User Suggestions to Enhance Proton Pass Privacy and UX
Dear Proton Team,
First of all, thank you for your ongoing work in defending digital privacy and security. As a user who strongly values these principles, I have migrated myself and my close circle to the Proton ecosystem.
I’ve identified some potential security gaps and would like to offer a few constructive suggestions, particularly regarding your new service, Proton Pass. These recommendations are meant to support Proton’s continuous improvement for the benefit of the entire community.
- Secure credential sharing links Currently, when sharing a credential via secure link, the recipient is able to view the password in plain text, which poses an unnecessary risk. This feature should allow only copying the password, without revealing it on screen or allowing screenshots. It would also be important to limit how many times the password can be copied.
For example: if I share a password with a colleague and they can view it, take unlimited screenshots, and copy it as many times as they wish, then the purpose of having an expiration time or a view limit becomes ineffective — the sensitive information can be saved or shared before the link even expires. The whole point of a temporary access link is to minimize exposure and the risk of data leakage.
Extend auto-lock timeout in Proton Pass extension
I suggest allowing users to set the auto-lock timeout up to 8 hours or even 1 full day — matching the length of a typical workday.Prevent screenshots across all Proton services
Please consider implementing screenshot blocking across all Proton platforms — especially Proton Pass — on mobile apps, web browsers, and extensions. This helps ensure sensitive data remains private.Independent master password for Proton Pass
It would be beneficial for Proton Pass to have a separate master password from other Proton services. Several users have raised this concern, and it would provide additional protection for password vaults.Improve user interface and experience
Proton Pass would benefit from a cleaner, more intuitive design. Reducing visual clutter and optimizing layout and color usage can improve usability significantly.Allow favicon or icon customization
Letting users choose or change the icons for each item would help improve visual recognition and overall organization.Add custom fields in notes
Allowing users to create custom fields like PINs, secret texts, or hidden passwords in notes would make Proton Pass much more flexible for storing sensitive data.Email translation in Proton Mail
It would be great to have a built-in feature that translates emails received in other languages.
These suggestions are made with deep respect for your mission and with the hope of contributing positively. My intention is not to demand features, but to help Proton reach even higher standards. Privacy and security are of utmost importance to me, which is why I chose to join Proton and encourage those around me to do the same.
Alexander
shared this idea
Thank you for your suggestions; they will be taken into consideration. In the future, please raise or vote for one issue per feature or suggestion.
-
Jeremy Witte commented
in full agreement
-
Sayuri commented
The suggestions are valid and add a lot to the security and user experience Proton should take this into account.
-
[Deleted User]
commented
I have identified several critical aspects related to security and user experience in Proton Pass that I believe should be addressed. Below are my observations and suggestions:
1.- Credential Management: Each Proton service should have a unique password rather than using a single master password for all services, which poses a security risk.
2.- Emergency Access: It is essential to include an option to assign an emergency contact or set up a secondary master password in case of lost access.
3.- User Interface (UI) and Usability: Navigation within Proton Pass is text-heavy and not very intuitive. Simplifying the structure and improving the layout of sections is necessary.
4.- Visual Design: The current color scheme is quite dull, and the favicons of vaults and items lack visual clarity, which complicates quick identification of stored elements.
5.- Consolidation of Related Items: Digital identities, such as email aliases and passkeys, should be grouped within a single item rather than managed as separate or duplicate entries.
6.- Placement of Critical Features: Features like dark web monitoring, password status, and Proton Sentinel should be better positioned and more accessible from the main dashboard.
7.- Security Monitoring Reliability: Following the recent leak of my personal data due to the Interbank hack in Peru, NordPass detected and notified me immediately. In contrast, Proton Sentinel issued no alert, raising concerns about its effectiveness.
Conclusion: Proton Pass needs a significant improvement in design and interface following the "less is more" principle, prioritizing usability, visual clarity, and robust cybersecurity. It would be beneficial to draw inspiration from the simplicity of NordPass and the feature-rich capabilities of 1Password.
-
Minh Thân Ngô
commented
Dear Proton Team,
I am a dedicated user of Proton services and truly admire your commitment to privacy and security. With Proton Pass being a standout password manager in the market, I wanted to share two feature ideas that could further enhance its functionality and appeal.
