1545 results found

1. allow changing custom field text type to hidden type and vice versa after field creation

   given that these field types are basically the same data structure just with a UI difference of show or don't show, it would be nice to be able to change one to the other during edits after the initial creation.

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Deterministic PGP Keys for Reverse Aliases

   Goal

   Provide each SimpleLogin reverse alias with its own independent OpenPGP identity, while keeping key management simple and preventing external observers from linking different aliases to the same Proton account.

   Design

   Proton maintains a dedicated secret AliasPGPRoot for the user.

   For every immutable reverse alias, Proton derives deterministic key material from:

   AliasPGPRoot + normalized alias address

   using a cryptographic KDF such as HKDF.

   Example:

   AliasPGPRoot
       |
       +-- HKDF("alias-a@simplelogin.com")
       |       -> OpenPGP key A
       |
       +-- HKDF("alias-b@simplelogin.com")
       |       -> OpenPGP key B
       |
       +-- HKDF("alias-c@simplelogin.com")
               -> OpenPGP key C
   

   Separate derivation contexts should be used for signing and encryption keys.

   The resulting OpenPGP certificates are completely independent. They contain only the reverse alias as their identity and no reference to the user's real Proton address, root secret, or other aliases.

   The public key for each alias is stored in SimpleLogin. The private key does not need to be stored separately: Proton clients can deterministically reconstruct it locally when needed.

   Privacy Properties

   An external observer seeing:

   alias A -> public key A
   alias B -> public key B
   alias C -> public key C
   

   should have no cryptographic way to determine that these keys originate from the same Proton account.

   Compromise of one derived alias private key should also not allow derivation of the root secret or keys belonging to other aliases.

   Architecture

   Encrypted AliasPGPRoot
           |
           v
    Proton client
           |
           +-- Alias address
           |
          HKDF
         /    \
    signing   encryption
     seed *     seed
         \      /
      Independent
      OpenPGP key
           |
      Public certificate
           |
       SimpleLogin
   

   * optional
   Private alias keys can therefore be generated on demand and discarded after use.

   Important Design Requirements

   • Use a strong domain-separated KDF such as HKDF.
   • Derive signing and encryption key material independently (optional).
   • Prefer deterministic ECC-based key generation rather than deterministic RSA generation.
   • Alias OpenPGP certificates must not contain metadata linking them to the Proton account or other aliases.
   • The alias address must be canonicalized consistently before derivation.
   • The derivation format must be versioned, e.g. proton-reverse-pgp/v1, so future algorithms can be introduced safely.

   Risks and Considerations

   Root-secret compromise:
   Compromise of AliasPGPRoot exposes all alias keys. It therefore needs the same level of protection as other high-value Proton secrets.

   Deterministic derivation stability:
   Changing the KDF, canonicalization rules, curve, or OpenPGP key-generation procedure would otherwise produce different keys. The derivation specification therefore needs strict versioning and long-term compatibility.

   Alias reuse:
   If a deleted alias address could ever be reassigned, address-only derivation would reproduce the same key for the same user. Ideally SimpleLogin should guarantee that reverse aliases are never reused, or an immutable alias identifier should additionally be included in the derivation.

   Metadata correlation:
   The scheme prevents cryptographic linking of aliases, but correlation may still be possible through mail headers, timing, account metadata, identical OpenPGP preferences, or server-side information. Generated certificates should therefore minimize unnecessary shared metadata.

   Result

   This design provides:

   • one independent PGP identity per reverse alias,
   • no externally visible cryptographic relationship between aliases,
   • deterministic recovery without storing large numbers of private keys,
   • local/on-demand private-key generation by Proton clients,
   • straightforward integration with SimpleLogin through per-alias public keys.

   Goal

   Provide each SimpleLogin reverse alias with its own independent OpenPGP identity, while keeping key management simple and preventing external observers from linking different aliases to the same Proton account.

   Design

   Proton maintains a dedicated secret AliasPGPRoot for the user.

   For every immutable reverse alias, Proton derives deterministic key material from:

   AliasPGPRoot + normalized alias address

   using a cryptographic KDF such as HKDF.

   Example:

   AliasPGPRoot
       |
       +-- HKDF("alias-a@simplelogin.com")
       |       -> OpenPGP key A
       |
       +-- HKDF("alias-b@simplelogin.com")
       |       -> OpenPGP key B
       |
       +-- HKDF("alias-c@simplelogin.com")
               -> OpenPGP key C
   

   Separate derivation contexts should be used for signing and encryption keys.

   The… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Invalidate local encryption keys on new biometric enrollment (Android / iOS)

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable to device PIN compromise followed by rogue biometric enrollment.

