Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
67,646
38,077


Swiss-based privacy startup Proton today announced the availability of Proton Pass for Mac and Linux, bringing the encrypted password manager to every platform for the first time.

proton-pass-mac.jpg

Proton Pass features end-to-end encryption for all stored data, and includes a built-in two-factor authentication system, passkey support, and secure password sharing, as well as a Hide-My-Email feature to protect against spam and phishing.

The macOS version of Proton Pass also comes with a Safari extension, which aims to simplify password management and credential filling within Apple's browser. In addition, unlike Safari's default password manager, Proton Pass allows users to sync across multiple different browsers and devices, for simplified access across all platforms.

Proton Pass uses the Argon2 hashing algorithm, which is included within its offline mode feature, and is available to customers on a paid plan. The encryption method is designed so that passwords and sensitive information remain protected against unauthorized access, even when not connected to the internet.

Proton Pass also integrates Proton's recently announced Pass Monitor functionality, which provides proactive alerts for credentials exposed on the dark web, identifies weak and reused passwords, and checks for missing two-factor authentication.

According to Proton, the password manager will also soon support TouchID on macOS, allowing users to unlock their accounts using their fingerprints. This feature will be provided as an automatic update in the coming weeks.

Proton Pass is available for free with unlimited devices and Password Health included. For a limited time, the company is also offering users the chance to upgrade to the premium Pass Plus plan at a discounted rate of $10 for the first year (usually $23.88). Pass Plus includes support for passkeys, the full Pass Monitor experience with dark web monitoring and Proton Sentinel, as well as all the standard features of Proton Pass, including access to the web app.

Proton Pass for macOS and Linux are available to download now from the Proton website.

Article Link: Proton Pass Multi-Platform Password Manager Launches on macOS
 
Couldn’t imagine PAYING for password managers. Easy enough to transfer this type of data without the use of a questionable 3rd party. At least companies like Apple, Google, or MS are heavily scrutinized albeit without accountable most times. 3rd parties will just fold on you.
 
Last edited:
I have a large confidence in Proton team to do the right thing. They are competent and independent.

But who can tell what will happen in 5 or 10 years from now? Is the risk higher that someone I dislike will take them over and access my data (or prevent me from accessing it)? This remains a small company with limited financials. Is it more risky than with Apple or any other Gafam?
 
Couldn’t imagine PAYING for password managers. Easy enough to transfer this type of data without the use of a questionable 3rd party. At least companies like Apple, Google, or MS are heavy scrutinized albeit with accountable most times. 3rd parties will just fold on you.
Well, I actually can imagine it if we didn’t have good, safe, private and strong free alternatives, both open source and privative. Maybe there’s people for whom the free alternatives don’t offer the characteristics they need or want… and paying 25€ per year isn’t something significant for them.

But yeah, for people like me, free alternatives just do the work. Right now I use a free open source service, but for some less important website logins I rely on iCloud Keychain, which has improved since its creation. I still remember that changing a password synced through iCloud Keychain was a real pain, because sometimes it didn’t sync the new one and you had to remember both the old and the new one. But since iOS 16 it works much better in this regard.

So right now I keep wondering if I should only rely on iCloud Keychain, moving all my passwords -including the important ones- over there, or keep using both…
 
Proton Pass uses the Argon2 hashing algorithm, which is included within its offline mode feature, and is available to customers on a paid plan. The encryption method is designed so that passwords and sensitive information remain protected against unauthorized access, even when not connected to the internet.
This is nonsensical word salad. A hash algorithm is not an encryption function, by definition, as it's one-way. And the notion that an encryption method is strong enough to protect you from an internet intruder WHEN YOU'RE NOT CONNECTED TO THE INTERNET is hilarious...

Was this written by AI?
 
This is nonsensical word salad. A hash algorithm is not an encryption function, by definition, as it's one-way. And the notion that an encryption method is strong enough to protect you from an internet intruder WHEN YOU'RE NOT CONNECTED TO THE INTERNET is hilarious...

Was this written by AI?
The feature description came from Proton's website. You might ask Proton if AI wrote their website.
 
  • Disagree
Reactions: klasma
But who can tell what will happen in 5 or 10 years from now? Is the risk higher that someone I dislike will take them over and access my data (or prevent me from accessing it)? This remains a small company with limited financials. Is it more risky than with Apple or any other Gafam?
You can export your passwords from Proton Pass. Personally I store the few actually important passwords separately using local encryption, i.e. not using a cloud-based password manager. At the same time I trust smaller companies more than anonymous big tech. You can also use an open-source solution like KeePassXC where you don’t have to rely on a cloud-based password service.
 
Last edited:
I would not trust them after Protonmail gave private data about a protester to the authorities.
Not endorsing what happened but all tech firms have to comply with local laws. Like many big corporations Apple even has a team dedicated to complying with law enforcement requests. In this case Proton was obliged by a court order to disclose what they had. They would have had a lot less to disclose if the subject had practiced good digital hygiene.
 
I would not trust them after Protonmail gave private data about a protester to the authorities.
They only gave out the IP address from which the user accessed their services. Any company will have to do this when forced by law, and there is no way to protect against it other than using something like TOR that obscures your IP address.
 
This is nonsensical word salad. A hash algorithm is not an encryption function, by definition, as it's one-way. And the notion that an encryption method is strong enough to protect you from an internet intruder WHEN YOU'RE NOT CONNECTED TO THE INTERNET is hilarious...

Was this written by AI?
I think it is just a simplification (for the purposes of marketing) of what is actually happening. It does use Argon2 (to derive the "master" encryption key from your password), and it is an integral part of how the encryption scheme works. It's certainly a little more interesting than the actual encryption algorithm for your passwords, which is probably just standard AES (which is what everyone uses).

I forgive the second part because they never said "internet intruder", just "unauthorised access". And, if at some point your 'vault' is stolen, they are trying to say that it's hard to crack, even when 'unlimited' offline resources can be thrown at it (whether the claim is true... who knows).
 
What would you like Apple to improve? For me iCloud Keychain does a very good job.
  • Apple separates passwords, address and credit cards into three different apps.
  • When updating to a new device you must reregister your credit cards which means you must supply the CVS for each. With third party cloud password managers all you need to do is login again.
  • They don’t support oddball logins like American Airlines, Treasury Direct or EFTPS
  • In the credit card area, Apple doesn’t autofill the CVS
  • You cannot have multiple addresses
  • You cannot autofill your license, passport or other generic data.
 
It is so primitive. UI/UX is extremely poor, categorization is very inadequate, bank account and application licenses cannot be added.
 
  • Wow
Reactions: Dj64Mk7
Another paid Bitwarden convert here. I defected from Lastpass (ugh) then 1Password (ever increasing fees). Bitwarden is a little clunky, and while I'm reluctant to switch again I might look at this. I'm all in on Apple, but I do keep a Windows box around for gaming and a couple of legacy work things which is one of the reasons KeyChain isn't enough.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.