1405 results found

1. Feature Request: Native Support for Proton Pass Extension in Falkon Browser (Linux)

   As you may be aware, the Falkon browser (formerly QupZilla) serves as the default browser alternative to Firefox and Chromium in many modern Linux distributions — particularly those built on the KDE Plasma desktop environment. Falkon's user base is steadily growing and represents a significant group of users who value privacy and the use of free software.

   Currently, however, the integration of Proton Pass in Falkon is not natively supported. This creates a gap in the user experience for this community. My proposal is to leverage the existing architecture of the Firefox extension as a reference to establish direct compatibility for Falkon.

   Technical Rationale and Feasibility:

   WebExtensions Standard: Falkon utilizes QtWebEngine and supports the WebExtensions API. Since the current Proton Pass extension for Firefox already builds upon this standardized framework, the technical portability is high. Rather than a full rewrite, it would likely require primarily adapting the compatibility layer to cover any nuances of the QtWebEngine environment.
   
   Parallel to Firefox: Given that Firefox currently serves as the reference platform for the extension and Falkon meets similar requirements, porting it would be a logical next step in your strategy of cross-platform openness.
   
   User Need: Many Linux users who prefer Falkon find themselves forced to either use a different browser or forgo the convenience of automatic password filling. Native support would significantly improve the usability of Proton Pass in this important niche and strengthen the appeal of your services for Linux purists.
   

   I therefore kindly request that you consider adding this item to the roadmap for future Proton Pass updates. Should direct development not be prioritized at this time, perhaps it could be investigated whether the existing Firefox extension already runs in Falkon without further modifications? Often, compatibility exists even when it is not yet officially listed.

   As you may be aware, the Falkon browser (formerly QupZilla) serves as the default browser alternative to Firefox and Chromium in many modern Linux distributions — particularly those built on the KDE Plasma desktop environment. Falkon's user base is steadily growing and represents a significant group of users who value privacy and the use of free software.

   Currently, however, the integration of Proton Pass in Falkon is not natively supported. This creates a gap in the user experience for this community. My proposal is to leverage the existing architecture of the Firefox extension as a reference to establish direct compatibility… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Authenticator needs Clear Names or Identifiers

   Authenticator created own nsme for each account. Sometimes they are vague and it can be hard to know what account it is associated with and therefor need ability to edit and create clear names or identifiers

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Second Login

   It would be great if Proton Pass allowed users to store not only a PIN or password as a second password, but also a security key such as Yubikey.

   19 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Flag website

   Sometimes fake websites exist for a genuine website (with almost same address). Like we can associate ULR for login, i would like to add flagged URL for a login. If i try to log-in or create a new logging for a website I previously flagged, proton pass would show me an alert.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Tap to revival code

   Nordpass currently allows only to either hide or view all codes. There is no middle ground. If I need to look up one code, I have to expose my entire list of accounts.

   Please add a feature to tap and view individual codes. Keeping everything hidden by default and allowing us to reveal them one by one would dramatically improve privacy, security, and usability.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. TOTP Secure Enrollment - Generating Secure QR Codes for 2FA

   This could be implemented as a checkbox during 2FA setup as a "Trust this device with QR code?" setting or as an Advanced Security 2FA setup. It would require the authentication device to have an internet connection at the time of setting up.

   While generating QR code for setting up 2FA, instead of sending secret to browser/device that could be copied by malware or other screen-based exploits, secure enrollment creates a single-use QR code with a nonce.
   The nonce QR code would then generate a single-use cryptographically signed digit value that would display in the Authenticator on one device only.
   If another device tries to scan the same code after the digit value has been fetched, it will say expired. If another device fetches the nonce QR digit value before the user can scan it, they will simply get an expired as well, and be able to generate a new QR on the untrusted device.
   Inputting the correct 4 to 6 digit code from the app onto the untrusted device in a box under where the QR was generated would allow the real secret to be securely downloaded via encryption and https on the trusted phone/device that scanned the single-use nonce QR code, without the secret ever showing on the untrusted device or loading into the web browser. Thus, the trusted device with the authenticator is given the true key while the untrusted device doesn't receive one bit of secure information.

   Also leave generating the 20 backup codes as optional too to reduce attack surface of screen-based exploits and potential malware. They could then be generated within the authenticator app at a later time if desired.

   This could be implemented as a checkbox during 2FA setup as a "Trust this device with QR code?" setting or as an Advanced Security 2FA setup. It would require the authentication device to have an internet connection at the time of setting up.

   While generating QR code for setting up 2FA, instead of sending secret to browser/device that could be copied by malware or other screen-based exploits, secure enrollment creates a single-use QR code with a nonce.
   The nonce QR code would then generate a single-use cryptographically signed digit value that would display in the Authenticator on one device only. … more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. PIN or passcode to proton authenticator?

