# I am on my way to switch from Gmail to ProtonMail

**URL:** https://discuss.privacyguides.net/t/i-am-on-my-way-to-switch-from-gmail-to-protonmail/14486
**Category:** Questions
**Created:** 2023-10-16T23:53:21Z
**Posts:** 15

## Post 1 by @GTheKid — 2023-10-16T23:53:21Z

I am about to make this change and I have a question that arose from seeing how people organize their aliases/hide-emails.

Many people use an alias for each service they use. **And I would like to know if they should also be used for security services** : SimpleLogin (Not account-linking, creation) Authy, Bitwarden.  
**Or is it safe to put my ‘ProtonMail main email’?**

Sorry if this is a silly question, I’m just starting out in this privacy thing.

_Additional, If you could leave some tips for using ProtonMail + SimpleLogin, I would be very grateful!_

---

## Post 2 by @jonah — 2023-10-17T00:11:14Z

I’m not sure what you mean by “security services,” but I can say that I don’t use my Proton email anywhere, only SL aliases.

---

## Post 3 by @GTheKid — 2023-10-17T00:35:50Z

> [@jonah](#):
>
> “security services,”

I was talking about SL, Authy, Bitwarden

Silly question:  
Do you also use an alias in SL?  
or how you created your SL account and keep your email ‘hidden’.  
(Idk if paying Proton Unlimited automatically associates your account with SL).

---

## Post 4 by @anon66890361 — 2023-10-17T04:03:08Z

You can’t use an alias for signing up for Simplelogin. Atleast you can’t use a SL alias for signing up to another SL account.  
In this case you have to trust simplelogin , for keeping your data safe. Btw you also trust it with your emails unless they are pgp encrypted.  
Since now it is being owned by proton , it shouldn’t really matter whether you provide your true primarily email or not.  
Adding another email service in between would just expose your emails to another 3rd party.

---

## Post 5 by @xe3 — 2023-10-17T05:38:25Z

I think you are possibly overthinking this.

SL and Proton are the same company. And if you are a Proton Unlimited subscriber you are already implicitly putting some trust in them.

Can you be more clear about what you are trying to hide and from who?

Are you hoping to hide the fact that you are using Proton from SL? Or SL from Proton? or are you worried about 3rd parties?

---

## Post 6 by @GTheKid — 2023-10-17T06:21:45Z

Now I understand.  
As I said I had that doubt because many people said they used the ‘aliases’ in ALL services and I didn’t know if it could be used in SL.  
thanks! :smiley:

---

## Post 7 by @GTheKid — 2023-10-17T06:31:26Z

Sorry bro :frowning:  
I was just trying to find out if it was possible to use an alias in SL.  
I am informed that SL and Proton are the same company but I have seen a lot of ‘paranoid’ people and that’s why my doubts.

> [@xe3](#):
>
> Are you hoping to hide the fact that you are using Proton from SL? Or SL from Proton? or are you worried about 3rd parties?

And something like that: if something from ‘SL’ were to be leaked, I would not like it to be known that I use the same email for ProtonMail and vice versa. And also hide from 3rd parties.

But no matter, I guess I’m already taking a big step by almost completely eliminating Gmail and using ProtonMail + SL.

---

## Post 8 by @bee — 2023-10-17T06:33:05Z

Others have spoken on PM + SimpleLogin, but I’d like to chime in on Bitwarden.

The way I view it is I am already putting the highest degree of trust in Bw by giving them all of my logins for every site I use. I think adding my primary email to the pile is of little significance over all when I am already trusting them to keep the keys to the rest of my digital life secure.

As for Authy, I don’t see why you wouldn’t want to use an alias, though I don’t use a universal auth app myself.

---

## Post 9 by @bee — 2023-10-17T06:35:35Z

From what I understand, the lead dev of SL is the lead dev for ProtonPass as well (not hard to imagine considering they use the same architecture for their aliases). I’d say it’s safe to assume the companies are well managed and integrated, and any further speculation is, as you say, paranoid.

---

## Post 10 by @GTheKid — 2023-10-17T07:08:12Z

> [@bee](#):
>
> Bw by giving them all of my logins for every site I use

I took a tip from reddit about Bitwarden, it is not to save the full password i.e: Facebook204852 (generated by Bw) + Bee2023 (your passphrase to add) Full password: Facebook204852Bee2023.  
My passwords are a minimum of 64 characters and I add the same 6 character phrase at the end of all of them.

For many people it will seem silly but I see many others implementing it as a plus in the security of their saved passwords.

---

## Post 11 by @jonah — 2023-10-17T16:54:38Z

> [@GTheKid](#):
>
> at the end of all of them.

You should probably put it at the beginning of your passwords to avoid this problem:

> [@SimpleLogin and Proton are cutting down your passwords](https://discuss.privacyguides.net/t/simplelogin-and-proton-are-cutting-down-your-passwords/14366):
>
> SimpleLogin and Proton are cutting down your passwords when you create an account or change your password. They will cut everything that is beyond their password length limit without informing you in any way. I always used a password from a password manager + password that I have in my head in case my password manager gets compromised, but it was useless because of them cutting down the passwords.

Although technically there’s no reason websites can’t work around this, it’s still not uncommon for some websites to silently truncate your passwords, depending on the hashing function they use.

---

## Post 12 by @GTheKid — 2023-10-18T00:32:26Z

I didn’t know that, you learn something new every day.  
Now I will do it this way.

Thank you Jonah!

---

## Post 13 by @wojciechxtx — 2024-01-11T17:11:27Z

@GTheKid

- login to your Proton account,
- click on your name (upper right screen corner \> `settings`),
- click on `Import via Easy Switch` on lefthand sidepanel.

---

## Post 14 by @Weren — 2024-01-13T14:21:50Z

> [@GTheKid](#):
>
> Authy

Never use Authy. It is tied to your number and have major leaks ([proof](https://www.androidpolice.com/authy-hacked-what-to-know/)). Authy does **NOT** use E2EE so they can see your 2FA tokens.

Instead consider using Aegis, Proton Pass, FreeOTP (they are all open source, first two uses E2EE)

---

## Post 15 by @exaCORE — 2024-01-13T15:02:34Z

I beleive that PG recommends either Aegis, or Ente Auth
