Everything in Proton or Using different services?

Questions
1

Hey all,

Given the recent changes in the UK, I am looking to properly 100% move to privacy respecting services, and close most none respecting services I have left soon.

So I need to make a choice and I’d like to ask the community, here are my two choices.

  1. Everything into Proton, ProtonVPN, Proton Drive, Mail, Pass etc.
  2. Use different services.
    1. Tutamail.
    2. Proton Drive (Free due to my very limited need for file storage).
    3. Bitwarden.
    4. Ente Photos.
    5. Mullvad.
    6. Notesnook.
    7. Addy.

Now I think the better choice is to have everything with different providers, but I trust proton I dont think they will become “evil” or end up switching to selling data.

So what would the community do? I’m thinking proton as their stuff is outside the UK, but obviously the others help if something happens to proton.

TIA!

2

My rule of thumb is you can choose to be in the proton ecosystem or go seperate, either choice is fine just make sure that if you;re gonna go to the proton ecosystem at least take steps to where you can get out, eg. use custom domain on emails.
However
Always seperate your password manager and 2FA no matter what, in the event of your account being compromised or lost, the next thing you want is to lose those too

3

I personally use Proton (also using a custom domain for some addresses) and Ente for separate 2FA.

4

One extra point to add to that is even if you use separate services, it is still possible for lockout if you happen to put the password to your 2FA app in your password manager and the TOTP for your password manager in your 2FA.

1 Like
5

yes in the event you forget your master password and stuff like what you said and etc.

It’s just a matter of, best not to put every egg in one basket basically

6

I’m using the whole proton suite as well. I’ve got the unlimited plan, have been enjoying it for 2 months now. If I’m not mistaken there’s an option to have a separate password for proton pass? I might be wrong though.

Despite Proton’s recent announcement of their 2fa app, I’m sticking with Ente for the time being.

7

There’s an option for an additional password for Proton Pass.

Same

1 Like
8

I use the entire Proton suite + Ente for photos, Stratum for 2FA and Bitwarden as my (main) password manager.

9

Use different services when using a service is necessary and use local solutions when possible instead of shifting trust to providers.

  • Proton Mail or Mailbox.org
  • Just use external storage (USB drives or external HDD) for backups or possibly Syncthing to transfer data to other devices
  • KeePassXC or other KeePass forks depending on the OS, see above for how to sync it
  • Your phone’s photo gallery app or an image viewer on your desktop OS, see above for how to backup photos
  • Mullvad
  • Offline notebook or possibly even a physical notebook if your threat model allows it
  • Any PG recommended email aliasing service
10
  • I just transferred most of my VPN to Mullvad simply because it integrates well with Tailscale.
  • I have my own domain for emails.

On the flip side, I am attempting to move my Joplin Notes and put them in the Proton Pass’ note functionality. It currently lacks markdown support and I need it for a checklist. Alternatively I am thinking of just using a local file and have it be synced around via Syncthing rather than a dedicated Docker container inside TrueNAS because I am too lazy to figure out why the Docker service isn’t seen remotely even if I have Tailscale on.

I am trying to get out of Proton Calendar. I am aiming for a Radicale server with a DAVx5 android client hosted in something like a Raspberry Pi but I haven’t gotten around it yet.

My 2FA codes are in my Yubikeys via the Yubikey Authenticator. I was supposed to just use Passkeys with Proton Pass but I am not 100% sold on Passkeys for now.

11

Recovery codes can mitigate such a lockout situation.

12

Been wondering this.

Personally I go with different services such as Mailbox.org for emails and calendar and hopefully contacts when they support groups.

They also support cloud storage accessible via webdav and can use joplin as well.

Tasks are done locally using tasks.org as Mailbox does not support recurring tasks.

Passwords I have been using dashlane since 2012 and they are quite good having started open sourcing their app and infrastructure.

Aegis for 2fa codes.

Vpn use mulvad

I would not necessarily stick with the whole proton system due to eggs in basket. But the point of degoogle debigtech is not put all your eggs in 1 basket