Full auto-logout after user-specified duration
The master password and 2FA method are used far too rarely to access Proton Pass.
Currently, you can set up a PIN or biometrics to access your Proton vault seemingly indefinitely. I believe this can make it harder to remember your master password, or spot issues with your 2FA method. I also believe this is a security risk for any devices that are left unattended for an extended time; a 6-digit code is more easily leaked than a strong master password!
I would like for Proton Pass to implement a feature in which the user can – but doesn't have to – specify a duration (like a week or a month), after which the current device is automatically logged out.
2
votes