1. Vanishing Mode
- Description:
Vanishing Mode allows users to create passwords or sensitive information with a set expiration time. After the designated period, these passwords are automatically deleted from Proton Pass without leaving a trace.
- Use Cases:
Temporary Accounts: Ideal for registering on websites or services that are only needed once or for a short time.
Secure Sharing: Users can share a password that will expire after a certain duration (e.g., 24 hours).
Data Protection: Prevents sensitive data from being stored longer than necessary, reducing the risk of exposure.
2. Password Activity Tracker
- Description:
This feature logs the activity and usage of each saved password, providing insights into their security and relevance.
- Key Functions:
Last Used: Track when a password was last accessed.
Access Count: Monitor how frequently a password is used.
Device Logging: Identify which devices accessed a specific password.
Why These Features?
Both features align with Proton’s mission of enhancing privacy and empowering users to manage their digital lives securely. They also differentiate Proton Pass by addressing practical use cases while reinforcing data protection.
I hope these ideas resonate with your vision for Proton Pass. I’d be delighted to provide additional details or participate in any discussions regarding their implementation.
Thank you for considering this suggestion and for continuing to create exceptional privacy-focused tools!
Best regards,
[Than Ngo]
[email: condescendingbeaver@justzeus.com] -
Tøxicated Béast commented
Hi, Proton Pass Team! 👋
I've been a happy user of Proton Pass for the past year or two, and I really appreciate the focus on security and privacy. It makes me feel safe knowing my passwords are well-protected, and the interface is intuitive and easy to navigate. 💻🔐
I do have a few feature suggestions that could further enhance the experience:
1. Grouping Accounts by Service 🗂️
One feature I enjoyed when using Kaspersky Password Manager was the ability to group accounts by service. For example, I could create a group for all Google accounts (like Gmail, Google Drive, YouTube, etc.), making it easy to manage and add new accounts under a specific service.With grouping, I could add a new account’s email and password to an existing group, and Proton Pass would automatically apply the correct URLs (e.g., Gmail.com, GoogleDrive.com). A simple dropdown to open/close these groups would make everything much smoother, similar to how Kaspersky Password Manager works. 📂✨
2. Manual Linking of Apps to Accounts 📲
While the automatic linking feature is helpful, I’ve noticed it doesn’t always work as expected. For instance, when saving a login through the Android app, the app is automatically linked to the account, but I can’t manually link other apps to different accounts. This can sometimes lead to confusion if the app isn't correctly detected.Adding the option to link apps to accounts manually would really improve the user experience. 🔗
3. Base URL Detection (Inspired by Bitwarden) 🌐
Another feature I’d love to see is the ability for Proton Pass to detect the parent or base URL when logging in. For example, if I create a login for microsoftoffice.com, and later try to log in to microsoftofficelive.com, it would be great if Proton Pass could automatically recognize both as part of the same service, even though they have different domains.Bitwarden does something like this, and I really appreciated it. It would save a lot of time and help avoid duplicate entries for services that share a similar base domain. 🙌
Thank you so much for considering these suggestions! 🙏 I’ve also noticed that other users have shared similar ideas on Reddit and other platforms, so I’m sure these features would be well-received by many. Keep up the amazing work, and thanks again for providing such a great tool! 😊🔐
Best regards,
Shahin ✨ -
Antoine
commented
The Proton applications offer a remarkable concept, but it's clear that this suite has a number of shortcomings that deserve to be highlighted.
Consistent design: It would be nice if each application had a consistent interface. For example, there are currently two different interface styles between the VPN solution and the mail, drive and pass solutions. Visual uniformity would reinforce the suite's identity and enhance the user experience.
More information: It would be beneficial to have more logs, information on all data, and monitoring possibilities. This would give users greater visibility and control over their information.
Improved collaboration: More in-depth collaboration management is needed, including sharing and management groups across all applications. These features should be available not only to professionals, but also to home users.
Centralized management: A centralized dashboard for managing all data would be a major asset. This would enable users to control and monitor all their information from a single access point.
Greater flexibility: It would be advantageous to enable the integration of other solutions (for example, adding other mailboxes to Proton Mail). This flexibility would make the suite more attractive to a wider range of users.