Only allow login with single/main address/username
Do not allow that you can log into the account with every address.
If my account name is john.smith then only allow login with john.smith or john.smith@protonmail.com. Not with finance.john.smith@protonmail.com or any other address.
Perfect would be if you would have the choice what address can be used in order to log into your account.
With the current way you have to give away your login username in order to send emails. Hiding the username from the public would be an advantage, since they would have to guess your username and the password. Not only one of them.
-
andar1an
commented
Would like to be able to designate login user id so only 1 can be used.
I think it would also be nice to designate a list of aliases and rotate login Id at a specific time interval so that it is harder to guess.
-
Bobo
commented
Proton, please implement this immediately. You're increasing the attack surface exponentially for EACH user - thus increasing the RISK exponentially for each user. There's no reason that each alias should allow login permissions; this ought to be a technically easy fix. Please, do this ASAP, to protect your users AND your reputation!
-
DZFr
commented
This suggestion should be merged with that one (https://protonmail.uservoice.com/forums/284483-proton-mail-calendar/suggestions/47611028-choose-which-alias-can-log-in-to-proton). That’s more than 1000 votes altogether…
-
D
commented
I like how you can create multiple custom emails for one account. I would like an option to toggle off being able to log in with those active custom emails.
For Example
Account is xyz@proton.mecustom email: johndoe@pm.me
I don't want the custom email johndoe@pm.me being able to log into my xyz@proton.me account.
That way would feel more comfortable giving out custom email without someone trying to hack the account because they never got the real login username/email.
As of right now I have a free account to give out email without compromising my main account.
-
Dorothy commented
I have about 40 email addresses (amazon, paypal, youtube, etc.). I currently have chosen this approach over aliases. But now I have a bunch of different ways a person can login to my account, when I'd rather it be limited to one or two (me or my wife, for example). It would be nice to have a checkbox next to every address saying whether a person can use it to login or not. Set them all 'on' by default, and turning them off gives a scary warning - and of course you can never turn off the master account address.
-
Sub_Level
commented
Should allow a control to limit logins to only primary or selected user IDs.
-
cristian
commented
+1
-
Spiff
commented
Please do it now! No question!
-
Spiff
commented
Critical. Obvious. I feel stupid for not knowing this, and Proton has now lost a lot of my respect. You must allow users to choose which email addresses can be used to log in, or only allow log in with the primary/original. Otherwise this “don’t let anyone know my ‘real’ email address” is a load of ****, because they are all our “real” email addresses.
-
MS
commented
I have just voted on 3 very similar requests across this forum. Please tally up the numbers and see how highly requested this feature is. Why isn't it at least UNDER REVIEW? Please, please, please review this or advise why it isn't possible. Thank you.
-
MS
commented
I share the concerns expressed by other users. I have purposefully kept my main proton account email secret to limit the attack surface to my proton services. It was a little shocking to learn that logins could be attempted from any proton alias that I use. I hope this will be addressed soon.
-
T D commented
Same issue, it's a big security issue.
-
Angel
commented
+1000
This is why I don’t use Proton as my main email: I can’t rely on an address that grants direct access to my most private data.
-
Rob
commented
This is literally the fourth most highly requested feature in the accounts/payments category (if you lump requests for various different crypto into one) and yet no response from Proton. Please implement this ASAP! It can't possibly be that difficult to do so!
-
Leo
commented
I'm just transitioning to Proton and I'm glad I discovered that the extra emails can be used to log in before I put them in the wild! My goal is to keep my main account email hidden, but I would much prefer being able to use my additional addresses (without the ability to use them to log in) than use random aliases. ONLY being able to log in with the primary account email seems ideal!!
-
babajaga
commented
+1
-
manastulpar
commented
+1
-
manastulpar
commented
+1
-
[Deleted User]
commented
This is a huge hole/bug imo
-
Bruno Almeida
commented
How is this not implemented yet?! 2017!? For a platform that is supposed to be safe/sec first