this post was submitted on 30 Mar 2024
403 points (100.0% liked)

Technology

69702 readers
2911 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Passkeys are an easy and secure alternative to traditional passwords that can help prevent phishing attacks and make your online experience smoother and safer.

Unfortunately, Big Tech’s rollout of this technology prioritized using passkeys to lock people into their walled gardens over providing universal security for everyone (you have to use their platform, which often does not work across all platforms). And many password managers only support passkeys on specific platforms or provide them with paid plans, meaning you only get to reap passkeys’ security benefits if you can afford them.

They’ve reimagined passkeys, helping them reach their full potential as free, universal, and open-source tech. They have made online privacy and security accessible to everyone, regardless of what device you use or your ability to pay.

I'm still a paying customer of Bitwarden as Proton Pass was up to now still not doing everything, but this may make me re-evaluate using Proton Pass as I'm also a paying customer of Proton Pass. It certainly looks like Proton Pass is advancing at quite a pace, and Proton has already built up a good reputation for private e-mail and an excellent VPN client.

Proton is also the ONLY passkey provider that I've seen allowing you to store, share, and export passkeys just like you can with passwords!

See https://proton.me/blog/proton-pass-passkeys

#technology #passkeys #security #ProtonPass #opensource

(page 2) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 1 year ago (3 children)

I’m not 100% clear on the pricing. Do I get this for “free” as part of a premium subscription to Proton Mail/Drive/Calendar or is this a separate subscription?

[–] [email protected] 2 points 1 year ago (3 children)

This is included in the premium subscription

[–] [email protected] 2 points 1 year ago (3 children)

Its free blud stop spreading misinfo

load more comments (3 replies)
load more comments (2 replies)
[–] [email protected] 2 points 1 year ago

Probably best to see their comparison but free account mainly excludes Integrated 2FA authenticator and only has two vaults, but unlimited logins. I'm on the unlimited account (for VPN and mail) so can't check for sure.

load more comments (1 replies)
[–] [email protected] 3 points 1 year ago (9 children)

I don't trust proton and I don't know why anyone would

load more comments (8 replies)
[–] [email protected] 2 points 1 year ago (1 children)

I really really like proton pass, was using Google password manager prior but I primarily use Firefox and Firefox's password syncing is just bad. Proton pass has been a surprisingly reliable password manager.

load more comments (1 replies)
[–] [email protected] 2 points 1 year ago (2 children)

I was considering Proton Unlimited and moving away from separate SimpleLogin and Bitwarden Premium to get my costs down. Has anyone moved from Bitwarden to Proton Pass? How was the experience?

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago) (1 children)

I moved FROM Proton when I started looking into using unique addresses for everything via my own domain.

Fastmail + Bitwarden is way cheaper than Proton + SimpleLogin.

I found myself wondering why Proton, which I was already paying for, required an additional cost to implement masked email addresses via SimpleLogin when they own the damn thing.

Fastmail just has all of that baked in for cheaper. Then Bitwarden can create masked addresses from its interface via API when you create logins.

[–] [email protected] 1 points 1 year ago (1 children)

I liked the look of Fastmail but I read that it doesn't work offline which seems to be a massive oversight. I also only really need basic mail but their 2GB limit felt way too low for a paid service.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

Hm. I guess I've never had the need for offline support so I didn't notice. Though IMAP works so other clients could take care of that.

Why did you compare the lowest tier with Proton Unlimited?

  • Proton Unlimited: $120/500GB/15 addresses. Add cost for SimpleLogin to manage masked addresses.
  • Fastmail Standard: $50/30GB/600 addresses. Masked addresses built in at no extra cost.

I don't know your storage requirements but for me, I never went over the 15GB free limit in Gmail after many years of use so I don't see 30GB ever being a problem.

Edit: After more looking, SimpleLogin may be included with Unlimited? Still.. Unlimited is expensive. This may have been what caused me to start looking elsewhere. I had been paying for Proton Mail Plus plan for a few years before I started looking at implementing masked email addresses and got frustrated with the price to use SimpleLogin features which weren't included in Plus.

[–] [email protected] 1 points 1 year ago

I don't have Unlimited. I pay for Mail Plus. I also pay for SimpleLogin and Bitwarden. By moving to Unlimited I get SimpleLogin included and could ditch Bitwarden.

I don't see a way to import from SimpleLogin with Fastmail so don't see it being an option anyway. I really don't want to manually create 350 aliases.

When I get on my PC I will look again at my options. Thanks for your input.

[–] [email protected] 2 points 1 year ago (1 children)

As a counterpoint, I'm specifically keeping passwords with a separate service out of concern in having a single point of failure for the majority of my online persona. I do pay for proton unlimited but mostly for VPN, simple login, and email.

[–] [email protected] 1 points 1 year ago

This did cross my mind yeah. Also by putting all your eggs in one basket you kind of get trapped in that ecosystem. No different to Google / Apple.

[–] [email protected] 1 points 1 year ago (3 children)

Has anyone used pass keys? I have been hesitant to try them out. Using them, do they basically keep you logged in all the time to a given site?

[–] [email protected] 1 points 1 year ago

I’ve had them since 1Password beta. They do not change the duration of a session unless the service opts to. In the case of google they ask me to log in more often, presumably because there’s less friction, so why not?

load more comments (2 replies)
[–] [email protected] 1 points 1 year ago (2 children)

Passkeys seem like mtls...so much so that I'm not sure what the difference is.

[–] [email protected] 3 points 1 year ago

There is a difference but right now as long as one uses a good password with a 2FA it is probably good enough. Too many services with passkeys are still quickly offering password resets via e-mail or text, so they, as sites, are not secure. And unless you can move your passkeys with you, like you can with passwords, you don't want to get locked into a single device or OS.

[–] [email protected] 2 points 1 year ago (1 children)

MTLS is for transport layer security, not authentication security. This is closer to those RSA keys where there is an RSA server keeping track of all the fobs that can be queried to figure out what number they are currently showing. Acting as a something you have factor of authentication, proving you are who you say you are.

load more comments (1 replies)
load more comments
view more: ‹ prev next ›