Technology

42 readers

1 users here now

Computers, phones, AI, whatever

founded 1 year ago

MODERATORS

[email protected]

Proton launches open-source password manager (proton.me)

submitted 1 year ago by [email protected] to c/[email protected]

12 comments fedilink hide all child comments

One of the features seems to be a "hide my email" feature, akin to Apple's hide my email or Fastmail's masked email feature.

Having used both of those, I would say one downside is that occasionally, a site will detect that I used the Apple one, which is strange because it's just an iCloud email address. Perhaps they're looking for a specific pattern.

I haven't yet seen the Fastmail one blocked.

One concern with the Proton one is that it seems like its masked emails are all at passmail.com. I've already found some sites block protonmail, so they'll surely block passmail like they do Mailinator and other sites. That could be a limitation that's less likely to affect Fastmail's service.

top 12 comments

sorted by: hot top controversial new old

[–] [email protected] 4 points 1 year ago (1 children)

Of course, three days after my family gets a 1pass subscription.

[–] [email protected] 4 points 1 year ago (1 children)

Did you know that for some reason, you're marked as a bot account?

[–] [email protected] 1 points 1 year ago

Me? The hurricane of Hotsauce?

Weird.

[–] [email protected] 3 points 1 year ago

Yeah, but no native desktop app. 😭 I miss 1Password's early years.

[–] [email protected] 2 points 1 year ago (1 children)

I've been using bitwarden for the past few years and I've been pretty happy with it. I have proton unlimited though so I figured I'd try it out.

It looks nice but there is some functionality missing. No categories. Can't store credit card info. Session locking only has the option to relogin with a pin code and not full password or even 2FA.

There is still some work to be done here for sure.

[–] [email protected] 2 points 1 year ago (1 children)

I like BitWarden, but I'm not 100% sold on cloud-based solutions. The encryption is probably fine, but is the whole payload? Also, I'm torn between "big" and "small" password managers.

A small one is less likely to be targeted. A big one will probably have more security infrastructure/employees.

One bummer with BitWarden is that the UI just isn't very good. For example, you can't select more than one item in the desktop electron app.

[–] [email protected] 2 points 1 year ago (1 children)

I agree that the bitwarden UI isn't very good on the desktop app and in the browser extension. I don't even use the desktop app at all anymore. One positive for protonpass is that the ui is looking pretty streamlined and it feels fast. I think for just the endless regular internet accounts either is fine.

It's a fair point about small vs. big. I mean security by obscurity doesn't really seem like a strong point for small, but who knows. I think higher value targets will always end up using the bigger ones anyway.

Important stuff (banking/development secrets) maybe use something like gpg based and offline like https://wiki.archlinux.org/title/Pass or the Qt frontend https://qtpass.org/.

[–] [email protected] 2 points 1 year ago

If only banks had meaningful security themselves.

Ultimately I'm less worried about banks, because all of that stuff can be reversed. Banking is almost designed with the idea that you'll be compromised.

I'm more worried about losing all my important files.

[–] [email protected] 2 points 1 year ago (1 children)

Here I've been doing that manually with my own domain. Wonder if it will allow you to use your own domain.

[–] [email protected] 1 points 1 year ago (1 children)

For the email masking feature you mean?

[–] [email protected] 1 points 1 year ago (1 children)

Yes. Email forwarding from arbitrary email addresses at my domain

[–] [email protected] 1 points 1 year ago

If it does that, it could be quite a handy tool.