Hi, this is Son from SimpleLogin and now Proton Pass (PP).
I’m wondering if we can add PP to the password manager section? I think PP is qualified as it’s:
- open source* and thoroughly audited
- has all features that a password manager provides (password generation, autofill, autosave, vaults, etc.)
- has email alias built in thanks to SimpleLogin
- support 2FA, credit card, custom field, etc
- has a free option which is enough for most users
More info on Proton Pass: Free password manager with identity protection | Proton
I see there’s also Proton Pass (Password manager) - #63 by ph00lt0, let me know if I should ask in this thread instead.
*: the server code for PP isn’t open source for several reasons:
- it’s based on the same backend as other proton services and isn’t designed to be self hosted (it has a lot of components)
- open sourcing doesn’t add any benefit as data is always E2E encrypted & decrypted client side, meaning when data is always in the E2E encrypted form when it’s sent to the server. The server can be seen as a simple sync proxy to pass data from a device to another in a reliable way.
- it has a lot of anti abuse logic and if public, will allow abusers to find workarounds. Anti abuse is an important topic when a service has a lot of users and some bad people can negatively affect everyone else.