Automatic Synchronization Between Proton Authenticator and Proton Pass
Please consider adding automatic synchronization between Proton Authenticator and Proton Pass. Currently, the sync feature within Proton Authenticator works well across devices, but there’s an issue: when I create a new login or account in Proton Pass and add the 2FA code directly there, I sometimes forget to also add it manually to Proton Authenticator.
It would be ideal if both services were seamlessly integrated, so any authentication codes added in Proton Pass would automatically sync with Proton Authenticator. This would save time, reduce manual work, and help prevent losing access to accounts due to missing codes.
-
Anonymous
commented
This is a bad idea. The point about Pass and Authenticator being separate is to isolate 2FA Token from your passwords. If a bad actor manages to access your Pass vault today they will have access to all passwords and 2FA Token saved in Pass. So for that reason you don't store your most critical accounts' 2FA Tokens in Pass but in Authenticator--if a bad actor does get in to your Pass vault they will only have your passwords and not your 2FA Tokens stored on Authenticator.
Of course, there is another issue that Proton has not yet fixed. If today, you turn on Proton account sync in Authenticator and someone does manage to get into your Proton account, for example by abusing an emergency contact or getting their hands on your recovey passphrase, they can in affect download your synced 2FA Tokens onto their own Authenticator instance. This is because Proton does not isolate any synced 2FA Tokens from your Pass’ security plane--this should really be fixed--but until then do not enable Proton Account sync in Authenticator IMO.
-
Anonymous
commented
Agreed, there is no reason for using Proton Authenticator since all previous TOTP are stored and organised securely in Proton Pass. Proton Authenticator basically just separates a feature from Proton Pass which is unnecessary.
However, conditional on the improvement that all TOTPs are directly synced between Proton Pass and Proton Authenticator (of course will need to have the feature to detect duplicates as well), then users may find it easier to apply a TOTP using Proton Authenticator and that's where it starts to differentiate and become useful.
So, definitely there should be syncing between Proton Authenticator and Proton Pass.
-
Daniel
commented
@protablo
I'd use it like any other authenticator.
The problem with Pass is that I have lots of logins that *don't* use 2FA, and I don't want to search. Having a dedicated UI for these OTP codes makes much more sense than having to search for the credential, open it, and only *then* copy the password.They could also add an Authenticator-like UI tab to the existing Pass app, I don't care either way. I just want all my 2FA codes listed in one place without needing a search bar.
-
protablo
commented
Proton Pass has 2FA already. This makes Proton Pass not really a second factor, but 2FA still has security benefits in that a leaked password is not enough to log into accounts. However, it becomes a problem when 2FA in your password manager means that an attacker only needs to get into your Proton Pass rather than Proton Pass AND Authenticator to log in.
The point of Authenticator is to be separate from Proton Pass. Integration defeats the purpose.
What's stopping you from just using Proton Pass if you already put your 2FA in Pass? -
jean
commented
Même ma banque est moins complexes. ce systeème de controle demande trop
-
Oliver
commented
Better yet, allow for 2fa codes to be linked in Pass but then only viewable in the separate mobile Authenticator app so that the 2fa are a genuine second factor with all the convenience of the Proton ecosystem
-
David O Hernández-Silva
commented
I concur, this would greatly improve usage of Proton Pass and Proton Authenticator.
-
djjamonconqueso commented
...