Patron Saint wrote:
> Remember, this proton mail thing is a new product so we have to
> assume it can be spotty (i.e., perhaps one of the worst examples of
> pw managers).

Proton pass is open source and has been audited by

> This report describes the results of a security assessment of the
> Proton complex, more specifically covering the Proton Pass mobile
> applications and browser addon, as well as the web application
> and backend API endpoints. The project, which included
> a penetration test and a wider review of the security posture, was
> carried out by Cure53 in May 2023.

https://drive.proton.me/urls/AS97HV90MW#1RzmiLrBTUg4

There is a rather extensive Conclusions in there, which I don't know
which issues have been addressed.

I don't use PP so I have no experience w/ it, but it is a browser
extension available for multiple browsers Brave Firefox Edge Chrome and
Android & iOS.

--
Mike Easter

Patron Saint <patron@saint.com> wrote:
> On Mon, 21 Aug 2023 07:04:59 -0000 (UTC), Chris wrote:
>>> You seem to understand Proton's mission, but me, not understanding it, I do
>>> kind of agree with Paul that a free password manager has "issues" in that
>>> if it is (what he calls) spotty, then you've just lost all your passwords.
>>
>> Only if you use the worst examples of pw managers. Good ones will cache
>> your pw database locally or you're in control of where it is. No risk from
>> being "spotty".
>
> Remember, this proton mail thing is a new product so we have to assume it
> can be spotty (i.e., perhaps one of the worst examples of pw managers).
>
> Also there are two pw manager fundamental models, local and cloud storage.
> Model 1 = keepassxc => nothing leaves the local device, no account exists
> Model 2 = lastpass => everything is stored in an account on their servers

There's also a third model where you pay for a service via an account and
you also keep control of your files. You can put them on a cloud service of
your choice.