I can’t imagine wanting to move from Bitwarden, but it’s nice to see a relatively trusted name like Proton enter the space.
this post was submitted on 29 Jun 2023
57 points (98.3% liked)
privacy
2971 readers
14 users here now
Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.
Partners:
- community.nicfab.it/c/privacy
founded 2 years ago
MODERATORS
Yeah, Bitwarden is definitely more well-established, but I'm always impressed at the quality of Proton products (even if they take forever to develop).
I've been using Bitwarden for years with no complaints, but I do use protons other services. Maybe I'll check it out.
While I am using Bitwarden right now, I am not happy with the UX of it. Will definitely look into Proton Pass once my Bitwarden subscription runs out.
What are you not happy with? I use vaultwarden (but pay for bitwarden, couldn't get the bitwarden pro licence to upload to my self hosted server). I'm pretty happy with it. Maybe there's a fix for your problem
Hey, thanks for asking! Everything I am saying is minor, I really like Bitwarden and the way one can share passwords within organizations. It is the password manager I keep recommending so far. Having said that, I do not really like the look and feel (which is absolutely subjective and not a major reason to move away from open source), but generally I dislike
- the way Bitwarden handles passwords for the same domain, but different subdomain (Proton does that already better, it sorts according to the subdomain). I do know there are different matching options (
startswithcreeps me out should I useHost?) - the way Bitwarden handles storing passwords when signing up on new forms, 1Password seemed to do that much better
- I actually like how 1Passwords automatically gives me visual options within the browser window instead of rotating through password options via Hotkey or over the plugin window.
If you have some advice, especially about the password handling for different subdomains, let me know!
I've been testing Proton Pass and it's decent. It misses a few things I've learned to enjoy with other managers.
First, the manager I use has the ability to store identities. This is great for keeping things like medication lists, social security numbers, insurance numbers, etc, of family members. I could, of course, put all that into a "note" in proton pass. But it's very convenient to have ready built items for structured data like that.
Second, Credit Cards. I like to store my credit card information in easy to copy entries as well. Again, I could use a note for that, but the manager I use has ready made items for that structured data as well.
Lastly. This is kind of the no-go for me. I already don't like that I can't have separate passwords for my Proton Mail, Drive, Calendar, etc. Sure, I'm kind of used to that functionality in Google from years past, but I don't like it. Now I'd have to put all my passwords under the same single login? No thank you.
Currently, email recovery is impossible with my password vault. I simply have that option disabled. External 2FA is required. If you break into my email, that sucks, but you won't get my passwords for literally everything else. Basically, I have my password vault as secure as I can make it and keep cloud accessibility. Moving to Proton would weaken my security posture.
But if Proton gave me the ability to put the password manager under a separate login with full 2FA support and NO email recovery. I'd be relieved of that concern.
You could add a yubikey authorization. Doesn't solve the single sign on, but gives you more security that somebody would need your hardware key as well as the account password
Just use KeePass and Syncthing. Then you don't have to rely on any cloud services.
Keepass and NextCloud for me
Going to paste* this comment from HN I saw earlier today:
Proton, the company that still in 2023 doesn't allow to cancel the auto renewal without losing access to the services you have already paid, the most anti-consumer thing I have seen in my life.
Here is how it works: 1. You pay for example for 2 years of access. 2. After a few months you decide to remove the auto renew and just use the remaining time of your subscription, your only option is to cancel your current subscription and lost access to any premium service you paid for, they give you credits for the remaining time of your subscription, that you can use if you contract other services. So you are force to cancel the subscription before the renewal time and hope you don't forget to cancel it.
Run from this company.
In what world is it anti-consumer to get back your money if you decide you don't like the service?
Well generally if they cancel the service right then, yes you should get a prorated refund. The other alternative is simply allow for cancellation of the auto-renewal, so when the subscription runs out it simply expires.
they give you credits for the remaining time of your subscription, that you can use if you contract other services.
Well apparently you don't get a refund. You get credit for their service.
they give you credits for the remaining time of your subscription, that you can use if you contract other services.
In the world of, I want my stuff and not paying for it. Gmail, for example
Oh but you DO pay, when using Gmail. Just not with your money.
If it's free, chances are YOU are the product. Not in all cases, but in a lot.
Yes, I was being snarky about the complaining about Proton’s immediate prorated refund policy.
What does "cancel the subscription... and hope you don't forget to cancel it" mean?
I guess it means you have to cancel when your subscription is about to expire, because they won't refund you or let you continue to use the service for the period you've already paid for.
If you cancel before that they'll give you credits, which are useless if you don't want to subscribe to another product of theirs.
So you are force to cancel the subscription before the renewal time and hope you don’t forget to cancel it.
I think the author actually means "force to cancel right before the renewal time (e.g. during the 12th month of a 2 year subscription)" because cancelling earlier means losing the rest of the subscription (according to the author). And if you forget to cancel during that short window you'll be charged more money when it auto renews.
That's definitely strange. Are you saying they won't refund the credits and essentially lock you into paying for another service if you cancel a subscription?
No, what they’re saying is they do not understand Proton’s policy. They’re policy is an instant prorated refund the second you cancel. They also warn you about it.
view more: next ›