   2. Technical Analysis & Current Gap:
      Both Android and iOS/iPadOS provide OS-level APIs designed to mitigate this exact threat by invalidating cryptographic keys stored in KeyStore / Secure Enclave when the biometric set changes:

   Android: setInvalidatedByBiometricEnrollment(true) in KeyGenParameterSpec.Builder. When enabled, adding a new fingerprint throws a KeyPermanentlyInvalidatedException upon use.

   iOS / iPadOS: kSecAccessControlBiometricCurrentSet flag in Keychain services. The key becomes invalid if evaluatedPolicyDomainState changes.

   Our testing confirmed that Proton Pass currently allows access even after a new fingerprint is enrolled. This indicates that the app either explicitly sets setInvalidatedByBiometricEnrollment(false) (or equivalent) or relies on biometric prompt evaluation without binding decryption directly to an invalidated key.

   1. Proposed Solution: We request implementing an option to bind local app authentication directly to the current biometric set:

   Enforce Key Invalidation: When a new biometric is enrolled, the local key used for app unlock/decryption should be automatically invalidated by the OS.

   Fallback to Master Password: When key invalidation is detected (KeyPermanentlyInvalidatedException or domain state change), force the user to re-authenticate with their Master Password to re-generate the local biometric unlock key.

   Optional User Toggle (User Control): To balance security and convenience, provide a toggle setting in the app:

   Option: "Require Master Password if biometrics change" (Default: ON or Optional for high-security users).

   1. Secondary Benefits (Security Awareness & Incident Response): Requiring a Master Password upon key invalidation also provides a critical early-warning mechanism for users:

   Detection of Rogue Biometrics: If a user is suddenly prompted for their Master Password despite not adding a fingerprint themselves, they are immediately alerted to potential unauthorized access to their device settings.

   Prompting Incident Response: This notification allows users to audit their registered biometrics, remove unauthorized fingerprints, and recognize that their device PIN/passcode has likely been compromised—prompting them to change their PIN immediately.

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Feature Request - Launch on startup and desktop-to-extension integration

   Hey everyone,

   I have a couple of suggestions that I think would really improve the Proton Pass experience:

   1. An option to launch the desktop app automatically on system startup.
   2. Direct communication/integration between the desktop app and the browser extension (similar to how 1Password does it).

   Would love to see this added in the future!

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Username/Email Suggestions

   When manually adding a login item, the Username/Email field should feature a quick-select dropdown that surfaces frequently used usernames, personal email addresses, and active aliases.

   Other password managers like 1Password have this feature.

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Let AI agents sign in without receiving credentials

   Proton Pass access tokens currently allow agents retrieve plaintext credentials through the cli.
   Please add brokered browser autofill for AI agents, similar to 1Password for Claude. When an agent requests a website login and the user approves, Proton Pass should fill the login directly into the webpage. The agent should receive only success or failure—never credential values.

   Requested outcome: an AI agent can complete a website sign-in without receiving the credentials.

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Searchable notes. Or separate notes app, with searchable notes.

   I need the ability to search inside a note i make in proton pass or a separate proton notes app i can use as my notes app with that feature. And Not just search an term and have it show which note its in but search a term inside a note and have it high light for me where it is. I manage some long lists that have inventory numbers and names, and i have to use samsung notes or others so i can quickly find the numbers or terms i need on these lists.

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Add a visual indicator for location of secret

   In the All Items list, add a column with a visual indicator of where the item is. Like an icon for 1 person (personal) or 2 persons (shared). Optionally let people assign colour to this icon to indicate which store (eg green 2 persons = work, purple 1 person = private and green 1 person is personal accounts for work)

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Add a Username Generator to the Android App

   Please add a built-in username generator to the Proton Pass Android app. The Proton website already offers a username generator without requiring users to log in, but this feature is not available inside the Android app. Other password managers, such as Bitwarden, also include a username generator in their Android apps. Having this feature directly in Proton Pass would make it easier to create unique usernames when signing up for new accounts, without leaving the app. It would improve convenience and provide a more complete password manager experience.

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Can you integrate a migration from Ente Auth?

    Please make it easier to import my 2fa stuff.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Custom Icons and Colors for Proton Pass

    Hello Proton Team,

    First of all, thank you for building a privacy-focused ecosystem. I've been using Proton services extensively, especially Proton Pass, and I have a suggestion that I believe would greatly improve organization and usability.

    Custom Icons

    It would be extremely useful if users could assign custom icons to:

    • Vaults
    • Aliases
    • Individual credentials (logins, cards, notes, identities, etc.)

    This would make it much easier to visually identify items, especially for users who manage hundreds of credentials.

