Thoughts on ProtonPass as a password manager?

Good enough if you already are using the proton suite?

Any significant downsides besides not self-hosted?

#asknostr

#infosec

Reply to this note

Please Login to reply.

Discussion

I've tested it. Not bad. Only drawback is its not locally stored. So you need persistent internet connection to access your passwords from Proton. Hopefully, that changes.

Ooh that is a sticking point. Most things I need a password are online of course, but don’t love the dependency.

Do you happen to know if KeePass and/or BitWarsen work offline?

Can you download their builds directly from github and check their signature?

Not sure. Looks like you can build it from source on their GitHub but I don’t see signatures. But not my area of expertise so I could easily be missing if

Source available vs open source. Also, how do you know their source code is the same code that was used to build the app you are running? Especially if they aren't even providing the build, and are just providing the source?

I’m well familiarized with these principles, but I don’t know the answer to these questions in the case of Proton.

Do you just mean this is what I should be asking when evaluating the product?

I’m a proton user and still use KeePass

🀝

Probably you don’t want all of your eggs in the same basket