Log into Proton Pass directly with its own password (without having to log into a Proton account first)
-
SD
commented
This is absolutely critical. How would I login to Proton services if my Proton password is stored within itself?!
Login to proton pass to retrieve credentials
Need credentials to login to proton pass to retrieve credentials
Need credentials to login to proton pass to retrieve credentials to login to proton pass
.......
and endless loop rendering ALL proton services inaccessible.If the "second password" is indeed for accessing only proton pass then that needs to be more clearly stated. As it stands, it sounds like there's two passwords I'd need to remember/enter in order to access any proton service. No good.
-
D
commented
It would help if you would close this thread, now, since the second password has been added to the application.
For everyone reading this, you can now set a second password and when you enter that, then it logs on the proton servers automatically using your account username and password.
This is an important addition because in my case I use a lower security, memorable password on my PC without having to enter my really complex high security account password (or no password) when the app stats in the morning. -
[Deleted User]
commented
We need this.
-
D
commented
Absolutely CRITICAL!.
For local access, I must have a password that is required to get in to the app. NOT the same my main account password. I want to move to Proton Pass, but will not until there is a separate password.
This could be an optional feature, so that people who don't want a password don't need one or can use their main account password. -
JP
commented
As I move to using Proton mail and toward creating more security, I will not move to PP without a separate, not ADDITIONAL, password.
-
UV
commented
It is so important to be aware that this ticket is just an extension of the previous - https://protonmail.uservoice.com/forums/953584-proton-pass/suggestions/46727686-use-a-different-password-for-protonpass ticket with OVER 1000 votes.
Therefore it has be acknowledged that this issue is at over 1500 votes now, lets be real. The way this is being handled is very disappointing, over something that should have been a given design structure from the beginning. So many people are refusing to use Proton because of this and I am one of them. I have not heard a single good reason for why this has not been implemented yet. If there is something I'm missing please explain why is there push back for this? -
UV
commented
The fact that this ticket is marked completed is ridiculous!
The point of a separate password for Pass is THE most logical common sense thing there is. Every service always raves about how your master password is supposed to be used only in one place and should not be stored anywhere. Meanwhile the master password for Pass is the same password used for EVERY proton service there is? Make it make sense. Golliwog wrote out the perfect logic behind this desire and why it is so important to have separate passwords. -
Daniel Feige
commented
I'll add as well that this is a critical feature required for any password manager.
I recently tried to transition and was shocked this feature was not already implemented and immediately reverted back to bitwarden.
-
Arrogance
commented
I have to add that I'm using bitwarden due to this matter.
-
DamR
commented
I'd really like to have the possibility to use an alphanumeric password (instead of a 6 numbers PIN) to unlock the browser extension or the desktop app.
Right now, it feels like all my passwords are secured by this PIN, that anyone could get by looking over my shoulder.
-
Mitchu
commented
Unless Proton implements this feature, I will continue using other password managers instead.
-
WoodBHermit
commented
This is the main reason I have not yet switched to Proton Pass as my password manager.
Proton Pass must have a separate/unique password for manager access like the master password in LastPass and comparable software. This password must be different from the primary password used to access all the other Proton apps.
A second extra password for additional security does not address this crucial issue. I think there may have been a misunderstanding when this new feature was first requested: "separate/unique" incorrectly became "extra" for additional security.
Considering all the security issues that LastPass has had in recent years, at least they did get the idea of having a unique/separate (not extra) master password for password manager access correct from the very beginning.
-
Ville Salmela
commented
Going with the easy route and implementing the extra password instead of this, was a bad design choice. It’s usually more expensive to alter a system afterwards… this now requires not only a new implementation, but also a migration between two authentication systems.
It’s sad, this lack of forethought.
-
[Deleted User]
commented
As someone who uses an easier password (but still secure obviously) for my password vault, which stores a much stronger password for my proton account. I'd love to be able to use a separate master password
-
mikeysax
commented
We need a way to have a different password for Proton Pass as to not expose the other Proton services, at a minimum.
This way, I don't have to worry if my proton email, drive, or calendar, etc, get exposed because I can modify the services individually and not compromise access to my Proton Pass account.
There are even more secure methods as to not expose the other services that others have outlined.
-
Ivan Bui commented
It is a must have for a privacy focus company and ecosystem.
-
R
commented
I need Proton pass to use a separate master password that isn’t tied to anything else, and to unlock it every time I use it on any platform. This also makes Pass usable to store my Proton account credentials. I believe this functionality is basic and the most understandable for most users.
-
Markus
commented
This is the important feature that Proton Pass must have, the additional password is absolute nonsense, we need a separate master password like EVERY other password manager has, because Pass is an absolutely top product.
-
Aleksandr
commented
Having a separate password for Proton Pass would improve user trust. Most Proton Pass users are not IT-security experts and may not fully grasp the intricacies of how the system operates. Therefore, it is important to keep things as simple as possible.
Currently, some basic principles of password security are violated:
- Never reuse passwords [1]
- Memorize as less passwords as possible to avoid the password fatigue [2]While I am confident there is a solid rationale behind Proton's implementation choices, explaining these decisions might require delving into complex technical details. Lengthy explanations can be difficult to understand and may inadvertently reduce trust.
[1] https://proton.me/blog/creating-password-policy#Never-reuse-passwords
[2] https://proton.me/blog/password-fatigue -
Arrogance
commented
This two passwords policy makes proton pass useless.
I've being using other password manager for a long time and I'm testing proton pass, but I'm afraid that I can't use it.
The point of a password manager is to remember only a master password but you can't do this with proton pass unless you make match the proton account password and the proton pass second password, what seems insecure for me.
.