1527 results found

1. Invalidate local encryption keys on new biometric enrollment (Android / iOS)

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable to device PIN compromise followed by rogue biometric enrollment.

   2. Technical Analysis & Current Gap:
      Both Android and iOS/iPadOS provide OS-level APIs designed to mitigate this exact threat by invalidating cryptographic keys stored in KeyStore / Secure Enclave when the biometric set changes:

   Android: setInvalidatedByBiometricEnrollment(true) in KeyGenParameterSpec.Builder. When enabled, adding a new fingerprint throws a KeyPermanentlyInvalidatedException upon use.

   iOS / iPadOS: kSecAccessControlBiometricCurrentSet flag in Keychain services. The key becomes invalid if evaluatedPolicyDomainState changes.

   Our testing confirmed that Proton Pass currently allows access even after a new fingerprint is enrolled. This indicates that the app either explicitly sets setInvalidatedByBiometricEnrollment(false) (or equivalent) or relies on biometric prompt evaluation without binding decryption directly to an invalidated key.

   1. Proposed Solution: We request implementing an option to bind local app authentication directly to the current biometric set:

   Enforce Key Invalidation: When a new biometric is enrolled, the local key used for app unlock/decryption should be automatically invalidated by the OS.

   Fallback to Master Password: When key invalidation is detected (KeyPermanentlyInvalidatedException or domain state change), force the user to re-authenticate with their Master Password to re-generate the local biometric unlock key.

   Optional User Toggle (User Control): To balance security and convenience, provide a toggle setting in the app:

   Option: "Require Master Password if biometrics change" (Default: ON or Optional for high-security users).

   1. Secondary Benefits (Security Awareness & Incident Response): Requiring a Master Password upon key invalidation also provides a critical early-warning mechanism for users:

   Detection of Rogue Biometrics: If a user is suddenly prompted for their Master Password despite not adding a fingerprint themselves, they are immediately alerted to potential unauthorized access to their device settings.

   Prompting Incident Response: This notification allows users to audit their registered biometrics, remove unauthorized fingerprints, and recognize that their device PIN/passcode has likely been compromised—prompting them to change their PIN immediately.

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Securely get a password from a friend (reverse share feature)

   Feature that allows people to securely share secrets with a Proton pass user.

   Right now, if I (as a Proton Pass user) want to send a secret to a friend, I can use the share feature. But if my friend (who isn't a Proton Pass user) wants to send a secret to me, there’s no simple way to do it.

   A nice feature would be the ability to generate a secure link that I could send to them, where they can paste their secret. That secret would then appear directly in my vault.

   77 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   3 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Re: Import passwords into Proton Pass---Could you please include Norton Password as an option?

   Re: Import passwords into Proton Pass---Could you please include Norton Password as an option?

   56 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. separate session token from other proton app

   While I can set a idle PIN code to lock my password vault, I need to keep my proton session active. If someone can access my PC (eg. PC provided by my company that I cannot disallow) while I'm away, they can access my protonmail or maybe other apps as well.

   I'm asking the Team to separate the token authentication of Proton pass from other proton app (i.e. disallow single-sign-on from other proton app to pass)

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Save custom item types as templates

   Now that it is possible to create 'Other' items – even completely from scratch – it would be nice if I could save these custom items as templates.

   This would allow me to re-use my custom item types, instead of having to re-create them every single time.

   68 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   10 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Separate login credentials for Proton Pass (same account and plan)

   Note: This request is not the same as the existing “extra password” feature. The extra password adds a second lock on top of the Proton account login, so Pass still depends on the main Proton credentials. This request is for Pass to have its own independent login, so that it no longer relies on the account password at all.

   As a Proton user who stores all my passwords in Proton Pass, I want Proton Pass to have its own login credentials, separate from my main Proton account password, while staying on the same account and subscription, so that I can safely store my Proton account credentials inside Pass without the circular dependency of needing those same credentials to open Pass.

   Context:
   Proton Pass is where I keep every login I have, and my Proton account credentials (Mail, Drive, VPN, Calendar) should naturally be there too. Right now, though, Pass is unlocked with the same credentials it would be storing. That’s a paradox: the one password I most need to keep safe and easy to retrieve is the one Pass can’t really help me with. If I forget it, or need to look it up on a new device, Pass is locked behind the very thing I’m trying to retrieve. The existing extra password option adds a layer on top of the account login, but it doesn’t remove that dependency.

   Acceptance criteria:
   * Option to set a dedicated Pass login password, independent of the Proton account password
   * Pass stays tied to the same Proton account and subscription, with no extra account or plan needed
   * Changing or resetting the main Proton password doesn’t affect Pass access, and vice versa
   * Works alongside existing 2FA, hardware keys, and PIN or biometric unlock
   * Clear recovery options for the Pass credentials, kept separate from account recovery

   A password manager should be the one place that holds everything, including the keys to the rest of the ecosystem. Separate Pass credentials would make Proton Pass a true root of trust for Proton users, instead of something that depends on a password it can’t safely store itself.

   Note: This request is not the same as the existing “extra password” feature. The extra password adds a second lock on top of the Proton account login, so Pass still depends on the main Proton credentials. This request is for Pass to have its own independent login, so that it no longer relies on the account password at all.

   As a Proton user who stores all my passwords in Proton Pass, I want Proton Pass to have its own login credentials, separate from my main Proton account password, while staying on the same account and subscription, so that I can… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Let Us Fix the Icons You Can't Fetch: Allow Custom Favicon Uploads

   Dear Proton Development Team,

   I need to talk about the generic favicon problem in Proton Pass. I find it an issue & very frustrating when your system can’t fetch a simple favicon, and just defaults to the same generic human silhouette for every un-fetched entry. The default icon [A light coloured, Proton purple human silhouette on a dark circular background]

   Case in point: I tried to save my n8n.io login. Multiple URLs, no favicon found. What did I get? That same human silhouette favicon....

   Not a letter, not a logo....just a silhouette. It’s the same for Similar.ai, Meta/Facebook/Ollama, Fedex & all of Proton's sub domains! Due to so many auto-fetch fails, I/we are left with zero visual distinction, between completely different services.

   This completely breaks the user experience for me & Im sure many others. To be fair I & so many others don’t identify our bank accounts 🏦, our automation tools, or our email accounts 📧 by looking at the same non distinctive silhouette. I recognize logos. The silhouette just creates so much visual noise. It makes my vault feel impersonal and hard, slow/clunky to navigate.

   Here’s what needs to happen:

   1. Fix or Replace || Auto-Fetch Params

   -Support more file types and icon locations (SVG, PNG, high-res).

   -Actually work for major platforms. If it can’t, give us a real alternative.

   1. Let Us Upload Our Own Icons || This is Essential

   -If the system fails, I should be able to upload my own icon in under 10 seconds.

   -Support .png, .jpg, .svg, .gif, etc.

   -Allow uploads from my device or via image URL.

   -Include a simple crop/resize tool in-app.

   1. If Development is Blocked || Consider an AI-Assisted Solution

   -If the frontend/backend workload is too high for manual uploads right now, consider implementing a lightweight AI fetch layer that:

   -Caches and indexes favicons from a trusted source

   -Generates fallback icons based on site branding colors and initials (better than a silhouette)

   -Runs client-side or via a privacy-respecting proxy

   --> I am passionate about fixing this problem & would welcome the chance to contribute directly to solving this issue. With development experience I would be genuinely humbled to have an opportunity to work with the Proton Dev Team, if I could help implement one of my expertly crafted autonomous ai workflows' w/ custom fit parameters!

   Honestly, this isn’t just a cosmetic nice-to-have element. This is a core usability issue. A password manager is a visual tool. When every unrecognizable login looks like the same default silhouette, the product feels incomplete.

   Please give us a way to make our vaults actually usable at a glance. Let us replace the silhouettes with real logos.

   Signed,
   A truly passionate ProtonPass user & friend who’s tired of identifying everything by a generic bland icon.

   Dear Proton Development Team,

   I need to talk about the generic favicon problem in Proton Pass. I find it an issue & very frustrating when your system can’t fetch a simple favicon, and just defaults to the same generic human silhouette for every un-fetched entry. The default icon [A light coloured, Proton purple human silhouette on a dark circular background]

   Case in point: I tried to save my n8n.io login. Multiple URLs, no favicon found. What did I get? That same human silhouette favicon....

   Not a letter, not a logo....just a silhouette. It’s the same for Similar.ai, Meta/Facebook/Ollama, Fedex &… more

   19 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Move Folders

   Currently it's not possible to move folders.
   I would like to be able to move folders with subfolders and all there children to other vauls or folders. Ideally via drag and drop like it is already possible for single entities.

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Proton Pass browser extension should retain settings

   Extension settings should be stored server side, and when signed-in again, they should be automatically applied.

   7 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Folders instead of vaults

    The existing "Vaults" Feature is not good in my opinion. Its little bit confusing, so if this feature should be handled as a folder, why not name it "Folder", and pls let us create unlimited folders, not only 50. I think about to switch to Proton but this holding me back, i have NordPass where i can create unlimited Folders for better organisation... considder this update pls.

    47 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Auto-lock when system lock

    Hi Team,

    Suggesting a new timeout settings for the proton pass browser extension. Suggesting we add a new option that will stay the vault open and will lock once the system is locked or gets shutdown.

    635 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    32 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Proton Pass App on Mac Needs a Dark Icon Style

    I have my Icon & Widget Style in my mac settings (under Appearance) set to Dark. My Dock has all dark apps in it, except for Proton Pass - it remains light.

    I would like them all to match, and I use an OLED display so a light app in my dock is harder on the screen and increases my risk of burn-in.

    Please update the Mac app icon to match the iOS app when dark icons are configured.

    Thank you!

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Provide an accessibility statement

    I would like Proton to provide an accessibility statement that clearly outlines what to expect in terms of accessibility for people with disabilities, based on international standards such as the Web Content Accessibility Guidelines (WCAG) or EN 301 549.

    This would also make it easier for users with disabilities to understand if they can safely switch to and rely on this product.

    This would make it easier for me to use and recommend the product in organisations with accessibility requirements, like the public sector.

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Change suffix of the alias

    currently : I want to generate an alias. I click on "create an... + alias". Proton let me set a prefix. but peoton impose a suffix. if I dont want this suffix, I have to abandon + restart the procedure from the begining.
    proposal : to add a button "change alias". => proton would generate a new suffix randomly.

    6 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Fake Vault + Password - if you're forced to give it

    Use a special password to display a fake vault if you've been forced to give your password

    92 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Force Autofill services

    There are problems autofilling with browsers and store apps (i.e. Brave & Firefox, and stores Aurora and F-droid. Add "Accessibility Autofill Service" and a "Manual Quick Settings Autofill Tile" to the Android app so it can force This paste passwords into sideloaded/Aurora Store apps when the standard Android autofill framework blocks it. Bitwarden already does this seamlessly. Essential for us who are de-googled.

    7 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Facilitate importing password's records from Synergy "C2 Password" to Proton Pass

    Synergy "C2 Password" is a Password manager that will be deprecated.
    Importing all records to Proton is a real pain.

    Consider making it easier with a step-by-step process to importing the data, including mapping the columns from the CSV exported from "C2 Password" to Proton Pass.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Add Proton Pass to the options when right clicking in browser

    Right now, if Photon Pass doesn't show up in a particular password field, the only way to log in is to manually open the app or extension and copy and paste in.

    In contrast, 1pasword lets you right click in the password box and select 1password from the options, which then allows you to access your login.

    This is much less hassle than doing the entire thing manually.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. add Undo and Redo functionality to Proton Pass.

    Please add Undo and Redo functionality to Proton Pass. It would make editing and correcting accidental changes much easier and more user-friendly.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. I use the Touch ID on my iMac keyboard to unlock the Proton Pass extension on Mac OS browsers firefox and safari

    Hi. I want to be able to use the Touch ID button on my iMac computer's keyboard to unlock the Proton Pass extension on the Firefox browser and on the Safari browser. Currently, only the PIN code is available to unlock the browser extension on this twos browser. Thank you

    21 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating