Only allow login with single/main address/username
Do not allow that you can log into the account with every address.
If my account name is john.smith then only allow login with john.smith or john.smith@protonmail.com. Not with finance.john.smith@protonmail.com or any other address.
Perfect would be if you would have the choice what address can be used in order to log into your account.
With the current way you have to give away your login username in order to send emails. Hiding the username from the public would be an advantage, since they would have to guess your username and the password. Not only one of them.
-
Jack L.
commented
Just started subscription and created few aliases - then discovered that I can login with them, defeating the purpose.
I guess I will go back to paid Outlook subscription.
-
C
commented
I really need this feature. Otherwise, I can’t use my Proton account the way I had planned.
-
GuessMyUniqueUsernameNotMyEmailAddress
commented
Completely agree with recent comments. Long overdue. This was why I did not renew my Proton subscription. Hopefully Proton will see sense and go back to fixing the basics before launching new features.
-
GuessMyUniqueUsernameNotMyEmailAddress
commented
Completely agree with recent comments. Long overdue. This was why I did not renew my Proton subscription. Hopefully Proton will see sense and go back to fixing the basics before launching new features.
-
pmuv17c
commented
Indeed, and this should reflect the username too. If the alias email for login is pmuv17c@protonmail.com then the username login should also switch to pmuv17c. That way, users can have a specific unused email solely for login.
-
Addy
commented
It is important to use a login that is not associated with an (main)email address. This is an additional step in preventing password guessing.
-
Jesse
commented
Glad this is finally under review. took long enough!
-
Rob
commented
I'm so excited this is under review! This is the only missing Proton feature keeping me from fully switching over to Proton for everything and ditching Microsoft and Outlook! Proton, please make it happen!
-
Rob
commented
I'm so excited this is under review! This is the only missing Proton feature keeping me from fully switching over to Proton for everything and ditching Microsoft and Outlook! Proton, please make it happen!
-
pmuv17c
commented
From a security perspective, it would be ideal to choose which alias can be used for log on and be able to exclude the primary address/username altogether.
-
boundless227
commented
I didn't realize ALL of my active addresses can be used for login until now. That's terrifying.
-
Anonymous
commented
Login needs to be an ***unique ID***, not tied directly to an email/alias. Certainly not allowing any email/alias. Ideally, a separate login ID..
-
Clarky
commented
C'mon - even Microsoft allows this - I find it bizarre that 8 years after the request went in you still haven't implemented this. There's no reason to explain why it's important - just be better Proton - I just paid for a year of unlimited and can't believe I'm stuck with a system that allows any alias to log in. It's nuts.
-
[Deleted User]
commented
Freakin' MICROSOFT allows this. You can disable any or all of the aliases from allowing login (well, except for one of course). C'mon Proton, you can do better here.
-
Woof9906
commented
Wow guys, just took a paid plan. This is basic feature I'm surprised it's not implemented yet. I want to keep my login secret
-
Rob
commented
This is possible on Outlook, why can't we get this option on ProtonMail?
-
thirteen
commented
Please allow the users choose which email address can be used to log in, so only the primary address and/or selected aliases work. As currently every alias can sign in is a major security risk because leaked or exposed aliases widen the attack surface. Most of us use aliases only for communication, we dont need that to be used for log in.
-
uservoice22
commented
It would be really important to be able to choose which addresses can be used to log in.
Aliases should only be used to send and receive emails, not to become additional access points to my account. This way, I can use different aliases without the risk of someone exploiting them to try to gain access.
With the current system, I am forced to “reveal” my login username every time I send an email, because anyone can try to use it to authenticate themselves. If, on the other hand, I could keep my main address hidden, security would be increased: an attacker would have to guess both the correct username and password, not just one of the two.
-
Lucas
commented
Not even recognizing that this issue exists and just ignoring it altogether is out of my mind. Maybe Proton is not that private after all? I mean, why would a service with such wide privacy claims even be allowed to grow to such a large extent and maintain their users online safety at the same time? I doubt the US would allow that tbf. If Proton really mean that they are taking the privacy of their users seriously, I believe that the possibility to limit which email addresses can log into their users' accounts is not unfair to demand.
-
anon
commented
Perfect would be if you would have the choice what address can be used in order to log into your account -> this should be the solution to prioritize please
it could be a great way to keep the account secure, even in the case of someone accidentally leaking you email address, you may actually need to create an address just for a specific service. As i learned the hard way that a governmental service that the online registration was forced on to us and we actually need, blockes the registration with the protonmail aliases.
So in this case if you create an email for that purpose you do not want that address to be used for login in proton ecosystem. So you can have you login address always private even if you communicate the other addresses you used.