Email or username:

Password:

Forgot your password?
Top-level
Proton

@timepencil Hi there, extra password is a separate layer of authentication on top of your proton account password.

An attacker who has your Proton account password would not have access to your Proton Pass account without the extra password.

Let us know if that helps or if you have further concerns.

4 comments
DELETED

@protonprivacy actually, a standalone separate password makes more sense because you want to remember one password to get into your Pass account but then store more complicated passwords within to get into all other accounts you have including the same proton account for email and others.

I too was hoping for a standalone and separate password for Pass.

They way you be makes it makes little sense for a realistic workflow as you only want to remember one password and not two for the same acct

Proton

@delosmzp Thanks for the feedback, we'll be sure to share it with the team!

For now, rest assured that your Proton account, including Proton Pass is extremely secure if you use a unique and strong password + 2FA.

Those on paid plans can also enable Proton Sentinel which helps to prevent account takeovers, even when an attacker has stolen your password.

DELETED

@protonprivacy thank you for considering it.

And I understand your logic being such an implementation but it makes less sense given the workflow we are trying to explain here with how we thought this feature addition would be implanted by you.

So, I hope this is considered and is updated with what we have explained here in this thread about a separate password and not necessarily an extra password.

Seb

@delosmzp @protonprivacy

Disappointed the Proton devs didn't understand the original request. I thought Proton was quite knowledgeable when it comes to security and sure enough needing two passwords and a pin code to get to my passwords is more secure but it's also not very user friendly. That's why originally users suggested to be able to use a different password to login to proton pass, not an extra additional login layer. What we have now makes sense and no sense at all at the same time.

Go Up