ProtonPass

proton.me/pass
ProtonPass

From the creators of ProtonMail, ProtonPass is a new addition to their suite of services. They have a full collection of user-friendly native mobile and desktop apps. ProtonPass is one of the few "trustworthy" providers that also offers a free plan.

Open Source

ProtonPass Privacy Policy

Privacy Policy Summary

  • The service provides two factor authentification for your account
  • Users agree to comply with the law of the service's country
  • The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection.
  • This service provides an onion site accessible over Tor
  • Terms may be changed any time at their discretion, without notice to you
  • This service tracks which web page referred you to it
  • Any liability on behalf of the service is only limited to the fees you paid as a user
  • Instead of asking directly, this Service will assume your consent to changes of terms merely from your usage.
  • This service is only available to users over a certain age
  • Pseudonyms are allowed
  • You can opt out of promotional communications
  • Your IP address is collected, which can be used to view your approximate location
  • Your account can be suspended for several reasons
  • Third parties are involved in operating the service
  • The service is not responsible for linked or (clearly) quoted content from third-party content providers
  • This service assumes no responsibility and liability for the contents of links to other websites
  • You are prohibited from sending chain letters, junk mail, spam or any unsolicited messages
  • You can access most of the pages on the service's website without revealing any personal information
  • The service informs you that its privacy policy does not apply to third party websites
  • The service has a no refund policy
  • You agree not to use the service for illegal purposes
  • You agree not to submit libelous, harassing or threatening content
  • You are prohibited from attempting to gain unauthorized access to other computer systems
  • The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
  • The service does not guarantee accuracy or reliability of the information provided
  • Invalidity of any portion of the Terms of Service does not entail invalidity of its remainder
  • Failure to enforce any provision of the Terms of Service does not constitute a waiver of such provision
  • Information is provided about security practices
  • Your personal data may be disclosed to comply with government requests without notice to you
  • Information is provided about how your personal data is used
  • The service claims to be GDPR compliant for European users
  • The court of law governing the terms is in Switzerland
  • You are forced into binding arbitration in case of disputes

Score

C

Documents

Domains Covered by Policy

  • protonmail.com
  • protonmail.ch
  • getproton.me
  • pm.me
  • protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
  • proton.me
  • protonapps.com

About the Data

This data is kindly provided by tosdr.org. Read full report at: #491

ProtonPass Source Code

Author

protonpass

Description

Android code for the Proton Pass application

#android#end-to-end-encryption#password-manager#proton

Homepage

https://play.google.com/store/apps/details?id=proton.android.pass

License

GPL-3.0

Created

15 Jun 23

Last Updated

18 Jun 26

Latest version

1.39.2

Primary Language

Kotlin

Size

130,244 KB

Stars

716

Forks

68

Watchers

716

Language Usage

Language Usage

Star History

Star History

Recent Commits

  • Victor (23 Apr 26)

    fix: sync dialog

  • Victor (23 Apr 26)

    chore: update changelog

  • Victor (23 Apr 26)

    chore(release): version 1.39.1 → 1.39.2

  • Victor (22 Apr 26)

    fix: dal signatures

  • Victor (21 Apr 26)

    chore: add common as included build

  • Victor (21 Apr 26)

    fix: passkey test

  • Victor (20 Apr 26)

    fix(passkeys): validate caller origin before signing WebAuthn assertions - Add PasskeyOriginVerifier to validate CallingAppInfo at both the begin-get phase (PasskeyCredentialsSearcherImpl) and the activity phase (PasskeyCredentialUsageActivity, PasskeyCredentialSelectionActivity) - For browser callers: use CallingAppInfo.getOrigin() against a vendored privileged-browser allowlist (Google gpm-passkeys-privileged-apps) - For native app callers: live-fetch Digital Asset Links (/.well-known/assetlinks.json) and verify delegate_permission/common.get_login_creds - Add VerifyDigitalAssetLinksForCredentialSharing use case backed by the public OkHttpClient with a 2 MB response cap; fails closed on all errors - Add CI scheduled job to detect allowlist staleness and open an MR

  • Victor (20 Apr 26)

    fix(passkeys): fix body read truncation and simplify WebauthnRelatedOriginsFetcher - Replace source.read() with source.request() so multi-segment responses are fully buffered before the size check (single read() may return fewer bytes than requested, silently truncating the body) - Remove okio.Buffer import — use source.buffer directly after request() - Replace private HTTP_NOT_FOUND = 404 constant with java.net.HttpURLConnection.HTTP_NOT_FOUND - Remove redundant @SerialName on WebauthnDocument.origins (field name matches JSON key) - Make MAX_BODY_SIZE a Long constant to avoid repeated Int->Long conversions

  • Victor (20 Apr 26)

    fix(passkeys): address security review findings on WebauthnRelatedOriginsFetcher - Reject non-HTTPS URLs before making any request (SSRF defense) - Replace response.body.string() with a capped okio BufferedSource read so oversized responses are rejected without reading the full body into memory, even when Content-Length is absent (chunked encoding) - Switch MockWebServer to HTTPS using okhttp-tls self-signed cert - Add test for HTTP URL rejection

  • Victor (20 Apr 26)

    feat(passkeys): integrate WebAuthn related-origins fetcher - Move @PublicOkhttpClient qualifier from pass/data/impl to pass/data/api so passkeys:impl can inject the shared OkHttpClient without depending on an impl module - Add WebauthnRelatedOriginsFetcher: fetches /.well-known/webauthn documents via the shared OkHttpClient, maps HTTP/network errors to MobileFetchException variants, guards against oversized responses (Content-Length pre-check + post-read cap at 512 KB) - Wire fetcher into PasskeyManager via registerWebauthnFetcher() in Hilt module, bound through the MobileWebauthnClientFetcher interface

  • L10n bot (17 Apr 26)

    i18n(weekly-mr): Upgrade translations from crowdin (6c23ab8b).

  • Victor (15 Apr 26)

    fix: use wal truncate always

  • Victor (08 Apr 26)

    fix: copy note

  • Victor (25 Mar 26)

    fix: omit vaults without proper proto info

  • Antoine Marchaud (24 Mar 26)

    fix: trashed pinned items should not be visible in the pinned section

  • Victor (24 Mar 26)

    fix: fill to on mail apps

  • Victor (05 Mar 26)

    fix: autofill not showing on secondary screens

  • Antoine Marchaud (24 Mar 26)

    feat: reused password clickable

  • Victor (15 Apr 26)

    chore: update changelog

  • Victor (15 Apr 26)

    chore(release): version 1.39.0 → 1.39.1

  • Victor (14 Apr 26)

    fix: groups edge case

  • Victor (13 Apr 26)

    fix: groups edge case

  • Victor (13 Apr 26)

    fix: more group inconsistencies

  • Victor (10 Apr 26)

    fix: manate item vault persmissions

  • Victor (10 Apr 26)

    chore: update changelog

  • Victor (10 Apr 26)

    chore(release): version 1.38.0 → 1.39.0

  • Victor (10 Apr 26)

    fix: several fixes for manage item screen

  • Victor (10 Apr 26)

    fix: group members not showing in manage item

  • Victor (10 Apr 26)

    fix: members string not being displayed correctly

  • Victor (10 Apr 26)

    fix: incorrect admin and more options visibility issues for groups

ProtonPass Website

Website

Proton Pass: Free password manager with identity protection | Proton

Store, share and sync passwords, passkeys, email aliases, and more, on any device, with our open-source, free password manager. No trials, just free forever.

Redirects

Does not redirect

Security Checks

1 security checks failed (64 passed)

  • Robots Noindex

Server Details

  • IP Address 185.70.42.45
  • Hostname 185-70-42-45.protonmail.ch
  • Location Lausanne, Vaud, Switzerland, EU
  • ISP Proton AG
  • ASN AS62371

Associated Countries

  • DE DE
  • US US
  • CH CH

Safety Score

Website marked as moderately safe

90%

Blacklist Check

proton.me was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

ProtonPass Android App

APK Info

De-Googled Compatibility

Native 3.84 / 4 19 ratings
microG 4.00 / 4 9 ratings
  • GrapheneOS Native 3.8 / 4 (15)
  • CalyxOS microG 4.0 / 4 (6)
  • LineageOS Native 4.0 / 4 (2)
  • e OS microG 4.0 / 4 (2)
  • Stock (HUAWEI CDY-NX9A) Native 4.0 / 4 (2)

