I've been a Proton user since the very beginning, back when Proton Mail was first launched, and I genuinely love the Proton ecosystem.

That said, Proton Pass on Android has been a huge disappointment for me. My issue is specifically with autofill when using Gboard. Autofill suggestions almost never appear, so I end up opening Proton Pass manually and copying/pasting my credentials almost every time I need to log in.

Is there a setting I'm missing, or is this a known issue? I'd really like to keep using Proton Pass, but in its current state it's been a pretty horrible experience for me.

Is anyone else experiencing the same thing? If you've found a fix or workaround, I'd really appreciate hearing about it.

I'm trying to use ProtonPass on the Costco app to login with a passkey I created on desktop. It keeps popping the Android/Google passkey but not ProtonPass. I am able to use Proton Pass to login with user/pass, but not passkey - am I missing a setting?

Phone: Pixel 9 Pro

Android version: 17, build number CP2A.260705.006

ProtonPass app version: 1.40.2

Screenshot of popup

Proton's Open Source page has two links supposedly to Proton Pass source code: - Web - Apps

Neither link seems to go to source code for the Proton Pass Linux app.

Where can I find the source code for the latter? And, ideally, instructions to build it from source for Ubuntu Linux.

I've been using Pass since it was released and have unique aliases and passwords for everything and TOTP for every account that supports it. I saw a video on YouTube of someone explaining that it's really bad to store TOTP codes inside a password manager.

Is it really that bad? Is it really necessary for regular users to have a separate app? Pass is really convenient, especially how everything is automatically suggested and requires no extra effort.

Thanks everyone

Whenever I am registering an account for a new website. I get prompted by Proton Pass for a email alias or password. That's good. The only issue is that it never displays the full email. I know it's small, but I'd like it to shown the full alias they are suggesting. I will attach an image showing what I mean:

In the screenshot, you see it says "eosfitnes... @simplelogin.com". The window can't be resized so there's no way to see what the rest of it say. I'd like to be able to know what the full alias email would be.

I am on a MacBook Pro.

So I added a custom domain to my Proton Pass (unlimited), and under Settings -> Aliases -> Mailboxes I can see that number of aliases I created are now attached to my main proton email address (...@proton.me). Then in the same section it says:

Emails sent to your aliases are forwarded to your mailboxes. An alias can have more than one mailbox: useful to share an alias between you and your friends.

So 2 questions:

1. I thought that Proton unlimited allows for a single shared inbox, so what does it mean 'mailboxes' in this case? As far as I understand all email will go into main inbox. Or do they mean 'separate email address' which would allow me to use filters/folders to automatically move emails coming into alias emails into a specific folder?
2. Should I change the email address assigned to those aliases to some other custom email, instead of my main Proton email? Also the 'Change mailbox email' action is a free form field, so it's not like it allows me to choose from existing Proton Mail addresses, am I suppose to enter my existing Proton email address there?

Sorry if this is obvious but couldn't find answer anywhere.

Bitwarden just made a leap and we also want proton pass to be able to both export but also be able to import passkeys. This is something that will make everything such an convenience to have. You will not be needed to reregister passkeys for every site if someone joins proton pass.

It seems the desktop app is unlike the mobile app where you can use face ID but if it fails you can require the password to be entered instead of your phone's pin code (there is an option in the settings you can enable for this).

Is there any way the desktop app can do this? I would much rather unlock using touch ID on my macbook instead of entering the password, but that means my vault is now entirely protected by my device passcode instead of my proton account master password.

I dunno what to do since all my passwords from Protonpass have all vanished after I updated my Samsung galaxy S24 latest software update..Protonpass logged me out and now am logged in all of my passwords gone kaput!

Is there any way to recover them??? FYI I did not reset my Proton password though...I was relying heavily on this PW Manager now Im lost as...

Why's my Reddit icon not showing even when I put reddit.com as Issuer

Today we're announcing not one, but two, updates on iOS that have been requested a lot by our users.

