Proton warns to not use 2fa from Proton Pass for your Proton account.
post
replies:
Sounds like it's time for some correcthorsebatterystaple!
replies:
Password manager inception. Sign up for last pass, and bitwarden, and Google auth and Ms auth. Get a burner phone and rotate and change passwords monthly.
...sorry for my useless post.
Use a passphrase (not a password) and a physical security key, like a yubikey. It also supports TOTP or whatever 2fa Proton uses, you just connect it with a laptop or phone and it gives you a key.
A physical key is much more secure than 2fa from a password manager (although both are probably fine)
In my opinion the centralization of all your data and secrets to one single company is itself a security risk. When I realized that, I completely stopped using proton. I see 2 main issues with using all-proton: 1. they could turn evil (like a lot of big companies do) 2. They can have exploits which then can effect all your data / secrets. I switched to have a different company for each service and I don't really pay more than what I would have to pay proton to get the same things.
I use all of Protonβs products as well. Iβve found a Yubikey works best for the 2FA codes. Iβm also working on having a backup password manager
Best thing you can do is learn a very strong and complex password to use for your proton account, that's what I did.
It takes a bit of time but eventually you'll learn to type it in fast.
replies:
Im in the same boat. They really need to allow a second password for the pass database.
replies:
proton pass has a few non-email avenues to recovery. check it out.
I use a password manager
replies:
Maybe diceware passwords can help you?
Either have a strong password and write it down somewhere, or use another password manager for proton? That seems kinda unnecessary though. Would be nice if proton supported yubikey or passkey or something.
all 23 comments