   Implement passcode or touch-id to proton authenticator and pass?

   7 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Domain URL matching rules

   Proton pass should have URL matching rules like bitwarden. This makes it easier to handle different usecases.
   For instance, at work I have different usernames/passwords on different subdomains and I would like to be able to limit certain credentials to specific subdomains and have others shared accross multiple subdomains.

   So that would be great to have a diffrent matching rules like:
   - root domain
   - hostname
   - starts with
   - regex
   - exact match
   - ...

   1,868 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Under review  ·  187 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Generate random Prefix for alias

   When creating a new alias, add the option for generating a random prefix with two random words.Example: sheetspray

   18 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   3 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. pass-cli: item view prints Hidden-typed values in plaintext; no safe way to discover an item's structure

    pass-cli is aimed at automation and agent workflows, but it currently forces agents to make a choice between guessing blind and over-exposing secrets:

    1. item view (human format) renders secret fields as Hidden("<full plaintext value>"). The type system clearly knows the field is Hidden — it just doesn't redact it. Default output should be Hidden(<redacted, N chars>), with an explicit --reveal (or the existing --field X) opting into the value. That one change makes bare view a safe discovery command: field names, note, and attachment metadata are exactly what a script needs to learn before requesting a specific value. --output json has the same problem and the same fix.

    2. There is no other discovery path. item list returns no field or attachment info, there's no describe-item command, and a wrong --field guess returns only Field does not exist: X — no hint of what fields do exist (field names are metadata, not secrets). An item whose only secret is a file attachment has zero fields, so every --field attempt fails identically with nothing pointing at the attachment. Callers today must pull the full plaintext item and build their own redaction just to learn a field name — the opposite of what a secrets manager should encourage.

    3. item attachment download is the one command that refuses friendly selectors. Everything else accepts --vault-name/--item-title; attachment download demands raw --share-id/--item-id/--attachment-id, which are only discoverable via the unredacted JSON view. It should accept the friendly selectors plus --file-name.

    4. Onboarding: pass-cli agent instructions emits the session token in plaintext inside the markdown it tells users to paste to an agent. Convenient, but it normalizes putting a live credential into a chat transcript — the exact anti-pattern a password manager should design against. The instructions should reference an env var or keychain path, never the token value itself.

    pass-cli is aimed at automation and agent workflows, but it currently forces agents to make a choice between guessing blind and over-exposing secrets:

    1. item view (human format) renders secret fields as Hidden("<full plaintext value>"). The type system clearly knows the field is Hidden — it just doesn't redact it. Default output should be Hidden(<redacted, N chars>), with an explicit --reveal (or the existing --field X) opting into the value. That one change makes bare view a safe discovery command: field names, note, and attachment metadata are exactly what a script needs to learn before requesting a specific value. --output json… more

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Merge/De-duplicate the Suggestion Box!!

    Autofind and remove duplicates - 1818 votes
    Merge passwords and aliases - 1285 votes
    Let us merge entries in ProtonPass... - 726 votes
    Remove Duplicate entries - 262 votes

    = 4,091 Votes

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Improve Visibility and Organization of Shared Items and Vaults in Proton Pass

    1. Display Vault Icons in Browser Extension and Web Version

    Problem:
    In the mobile app, a Vault icon is displayed next to each item’s name (password, note, etc.), making it easy to see which Vault it belongs to. This icon is missing in the browser extension and web version, which makes navigation less intuitive, especially when using multiple Vaults to organize data.

    Proposed Solution:
    - Add the Vault icon next to each item’s name in the browser extension and web version, just like on mobile.
    - Display this icon in the dropdown menu when selecting a password on a website, to clarify which Vault it belongs to.

    2. Clarify the Origin of Shared Items

    Problem:
    Shared items display an icon indicating they are shared, but there is no visual indication of who shared them or with whom they are shared. This causes confusion, especially when multiple shared items have the same name (e.g., 3 passwords named "Netflix," but shared by/with 3 different people).

    Proposed Solution:
    - Display the name of the person (or a short identifier) next to the sharing icon, both in the item list and in the password manager.
    - Include this information in the dropdown menu when using a shared password on a website.

    3. Organization of Shared Items in "Shared with Me" and "Shared by Me" Groups

    Problem:
    Items shared with admin rights appear in both "Shared with Me" and "Shared by Me", which is redundant and illogical. Even if I have admin rights on a Vault shared by someone else, that Vault doesn’t belong to me and shouldn’t be classified under "Shared by Me."

    Proposed Solution:
    - Create a third group (e.g., "Shared and Managed by Me") for items where I have admin rights but don’t own them.
    - Or: Keep only "Shared with Me" for these cases, and reserve "Shared by Me" for Vaults I created and shared myself.

    4. Optional: Assign a Vault to Shared Items

    Problem:
    Currently, it’s not possible to move a shared item into a personal Vault for better organization.

