1441 results found

1. Unlock the Proton Pass extension with Windows Hello; a PIN code isn't secure enough.

   Unlock the Proton Pass extension with Windows Hello or 2FA ; a PIN code isn't secure enough.

   15 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Add Bitdefencer SecurePass JSON format

   I want to migrate from Bitdefender SecurePass password manager to Proton Pass.
   It can export data within JSON and csv formats, but it is by default not recognized by Proton Pass.

   22 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   3 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Force passkey interception

   Now, if proton pass is lock, proton extension will not catch the passkey request.
   I see someone ask for no interception at all
   I think the default behavior is important (catch if proton is unlocked, else let OS manage)
   But add a 3rd option to always catch passkey and prompt to unlock the extension

   29 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   6 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. @protonmail.com aliases please…

   Can we please get @protonmail.com aliases ? Apple does it with @icloud.com… so surely you can too

   It would be much better than @passfwd.com or @passinbox.com that look suspicious af, and get blocked by many web service providers.

   7 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Deterministic PGP Keys for Reverse Aliases

   Goal

   Provide each SimpleLogin reverse alias with its own independent OpenPGP identity, while keeping key management simple and preventing external observers from linking different aliases to the same Proton account.

   Design

   Proton maintains a dedicated secret AliasPGPRoot for the user.

   For every immutable reverse alias, Proton derives deterministic key material from:

   AliasPGPRoot + normalized alias address

   using a cryptographic KDF such as HKDF.

   Example:

   AliasPGPRoot
       |
       +-- HKDF("alias-a@simplelogin.com")
       |       -> OpenPGP key A
       |
       +-- HKDF("alias-b@simplelogin.com")
       |       -> OpenPGP key B
       |
       +-- HKDF("alias-c@simplelogin.com")
               -> OpenPGP key C
   

   Separate derivation contexts should be used for signing and encryption keys.

   The resulting OpenPGP certificates are completely independent. They contain only the reverse alias as their identity and no reference to the user's real Proton address, root secret, or other aliases.

   The public key for each alias is stored in SimpleLogin. The private key does not need to be stored separately: Proton clients can deterministically reconstruct it locally when needed.

   Privacy Properties

   An external observer seeing:

   alias A -> public key A
   alias B -> public key B
   alias C -> public key C
   

   should have no cryptographic way to determine that these keys originate from the same Proton account.

   Compromise of one derived alias private key should also not allow derivation of the root secret or keys belonging to other aliases.

   Architecture

   Encrypted AliasPGPRoot
           |
           v
    Proton client
           |
           +-- Alias address
           |
          HKDF
         /    \
    signing   encryption
     seed *     seed
         \      /
      Independent
      OpenPGP key
           |
      Public certificate
           |
       SimpleLogin
   

   * optional
   Private alias keys can therefore be generated on demand and discarded after use.

   Important Design Requirements

   • Use a strong domain-separated KDF such as HKDF.
   • Derive signing and encryption key material independently (optional).
   • Prefer deterministic ECC-based key generation rather than deterministic RSA generation.
   • Alias OpenPGP certificates must not contain metadata linking them to the Proton account or other aliases.
   • The alias address must be canonicalized consistently before derivation.
   • The derivation format must be versioned, e.g. proton-reverse-pgp/v1, so future algorithms can be introduced safely.

   Risks and Considerations

   Root-secret compromise:
   Compromise of AliasPGPRoot exposes all alias keys. It therefore needs the same level of protection as other high-value Proton secrets.

   Deterministic derivation stability:
   Changing the KDF, canonicalization rules, curve, or OpenPGP key-generation procedure would otherwise produce different keys. The derivation specification therefore needs strict versioning and long-term compatibility.

   Alias reuse:
   If a deleted alias address could ever be reassigned, address-only derivation would reproduce the same key for the same user. Ideally SimpleLogin should guarantee that reverse aliases are never reused, or an immutable alias identifier should additionally be included in the derivation.

   Metadata correlation:
   The scheme prevents cryptographic linking of aliases, but correlation may still be possible through mail headers, timing, account metadata, identical OpenPGP preferences, or server-side information. Generated certificates should therefore minimize unnecessary shared metadata.

   Result

   This design provides:

   • one independent PGP identity per reverse alias,
   • no externally visible cryptographic relationship between aliases,
   • deterministic recovery without storing large numbers of private keys,
   • local/on-demand private-key generation by Proton clients,
   • straightforward integration with SimpleLogin through per-alias public keys.

   Goal

   Provide each SimpleLogin reverse alias with its own independent OpenPGP identity, while keeping key management simple and preventing external observers from linking different aliases to the same Proton account.

   Design

   Proton maintains a dedicated secret AliasPGPRoot for the user.

   For every immutable reverse alias, Proton derives deterministic key material from:

   AliasPGPRoot + normalized alias address

   using a cryptographic KDF such as HKDF.

   Example:

   AliasPGPRoot
       |
       +-- HKDF("alias-a@simplelogin.com")
       |       -> OpenPGP key A
       |
       +-- HKDF("alias-b@simplelogin.com")
       |       -> OpenPGP key B
       |
       +-- HKDF("alias-c@simplelogin.com")
               -> OpenPGP key C
   

   Separate derivation contexts should be used for signing and encryption keys.

   The… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Native Mac OS app for Proton Pass

   As far as I can tell, on Mac OS, Proton Pass relies solely on browser extensions, which becomes cumbersome when using multiple browser profiles. A dedicated Mac OS menu bar app would provide a more seamless and convenient access method. With a menu bar app, I could:

   • Access my passwords across all browser profiles without reinstalling extensions
   • Quickly retrieve credentials without switching browser contexts
   • Enjoy a consistent password management experience similar to 1Password's menu bar implementation

   This would significantly improve the user experience by offering a universal, always-accessible password management solution.

   54 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   6 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Invalidate local encryption keys on new biometric enrollment (Android / iOS)

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable to device PIN compromise followed by rogue biometric enrollment.

   2. Technical Analysis & Current Gap:
      Both Android and iOS/iPadOS provide OS-level APIs designed to mitigate this exact threat by invalidating cryptographic keys stored in KeyStore / Secure Enclave when the biometric set changes:

   Android: setInvalidatedByBiometricEnrollment(true) in KeyGenParameterSpec.Builder. When enabled, adding a new fingerprint throws a KeyPermanentlyInvalidatedException upon use.

   iOS / iPadOS: kSecAccessControlBiometricCurrentSet flag in Keychain services. The key becomes invalid if evaluatedPolicyDomainState changes.

   Our testing confirmed that Proton Pass currently allows access even after a new fingerprint is enrolled. This indicates that the app either explicitly sets setInvalidatedByBiometricEnrollment(false) (or equivalent) or relies on biometric prompt evaluation without binding decryption directly to an invalidated key.

   1. Proposed Solution: We request implementing an option to bind local app authentication directly to the current biometric set:

   Enforce Key Invalidation: When a new biometric is enrolled, the local key used for app unlock/decryption should be automatically invalidated by the OS.

   Fallback to Master Password: When key invalidation is detected (KeyPermanentlyInvalidatedException or domain state change), force the user to re-authenticate with their Master Password to re-generate the local biometric unlock key.

   Optional User Toggle (User Control): To balance security and convenience, provide a toggle setting in the app:

   Option: "Require Master Password if biometrics change" (Default: ON or Optional for high-security users).

   1. Secondary Benefits (Security Awareness & Incident Response): Requiring a Master Password upon key invalidation also provides a critical early-warning mechanism for users:

   Detection of Rogue Biometrics: If a user is suddenly prompted for their Master Password despite not adding a fingerprint themselves, they are immediately alerted to potential unauthorized access to their device settings.

   Prompting Incident Response: This notification allows users to audit their registered biometrics, remove unauthorized fingerprints, and recognize that their device PIN/passcode has likely been compromised—prompting them to change their PIN immediately.

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable… more

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Feature Request: Alternative Autofill Methods (Keyboard Shortcuts, Context Menu, etc.)

   Hi Proton Pass Team,

   I am a Proton Pass user and I really appreciate the privacy-focused features you provide. However, I am writing to strongly request the implementation of alternative autofill methods for the browser extension.

   Currently, if the inline menu fails to appear or is blocked on certain websites, the only fallback option is to open the extension, manually copy the username/password, and paste them into the fields. Clicking on a login item inside the extension popup does not force an autofill either. This manual process is quite frustrating and disrupts the workflow.

   Competitors like Bitwarden and 1Password already have robust alternative input methods to handle these situations, such as:

   • Keyboard shortcuts (e.g., pressing Ctrl+Shift+L to auto-fill)

   • Right-click context menu integration (Right-click > Autofill)

   • One-click autofill from the extension popup (Clicking the credential in the extension directly fills the page)

   To make Proton Pass truly competitive and improve the daily user experience, I highly request that you implement these same alternative autofill features.

   Thank you for your time and for continuously improving the product. I look forward to seeing these features in future updates.

   Best regards,

   Hi Proton Pass Team,

   I am a Proton Pass user and I really appreciate the privacy-focused features you provide. However, I am writing to strongly request the implementation of alternative autofill methods for the browser extension.

   Currently, if the inline menu fails to appear or is blocked on certain websites, the only fallback option is to open the extension, manually copy the username/password, and paste them into the fields. Clicking on a login item inside the extension popup does not force an autofill either. This manual process is quite frustrating and disrupts the workflow.

   Competitors like Bitwarden and 1Password already… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Feature to remove duplicate passwords

   Feature to remove duplicate passwords, especially in scenarios of uploading same csv twice or same passwords but from different sources.

   15 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Tags for Proton Authenticator

    The ability to tag different authentication codes for different sectors of life.
    Such as a tag for work, a tag for personal accounts, a tag for gaming accounts, etc.

    22 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Advanced security monitoring

    The existing dark web monitoring feature is good, but Proton Pass could offer much more in this area. A real-time dashboard that not only reports data leaks but also provides specific recommendations for action and even suggests automatic password changes for affected accounts would be ideal. Integration with Proton Sentinel could detect suspicious login attempts and proactively warn the user before an attack is successful. A feature that automatically evaluates the security of websites you log into and warns you about unsecure connections or suspicious certificates would also greatly increase security.

    18 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. I use the Touch ID on my iMac keyboard to unlock the Proton Pass extension on Mac OS browsers firefox and safari

    Hi. I want to be able to use the Touch ID button on my iMac computer's keyboard to unlock the Proton Pass extension on the Firefox browser and on the Safari browser. Currently, only the PIN code is available to unlock the browser extension on this twos browser. Thank you

    17 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Automatic passkey upgrade

    Apple's password application in IOS 18 has the ability to automatically update your password with a passkey for websites that support it.

    For those that are unaware of this feature, see: https://9to5mac.com/2024/07/22/this-feature-in-ios-18s-passwords-app-could-one-day-make-the-app-obsolete/

    Please consider adding a feature like this to Proton Pass.

    493 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Items with passkey filter

    Can we please get a filter for items that have a passkey assigned to them in the filter dropdown menu.

    14 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Proton Pass on Mac needs a check for updates feature

    Proton Pass on Mac doesn't have a feature to check for updates, nor does it update itself when a new version is available. The only way I know there's an update is to use a third-party app that shows an update is available for Proton Pass. I talked to Proton Pass support, and they stated, 'Please note that, unfortunately, there is no check for the update button. You will have to download the latest version from the download page.' A password manager has significant security implications; if an update is available, the user shouldn't have to guess to find it.

    13 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Ability to Choose a Default Email for Auto-Fill

    Hello,

    I would like to request a new feature in Proton Pass.
    Currently, the auto-fill function always selects my Proton email address, even when I want to use my personal email.
    I tried creating a new identity with my personal email, but auto-fill still defaults to my Proton address.

    It would be very helpful to have an option to set a default email address for auto-fill, or to manually choose which email should be prioritized.

    Thank you for considering this improvement.

    18 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    6 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Proton Pass Authenticator : edit icon

    Would it be possible to add the option to edit our 2FAS icons ?
    This is a feature available in 2FAS Authenticator.

    41 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    5 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. FIDO2 Certification

    There's a growing number of websites that only allow FIDO2 compliant passkey providers. Would be nice, if Proton would adapt this licence or at least give the user a choice when creating passkeys between it's passkey system and FIDO2 compliant one.

    20 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    8 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Automatic Synchronization Between Proton Authenticator and Proton Pass

    Please consider adding automatic synchronization between Proton Authenticator and Proton Pass. Currently, the sync feature within Proton Authenticator works well across devices, but there’s an issue: when I create a new login or account in Proton Pass and add the 2FA code directly there, I sometimes forget to also add it manually to Proton Authenticator.

    It would be ideal if both services were seamlessly integrated, so any authentication codes added in Proton Pass would automatically sync with Proton Authenticator. This would save time, reduce manual work, and help prevent losing access to accounts due to missing codes.

    27 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. add in the opera password manger to import passwords from

    you should add in the opera browser password manger to import passwords from

    20 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating