Option to add Secret Key (like how 1Password has)
I think Proton Pass should let the user decide to add a secret key along side their master password to their Proton Pass account.
So, similar to how 1Password creates their secret key to protect 1Password users.
The option should be opt-in as the user needs to add it during the sign up process or needs to go into settings if not already configured to add to the user's Proton Pass account.
This feature adds additional security as if the master password is discovered. The account still can't be accessed without the secret key.
Anonymous
shared this idea
-
Matt
commented
Absolutely critical. This is the absolute best system that exists for this, because it essentially creates a list of approved devices that can access the account. If a device doesn’t have the secret key, they can’t get in even with the master password. Nothing like this exists in proton pass and it’s a glaring security and usability flaw. All the other 2FA and extra password stuff is extremely annoying, which you need in order to have comparable security to 1Password’s secret key system. PLEASE add it.
-
rpaulson
commented
I would like to add an important point that I overlooked in my initial comment.
The combination of "Proton master password + extra password for Proton Pass" is somewhat similar to the "1Password secret key + 1Password master password" setup, but it has a significant flaw, in my opinion.
With 1Password, if I store my secret key, my 2FA secret, and my master password within the app, I can ask a trusted person (someone I would also grant emergency access if that feature were available) to securely store my secret key and 2FA secret in their password manager. In the event that I get locked out of all my devices, this trusted person could use those two pieces of information to help me regain access to my account. Crucially, while both secrets are necessary for access, they are not sufficient on their own. As long as I continue to use a strong master password, the trusted person cannot gain full access to my account.
However, this setup is not possible with Proton. If I use the extra password for Proton Pass as my main password to access the password manager, I cannot share my random, high-entropy Proton master password (which is stored only in Proton Pass) along with the 2FA secret with a trusted person. Doing so would grant them access to all my other Proton services, something I obviously want to avoid.
-
ProtoDucto
commented
Instead of having to rely on a PIN code or the Proton account password, add the possibility to unlock the Web app with a custom password.
In addition, on Linux, there could be a Secret Service integration, either requiring to unlock the app with KWallet, Gnome-Keyring, KeePassXC or a similar application. If possible, the Proton Pass app could prompt the user every time to input their password every time.
-
rpaulson
commented
I also like the secret key feature, but I guess, if you set up an extra password for Proton Pass you can think of the Proton master password as your secret key. You'll only need it to sign in (similar to the secret key and 1Password). Afterwards you use the extra password (similar to the 1Password master password) to unlock your vaults. So even if, for example, a camera records you typing your extra password, you should be fine, as long as you have a high entropy Proton master password and a potential attacker doesn't get hold of a device that is locked but where you're signed in already.