1031 results found

1. List of re-used emails & usernames

   Using email aliases or randomly created usernames is an added security layer. Hence, besides re-used passwords, I would like to see lists of re-used emails and usernames.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

2. Strichcodes von Kundenkarten einscannen und dann wird daraus gleich derselbe Strichcode in der ProtonPass-Karte dargestellt

   Strichcodes von Kundenkarten einscannen und dann wird daraus gleich derselbe Strichcode in der ProtonPass-Karte dargestellt, damit man den Strichcode am Codeleser vorhalten kann und somit keine Karten mehr im Portemonnaie braucht.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

3. Request user identification or action for each item extraction

   Proton pass contains (by construction) my most important secrets, so I really do not want any of them to be possible to extract without my consent, even if some device gets compromised. In case anything on my machine is compromised, I still want this to be of as limited impact as possible, by making sure that as few items as possible can be extracted.

   Would it be possible to add an additional optional layer of security, for example asking the user to strongly authenticate (with a FIDO2 device for example) to "unlock" secret extraction on a per item basis?

   For example, that could work in the following way:

   • I visit a website for which Proton Pass holds the login and the extension or app gets activated, or in the Proton Pass online App I click on a specific item, while already being logged in the corresponding Proton Pass tool

   • This means that Proton Pass would now need to extract and decrypt the data corresponding to this specific item (for example, the "Login" item corresponding to the website); to be able to do this, the Proton Pass tool generates an authentication challenge, even though I am already logged in the tool

   • As a user, I fulfill the authentication challenge that is single use so it can only be used to retrieve data from once specific item: for example, I fulfill an OTP code, or even better a FIDO2 challenge; the challenge issued clearly indicates which item is to be unlocked, and the local Proton Pass tool only gets access to the actual data once the challenge is completed

   • Once the challenge is fulfilled, the Proton Pass tool received the data necessary to get the fields of the current item and allows me, for the next 45 seconds, to extract any field from the corresponding item.

   This would mean that, though my laptop would be logged into Proton Pass, even if my laptop or browser is compromised the attacker can only extract very little data from Proton Pass - at most one item at a time, for each authentication challenge I perform.

   Personally this is already kind of the strategy I use (I now have my password manager in gopass, and I use an external GPG smartcard to decode my secrets; it means that there is no way, even if my laptop is compromised, to extract any information without me plugging in my smartcard, and pressing its button, for each item to extract). It would be very nice if it could be supported in Proton Pass, and this is typically the kind of feature I will wait until adopting Proton Pass for serious use.

   Proton pass contains (by construction) my most important secrets, so I really do not want any of them to be possible to extract without my consent, even if some device gets compromised. In case anything on my machine is compromised, I still want this to be of as limited impact as possible, by making sure that as few items as possible can be extracted.

   Would it be possible to add an additional optional layer of security, for example asking the user to strongly authenticate (with a FIDO2 device for example) to "unlock" secret extraction on a per item basis?

   For… more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

4. Browser Extension Auto-Positioning (currently cuts-off at bottom of page)

   Currently if you are say, signing up for a newsletter and the email entry form is stickied to the bottom of the webpage, Proton Pass will still display underneath the form, causing it to be cut off.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

5. Right-click to copy and paste on desktop

   Proton Pass desktop application (windows) cannot right-click (mouse) to copy and paste notes/url in it.
   This makes it difficult when you want to open the saved website.
   This feature may be mandatory to implement.

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

6. Multiple Proton Pass Accounts Saved

   I have multiple proton accounts, one personal and one for an organization. I'd like to be able to have both password vaults saved so I can switch between them seamlessly. Important for android and browser extension.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

7. Account Audit Functionality

   What I'm suggesting is some functionality to allow you to audit what information each company has about you. Say you have a log in for your bank. They probably have quite a lot of accurate personal information about you, such as your full legal name, address, phone number, and a significant amount of financial information. Maybe they also have some sort of legal ID number for you too. If they are breached, you would want to know exactly what's at stake.

   This could take the form of something super simple, like a checklist that identifies yes or no whether that company has that information, with a checkbox for specific information like name, address, DOB, etc, or for whole classes of information, like employment information, employment history, health information, demographic information, special category data etc. Then, if they're breached, you can quickly identify what sorts of information they held on you. Currently, I do this by making a note in the description of my Pass entry for that site.

   I also use this to highlight password limits or requirements of sites and MFA limits. For example, I would want my passwords to all be a minimum of 24 characters and be able to have special characters and numbers etc. Then if I audit my passwords I can quickly see which ones don't conform. However, some of these don't conform because the service does not allow these passwords. I make a note of that so I can check in the future whether they have improved and I can bring my password up to standard. Similarly, when I can't put MFA on an account, or if I only have the option for email or SMS MFA, I note this down so I can follow up in the future, and not wonder why I never put MFA on that account.

   Taking that a step further, maybe you could have specific fields for name, DOB etc. This would be particularly helpful if you use different names or different permutations of names for different services. Perhaps some services (like your bank) have your full legal name including middle names. Other services perhaps have a first initial and last name, or a first name and last initial. Maybe you have a pseudonym you use on other services. With specific text box fields for individual types of information, you can identify not only that a company holds your name, but what form that takes. This has the added cobenefit for those who are changing their phone number, address or name as they can quickly see who they need to update.

   I think this has a lot of potential in terms of privacy, breach management and scam avoidance, but also ease of life for big transition moments. I think it could also slot in really well with improvements others have suggested in terms of breach monitoring and dark web scanning for login information, prompting you to go look at what companies hold, or, if we were getting really fancy, identifying what types of information were breached (for example, haveibeenpwned notes what types of information were obtained in a breach, so this could be highlighted in the login entry.

   What I'm suggesting is some functionality to allow you to audit what information each company has about you. Say you have a log in for your bank. They probably have quite a lot of accurate personal information about you, such as your full legal name, address, phone number, and a significant amount of financial information. Maybe they also have some sort of legal ID number for you too. If they are breached, you would want to know exactly what's at stake.

   This could take the form of something super simple, like a checklist that identifies yes or no whether that… more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

8. show only selected vault's content on Autofill

   or It would be nice if there is option like "Don't show on Autofill" on vault.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

9. Ability to save software licenses

   The possibility to save purchased software with serial number, donwload URL etc.

   10 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

10. Export data in format CSV or JSON readable and importable from other password managers

    Currently, if I export my data from ProtonPass, for example, in CSV format, I cannot import it into other password managers like Strongbox, KeepassXC, or Bitwarden. That's because the username login data is in the "email" field instead of the "username" one as it should be.
    Thus, Bitwarden, for example (but it's the same for the password as mentioned above managers), leaves the username field empty after the import, and it's not possible to intervene on the single fields before the import process ends.
    It's not a matter of leaving the pain to other password manager developers, who should allow users to modify the fields during the import process, but it should be a reason based on coherence. I think it's coherent to consider the field "email" differently from "username," although sometimes the first one is the username.

    Currently, if I export my data from ProtonPass, for example, in CSV format, I cannot import it into other password managers like Strongbox, KeepassXC, or Bitwarden. That's because the username login data is in the "email" field instead of the "username" one as it should be.
    Thus, Bitwarden, for example (but it's the same for the password as mentioned above managers), leaves the username field empty after the import, and it's not possible to intervene on the single fields before the import process ends.
    It's not a matter of leaving the pain to other password manager developers, who should allow… more

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

11. Fuzzy Search Logins (etc.)

    Example: If I want to quickly find my Proton Account login info.

    "proton account" will not find anything
    "acc proton" will not find anything

    I need to explicitly search for "account.proton" (with a dot) for it to return anything. Being this specific is needed because search for "proton" only will give all entries that have "proton" in them, like "protonmail.com", so many logins, not just the proton account login.

    It's impossible to always remember the exact URL portion like "account.proton".