    Custom Colors

    In addition to icons, allowing users to choose custom colors would improve organization even further.

    Ideally, users could:

    • Pick any color using a HEX color code (e.g. #6A5ACD)
    • Use a color picker
    • Apply colors independently to vaults, aliases, and credentials

    Hello Proton Team,

    First of all, thank you for building a privacy-focused ecosystem. I've been using Proton services extensively, especially Proton Pass, and I have a suggestion that I believe would greatly improve organization and usability.

    Custom Icons

    It would be extremely useful if users could assign custom icons to:

    • Vaults
    • Aliases
    • Individual credentials (logins, cards, notes, identities, etc.)

    This would make it much easier to visually identify items, especially for users who manage hundreds of credentials.

    Custom Colors

    In addition to icons, allowing users to choose custom colors would improve organization even further.

    Ideally, users could:

    • Pick any color… more
    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Feature Request: Alternative Autofill Methods (Keyboard Shortcuts, Context Menu, etc.)

    Hi Proton Pass Team,

    I am a Proton Pass user and I really appreciate the privacy-focused features you provide. However, I am writing to strongly request the implementation of alternative autofill methods for the browser extension.

    Currently, if the inline menu fails to appear or is blocked on certain websites, the only fallback option is to open the extension, manually copy the username/password, and paste them into the fields. Clicking on a login item inside the extension popup does not force an autofill either. This manual process is quite frustrating and disrupts the workflow.

    Competitors like Bitwarden and 1Password already have robust alternative input methods to handle these situations, such as:

    • Keyboard shortcuts (e.g., pressing Ctrl+Shift+L to auto-fill)

    • Right-click context menu integration (Right-click > Autofill)

    • One-click autofill from the extension popup (Clicking the credential in the extension directly fills the page)

    To make Proton Pass truly competitive and improve the daily user experience, I highly request that you implement these same alternative autofill features.

    Thank you for your time and for continuously improving the product. I look forward to seeing these features in future updates.

    Best regards,

    Hi Proton Pass Team,

    I am a Proton Pass user and I really appreciate the privacy-focused features you provide. However, I am writing to strongly request the implementation of alternative autofill methods for the browser extension.

    Currently, if the inline menu fails to appear or is blocked on certain websites, the only fallback option is to open the extension, manually copy the username/password, and paste them into the fields. Clicking on a login item inside the extension popup does not force an autofill either. This manual process is quite frustrating and disrupts the workflow.

    Competitors like Bitwarden and 1Password already… more

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Allow arrow keys on keyboard to cycle through items.

    It's super convenient when going through a large number of records to use the keyboard arrows (up and down arrows) to cycle through all items in a vault. Would love to see this added to Proton Pass!

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Show both username and email at the same time

    If a login has an email field, email will be shown. If login has a username field, username will be shown. If a login has both a username and an email field, it currently shows just the username in the overview.

    Please add a feature to show both username and email of a login if both fields exist.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Allow setting a custom default email for ProtonPass autofill

    Currently, Proton Pass forces its own email or hide-my-email aliases as the top autofill suggestions on new sign-up pages. There is no setting to change this default to a personal external email.

    This UI design feels like an ecosystem lock-in tactic (dark pattern) that limits user choice and artificially increases friction for non-Proton email users. Please add a setting that lets us choose our own preferred default email address for the autofill popup!

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Better pass-cli integration with JetBrains IDEs

    Add pass-cli integration tutorial / plugin for JetBrains IDEs to inject secrets into env variables while still having debug support.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Allow renaming uploaded files (images/pdfs..)

    Sometimes I upload a snapshot of a document from my phone "IMG_3001.jpg". It would be nice if I could rename it later in proton pass, without having to download it, rename it, then upload it again.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. option re-enter password when opening entry

    At the moment, I am using the Bitwarden password manager, and it has very useful functionality.

    You can enable an option within an entry (for example, for a highly sensitive password) called “Re-enter master password when opening this entry.”

    If you enable this option for something like your PayPal password entry, credit card details, or an SSH key, you will be required to re-enter your master password to view the stored credentials or information.

    so this is an extra security layer for sensitive information -> open vault -> master password -> click on sensitive password entry -> master password again

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Easier way to report autofill issues directly from the browser

    It would be very useful to have a quicker way to report websites where autofill is not working properly.

    For example, adding a contextual menu entry such as:

    Right click on page → Proton Pass → “Report autofill not working”

    This would make it much easier for users to report unsupported or broken autofill cases directly from the affected page, without needing to manually report the issue through the extension settings page or create a post on Reddit

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Add support for importing from Password Safe

    Please add support for importing passwords from Password Safe (https www pwsafe org).

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating