Live data from Hacker News

Proton announces Proton Pass, a password manager

techcrunch.com

61–70 of 94 posts

Re: Proton announces Proton Pass, a password manager

#61
I currently use Firefox for passwords, this syncs nicely between desktops and despite their awkward killing of Lockwise it still works adequately for logging in to Android apps. I don't see any compelling reason for me to switch here even though I already pay for proton mail.

Re: Proton announces Proton Pass, a password manager

#62
post #46

Earlier quoted context omitted.

hmm which OSX / iOS versions are you on? The OS-es I mean? the latest ones? I'm on latest and it's been smooth sailing with 1P, but reading your comment, I am concerned I may be overlooking something, especially in the "sync" space as those kind of issues may creep up on you undetected

I last tried it in January and I was on the latest of everything - OSes, apps. I said this to the poster above but the straw on the camel’s back for me was when I realized hitting the edit button took me to the wrong entry and that I have unintentionally overwritten a bunch of unrelated passwords on the iOS app. Re: sync, I ran into some issues syncing between the safari extension and the iOS apps that resulted in so…

I've noticed that this only happens to me if I edit a login from the iOS password integration rather than from the app itself. For example, if I hit the password icon on the keyboard to bring up 1Password and create/edit a login from there, I'll encounter that same issue. One (rather annoying) workaround is for me to kill the 1Password app and when I reopen it, the last login I created/edited outside the app will pop up in edit mode. I close it and redo the process with the second last login I've created/edit popping up and I close it. I iterate until all the logins I've created/edited outside of the app stop popping up.

It's a rather peculiar bug.

Re: Proton announces Proton Pass, a password manager

#63
post #35

i really hope its passphrase generation is on par with bitwarden. I'm not going back to a nonsense password generator, i hate typing these into other devices. Give me CorrectB4tteryStapleHorse! or no deal. edit: i really like that they leverate simple login, that might be a reason to switch.

Ideally you shouldn't be looking at the actual contents of your passwords! All my passwords are long and, apart from my password manager which requires my devices and 2fa token, I won't log into any of them by typing a password.

Re: Proton announces Proton Pass, a password manager

#64
post #11

I hope it's good enough to finally ditch 1Password.

What's wrong with 1Password?

As mentioned by others: cloud only, buggy electron clients (and seriously how can you trust electron with passwords), aggressively hostile to their paying customers, endlessly removing features that people rely on, removing usable keyboard navigation. I could go on for days.

Re: Proton announces Proton Pass, a password manager

#65

As a Proton Unlimited subscriber & general supporter of the company: I don't care who it is hosting it, I don't want my password manager connected to the internet. There is cognitive dissonance when this community that distrusts IoT, call-home LLMs, URL bars that send data to Google and 5G-connected vehicles is willing to connect their most critical private data to a single, profit-seeking source-of-failure. The pass…

How do you sync your password manager between computers, out of curiosity? Most people put that file online somewhere they can copy it to other computers. Or is the ad-hoc nature of this usage a defense? I use KeepassXC though, I'm still not terribly confident that I haven't lost data from forgetting to merge another modified database before overwriting it.

CodeBook allows peer to peer syncing over your local WiFi network. It’s a great password manager and works on desktop and mobile.

Re: Proton announces Proton Pass, a password manager

#66
post #48

Earlier quoted context omitted.

Huh, I frequently see advice online that says to use VPNs based in countries that are not one of the "fourteen eyes"/"five eyes".

Switzerland is strongly associated with EU/Western world. The famous/traditional Switzerland bank privacy was severely weakened at US pressure.

Oh yeah, I agree with you. It just raises the question, is it even possible to find security related companies that won't cave to US pressure?

Re: Proton announces Proton Pass, a password manager

#67

Earlier quoted context omitted.

> Proton makes open-source alternatives to big tech spyware Can you link to the open-source repository for this password manager?

>Like all Proton services, Proton Pass will be open source upon release. https://proton.me/blog/proton-pass-security-model So the beta isn't free software, but the release will be? I don't understand why you'd do that, surely the beta is when you most want people to try and break things, but the rest of their products do seem to be in their repos so it doesn't seem like a completely bullshit claim. https://github.com…

Unless something has changed, Proton's "open source" doesn't include the servers themselves, only the clients.

Whereas if you really wanted an open source server-based password manager, you could use VaultWarden with BitWarden clients, or one of countless other options. At this point, people are spoiled for choice.

Re: Proton announces Proton Pass, a password manager

#68
post #66

Earlier quoted context omitted.

Switzerland is strongly associated with EU/Western world. The famous/traditional Switzerland bank privacy was severely weakened at US pressure.

Oh yeah, I agree with you. It just raises the question, is it even possible to find security related companies that won't cave to US pressure?

Proton caves to Swiss pressure with handing over the IP of a French climate activist, so American pressure is really neither here nor there.

Re: Proton announces Proton Pass, a password manager

#69
post #50

Earlier quoted context omitted.

I use Syncthing to sync KeepassXC db. It works flawlessly.

I've thought about doing this as well, but I really like the password manager integration in Firefox. How does the Keepass Browser Extension work? Is it as seamless and do you need to have Keepass running in the background at all times?

I have the same setup, Syncthing + KeepassXC with the add-on: it's not quite as seemless as the Firefox password manager.

You have to pair the add-on with the KeepassXC program once. Whenever you visit websites that you have saved passwords for, you are asked (via popup) if you want the add-on to fetch the login name and password (because it can handle multiple login combinations for the same websites). Then you have a second click on a small symbol next to the login form which then actually fills in your login data.

Post reply on HN