    Proposed Solution:
    Allow users to set a default Vault for shared items they receive, so they can automatically organize them into a clear structure.

    1. Display Vault Icons in Browser Extension and Web Version

    Problem:
    In the mobile app, a Vault icon is displayed next to each item’s name (password, note, etc.), making it easy to see which Vault it belongs to. This icon is missing in the browser extension and web version, which makes navigation less intuitive, especially when using multiple Vaults to organize data.

    Proposed Solution:
    - Add the Vault icon next to each item’s name in the browser extension and web version, just like on mobile.
    - Display this icon in the dropdown menu when selecting a password on a website,… more

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Improve AutoType for seamless desktop app autofill

    Proton Pass already supports AutoType for desktop applications, but the workflow still requires opening Proton Pass and manually selecting the login and field to fill. It would be much more seamless if Proton Pass could automatically detect login fields in Windows/macOS desktop apps and offer the matching saved login directly, similar to browser autofill. Ideally, it should support username, password, 2FA, and custom fields without requiring copy/paste or manually navigating the vault.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Do not overwrite previously completed fields with blanks

    Selecting a second Identity/address/email should fill only relevant populated fields, not overwrite previously completed fields with blanks.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Dedicated item-type navigation instead of all item types mixed together and filtering

    Instead of: All items → filter → Credit cards have persistent "User Profile" (or similar) sections/tab which holds: Identities | Cards | Bank Accounts | Passports | Vehicle

    Additionally, have dedicated sections/tabs for other item types instead of being mixed with logins: Notes | Aliases | Etc...

    This was one of the places RoboForm felt more mature compared to Proton Pass.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Add Lumo but pass version as a mini, no risk, assistant

    The idea of pass version is that it's completely separated from the normal Lumo.

    The idea is that this Lumo is just an assistance.

    Why? to help up.

    like let's say you use Lumo for whatever, the idea is you need an account, well the local Lumo who is more or less aware, will give you like a small code or something.

    you open pass, since the 2 Lumo can't cross chat (similar to different user accounts, for extra safety (see the recent incident where some people used vpn to get accounts and other stuff via (will not name company)'s ai), and insted we just give them that account and the pass version will generate all the relevant information. Including time, postcode, aka a smart autofill who will not mess up details.

    To top it up, we can also add notes and more, that this pass version can give us.

    and the good part?

    The free Lumo can be used a few times per week, so people who don't want to pay for Lumo still can get access and, if they do something heavy, then sorry but why don't you get for like a month or so the Lumo Plus, get things done, and you are good to go <- Warning, if someone says about the "limits due to accounts": Create another account, get the Lumo plus for that and use the import and export that, again, this lumo will help with, plus the Lumo from your main account can just sort everything out if there is any issues because the idea is to use the Privacy 1st as an help directly

    ALSO

    extra security: Lumo in pass to be only offline if there is any issues (again, this Lumo is NOT the normal one, it's a simple bot to help with accounts, passwords and such, there is no proton secrete since it's just an assistance for the pass and pass only

    and second one: Option for the mini lumo to not be able to see anything, not users, not password, nothing <- tick box option, on by default but if on, it can help us find users, passwords and so on. Because once again, the suggestions is to add the ai to help with what is what, but not more (security risk)

    The idea of pass version is that it's completely separated from the normal Lumo.

    The idea is that this Lumo is just an assistance.

    Why? to help up.

    like let's say you use Lumo for whatever, the idea is you need an account, well the local Lumo who is more or less aware, will give you like a small code or something.

    you open pass, since the 2 Lumo can't cross chat (similar to different user accounts, for extra safety (see the recent incident where some people used vpn to get accounts and other stuff via (will not name company)'s… more

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Automatically save URL associated with new item

    When you create a new login for example: Proton Pass currently doesn't save the URL for which you created this login. It also doesn't for aliases. This seems like a massive oversight. If there is a URL available just save it? I have many items I'm not sure what they're for due to this. It would just be one less thing we have to depend on our scattered human brains on.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Improve text search algorithm

    I have an item with title "x" (for x.com), and when I type "x" in the search bar, the item is very low down the list, when I would expect it to be the first result.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Reset selected vault when app is closed

    If I select the "Logins" vault then close the app, the "Logins" vault will still be selected. Usually I always have to switch to the "All items" view, which is an extra 2 steps. It would be nice if Proton Pass always started off focused on the "All Items", which would make it easier to search.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Proton suite browser versions including ProtonPass vs the app versions.

    If I have Proton suite browser versions including ProtonPass, my logons and passwords populate fine on my web pages. If I have the app Proton suite including ProtonPass, my web pages do not populate logons and passwords. I must have Proton Pass browser version installed. I would like1) The app version of ProtonPass to populate my browsers logons and Password. 2) I would like to unlock my ProtonPass app version with Proton Authenticator.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating