1435 results found

1. Add Camera feature to scan QR for Passkey logins Inside Protonpass (Mobile & Desktop)

   Lately sites like Google and Amazon have been forcing me to scan a QR code to log in using passkey, which i found the following issues:

   1. On desktop, protonpass extention used to pop up to select the passkey, but lately when the site forces you to scan the QR code to use another device (such as a smartphone)

   2. On my Android smartphone, when I scan the QR code, it says I don't have a passkey, this is because it's looking in my Google & Samsung Pass, even though I've selected Protonpass for Autofill & Passkeys. The only solution for me is to go to Settings > (Passwords, passkeys, and autofill) then select None then Protonpass (after I unlock it)

   The suggested solution:
   Add a Camera scan button inside the App (on both Mobile & Desktop) so the user is able to Scan the QR Code just by opening the app, and then selecting the passkey.

   Lately sites like Google and Amazon have been forcing me to scan a QR code to log in using passkey, which i found the following issues:

   1. On desktop, protonpass extention used to pop up to select the passkey, but lately when the site forces you to scan the QR code to use another device (such as a smartphone)

   2. On my Android smartphone, when I scan the QR code, it says I don't have a passkey, this is because it's looking in my Google & Samsung Pass, even though I've selected Protonpass for Autofill & Passkeys. The only solution for me… more

   23 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Android's keyboard button feature change, pops up a pop-up window instead of open the app

   On android, the button at the keyboard just opens the app, but in some cases it just takes you out of what you were doing, right? For example, logging in a game, it takes you out of the game when you're trying to look for the account through the button, and when you come back you're already out! Examples: Minecraft, requires Microsoft account, obviously, proton Pass shows you your Microsoft accounts through the keyboard, but sometimes doesn't show them all, so through the button at the right you open proton Pass, the problem is that takes you out of the game, closing it, and when you finally find your account and come back, you have to start again.

   This would be different, if the button opens a pop-up, a small windows like the chrome's extension on PC. Using window's already there function, the pop-up windows.

   On android, the button at the keyboard just opens the app, but in some cases it just takes you out of what you were doing, right? For example, logging in a game, it takes you out of the game when you're trying to look for the account through the button, and when you come back you're already out! Examples: Minecraft, requires Microsoft account, obviously, proton Pass shows you your Microsoft accounts through the keyboard, but sometimes doesn't show them all, so through the button at the right you open proton Pass, the problem is that takes you out of the… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   25 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Fully Customizable Proton Pass Entries

   Proton Pass stores more than logins — Notes, Credit Cards, Identities, Custom Items, and more. But no matter the item type, every entry comes pre-loaded with default fields you can't remove and an order you can't change.

   The ask, across ALL item types:

   1. Removable defaults — any built-in field can be deleted (or auto-hides when left blank). If an Identity item doesn't need a middle name, or a Custom Item doesn't need a Note, it shouldn't sit there empty forever.
   2. Drag-to-reorder — arrange every field, default and custom alike, in whatever order fits the item.

   The current "workaround" for reordering is deleting fields and re-adding them one by one just to slot a new field into the right spot. That's unpacking the entire suitcase to add a pair of socks.

   Pass already keeps our data safe. This would keep it tidy, too. If you've ever scrolled past blank fields to reach the one you actually needed, this vote is for you.

   Proton Pass stores more than logins — Notes, Credit Cards, Identities, Custom Items, and more. But no matter the item type, every entry comes pre-loaded with default fields you can't remove and an order you can't change.

   The ask, across ALL item types:

   1. Removable defaults — any built-in field can be deleted (or auto-hides when left blank). If an Identity item doesn't need a middle name, or a Custom Item doesn't need a Note, it shouldn't sit there empty forever.
   2. Drag-to-reorder — arrange every field, default and custom alike, in whatever order fits the item.

   The current "workaround" for reordering… more

   5 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Re: Import passwords into Proton Pass---Could you please include Norton Password as an option?

