Proton Pass vs RoboForm Comparison

• Pass Plus (individual, annual): $35.88/year
• Pass Family (up to 6 users, annual): $59.88/year

• Premium (individual, 1-year): $29.88 per year
• Family (5 accounts, 1-year): $47.75 per year

Source-code review and gray-box testing of the browser extensions, mobile and desktop apps, and CLI

Vault and item data are encrypted with 256-bit AES-GCM under 32-byte random keys; the user key is protected by a bcrypt hash of the account password. Authentication uses a hardened SRP implementation; sharing uses OpenPGP with ECC (Curve25519). Every field is encrypted client-side — usernames, URLs and notes included — so Proton cannot see which services you hold accounts with. Offline access on paid plans uses Argon2 for the local hash.

The vault is encrypted client-side with AES-256 using a key derived from the Master Password via PBKDF2 with SHA-256 and a random 32-byte salt, at 1,000,000 iterations by default — the same order of magnitude as the highest iteration counts in this category, though PBKDF2 remains a non-memory-hard KDF unlike Argon2. Only a one-way, server-side password derived from the Master Password is ever sent to RoboForm's servers; all encryption and decryption happens locally.

Proton AG, Geneva, Switzerland. Since June 2024 the primary shareholder is the non-profit Proton Foundation, which the founders endowed with Proton shares in an arrangement they describe as irrevocable. Proton began as a 2014 crowdfunding campaign.

Privately held and independently operated since RoboForm's original 2000 release; not venture-backed and never acquired. Headquartered in Fairfax, Virginia, led by CEO Vadim Maslov. Siber Systems also makes GoodSync, a file-synchronization product, alongside RoboForm.