Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Proton announces Proton Pass, a password manager

techcrunch.com

Post reply on HN
Print view View original

31–40 of 94 posts

Re: Proton announces Proton Pass, a password manager

#31

Post by Mindwipe »

devnullbrain wrote: post #25

As a Proton Unlimited subscriber & general supporter of the company: I don't care who it is hosting it, I don't want my password manager connected to the internet. There is cognitive dissonance when this community that distrusts IoT, call-home LLMs, URL bars that send data to Google and 5G-connected vehicles is willing to connect their most critical private data to a single, profit-seeking source-of-failure. The pass…

Yep. If they had built a fully local solution then that would be interesting.

If I'm not hosting it then it isn't.

Re: Proton announces Proton Pass, a password manager

#33

Post by Mindwipe »

protonmail wrote: post #15
hammyhavoc wrote: post #5

With how Proton handled the French climate activist debacle, who is going to trust this over pretty much any alternative if they're concerned about privacy or security?

Proton Pass utilizes end-to-end encryption, so not even Proton can decrypt user data, and there have been hundreds of court cases that have proven that Proton's encryption cannot be bypassed by court orders. Proton like all law abiding companies must follow court orders. But unlike most companies, Proton actually fights in court and won a legal victory against the Swiss government after the case in question, overturn…

> Proton Pass utilizes end-to-end encryption, so not even Proton can decrypt user data

By default, who generates the keys?

If you are compromised and your software starts to exfiltrate the keys to a third party, how long do you think it would be before anyone noticed?

Re: Proton announces Proton Pass, a password manager

#35

Post by jagermo »

i really hope its passphrase generation is on par with bitwarden. I'm not going back to a nonsense password generator, i hate typing these into other devices. Give me CorrectB4tteryStapleHorse! or no deal.

edit: i really like that they leverate simple login, that might be a reason to switch.

Re: Proton announces Proton Pass, a password manager

#36

Post by dist-epoch »

cyclecount wrote: post #17
dist-epoch wrote: post #8

Every time I read about Proton I remember about that time CIA/BND created a fake crypto company in Switzerland because the country was perceived as neutral and used it to sell backdoored crypto equipment. https://en.wikipedia.org/wiki/Crypto_AG As a rule, never depend on only one company for all your opsec. Use different companies for you mail/VPN/password manager/antivirus/...

Crypto AG wasn't a fake crypto company; it was a real crypto company selling a product with a CIA/BND backdoor. Proton makes open-source alternatives to big tech spyware and provides the service with a freemium model. Not sure what the comparison you're trying to make here is; they're both headquartered in Switzerland?

> Proton makes open-source alternatives to big tech spyware

Can you link to the open-source repository for this password manager?

Re: Proton announces Proton Pass, a password manager

#37

Post by CharlesW »

aareet wrote: post #29
16bitvoid wrote: post #19

Earlier quoted context omitted.

What's wrong with 1Password?

Version 8 has been plagued with various bugs with editing, scrolling, sync and stability issues on the Mac and iOS apps. It has become extremely difficult to rely on, and really the only path back to stability has been to downgrade to 1Password v7.

> Version 8 has been plagued with various bugs with editing, scrolling, sync and stability issues on the Mac and iOS apps.

FWIW: I was a very vocal complainer about v8 issues and was actively searching for alternatives. However, v8 finally doesn't suck and I'm satisfied for now. I'm hoping they learned a bunch of lessons from that completely botched launch.

Re: Proton announces Proton Pass, a password manager

#38

Post by wellthisisgreat »

aareet wrote: post #29
16bitvoid wrote: post #19

Earlier quoted context omitted.

What's wrong with 1Password?

Version 8 has been plagued with various bugs with editing, scrolling, sync and stability issues on the Mac and iOS apps. It has become extremely difficult to rely on, and really the only path back to stability has been to downgrade to 1Password v7.

hmm which OSX / iOS versions are you on? The OS-es I mean? the latest ones? I'm on latest and it's been smooth sailing with 1P, but reading your comment, I am concerned I may be overlooking something, especially in the "sync" space as those kind of issues may creep up on you undetected

Re: Proton announces Proton Pass, a password manager

#39

Post by boomboomsubban »

dist-epoch wrote: post #36
cyclecount wrote: post #17

Earlier quoted context omitted.

Crypto AG wasn't a fake crypto company; it was a real crypto company selling a product with a CIA/BND backdoor. Proton makes open-source alternatives to big tech spyware and provides the service with a freemium model. Not sure what the comparison you're trying to make here is; they're both headquartered in Switzerland?

> Proton makes open-source alternatives to big tech spyware Can you link to the open-source repository for this password manager?

>Like all Proton services, Proton Pass will be open source upon release.

https://proton.me/blog/proton-pass-security-model So the beta isn't free software, but the release will be? I don't understand why you'd do that, surely the beta is when you most want people to try and break things, but the rest of their products do seem to be in their repos so it doesn't seem like a completely bullshit claim. https://github.com/ProtonMail

Re: Proton announces Proton Pass, a password manager

#40

Post by smcleod »

16bitvoid wrote: post #19
drcongo wrote: post #11

I hope it's good enough to finally ditch 1Password.

What's wrong with 1Password?

As of their releases from version 8 1Password went really downhill.

It's also just another electron web app and if there's one thing I don't want electron "apps" doing is storing my secrets.

They no longer support offline / non-cloud vaults and force a recurring subscription.

Beyond that it shows the kind of attitude that's present within their company now - it's all about cutting costs to sell as many recurring subscriptions to pay off their VC funding and investors.

Post reply on HN