+1

As data breaches grow more and more common, this is becoming a larger and larger concern. Everyone who has posted here gets it, having a username that is distinct from the original email address is another important step in ensuring the safety of our accounts in light of those breaches. The Proton team surely understands this as they have developed an application, Protonpass, where unique logins and passwords are encouraged! The recommendation to implement this change was made a decade ago. I'm starting to think Proton is more concerned with selling new features instead of focusing on the security issues directly at hand. Put the feature improvements aside for a bit and give the security minded users (which is why a lot of us are here giving Proton money instead of other services), what we're asking for. Or, a reasonable explanation on why it isn't possible so that this decade-old request can be put to bed.

+1

I can see this idea has been shared multiple times over the years explaining its importance, I have no idea why Proton team is not bothering to consider this or atleast respond on it.

Please give us this or explain why its unimportant

This is a critical security issue. Even a free outlook account doesn't have this flaw

Why does Proton spent time on a "Sentinel program" for better protection against account takeover, while this super obvious one (IT IS 8 YEARS OLD!!) is not implemented..?! It is in the best intrest of you to generally be "less of a target" in the first place!!

Please consider this

I'm disappointed after purchasing Proton Unlimited that I can log in with any email. This seems like a significant security issue.

A global setting to "only allow login with default email" should be developed.

This should be implemented

I would like to have this as well, since it helps a little to avoid anybody even trying to log into your account, because they wouldn't even know what email you are using, because none of the ones that you use for emails would work.

A basic privacy and security thing to do would be to not give away any login credential information to anyone...

But of course if everytime we send an email (main address or not) we also send half of our login credential to the recipients, then something have failed in the whole idea to create a private and secure service!

That's exactly what I thought the premium plan with 15 mail-adresses would provide. I kept my mail-accounts seperate for security reasons, however it would be much more handy to have one login which is secured properly and provides several mail-aliases which can't be accessed from "outside".

Totally agree!

I've just set up two new addresses on the phone app, and it seems rather unwieldy to actually see them all on there. Not sure what's going on.

This would be extremely useful. You only need one way in, and it doesn't even need to be one you send email from. Having all of them active merely provides more attack surfaces.

We don't need more doors to access into our account.
It would be awesome if we can choose 1 email or username only to login.
Which most of us would most likely have something different to the ones that are given out to the world. (whether its willingly or unwillingly)

I would suggest having the ability to disable sign in from all alias or only allow sign in from the Account Username. Similar to Microsoft. This reduces the ability for someone with an Alias to attempt to hack an account. The reason I want alias' is to separate emails for shopping, dining, bill pay and entertainment. These alias I don't need them to login and frankly I don't want them to log in. they are often sold without notice. I don't want to publish to the outside world what I use to log into proton mail.

If we could only login through an alias which nobody else knows and have the password just in our memory, our email account becomes virtually impervious, save for vulnerabilities on the product itself. Please make this happen Proton team!

+1