Only allow login with single/main address/username
Do not allow that you can log into the account with every address.
If my account name is john.smith then only allow login with john.smith or john.smith@protonmail.com. Not with finance.john.smith@protonmail.com or any other address.
Perfect would be if you would have the choice what address can be used in order to log into your account.
With the current way you have to give away your login username in order to send emails. Hiding the username from the public would be an advantage, since they would have to guess your username and the password. Not only one of them.
-
iCoExist
commented
I have a lot of different emails, some under my domain and others just under pm.me.
It would be beneficial to allow login to a specific email address, for instance if I use one for work, I can simply login to this email on my work device and have all the email only associated with that account at my fingertips. I realize you can filter out emails based on who they're sent to, however this is just a tedious step in my opinion.
If this is too difficult to implement, I would also suggest perhaps a dropdown or option when logging into a protonmail account to select a specific address to view mail for. Right now, viewing all my email in one box is a bit overwhelming.
-
Anonymous
commented
@ProtonmailTeam someone should care a bit about curating the feature request lists. This idea has several duplicates:
-
Gordon Runkle
commented
Having login credentials that are private and not the same as our email address removes an entire attack face from play and should be a top priority.
-
Boris
commented
I agree with the original poster too!
Having a different login instead of the email you are using (who is public) is not obscurity but it's another 2FA much more convenient and simple to use than the one protonmail provides now.
I'm considering more than publishing your login in the public domain is a security issue!
It potentially exposes you to a bot attack.
Having 5 email aliases means potentially having 5 public logins published for the same account.And having this feature + the 2FA from protonmail will be 3FA!
This feature is definitely missing for me!
-
John Smith
commented
security by obscurity
nah -
UVP
commented
This is a great idea. A user could use their primary id for logging in ONLY, and use aliases to communicate. This prevents the login id from being exposed.
-
The punisher
commented
Rafficer u need to chill and quit trying to hook up with my wife you know Cindy is married, and why are you two sharing ideas just how well do you know my wife mother fucker
-
Shreyas Purohit
commented
I am not sure how much this helps. You have login password, then 2FA and then another mailbox password if you have it enabled. Its probably more useful to increase your password length by 5 characters than try to hide your email. Security by obscurity does not go a long way. I would rather see a feature that allows you to enter a second set of passwords that will open an virtual inbox with empty or some predefined emails which can be used in coerced situations.
-
ProtonmailComments
commented
Agree with the original poster: I'd like to see logins restricted to one's main email address, or to a username
-
spin crisis
commented
Agreed.
-
Anonymous
commented
Username should not be your email.. Look to what fencemail have done..
-
Anonymous
commented
I would like to be able to have a user name that is different then any of my email addresses to be able to log in to the account and have that user name be the only way to log in, keeping my primary email or alias email accounts from being able to log in.
-
Eric Johnson
commented
I do something like this on a company account hosted elsewhere. My primary username is a very obscure word. No email ever goes out with that username, but with the alias for the account.
My main reason for doing this is so that if I start getting lots of spam at that address, I can set up and start using a new alias for any new e-mail and set the old alias to only accept e-mail to those specific users I expect to get e-mail from.
-
BoC
commented
Agree with Joel Drapper
-
Anonymous
commented
Great solution if you want to separate your private and business lives!
-
Anonymous
commented
It would be best to separate the login ID from the email address completely. Or allow that option for people who are especially concerned about hackers.
It would be even better if the feature is optional. Just confuse the heck out of anyone trying to hack in!
-
JP
commented
I'm with Joel. Usernames are part of your online identity and are not considered private.
-
Joel Drapper
commented
This is such a minimal advantage, it would be a waste of time to develop. Adding one more character to your password would do so much more to improve your security.
-
Anonymous
commented
f.e.
email: support@protonmail.ch
username: somerandomname
password: somerandompassSo it will be impossibile to login with email address.
-
Anonymous
commented
I'm using Protonmail Plus. Really like it so far, but am surprised that I can log in to my account using any of my additional email addresses. The main benefit of having additional email addresses to me is, using different ones for different uses. If I don't want to give out my main email address for whatever reason, I can use a different one which I treat as a throwaway. I still see all emails sent to this address, and don't have to deal with creating a new account. What I'd like to see is that these additional email addresses can't be used to log in to your account. You should only be able to log in to your account using your main email address, which you give out to few, if any, people. This would greatly decrease the likelihood of anyone being able to try and log in to your account; if they don't have the correct email address, how can they? Thanks for all your great work.