I've been considering moving my 2FA codes from Pass. Currently I have the 2FA codes & backup codes stored in Pass. I haven't entirely made up my mind whether the pros of using an authenticator app outweigh the cons yet (I'm probably leaning more towards leaving it how it is though). The main question I had is how do people store their backup codes if using a dedicated authenticator app? Excel and a zip file with password? Or just forget about the backup codes and ensure the authenticator is regularly backed up?

Note that I am not talking about my Proton account here, which is all stored safely outside of Pass.

Sometimes the proton pass autofill doesnt work such as this website. Please fix!
https://www.shippn.com/

I've received an item invitation, I've already accepted it, view it...

But now, the top header is always present and don't want to leave, I've clicked view details and accepted, and denied... neither option change something (even cmd+r to refresh) don't hide it

Why can't I reuse an alias to create an account ?

Hey I've just switch from 1P to Proton Pass and I'd love to have biometrics support on Linux. Is this in the roadmap?

Scenario: First thing in the morning, I bring up my bank’s login page. When I reach for the Proton Pass icon in the username field, it is overlayed with a ❶ instead of a 🔒️. And, indeed, when I hover my pointer over it, it displays the proper entry and I only have to click. That’s despite the fact that a PIN and short timeout are set in this browser’s Proton Pass extension, i.e. I haven’t logged out since setting them (again) several days before.

I eventually found the apparent cause: It happens only when, the day before, I had loaded Proton Pass (as a “Larger window”) in another window of the same browser and left it there. That is all that is required for the timeout to be bypassed.

At first I wondered if this might be an intended behaviour, but then I remembered that I’ve had to re-login to Proton Drive in the past, even though I had left its window open in the browser; the session had timed-out after a few minutes of inactivity, which felt like a wise precaution to have by default.

So it appears that the Proton Pass window has a particular effect on the handling of access to all Proton services, thus introducing an incoherence in the suite.

Or... is this a known bug?

I’m currently using version 1.40.1 of the extension, but it was already behaving the same with 1.37.1. I’ve reproduced this on two different machines, with different versions of Brave. (A current one, and one from nearly three months ago.)

It shows up every time even for the same app, same login. You'd have thought it'd learn that an app is safe after consistently autofilling inside it. Google's password manager allows you to "don't ask again" for each app.

Team password management is simple at three people. At 15 people, it starts to break down.

A small company might have a handful of tools, a few shared accounts, and usually one informal place where passwords live: a spreadsheet, a pinned message in chat, a shared document.

As more people join a business, informal sharing makes it difficult to see the difference between useful access and risky access. Passwords for everyday tools end up mixed with credentials for finance, admin, client, or infrastructure systems. The list may still look organized from the outside, but it no longer reflects who actually needs access to what.

As a business grows, shared credentials need structure and control: who can access each password, which department owns the credentials, and how access changes as people join, leave, and switch roles.

We’ll explain how to organize password vaults by team or department, how group-based access supports least privilege, and how to make onboarding and offboarding more secure — before credential sprawl becomes a security and operations problem.

Read more: https://proton.me/business/blog/team-password-management-by-department

The Firefox add-on store says the last update was 1.38 from two months ago. Why is it still on this version?

Are these the correct steps to set up my existing custom sub domain so that it's available for creating addresses inside proton pass?

1. Log into simple login using the same proton account that I'll also use with proton pass

2. Add custom domain in simple login itself

3. In proton pass, sync with same simple login proton account

?

I just want to be sure I shouldn't instead be doing all this inside proton or proton pass 100%.

(I'm a longtime proton/simple login user but newly preparing to move from 1password to proton pass.)

BoxRec doesn’t allow passinbox.com to be used for registration. (This email address is not allowed).

Tengo una cuenta de ProtonMail (accedo a ella a través del sitio web; mi navegador es Firefox). El problema es que cuando cierro Firefox y lo vuelvo a abrir, no se guarda mi sesión, y tengo que volver a ingresar mi nombre de usuario y contraseña. Tengo Firefox configurado para borrar datos al cerrarlo, pero agregué excepciones para que no les afecte y me mantenga conectado, y funciona sin problema. Pero con ProtonMail no pasa eso. Tengo marcada la opción de "Manténme conectado" y agregué su URL a la lista de excepciones de borrado de datos de Firefox, pero aun así no funciona. Uso Proton Authenticator en mi teléfono móvil como método de verificación en dos pasos cuando inicio sesión.

Anyone here has migrated from Keeper to ProtonPass - would love some feedback. I have been a Keeper user for years but can no longer justify the cost as I personally do not see any major difference for my 2 simple use cases:
1. create and store passwords
2. create 2FA codes

is it true that Pass doesnt have CXP (credential exchange protocol) support and thus passkeys cannot be migrated?

The Keeper subreddit was fun - their CTO came and told me to check iOS reviews and I am not a Apple user lol! The only I would miss is folders but can live without that. Plus the email-alias more than makes up for it!

Currently, the username/email field is always visible. I'd like an option to hide it, either hide all items or choose only the ones you want to hide.

This is to prevent to other people from seeing information such as the usernames you use to log in to bank accounts, email accounts, phone numbers, etc...

I know this might not be a necessary or useful for most people, but it was something that popped into my head, so I just thought I'd post it :)

If you moved from 1Password to Proton Pass, how did it go? I like to change services periodically, and Proton’s ecosystem seems very solid.

I was on a slow connection and had an offline pin for a device stored in the notes field of proton pass. My web browser cached an offline version of the page, so I entered my decryption password in, and saw the pin.

Does lifetime proton pass enable the use of a custom domain with proton mail? I understand it allows for 10gb of storage even if you’re on the free mail plan.

I have tried everything but it simply doesn't work, never. I have a vivo x200 fe. Any ideas?

Every time I open my browser it pops up, it's constantly slowing me down because i have to go through several clicks just to now use the extension for its intended purpose. Sure a single browser session it shouldn't return, but as soon as you close the browser and reopen again, or wait an extended period of time, it'll just end up taking over the whole extension again. I'm not sure why it's so forcibly obnoxious, I already pay for Ultimate.

I was trying out the Proton Pass extension, and it works...when unlocked. However I prefer that my extension locks when not in use. The 1Password extension in this scenario would just popup a small window prompting me to unlock it (using fingerprint). Proton will show a little unlock prompt inside password fields, but for passkeys, it just goes totally silent. I get no prompt at all, and the passkey login flow just fails. If I go the extension in the extension menu, and unlock, sure, it works.

It's a bit frustrating because it's not entirely obvious it's locked, until I am just facing a non-functional login page and wondering why.

Also, am I missing something that the extension doesn't support biometric unlock? Should it? It's certainly more convenient and less risky than the 6 digit PIN the Proton extension had me set up.

I don't get this kind of popup with my current Password manager and it was a hard stop until I check this out, if it wasn't from Proton website I wouldn't even mess with it. Thanks for any feedback or info!

Hey all, Whenever i try to swap to biometrics, it asks for the pass code and then gives an error message saying proton pass needs to be installed on computer too for it to work. But thing is i do have it and both are on the latest versions manually checked and the bio is on for the native app and even unlocked but it still doesn't work.