Tested on Android 10–16 · Updated 04 Jun 26 · View on Plexus →

Trackers

  • Sentry

Permissions

  • Access Network State
  • Camera
  • Foreground Service
  • Internet
  • Post Notifications
  • Query All Packages
  • Receive Boot Completed
  • Use Biometric
  • Use Fingerprint
  • Wake Lock
  • Billing
  • Dynamic Receiver Not Exported Permission

ProtonPass iOS App

App Info

Proton Pass - Password Manager

Get Proton Pass, the free password manager created by the team behind Proton Mail and Proton VPN. It’s open source, end-to-end encrypted, and protected by Swiss privacy laws. Secure your online identity with Proton Pass. Pass has no ads or data collection and is free forever on all your devices. Create and store unlimited passwords on unlimited devices, autofill logins, generate 2FA codes, create email aliases, and more. WITH PROTON PASS YOU CAN: • Sign in faster with Proton Pass autofill: You no longer need to copy and paste your username and password with our advanced autofill technology. • Store and auto-sync unlimited logins on unlimited devices: Create, store, and manage your credentials from anywhere with our browser extension and mobile apps. • Share any data stored in Proton Pass securely: Share passwords, usernames, credit cards and notes securely with trusted contacts. Your data stays end-to-end encrypted, and you can revoke access anytime. • Enhance your online security: Identify vulnerable accounts with Data Breach Monitoring and Password Health. • Access your data from anywhere, on any device, with seamless synchronization across all your platforms." • Protect your online identity: Whenever you sign up for a new online account, automatically create an alias to keep your actual email address protected. • Add security layers to your accounts: Protect your account with 2FA authentication and custom PIN protection. Activate Proton Sentinel for advanced security against hackers. PROTON PASS FEATURES INCLUDE: • Built in password generator: Generate unlimited secure passwords and safely store them for all your accounts. Avoid weak passwords and never worry about forgetting the complex passwords again. • Built in 2FA authenticator: Enhance your accounts security with 2FA codes, easily generated within the app for any website and autofill when you log in. • Secure Vaults: Organize & share login information, payment details and notes into secure vaults, which you can share with family, friends, or co-workers. • Email Aliases: With Hide-my-email feature, protect your identity by creating email aliases, preventing your personal email address from being disclosed or leaked. • Credit Card Support: Securely store your credit card details for quick access. • Pass Monitor: Identifies weak or reused passwords, inactive 2FA fields and sends immediate alerts on data leaks with dark web monitoring. • End-to-End Encryption: All your login data is protected with end-to-end encryption, ensuring that only you can access it. • Biometric Login Access: Add an extra layer of security to Proton Pass by using your fingerprint or face to unlock the app. • Spotlight Search: Easily find your information, with one click via iPhone Spotlight Search. • Bookmark items: Pin frequently needed items to the top of your Proton Pass app and browser extension to easily find them. • Bulk edition: Activate bulk edition to handle items in a hassle-free way. • Item history: Keep track of your item changes with item history, knowing when you last changed any login information. • Encrypted Notes: Safely store sensitive information within the app, accessible only to you. • Offline Access: Access your stored passwords and notes in Pass from anywhere, even when your device has no internet connection. • Open Source: Trust is built on transparency. Proton Pass is open source, allowing you to verify our security claims for yourself, like all Proton services. • Easily import passwords: Easily import passwords from any password manager or CSV file. • No Ads or Data Collection 
 For more information, visit: https://proton.me/pass Our open-source code base: https://github.com/protonpass/ios-pass Terms of service: https://proton.me/legal/terms Learn more about Proton: https://proton.me

Rating

Rated 4.84 out of 5 stars by 6,323 users

Version Info

  • Current Version 1.19.2
  • Last Updated 26 May 26
  • First Released 27 Jun 23
  • Minimum iOS Version 17.0
  • Device Models Supported 127

App Details

  • IPA Size 247.93 Mb
  • Price Free (USD)
  • Age Advisory 4+
  • Supported Languages 30
  • Developer Proton AG
  • Bundle ID me.proton.pass.ios

Screenshots

  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot

ProtonPass Reviews

More Password Managers

About the Data: ProtonPass

Change History

  • Amended (github) by @lissy93 #608
  • Amended (androidApp, iosApp, subreddit)
  • Added by @Sean12697 #187

API

You can access ProtonPass's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/protonpass

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share ProtonPass

Help your friends compare Password Managers, and pick privacy-respecting software and services.
Share ProtonPass and Awesome Privacy with your network!

View Password Managers (6)