Proton Pass

Proton Pass is the password manager for people who want their whole digital life under one Swiss, end-to-end encrypted roof. It is open source, audited, and generates email aliases itself rather than integrating a third-party service. It is also younger than its rivals, its free tier is more limited than the best of them, and the paid plan is not cheap.

Security

Proton Pass encrypts vault and item data with 256-bit AES-GCM — an authenticated-encryption mode — under 32-byte random keys that are never derived from your password and cannot be brute-forced. The key that protects everything else is wrapped with a bcrypt hash of your account password; Proton argues bcrypt is a more robust choice than PBKDF2, and paid plans’ offline mode uses Argon2 for the local hash. Authentication runs over a hardened version of the SRP protocol, so password-equivalent data never crosses the wire even if Proton’s servers are compromised.

The encryption model is genuinely more complete than most. Every field is encrypted client-side — usernames, URLs, notes — which means Proton cannot see which services you have accounts with, not just your passwords. Key handling follows least-privilege: a per-item key lets you share one login without exposing the whole vault.

Proton Pass has been independently audited twice. Cure53 tested the apps, extensions and API in mid-2023 at launch; Recurity Labs did a fuller source-code review and production testing between January and April 2026, covering the extensions, desktop and mobile apps and the CLI, and rated the overall posture “well above par” with no remote exploits and no encryption bypasses. Both reports are public. There is also a public bug bounty.

Privacy & Trust

This is where Proton Pass pulls ahead. The company is Proton AG in Geneva, and since June 2024 its primary shareholder is the non-profit Proton Foundation — the founders endowed it with their shares in an arrangement they call irrevocable. Proton started as a 2014 crowdfunding campaign and funds outside privacy work (the Tor Project, GrapheneOS, EDRi). Switzerland’s privacy law and that ownership structure are a different trust proposition from a US or venture-backed manager.

All Proton Pass apps are open source, and Proton maintains OpenPGPjs and GopenPGP, crypto libraries used well beyond Proton itself.

The one blemish is a memory-handling weakness. The Proton Pass browser extension kept unencrypted usernames and passwords in process memory after you locked the vault. The 2023 Cure53 audit flagged it as reported and fixed — but a summer-2023 fix was accidentally undone by a later release, a researcher noticed, and Proton shipped fixes across all platforms in September 2023. Recurity Labs’ 2026 re-audit checked the desktop memory handling again and found the issues resolved. It was never a server compromise or a vault breach — but it is a reminder that a young product accreting features can walk back a fix, and Proton’s transparency (both audits are public, and the issue is in them) is what let it get caught.

Recovery is strict zero-knowledge: Proton cannot reset your password or decrypt your data. A recovery phrase set up in advance covers both; without one, a lost password means a lost vault.

Features

Proton Pass covers the basics — password generator, passkey storage and autofill across every device, weak/reused-password alerts, easy import — and adds identity features most managers don’t. Hide-my-email aliases are built in, powered by Proton’s SimpleLogin technology: ten on the free plan, unlimited on Pass Plus, with a custom domain option. Pass Monitor adds dark-web breach alerts and a password health view. Proton Sentinel, Proton’s account-hijacking defense, applies here too.

The catch is how much sits behind Pass Plus. The built-in 2FA authenticator, secure vault and link sharing, Emergency Access, file attachments, unlimited aliases and the CLI are all paid-only. The free tier is usable — unlimited logins and devices, passkeys, ten aliases — but it is a limited free tier, not a complete one, and the manager is younger than its rivals, so a few things (biometric unlock on some platforms) have arrived only recently.

Usability & Platforms

Proton Pass runs on Windows, macOS and Linux (Debian and RedHat families), iOS and Android, a web app, browser extensions for every major browser including a native Safari extension, and a command-line tool. Sync is automatic; offline access is a paid feature. Autofill is solid across platforms.

The desktop apps only arrived in 2024 — Windows first, then macOS and Linux — so they are newer and less battle-worn than the extension, which has been the primary way to use Proton Pass since launch. For most people that distinction won’t matter; if you lean heavily on a desktop client, it is worth knowing it is the more recent piece.

Price & Value

Pass Plus is $4.99 a month at the renewal rate (an introductory year runs $2.99), billed $35.88 up front. Pass Family is the same $4.99 a month for six people, billed $59.88. That renewal price is meaningfully higher than the cheapest paid managers, and the free tier — capped aliases, two vaults, no built-in authenticator or sharing — is more of a trial of the ecosystem than a place to live.

Where the maths changes is Proton Unlimited at $9.99 a month, which folds in Proton Mail, Calendar, VPN and Drive. If you were going to pay for Proton anyway, Pass effectively comes free; as a standalone password manager, it is priced at the top of the market.

Pros

• Every field encrypted client-side — usernames, URLs and notes, not just passwords — so Proton can’t see which services you use
• 256-bit AES-GCM with a bcrypt-wrapped key; hardened SRP authentication; Argon2 for paid offline mode
• Two public independent audits (Cure53 2023, Recurity Labs 2026), both covering the apps, extensions and CLI; public bug bounty
• Swiss company whose primary shareholder is a non-profit foundation
• Built-in hide-my-email aliases as a first-class feature, with a custom domain option
• Fully open source, with Proton also maintaining widely used crypto libraries
• Runs everywhere: Windows, macOS, Linux, iOS, Android, every major browser, plus a CLI

Cons

• Free tier is limited — ten aliases, two vaults, no built-in 2FA authenticator or sharing
• Pass Plus renews at $4.99/month, near the top of the market for a standalone manager
• Built-in authenticator, sharing, Emergency Access, file attachments and CLI are all paid-only
• Memory-handling weakness in the extension (credentials not cleared on lock) was fixed in 2023, undone by a later release, then fixed again — checked and resolved in the 2026 re-audit
• Cloud-only: no self-hosting option
• Desktop apps are new (2024) and less proven than the browser extension

Our Rating

Proton Pass is the strongest choice if you value jurisdiction and ownership structure, want email aliases built in rather than bolted on, or already pay for Proton. Its encryption model hides more than most, and it is audited in the open. The price of entry is a limited free tier and a paid plan at the top of the market — and a product still young enough that a memory-handling fix could slip and need re-fixing. For the privacy-first user, those are acceptable trades.

Rating: 8.5/10