   Re: Import passwords into Proton Pass---Could you please include Norton Password as an option?

   48 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Option to hide hide-my-email aliases

   Have an option to hide hide-my-email aliases. I use aliases a lot, and everytime I log into Proton Pass, it's clogged with these entries and I always have to filter by login, as I always look for the login entry with the alias, not the alias entry itself.

   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Fake Vault + Password - if you're forced to give it

   Use a special password to display a fake vault if you've been forced to give your password

   89 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Add spell-checking settings: disable spell checker and select languages

   Description

   Please add spell-checking settings to Proton Pass, especially to the desktop application.

   Currently, Proton Pass performs spell checking automatically, but there does not appear to be any user-accessible setting to control it. On Linux, this can result in valid words being underlined in red when Proton Pass uses a different language from the language being typed.

   For example, using Proton Pass Desktop on EndeavourOS (Arch Linux) and regularly work in both Estonian and English. English text is currently shown with red spell-check underlines, and I cannot find any way in Proton Pass to either select the correct language or disable spell checking.

   Requested settings

   Please add the following options under Proton Pass settings:

   • Enable spell checking — on/off
   • Spell-check languages — allow one or more languages to be selected simultaneously
   • Ideally, allow automatic language detection as an additional option

   For example:

   • Estonian (et)
   • English (United Kingdom) (en-GB)
   • English (United States) (en-US)

   It is important to support multiple languages simultaneously because many users regularly enter notes, item names and other text in more than one language.

   Expected behaviour

   If spell checking is enabled, Proton Pass should use the languages selected by the user.

   If spell checking is disabled, no spell-check underlines should be shown.

   The selected setting should persist between application restarts.

   Technical note

   Proton Pass Desktop is Electron-based, and Electron already provides APIs for controlling spell checking and selecting spell-check languages, including:

   session.setSpellCheckerEnabled(false)
   session.setSpellCheckerLanguages(['et', 'en-GB', 'en-US'])
   

   Therefore, the underlying Electron functionality already exists; Proton Pass mainly needs to expose it as a user preference.

   This would be particularly useful on Linux, where relying only on the operating system locale is insufficient for multilingual users.

   Description

   Please add spell-checking settings to Proton Pass, especially to the desktop application.

   Currently, Proton Pass performs spell checking automatically, but there does not appear to be any user-accessible setting to control it. On Linux, this can result in valid words being underlined in red when Proton Pass uses a different language from the language being typed.

   For example, using Proton Pass Desktop on EndeavourOS (Arch Linux) and regularly work in both Estonian and English. English text is currently shown with red spell-check underlines, and I cannot find any way in Proton Pass to either select the correct language or… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   3 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Keyboard shortcuts

   Authy's desktop app is (was) handy in that I could switch to the app and start typing, without using the mouse, to pull up the account for which I need(ed) a TOTP code. With Proton Pass, I have to click in the search bar before typing to search. It would be appreciated and convenient if there were a keyboard shortcut to jump to the search bar in the Proton Pass desktop app.

   Additionally, it would be beneficial if there were keyboard shortcuts to jump to different fields of the desktop app and to copy or edit them, without having to use the mouse. Currently the only option for such is to repeatedly mash Tab.

   Thank you, Proton, for your hard work!

   Authy's desktop app is (was) handy in that I could switch to the app and start typing, without using the mouse, to pull up the account for which I need(ed) a TOTP code. With Proton Pass, I have to click in the search bar before typing to search. It would be appreciated and convenient if there were a keyboard shortcut to jump to the search bar in the Proton Pass desktop app.

   Additionally, it would be beneficial if there were keyboard shortcuts to jump to different fields of the desktop app and to copy or edit them, without having to… more

   1,188 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   120 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Planned  ·  AdminProton (Admin, Proton) responded

   This feature is a work in progress.

9. Overview of sites that support Passkey

   Similar to the overview of inactive 2FA, an overview of sites that support Passkey.

   7 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Choose between Email and Username for autofill

    Hello,

    I am writing to suggest an improvement for Proton Pass.

    Currently, there is only one main field for the login. The issue is that on many websites (like forums), you have to log in with a username and not an email address.

    If we put the username in Proton Pass, we lose track of the email address linked to the account. And if we put the email, the autofill doesn't work on the website.

    It would be really convenient to have two separate fields: "Email" and "Username", with a simple option (like a checkbox) to choose which one should be used by default for the autofill on the login page.

    Thanks in advance for considering this!

    Guillaume

    Hello,

    I am writing to suggest an improvement for Proton Pass.

    Currently, there is only one main field for the login. The issue is that on many websites (like forums), you have to log in with a username and not an email address.

    If we put the username in Proton Pass, we lose track of the email address linked to the account. And if we put the email, the autofill doesn't work on the website.

    It would be really convenient to have two separate fields: "Email" and "Username", with a simple option (like a checkbox) to choose which one should… more

    6 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Improve Password Sharing

    I wanted to share some feedback regarding the “Proton Pass User” feature.

    Currently, when sharing a password with another user, it appears that the recipient also needs to be on a paid plan. I believe it would make more sense if only the owner — the person sharing the password — was required to have a paid subscription, while the receiver could remain on a free plan.

    In many real-world situations, users need to share passwords with family members, clients, or team members who may not want or need to purchase a paid plan themselves. Requiring every recipient to upgrade creates friction and makes the sharing feature less practical.

    Allowing free users to receive shared passwords while limiting sharing capabilities to paid users would make the feature far more accessible and useful.

    Thank you for considering this suggestion.

    I wanted to share some feedback regarding the “Proton Pass User” feature.

    Currently, when sharing a password with another user, it appears that the recipient also needs to be on a paid plan. I believe it would make more sense if only the owner — the person sharing the password — was required to have a paid subscription, while the receiver could remain on a free plan.

    In many real-world situations, users need to share passwords with family members, clients, or team members who may not want or need to purchase a paid plan themselves. Requiring every recipient to upgrade… more

    7 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Password Autofill for Mac

    Impossible to use on Mac, due to the inability of ProtonPass to autofill entries. I would like to change from RoboForm (that works flawlessly), because ProtonPass has other features that RoboForm doesn't. Not having autofill for Mac is CRITICAL for me to begin using ProtonPass.

    39 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    5 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Cybersecurity Is Built on Preparation, Not Luck

    Cybersecurity is no longer a luxury—it is a necessity. Every day, individuals and businesses face evolving cyber threats, including phishing attacks, ransomware, cryptoc urrency fraud, data breaches, and unauthorized access to critical systems. While no organization can eliminate every risk, implementing proactive security measures can significantly reduce the likelihood and impact of cyber incidents.

    MUYERN TRUST provides professional cybersecurity solutions designed to help clients strengthen their digital security and respond effectively to cyber threats. Our services include Digital Asset Recovery Support, Cybersecurity Consulting, Digital Forensics, Blockc hain Investigations, Incident Response, Cloud Security, Security Risk Assessments, Email Security, Network Protection, and Account Recovery Assistance for verified owners. We combine technical expertise with a confidential and client-focused approach to deliver practical solutions tailored to each situation.

    Whether you are seeking to improve your organization's cybersecurity posture, investigate suspicious digital activity, or recover from a cybersecurity incident, our team is committed to providing reliable guidance and professional support. We believe that prevention, preparedness, and informed decision-making remain the foundation of effective cybersecurity.

    Learn more about our services What App: +1 2.0.2 7.0.3 2.2.3.9. We look forward to helping you protect your digital assets and strengthen your cybersecurity with professionalism, integrity, and technical excellence.

