Hacker News Reader

Comment by teekert | Hacker News Reader

I really enjoy Proton Pass (but I have a paid subscription so I have passmail aliasses as well). I've been going full passkeys recently, no issues yet.

Before this I used Vaultwarden, but I was always a bit afraid of the self-hosting (of something this critical), and I really didn't like how you share credentials in BitWarden (through organizations), Proton Pass is much more intuitive with just straight up sharing of credentials or sharing whole Vaults. You can also share through public 1-time visit, limited time valid-urls. I use that a lot when I set up people's accounts.

What I don't like is the tight coupling to Proton's services, Pass should have had it's own credentials. But if you're not a Proton user that doesn't matter (or perhaps it doesn't matter t you in any case.)

View on HN

> "Pass should have had it's own credentials. "

It has it's own credentials, it's optional: https://proton.me/support/pass-extra-password

Im a happy Proton customer since a decade for their email and recently file storage service, but I’m concerned about having my passwords and my files and my emails in the same system. It’s risky to have so much in one company, if I lose my proton access for some reasons I’m out of everything

You can set an extra password for pass but still.

I for one also have my 2fa with them... I get the feeling.

What i don't understand is, why Proton Authenticator, which can also sync your 2fa accounts to Proton servers, does not have a separate password (from Proton Pass.)

So anyone who gains access to your Proton Pass account credentials, automatically gets access to your synced 2FA codes too

And obviously you would want to enable syncing your 2fa accounts, in case your device gets stolen / broken / etc.

So the only solution seems to use another 2FA App from another developer.

https://proton.me/authenticator

Can you tell me more about the problem with sharing credentials through organizations?

I've been off vaultwarden for 2 years now I guess, but I remember that having to share cedentials with my wife I had to make an organization in the admin interface. Then add us both to that org. There was no sharing of just 1 credential, or a group or something like that. It feels like a more formal system, perhaps better at home in an enterprise.

But maybe that has changed in the meantime.

Reply on news.ycombinator.com