    13 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

12. Reused passwords section to be an accordion like android app

    Need a drop down collapse feature for desktop ...... I'm new to password managers and I realised I've reused a bunch of passwords extensively...... I cant change everything at one shot, but scrolling through every section on desktop is a headache ...... In android I can click on the header and the list will collapse, need the same feature on desktop please ...... Also while importing passwords from browsers made a lot of duplicates, so the drop down will help me check for those and remove the duplicates

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

13. Support for Android app shortcuts

    This feature adds some shortcut options to the app icon when holding it, this is very useful for you can reach specific features of the app without having to navigate through the UI.
    Besides, on Samsung phones these shortcuts can de added to the edge menu.

    https://developer.android.com/develop/ui/views/launch/shortcuts

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

14. Time-lock options for all apps

    Currently the only app I use that has a time-lock feature is the ProtonPass extension. This works great but the fact that A) the browser ProtonMail site can be opened even when the ProtonPass extension is locked seems like a high security risk. Basically anybody who goes to the ProtonMail site can access my mailbox even when proton pass is locked. The only way to avoid this is to manually signout of proton each time which then signs me out of ProtonPass.

    As far as I can tell, the ProtonMail desktop app has the same limitation. Unless i manually sign out, if someone were to gain access to my computer, proton mail would be theirs for the taking.

    It feels like the Proton services were intended to be one universal system but the way it's set up makes it feel like it's multiple programs that have limited compatibility. For a company whose reason for being is security above all else, this feels like a huge disconnect.

    Currently the only app I use that has a time-lock feature is the ProtonPass extension. This works great but the fact that A) the browser ProtonMail site can be opened even when the ProtonPass extension is locked seems like a high security risk. Basically anybody who goes to the ProtonMail site can access my mailbox even when proton pass is locked. The only way to avoid this is to manually signout of proton each time which then signs me out of ProtonPass.

    As far as I can tell, the ProtonMail desktop app has the same limitation. Unless i manually sign… more

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

15. Lables

    Hi, Please correct if I'm wrong I would really appreciate a function to apply lables to logins. This could help to group logins and other stored information to certain groups. Ie family / login for different users (kids) for ie Apple account. I have several employers where I have multiple logins for different IT application. I would find it handy to group those logins according to this.
    Thank you for your consideration.
    Kind regards,
    Jerome

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

16. Sync PIN Code

    WHY this is important...

    1) When accidentally entering the PIN code into a browser page field instead of Proton Pass, there is no way to know if the code was grabbed by the server hosting the page. Therefore it is important to IMMEDIATELY change one's PIN code.

    2) I use Proton Pass on 4 Windows machines. For each machine I need to change the code AT LEAST TWICE, once for the Proton Pass app, and once for each browser running the extension, so I am updating it 8 times at a minimum, and if not using the default 15 minute timeout, the code has to be entered again to change the timeout.

    3) While updating it once and syncing to all existing locations would be very convenient, I would be content with updating it in the app on each machine and having it sync to each browser extension on the same machine, without changing other settings (like the timeout window).

    WHY this is important...

    1) When accidentally entering the PIN code into a browser page field instead of Proton Pass, there is no way to know if the code was grabbed by the server hosting the page. Therefore it is important to IMMEDIATELY change one's PIN code.

    2) I use Proton Pass on 4 Windows machines. For each machine I need to change the code AT LEAST TWICE, once for the Proton Pass app, and once for each browser running the extension, so I am updating it 8 times at a minimum, and if not using the default 15 minute… more

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

17. Sortierung in Proton Pass festlegen

    Zur Zeit ändert sich die Sortierreihenfolge in Proton Pass immer wieder von "A-Z" auf "Kürzlich". Es wäre eine große Verbesserung wenn die festgelegten Sortierreihenfolgen beibehalten würden und sich nicht automatisch verstellen.

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

18. serait-il possible que protonpass propose de remplir les mots de passe des fenêtres d'identification pop-up ?

    serait-il possible que protonpass propose de remplir les mots de passe des fenêtres d'identification pop-up ?

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

19. Add Kiwi Browser Password Manager for importing

    Add support for importing data from Kiwi Browser's password manager

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

20. Migration from Kaspersky Password Manager

    Among the password managers from which you can migrate to Proton Pass, Kaspersky Password Manager is missing.

    That manager exports its database in a txt with this layout:
    Website name: .x
    Website URL: http://.x
    Login name:
    Login: ***
    Password: ***
    Comment:

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close