Proton Pass password manager apps released as open source https://www.ghacks.net/2023/07/19/proton-pass-password-manager-apps-released-as-open-source/
Currently they are offering Proton Pass Plus (PPP) for only $1 per month/lifetime subscription. That is 1/3 the cost of Lastpass Premium (LPP), so I'm interested how it compares. At first glance PPP has the same essential features as LPP, such as 2FA & phone apps, and more. It's tempting. See here: https://account.proton.me/pass/signup
Proton Pass Retains Passwords in Cleartext Form in Memory The Proton Pass password manager follows the bad practice of keeping unencrypted usernames and passwords in the computer’s memory. https://restoreprivacy.com/proton-pass-retains-passwords-in-cleartext-form-in-memory/
An interesting read, especially the comments. For those of you that thought "I might try Tutanota", think again. But, as there is nothing better, I will just have to continue using PM.
From the article: Update: September 21, 2023 Proton AG has confirmed to RestorePrivacy that this issue has now been addressed across all platforms via updates released yesterday. Users are urged to update their Proton Pass clients to benefit from the fixes.
Major design blunder, really not acceptable. I wonder if they also tested other password managers? And Proton even has the audacity to say it's unlikely that this will be exploited since malware needs access to browser memory? What do you think that info-stealers are designed to do?