    Cybersecurity is no longer a luxury—it is a necessity. Every day, individuals and businesses face evolving cyber threats, including phishing attacks, ransomware, cryptoc urrency fraud, data breaches, and unauthorized access to critical systems. While no organization can eliminate every risk, implementing proactive security measures can significantly reduce the likelihood and impact of cyber incidents.

    MUYERN TRUST provides professional cybersecurity solutions designed to help clients strengthen their digital security and respond effectively to cyber threats. Our services include Digital Asset Recovery Support, Cybersecurity Consulting, Digital Forensics, Blockc hain Investigations, Incident Response, Cloud Security, Security Risk Assessments, Email Security, Network Protection, and… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Proper macOS autofill support

    I'm a longtime 1Password user who just migrated to Proton Pass and am already starting to rethink my decision.

    I noticed that the Proton Pass Mac app doesn't actually support autofill and passkeys like 1Password does. You guys figured this out on iOS, please fix this on macOS (see screenshots below).

    iOS: https://cln.sh/rJN07QG1

    macOS: https://cln.sh/LVhbv8vX

    ---

    Additionally, the lack of support for passkeys, oauth, file and image attachment support is pretty disappointing.

    Please fix this so I don't need to migrate back to 1Password 🙏

    160 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    35 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Unlock Proton Pass with Yubikey (or other U2F or FIDO2 standards)

    It seems like Yubikey or ohter 2FA key (standard U2F or FIDO2) are available for Proton Mail, Drive and Calendar.

    But please, implement it for Proton Pass.
    Password only for Windows app is not confortable and PIN is not enough secured.

    Regards,

    8 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Provide an accessibility statement

    I would like Proton to provide an accessibility statement that clearly outlines what to expect in terms of accessibility for people with disabilities, based on international standards such as the Web Content Accessibility Guidelines (WCAG) or EN 301 549.

    This would also make it easier for users with disabilities to understand if they can safely switch to and rely on this product.

    This would make it easier for me to use and recommend the product in organisations with accessibility requirements, like the public sector.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. The ability to mark a passkey for only certain subdomains

    I recognize some website will use a subdomain for authentication and you want the passkey to work across them, but it is really annoying for me to login to certain services that have two or 3 services under 1 domain that do not link together, each has its own passkey.

    The ability to stop the wrong passkey from showing up when logging in would be handy! Even just a "Ignore this passkey on this subdomain/url" option!

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Choose Username or Email for Autofill

    It would be useful if Proton Pass allowed users to choose whether the Username or Email field should be used for autofill on a specific website or app.

    Some services require both a username and email address when creating an account, so both fields may be stored within the Proton Pass entry. However, certain services only allow login using the email address, while Proton Pass currently appears to prioritise the username field when one is present.

    A per-login option such as “Preferred autofill identifier: Username / Email” would allow users to explicitly choose which value Proton Pass should use when filling login forms.

    This would make autofill more reliable without requiring users to remove useful account information from their saved login entry.

    It would be useful if Proton Pass allowed users to choose whether the Username or Email field should be used for autofill on a specific website or app.

    Some services require both a username and email address when creating an account, so both fields may be stored within the Proton Pass entry. However, certain services only allow login using the email address, while Proton Pass currently appears to prioritise the username field when one is present.

    A per-login option such as “Preferred autofill identifier: Username / Email” would allow users to explicitly choose which value Proton Pass should use when… more

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Force passkey interception

    Now, if proton pass is lock, proton extension will not catch the passkey request.
    I see someone ask for no interception at all
    I think the default behavior is important (catch if proton is unlocked, else let OS manage)
    But add a 3rd option to always catch passkey and prompt to unlock the extension

    29 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    6 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Deterministic PGP Keys for Reverse Aliases

    Goal

    Provide each SimpleLogin reverse alias with its own independent OpenPGP identity, while keeping key management simple and preventing external observers from linking different aliases to the same Proton account.

    Design

    Proton maintains a dedicated secret AliasPGPRoot for the user.

    For every immutable reverse alias, Proton derives deterministic key material from:

    AliasPGPRoot + normalized alias address

    using a cryptographic KDF such as HKDF.

