ProtonBlog(new window)

Proton Pass is now in beta

Share this page

Today, we’re happy to announce another significant milestone in the growth of the Proton ecosystem with the launch of the Proton Pass beta for Lifetime and Visionary users. Invites will roll out over the next week, and you’ll receive an email from us at your Proton Mail email address when you’re eligible.

A password manager has been one of the most common requests from the Proton community ever since we first launched Proton Mail. However, while Proton Pass uses end-to-end encryption to protect your login credentials, it will be much more than a standard-issue password manager. This will become clear over the next weeks and months as we prepare Proton Pass for a public launch later this year.

Learn what a password manager is and why you need one(new window)

In 2022, Proton joined forces with SimpleLogin to bring millions of Proton users advanced hide-my-email aliases. Making logins more secure, more private, and easier was a core part of the original vision of SimpleLogin. In fact, Son Nguyen Kim, the founder of SimpleLogin, picked the name SimpleLogin for precisely this reason.

The merger united two organizations with a shared interest in tackling this problem. That’s why the SimpleLogin team, joined by a few engineers from Proton, spearheaded work on Proton Pass.

We’re launching Proton Pass now for two primary reasons. First, joining with SimpleLogin increased our ability to develop a new password manager without impacting efforts on other Proton services. Second, passwords are such sensitive information that an insecure password manager is a risk to the Proton community. 

If an attacker obtains your password (be it through a data breach or hacking your password manager), they can essentially bypass all of Proton Mail’s advanced encryption. Protecting your passwords properly requires a high level of competence with encryption and security, which few organizations have. We’ve always been worried about the risk posed by a major password manager breach, which unfortunately became a reality with the recent hack of LastPass(new window).

Raising the bar on security

Proton Pass is not just another password manager. It’s perhaps the first one built by a dedicated encryption and privacy company, leading to tangible differences in security. For example, while many other password managers only encrypt the password field, Proton Pass uses end-to-end encryption on all fields (including the username, web address, and more).

This is important because seemingly innocuous bits of information (such as saved URLs, which many other password managers don’t encrypt) can be used to create a highly detailed profile on you. For example, if an attacker can see that you have passwords saved for an account with Grindr, gop.com, or even a manga fan site, they’ll know a lot about you as a person, even if they can’t actually access your accounts. 

Cryptographic details matter, and Proton Pass uses a strong bcrypt password hashing implementation (weak PBKDF2 implementations have made other password managers vulnerable) and a hardened implementation of Secure Remote Password (SRP) for authentication. Proton Pass is also a password manager that includes a fully integrated two-factor authenticator (2FA) and supports 2FA autofill. This is meant to make it easier to use 2FA everywhere since it’s one of the most effective safeguards for your online accounts.

Read the Proton Pass security model(new window)

Like every other Proton service, Proton Pass will be open source and publicly auditable upon launch, so anyone can independently verify our security features and their implementation.

What’s next?

After fielding thousands of requests over the years, we’re glad to deliver a password manager to the Proton community. The Proton Pass beta is available on iPhone/iPad, Android, and desktop (browser extensions are available for Brave, Chrome, and Firefox)

With some of the features we have planned, we think that Proton Pass will be a milestone for password managers in general and redefine the role password managers play in our online lives. We look forward to receiving your feedback in the coming days and weeks and getting Proton Pass out to everybody as soon as possible. Over time, we will add more details to the new Proton Pass website: proton.me/pass.

If you have feedback, you can email us directly at pass@proton.me or let us know on Twitter @ProtonPrivacy(new window) or Reddit at reddit.com/r/ProtonPass(new window).

Update April 28, 2023: Added that the Proton Pass browser extension for Firefox is now available.

Protect your privacy with Proton
Create a free account

Share this page

Andy Yen(new window)

Andy is the founder and CEO of Proton. He is a long-time advocate for privacy rights and has spoken at TED, Web Summit, and the United Nations about online privacy issues. Previously, Andy was a research scientist at CERN and has a PhD in particle physics from Harvard University.

Related articles

What was your first pet’s name? In what city were you born?  We’ve all had to answer these questions to reset a long-forgotten password, but consider how that works. Much of this information is easy to find for others (or easily forgotten by you), m
In the early days when Proton started, we often received a question along the lines of “I love the product and what Proton stands for, but how do I know you will still be around to protect my data 10 years from now?”  Ten years and 100 million accou
Credential stuffing is a popular type of cyberattack where attackers take login credentials and use them on thousands of websites, hoping to fraudulently gain access to people’s accounts. It’s an effective attack, but fortunately, one that’s easy to
With Skiff abruptly shutting down operations, many people are on the lookout for alternatives that don’t compromise on privacy — and won’t suddenly disappear. People were attracted to Skiff because it promised privacy, no ads, end-to-end encryption,
Skiff is dead. On Feb. 9, the email company Skiff announced it was being bought by Notion. Many Skiff customers have been shocked by this news, as their inboxes have been sold out from under them. Skiff gave people six months to export their data be
Looking into the Dropbox privacy policy
Dropbox was the first mainstream cloud storage provider, and still the biggest player on the market, with 700 million users in 2022. We took a dive into Dropbox’s privacy policy to see how well the company protects the personal data of those millions