As a security conscious proton user on a plan that includes proton pass I want proton to, for Pass specifically, implement the use of a secret key (like 1Password) to secure my Proton Pass account, so that I do not have to worry about the all eggs-in-one basket problem of having pass as part of my single proton account identity and can also rest assured that should someone compromise proton’s systems and acquire a copy of my encrypted vault that a brute force attack would be impossible as the vault is not just encrypted with my password but also the secret key which even with a weak master password would make the entropy beyond what any compute in the world could break

Basically everyone is up in arms that Proton Pass uses the same credentials as the rest of the Proton Stack (mail, drive etc.) and see this as a single point of failure. The 2nd password option on Proton Pass only partially addresses this and causes too much friction. Implementing a seed phrase that is generated client side and is needed to auth a device for future use as well as to additionally encrypt the vault is a far simpler and effective technique that the fault prone finger printing and ai threat detection monitoring proton relies on; it’s basically foolproof and will allow proton to separate pass from the rest of the stack by the need for an attacker to also have the seed phrase to decrypt the vault as well as log into it with stole credentials (which would be impossible unless the user was careless in storing the seed phrase). This same solution could also be applied to fix the account sync eggs-in-one basket concern for proton Authenticator. And just like 1Password you’d only need to enter this seed phrase the first time a new device is used to access your proton pass account.