In models like this (and bitwarden), all the magic happens on the client (which IS open source), so the server can be dumb and more or less untrusted. If you use the Open source bridge application you don’t even have to trust the JavaScript coming from the server. I can compile the bridge and mobile clients myself and have reasonable confidence that things haven’t been tampered with without having to trust the server despite it being proprietary.
I use Protonmail and I really love it. Has anyone had experience with their password manager?