    Example:

    AliasPGPRoot
        |
        +-- HKDF("alias-a@simplelogin.com")
        |       -> OpenPGP key A
        |
        +-- HKDF("alias-b@simplelogin.com")
        |       -> OpenPGP key B
        |
        +-- HKDF("alias-c@simplelogin.com")
                -> OpenPGP key C
    

    Separate derivation contexts should be used for signing and encryption keys.

    The resulting OpenPGP certificates are completely independent. They contain only the reverse alias as their identity and no reference to the user's real Proton address, root secret, or other aliases.

    The public key for each alias is stored in SimpleLogin. The private key does not need to be stored separately: Proton clients can deterministically reconstruct it locally when needed.

    Privacy Properties

    An external observer seeing:

    alias A -> public key A
    alias B -> public key B
    alias C -> public key C
    

    should have no cryptographic way to determine that these keys originate from the same Proton account.

    Compromise of one derived alias private key should also not allow derivation of the root secret or keys belonging to other aliases.

    Architecture

    Encrypted AliasPGPRoot
            |
            v
     Proton client
            |
            +-- Alias address
            |
           HKDF
          /    \
     signing   encryption
      seed *     seed
          \      /
       Independent
       OpenPGP key
            |
       Public certificate
            |
        SimpleLogin
    

    * optional
    Private alias keys can therefore be generated on demand and discarded after use.

    Important Design Requirements

    • Use a strong domain-separated KDF such as HKDF.
    • Derive signing and encryption key material independently (optional).
    • Prefer deterministic ECC-based key generation rather than deterministic RSA generation.
    • Alias OpenPGP certificates must not contain metadata linking them to the Proton account or other aliases.
    • The alias address must be canonicalized consistently before derivation.
    • The derivation format must be versioned, e.g. proton-reverse-pgp/v1, so future algorithms can be introduced safely.

    Risks and Considerations

    Root-secret compromise:
    Compromise of AliasPGPRoot exposes all alias keys. It therefore needs the same level of protection as other high-value Proton secrets.

    Deterministic derivation stability:
    Changing the KDF, canonicalization rules, curve, or OpenPGP key-generation procedure would otherwise produce different keys. The derivation specification therefore needs strict versioning and long-term compatibility.

    Alias reuse:
    If a deleted alias address could ever be reassigned, address-only derivation would reproduce the same key for the same user. Ideally SimpleLogin should guarantee that reverse aliases are never reused, or an immutable alias identifier should additionally be included in the derivation.

    Metadata correlation:
    The scheme prevents cryptographic linking of aliases, but correlation may still be possible through mail headers, timing, account metadata, identical OpenPGP preferences, or server-side information. Generated certificates should therefore minimize unnecessary shared metadata.

    Result

    This design provides:

    • one independent PGP identity per reverse alias,
    • no externally visible cryptographic relationship between aliases,
    • deterministic recovery without storing large numbers of private keys,
    • local/on-demand private-key generation by Proton clients,
    • straightforward integration with SimpleLogin through per-alias public keys.

    Goal

    Provide each SimpleLogin reverse alias with its own independent OpenPGP identity, while keeping key management simple and preventing external observers from linking different aliases to the same Proton account.

    Design

    Proton maintains a dedicated secret AliasPGPRoot for the user.

    For every immutable reverse alias, Proton derives deterministic key material from:

    AliasPGPRoot + normalized alias address

    using a cryptographic KDF such as HKDF.

    Example:

    AliasPGPRoot
        |
        +-- HKDF("alias-a@simplelogin.com")
        |       -> OpenPGP key A
        |
        +-- HKDF("alias-b@simplelogin.com")
        |       -> OpenPGP key B
        |
        +-- HKDF("alias-c@simplelogin.com")
                -> OpenPGP key C
    

    Separate derivation contexts should be used for signing and encryption keys.

    The… more

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating