Proton Pass is the password management app from privacy-focused Proton (whose suite of tools also includes Proton Mail and Proton VPN). Whether you’re already a Proton user or are looking for a new password manager to securely store your credentials and other data, these are the tips and tricks that will help you get the most out of Proton Pass.
Create a separate shareable vault in Proton Pass for guests
Password managers offer a secure alternative to writing down wifi passwords and other logins or sending them via text. In Proton Pass, you can create a separate vault specifically for your home and share a limited list of credentials—such as guest wifi, smart lock codes, and streaming information—with visitors. Vaults can be set as view only, and you can revoke access at any time. Users without a Proton Pass account receive a shared link, which can be set to expire after a specific amount of time or number of views.
Another use case for separate vaults is as an “in case of emergency” selection of items that you can share with trusted contacts. For paid users, Proton Pass has a dedicated emergency access feature, which lets up to five contacts of your choice get into your account after a dedicated waiting period in the event of your illness or death. Alternatively, you can set up a vault that contains only specific items, such as logins or secure notes, and share it with those who may need the information if you are incapacitated or unreachable. Remember that guest access can be set to expire or revoked at any time.
Use custom hidden fields to protect security answers and PIN codes
When you create an item in Proton Pass, you have the option to add custom fields, which allow you to save additional information relevant to your credential, such as text notes and 2FA codes. You can also select a Hidden field, which masks the text by default until you reveal it (similar to how passwords are masked). This prevents someone from looking over your shoulder and catching sight of sensitive information, such as security question answers and PINs. Custom fields are available on paid Proton plans.
A Proton Pass selling point is its hide-my-email alias feature, which generates a unique email address when you sign up for a new account. Email aliases forward to your main inbox, but they prevent you from having to share your real address, essentially creating burner identities that you can use for online shopping, newsletters or promotional lists, and other activity that you don’t want tied to your personal email. Free users get 10 hide-my-email aliases, while those on paid plans have an unlimited number. While Proton Pass doesn’t yet have an integrated virtual card option like 1Password, you can use a service like Privacy.com or Revolut to create single-use or merchant-locked payment cards that protect your real account information.
Add custom descriptions to hide-my-email aliases to track who is selling your data
Another benefit of hide-my-email aliases is that you can find out who is selling your data (again, without compromising your personal email address). When you generate an alias, add a custom text field with notes on exactly what the address is being used for. If you start receiving marketing emails or spam to that alias, you’ll know where that compromise came from. You can then disable the alias instantly within Proton Pass.
Add multiple login URLs to one master entry to avoid duplicate accounts in Proton Pass
Some employers, universities, and service providers have multiple URLs for accessing online portals, but you use the same credentials across all of them. Instead of cluttering your vault with duplicate entries, you can add multiple URLs to an item so Proton Pass will autofill that item across all of them. This also prevents an issue where you have to update a password and then remember to sync it across duplicate items. When you edit an entry, simply tap Add in the Website box.
What do you think so far?
Recover old credentials using item history in Proton Pass
Proton Pass stores a history of your saved items so you can see previous passwords and information that’s since been changed. This makes it easy to revert back to earlier versions if you encounter an error when updating a credential. You have access to the last 50 versions of an item on paid plans, and you can restore earlier versions to be the current version directly from the item history.
Switch password generation to passphrase for secure but easy-to-type credentials
When you create a new credential, Proton Pass can randomly generate a strong password to match site requirements. Alternatively, you can opt for passphrases, which are strings of words separated by hyphens (or another symbol). These are still highly secure but much easier to remember and type than a random string of letters, numbers, and symbols. Passphrases can be useful on accounts for which you have to manually enter your credentials.
When you sign up for Proton Pass, you start by creating a global Proton account that works across Proton apps. You should, of course, make this password highly secure and enable multi-factor authentication, but you may also want to set up a password specifically for your Proton Pass vault(s) so even if your Proton account is somehow compromised, your credentials remain protected. You’ll find this option under Settings > Security > Extra password on the browser extension and under Profile > Account name > Manage account on the mobile app. Note that if you forget or lose this password, you won’t be able to access your Pass account.
Use notes and attachments to create an encrypted document vault in Proton Pass
Some of the best password managers can double as encrypted storage vaults, meaning you can upload sensitive documents that you don’t want to entrust to other cloud services that may be more susceptible to compromise. Proton Pass includes 1 GB of storage on its free plan and 10 GB for paid users. You can create secure notes and attach uploaded files to any item in your vault.