1501 results found

1. CLI PATs for AI agents with mandatory reason logging

   As of Oct 2026, CLI personal access tokens support editor/manager roles for write access but don't require agents to provide reasons for each credential access. Meanwhile, Web UI AI tokens force reason logging but are read-only only.

   Proposal: Add a --agent flag to pat access grant: pass-cli pat access grant --pat-name "AI Agents" --vault-name "Mimir" --role editor --agent When --agent is set, every credential retrieval via that token requires the caller to pass a --reason parameter, matching Web UI behavior while preserving write capability. This enables secure CI/CD pipelines where audit trails matter, not just home automation scripts.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Auto-close the navigation menu after clicking an option

   When I click on something in the navigation menu, it stays open. I have to click elsewhere in the app to close the menu. I've looked in the settings and can't find an option to auto-close it.

   Please make the nav menu auto close after selecting an item (vault, utility, etc.).

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   38 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Storing PGP keys in Proton Pass

   Proton Pass already stores SSH keys and can use them using Proton Pass CLI with it's integrated SSH Agent, I think a PGP integration too would be amazing as it would allow managing and maybe even using PGP keys, maybe from the CLI too, with Proton Pass without having to rely on outside tools, and having a secure place to keep PGP keys in synced between devices.

   8 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Merge mail elias to sellected or the same item

   Merge mail elias to sellected or the same mail or account or any same or sellected item by user

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. macOS: Don't lock when closing to top bar

   Please either add an option, or change the behavior of closing the macOS application to the top bar.

   Currently it only stays unlocked if you hide it to your Dock (CMD+H). If you close the window to hide to the top bar (CMD+W) it immediately locks the vault.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Show user profile without unlocking the app

   Hi,

   One thing I like about using the default MS Edge Password Manager is that it goes like that:

   1. Go on website
   2. See that you have a profile.
   3. Click on profile
   4. Enter password/device biometric/Pin
   5. Autofill successful

   The thing I don't like about Proton Pass is that if I lock my password behind a password or pin (still no Windows Hello support), I can't see that I have an account when I go on a website. Sure, I know where I have an account most of the time, but the problem is that it makes it less intuitive.

   If I don't have the app or browser extension unlocked, I have no autofill cues.

   Maybe it's just me.

   Thank you.

   Hi,

   One thing I like about using the default MS Edge Password Manager is that it goes like that:

   1. Go on website
   2. See that you have a profile.
   3. Click on profile
   4. Enter password/device biometric/Pin
   5. Autofill successful

   The thing I don't like about Proton Pass is that if I lock my password behind a password or pin (still no Windows Hello support), I can't see that I have an account when I go on a website. Sure, I know where I have an account most of the time, but the problem is that it makes it less intuitive.

   If I don't… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Access tokens for use with Pass CLI in automated use-cases

   I would like to use Pass with Pass CLI in automated workflows like CI/CD pipelines, Kubernetes, etc.
   Offering access tokens for authentication would allow to revoke access or rotate tokens regularly much easier as it is not necessary to change the primary account's password (which directly breaks all access).

   14 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. pass-cli: item view prints Hidden-typed values in plaintext; no safe way to discover an item's structure

   pass-cli is aimed at automation and agent workflows, but it currently forces agents to make a choice between guessing blind and over-exposing secrets:

   1. item view (human format) renders secret fields as Hidden("<full plaintext value>"). The type system clearly knows the field is Hidden — it just doesn't redact it. Default output should be Hidden(<redacted, N chars>), with an explicit --reveal (or the existing --field X) opting into the value. That one change makes bare view a safe discovery command: field names, note, and attachment metadata are exactly what a script needs to learn before requesting a specific value. --output json has the same problem and the same fix.

   2. There is no other discovery path. item list returns no field or attachment info, there's no describe-item command, and a wrong --field guess returns only Field does not exist: X — no hint of what fields do exist (field names are metadata, not secrets). An item whose only secret is a file attachment has zero fields, so every --field attempt fails identically with nothing pointing at the attachment. Callers today must pull the full plaintext item and build their own redaction just to learn a field name — the opposite of what a secrets manager should encourage.

   3. item attachment download is the one command that refuses friendly selectors. Everything else accepts --vault-name/--item-title; attachment download demands raw --share-id/--item-id/--attachment-id, which are only discoverable via the unredacted JSON view. It should accept the friendly selectors plus --file-name.

   4. Onboarding: pass-cli agent instructions emits the session token in plaintext inside the markdown it tells users to paste to an agent. Convenient, but it normalizes putting a live credential into a chat transcript — the exact anti-pattern a password manager should design against. The instructions should reference an env var or keychain path, never the token value itself.

   pass-cli is aimed at automation and agent workflows, but it currently forces agents to make a choice between guessing blind and over-exposing secrets:

   1. item view (human format) renders secret fields as Hidden("<full plaintext value>"). The type system clearly knows the field is Hidden — it just doesn't redact it. Default output should be Hidden(<redacted, N chars>), with an explicit --reveal (or the existing --field X) opting into the value. That one change makes bare view a safe discovery command: field names, note, and attachment metadata are exactly what a script needs to learn before requesting a specific value. --output json… more

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Merge/De-duplicate the Suggestion Box!!

   Autofind and remove duplicates - 1818 votes
   Merge passwords and aliases - 1285 votes
   Let us merge entries in ProtonPass... - 726 votes
   Remove Duplicate entries - 262 votes

   = 4,091 Votes

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. compare item history

    Show differences in item history in colours (e.g. red / crossed out)

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. send to Proton Pass functionality on mobile devices for quick note taking

    send to Proton Pass functionality on mobile devices for quick note taking

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. add duplication function to convert note as part of login data to separate note

    please add functionality to convert note as part of login data to a separate note

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. find and replace functionality in Proton pass

    Pass editing would benefit from find and replace. A repeated error in the text of hundreds of notes is hard to edit

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Add Autofill support for Titanium/Helium on Android

    Titanium is a secure and fully open-source, Chromium-based web browser with support for extensions, based on Vanadium by GrapheneOS.
    I had previously submitted a pull request on GitHub, but those were recently disabled.

    Package Name: io.github.jqssun.helium
    Link: https://github.com/jqssun/android-titanium-browser/tree/main

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Allow sharing passwords witn non-proton users with longer expiry or allow password recovery

    The current feature to share passwords with someone else with an expiry date is very useful. However, the maximum 30 days expiry is quite limiting if one wants to share a password in case someone dies or changes responsibilities and is no longer interested in maintaining access to the service protected by the password.

    With a 30 day expiry, one has to remember to reshare the password regularly, which may be fine but 30 days means one would have to share again every month or so. Best would be if there were another mechanism.

    Either extend the potential duration to, say,. one year, where the user could put a reminder to reshare in a year or allow for some form of "user is deceased or is not available' type of recovery. Maybe something like a recovery code that can be used to recover a password or set of passwords that were shared. If someone requests recovery, first inform the user that recovery has been requested and, if the user does not take action within, say, a week, allow recovery.

    The current feature to share passwords with someone else with an expiry date is very useful. However, the maximum 30 days expiry is quite limiting if one wants to share a password in case someone dies or changes responsibilities and is no longer interested in maintaining access to the service protected by the password.

    With a 30 day expiry, one has to remember to reshare the password regularly, which may be fine but 30 days means one would have to share again every month or so. Best would be if there were another mechanism.

    Either extend the potential duration to,… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Append or prepend OTP to password autofill

    In Pass you can set password and OTP. For auto-fill it would be great to be able to append (or prepend) the OTP to the password for web access such as OPNsense.

    i.e. the autofill for the password field on the web page would be:
    passwordOTP
    or
    OTPpassword

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. More Keyboard Shortcuts On The Extension

    I suggest adding shortcuts for the following actions to improve workflow speed:

    • Autofill login for the current website: A single shortcut that fills the username, password, or TOTP code.
    • Autofill card.
    • Autofill identity.
    • Generate and copy a new random password.
    • Generate and copy a new email alias.

    41 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    4 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. pass-cli on macOS: Touch ID unlock instead of login keychain password prompts

    On macOS, pass-cli stores its local session key ("ProtonPassCLI") in the legacy file-based login keychain. Every pass-cli call that needs the key shows two separate password dialogs ("wants to access key" and "wants to use your confidential information"), and both need the full login password.

    The item's access rules are pinned to the binary's exact build hash (cdhash). The Homebrew build is ad-hoc signed, so every update changes the hash and brings both prompts back. Clicking "Always Allow" is the only way to avoid them, and it removes the per-use check completely.

    Request: on macOS, store the session key in the data protection keychain with a biometric access control (.biometryCurrentSet or .userPresence). That way pass-cli is unlocked with Touch ID, falling back to the device password. Apple requires a Developer-ID-signed build with a keychain-access-groups entitlement and an embedded provisioning profile for this, for example by shipping pass-cli inside a minimal app bundle (Apple TN3137, "On Mac keychains").

    Why it matters: pass-cli is increasingly called by scripts and AI coding agents. Sometimes I want to give them a way to create/update proton pass item, but only with my explicit review and permission. A quick fingerprint per access, gives real human approval without typing the full login password many times a day. The desktop app and browser extensions already support Touch ID; the CLI is the gap.

    On macOS, pass-cli stores its local session key ("ProtonPassCLI") in the legacy file-based login keychain. Every pass-cli call that needs the key shows two separate password dialogs ("wants to access key" and "wants to use your confidential information"), and both need the full login password.

    The item's access rules are pinned to the binary's exact build hash (cdhash). The Homebrew build is ad-hoc signed, so every update changes the hash and brings both prompts back. Clicking "Always Allow" is the only way to avoid them, and it removes the per-use check completely.

    Request: on macOS, store the session key in… more

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Require pin or password to show stored passwords

    When viewing a password in chrome extension no unlock is needed. I would like proton to ask for password or pin when anyone wants to see passwords or disable possibility to view password entirely

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Prioritize login accounts

    I often have multiple login credentials for a site (family, personal, work, etc). It would be really helpful to be able to search by domain/app for multiple logins and then ultimately be able to prioritize 1 as primary over the others.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating