I hope it's good enough to finally ditch 1Password.
Proton announces Proton Pass, a password manager
11–20 of 94 posts
Re: Proton announces Proton Pass, a password manager
#12I hope it's good enough to finally ditch 1Password.
Why not Vaultwarden?
Re: Proton announces Proton Pass, a password manager
#13I hope it's good enough to finally ditch 1Password.
Why? Why even pursue another password manager at all when they are about to be totally dead anyway...
Re: Proton announces Proton Pass, a password manager
#14While I like players such as Proton entering the Password manager space, I hope they don't lose focus with the multitudes of products. What I liked about Proton was the simplicity on just one product and executing it well, but lately they've kept on adding new products some in their wheelhouse and aligns well (VPN for example), but some a stretch (Drive/Calendar).
Only their mail product was vaguely good, but became very outdated as the years went on. I liked Proton VPN but ultimately ditched the whole in favour of better value, better UX, more features.
Re: Proton announces Proton Pass, a password manager
#15With how Proton handled the French climate activist debacle, who is going to trust this over pretty much any alternative if they're concerned about privacy or security?
Proton Pass utilizes end-to-end encryption, so not even Proton can decrypt user data, and there have been hundreds of court cases that have proven that Proton's encryption cannot be bypassed by court orders.
Proton like all law abiding companies must follow court orders. But unlike most companies, Proton actually fights in court and won a legal victory against the Swiss government after the case in question, overturning an earlier ruling that email providers can be classified as telecommunications providers. Details here: https://proton.me/blog/court-strengthens-email-privacy.
Re: Proton announces Proton Pass, a password manager
#16Earlier quoted context omitted.
Any tl/dr available?
The general gist is that any legal, above board company providing privacy-oriented services is subject to the laws of where they operate, ergo, if privacy and security is something that matters to you, don't trust a third-party because they will want to stay in business. They received a court order, they cooperated with the police, for better or worse (I have zero opinion on it; frankly don't care), and handed over a…
That's why we published a threat model that goes over what Proton Mail can and cannot protect against: https://proton.me/blog/protonmail-threat-model.
Re: Proton announces Proton Pass, a password manager
#17Every time I read about Proton I remember about that time CIA/BND created a fake crypto company in Switzerland because the country was perceived as neutral and used it to sell backdoored crypto equipment. https://en.wikipedia.org/wiki/Crypto_AG As a rule, never depend on only one company for all your opsec. Use different companies for you mail/VPN/password manager/antivirus/...
Crypto AG wasn't a fake crypto company; it was a real crypto company selling a product with a CIA/BND backdoor.
Proton makes open-source alternatives to big tech spyware and provides the service with a freemium model. Not sure what the comparison you're trying to make here is; they're both headquartered in Switzerland?
Re: Proton announces Proton Pass, a password manager
#18Re: Proton announces Proton Pass, a password manager
#19I hope it's good enough to finally ditch 1Password.
What's wrong with 1Password?
Re: Proton announces Proton Pass, a password manager
#20With how Proton handled the French climate activist debacle, who is going to trust this over pretty much any alternative if they're concerned about privacy or security?
Proton Pass utilizes end-to-end encryption, so not even Proton can decrypt user data, and there have been hundreds of court cases that have proven that Proton's encryption cannot be bypassed by court orders. Proton like all law abiding companies must follow court orders. But unlike most companies, Proton actually fights in court and won a legal victory against the Swiss government after the case in question, overturn…
Who said anything about encryption? The problem at hand is handing over IP addresses of a customer when they themselves are peddling a supposedly privacy-oriented service. The fact remains: it isn't fit-for-purpose, and these are non-solutions to real problems for anyone who isn't just LARPing a threat model.
Replace "French climate activist" with "dissenter in an oppressive regime" and that person would be dead.
Who cares if they later won in court? They still threw someone under the bus. Trusting a third-party business who is subject to the laws of where they operate means this will always be a problem, doesn't matter if they're an email provider or a VPN operator, the solutions aren't fit for purpose.