Proton Pass & Authenticator
837 results found
-
Emergency Features If Password Forgotten
I would like to see contingency measures integrated into Pass app in the even you're locked out of your account, but still logged into the Pass app. Something like enter offline mode and allow access during next required login with just a security key.
3 votes -
Scheduled export from the application and/or export function in pass-cli
This would allow us to automate backups without having to remember to do it manually.
3 votes -
Windows credential manager secrets --> proton pass
A direct, end-to-end way to migrate Web and Windows user credentials from the Windows Credential Manager (WCM) into Proton Pass is a practical and secure approach.
A system that bypasses these intermediaries requires a secure pipeline that extracts, translates, and cryptographically encapsulates the data locally before injecting it into the Proton Pass ecosystem.
Windows Credential Manager distinguishes between Generic credentials (where passwords are retrievable via the Win32 CredEnumerate/CredRead API by the owning user) and Domain/Web credentials (where passwords are often opaque even to the owning user through the API).
To programmatically extract these credentials without a third-party application, the system…
3 votes -
Download all attachments of an object
Add a feature to download all attachments (e.g. zip) under an object
3 votes -
KeepassXC
Added to password import
3 votes -
Account information for Login with Credentials
Proton is an outstanding tool for storing secrets, passkeys, and more.
But I also have another problem that a password manager could solve.What "Login with" a provider have I used on this particular page?
Some pages support Google, others Facebook, others LinkedIn, and even GitHub.
In one case, it can be all 4 options; in another, only GitHub.Remembering what I've used to log in to the page is quite challenging.
It would be good if Proton could store information so that I could choose the "Login with" button and even the account used in this provider, as, for…3 votes -
Option to approve or notify when a process accesses the SSH agent
Similar to 1Password, it would be awesome to get OS-native prompts to approve/notify whenever a process tries to access the SSH agent and one of its keys.
See https://developer.1password.com/docs/ssh/agent/security#authorization-model
3 votes -
support Ascendo Data vault password Manager in the password import list of password managers
support Ascendo Data vault password Manager in the password import list of password managers
3 votes -
pass-cli possibility to exclude/deselect vaults from specific clients
I want to use the CLI on my headless server to manage certain API keys. I don't want all of my vaults be accessible and exposed there, so I would like to exclude all other vaults. This is currently not possible. I thought of another way: sharing my vault and creating a separate proton account that is running on the server. This is however not an option, since I would have to pay for this second account as well, since proton does not offer CLI to free users.
Please make it possible in the CLI to only access certain vaults…
3 votes -
Give Proton Pass a Pretty UI!
I’ve fully migrated to Proton Pass from another password manager. Functionally and security-wise it’s excellent, but the iPhone interface which I use the most, feels very plain and hard to read. The vault list is just a flat text list with no dividers or subtle background differences, making it difficult to read. Some gradient or visual separation between logins would make a huge difference.
About icons, around 60% of my logins use generic ones. Users should be able to add their own, and automatic icon detection could be improved. Visual recognition is key for quickly finding entries.
The Categories section…
3 votes -
Proton Authenticator shares attack surface with Proton Pass account login — defeating its purpose
I want to raise something that I think deserves more attention in the security design of Proton Authenticator.
The current setup creates a single point of failure: if an attacker compromises your Proton account credentials, they gain simultaneous access to both your passwords and your TOTP codes stored within the ecosystem. This effectively collapses a two-factor authentication scheme into a single-factor one from the attacker's perspective — the eggs-in-one-basket problem.
The core value proposition of 2FA is that credentials and the second factor exist in separate threat domains. When both live behind the same login, that separation is largely illusory.
…
3 votes -
Device Trust Limitation
I have Proton Pass on both my Android phone and my Linux laptop, but because of the security defects of Linux, I don't want to give the same levels of trust to both platforms. I would like a way for one trusted device to be able to enforce limitations in what other devices can access, such as allowing one-time access to use passkeys (ideally doing the actual cryptography only on the trusted client), one-time access to pull a certain password, or permanent access to specific credentials.
Currently, to accomplish something like this, I use one paid account (on Android) and…
3 votes -
Authenticator: view modes
I use Aegis as my authenticator app. I'd like to switch to Proton Authenticator, but it's missing a few features.
One important feature would be the ability to change the view. For example, Aegis lets you switch from the normal view to a compact view. This allows you to see the first 10 entries on a single page. You can even make it smaller, so you can fit 16 entries on one page.
This makes it possible to have the most frequently used 2FA codes readily accessible without annoying scrolling.
3 votes -
Export Custom‑Domain Alias List as a Locked .txt File with Automatic Self‑Destruct after Import
Description / Context
Background – When users create custom domain aliases in Proton Pass, they often need to export the list of generated passwords/aliases to another password‑manager or service. Currently there is no built‑in way to bulk‑download these credentials in a portable format that also respects security best practices.Proposed feature – Add an “Export as locked .txt” option to the alias‑management screen. The exported file would:
Contain the alias names and their associated passwords (or a user‑chosen subset).
Be encrypted/locked with a passphrase supplied by the user at export time, so the file cannot be opened without that passphrase.
Include a…3 votes -
Please add a feature to allow vaults to be stored locally on a device (phone, computer, usb drive) not just on your servers
I do understand that your vaults are stored somewhere on your servers. This does have some advantages.
To my mind it has one big disadvantage. You have and control my most critical information, that is passwords/private keys to my finances, interactions with the state etc. not just my Netflix login. Yes, I understand the vault is securely encrypted as well as you can make it.I would like to retain possession of my own vault. I can keep it on a removable physical device (like a Ubikey) so that I can plug it in for only as long as I…
3 votes -
randomized fields for pin unlock on mobile
recently switched to graphene on mobile and they have a setting where you can randomize the unlock number positions
itd be cool if protonpass had a similar feature on android/ios3 votes -
Proton Pass Desktop App: Stay on top toggle
Add a toggle so that the proton pass desktop app will always be stay on top. 99% of the time I'm opening the desktop app its to copy paste a username and password and it would be convenient if the app would stay on top so I don't have to bring it back up again or manually pin the window if the window I'm entering the login on is fullscreen
3 votes -
import IronVest password
im using IronVest before but the proton pass never tell me how to import those passwords
3 votes -
Manage browser favorites directly in Proton Pass
I would like to suggest adding support in Proton Pass (or anything) for managing browser favorites, similar to how it works with passwords.Centralizing browser bookmarks in Proton Pass would allow users to store, organize, and sync favorites securely across devices
3 votes -
Flag unreachable domains in users' vaults
Periodically scan the "Websites" field in users vaults for unreachable domains, then flag those for user's review and possible elimination.
Rationale: over time we all accumulate lots of old passwords on sites that no longer exist. Those passwords only clutter user's vaults and (noticeably!) slow down Proton Pass extension.
3 votes
- Don't see your idea?