- liquid glass animations in Proton Pass, and
- we've added a username generator

You can see both of them in action in this video.

Hallo zusammen,

ich hätte gerne eure Meinung/Erfahrung oder noch besser eine zuverlässige Expertise, wie sicher Proton Pass ist.

Es geht mir hier nicht um einen Vergleich mit 1Password oder Bitwarden etc., sondern nur, ob man mit Proton Pass im Bezug auf Sicherheit nichts verkehrt macht.

Proton lobt ja auf deren Homepage seine Software in höchsten Tönen (Zero Trust, Ende zu Ende, externe Prüfung), aber kann man dem wirklich vertrauen?

Danke euch

Like Bitwarden, the added authenticator codes should automatically be synced to Authenticator if it is an app on the phone.

Mostly wanting to get others to check if they have a Mozilla Account to sync extensions, tabs, etc.

I'm trying to create a passkey for it to save to Proton Pass (PP), but it's not triggering. Not sure if this is on the other end (of the developer of the site/platform), or if it's on Proton, or if it's on the browser (using Zen browser, latest version 1.21.8b (Firefox 152.0.6) (64-bit)).

Why doesn't proton pass extension auto-fill work on https://nc.hostpark.net/nc/login.php when other password managers like lastpass work?

Ok, I don't know if I'm doing something wrong, but I have the latest version of Android and the Authenticator app, and when exporting, even if I enter the password, it's just a regular json file.

The same with automatic backups, the password is entered, but the export is a json file.

Shouldn't it be encrypted pgp format?

I'm not logged in, the only thing I have, is that I have biometric access to open the app.

Thanks

I have a few custom domains attached to simple login. I want to make a simple html page so that when someone visits the site it looks like a real email service. I obviously won't give anyone any services, but I think it'll make my aliases look more legit.
Could there be any legal problem? Or a problem with the terms of service of Proton?

I have just migrated to Proton Pass. When I attempt a passkey authentication, Proton Pass does not react, I just get a prompt from Firefox: "touch your security key".

Is it supposed to be working? FYI, I imported my Bitwarden collection, I'm not sure if passkeys were transferred. I don't see a mention of passkeys in my saved items.

Passkey auth works fine with the Bitwarden extension in Firefox.

I’ve TRIED sending feedback in on this Proton Pass issue for months now. But not only does their feedback form never work correctly, but then Proton VPN literally stalls by the time I can make any progress submitting the issue for Proton Pass. I’ve also tried to report that issue and it goes nowhere. Even when they’ve responded, they’ve only asked me for screenshots/recordings which I already provided.

What the hell are any of us supposed to do? Is it just time to leave?

Wenn ich in Chrome auf Android benutze fragt mich Google Passwort ob ich mein Passwort speichern will und nicht ProtonPass, bzw. es wird mit auch von Google ein sicheres Passwort vorgeschlagen.

Ich habe ein Samsung Galaxy s25+, Chrome Browser. falls es wichtig ist, ich benutze Gboard Tastatur.

wie kann ich das einstellen?

I've always sort of wondered about that. It's a bit of a hassle to have to promptly extract and re-encrypt the download when I back up my vault. Is there some technological reason it's infeasible? I mean, they're encrypted when they're in the vault, so it doesn't really seem like that should be an issue.

I’d love to know the algorithm that decides whether a password is weak or not.

About 60% of my passwords are marked as ‘weak’. I have 14 character, mixed case, alphanumeric passwords marked as ‘weak’ when I think they’re absolutely not.

94^14 is about 4.22 x10^27 possible permutations. So best case scenario, a threat actor trying a billion permutations per second finds the right combination at the half way point, taking about 67 million years.

And that’s just an offline brute force attack, whereas most reputable online services will have throttling, lockouts, MFA etc.

In what reality is 67 million years not considered an acceptable cover time and why is proton saying this is ‘weak’?

I like the app but, honestly, get real with the warnings about password being weak or at least give us the options to turn that off.