this post was submitted on 23 Jan 2026
207 points (82.0% liked)

Privacy

44847 readers
1057 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS
 

For context, in my password manager I had tried formatting some of my entrees so that it would contain the usual username and password, but instead of creating whole new entrees for the security questions for the same account, I just added additional fields in the same entree in order to keep things a little more tidy.

I was not expecting that doing so would result in later being shaken down by Proton to pay even more money just to access the same few bytes of fucking text I had trusted them with. This is sleazy as fuck and I am dropping these idiots entirely.

top 50 comments
sorted by: hot top controversial new old
[–] Fokeu@lemmy.zip 3 points 21 hours ago* (last edited 21 hours ago)

Use keepassXC instead. You don't need any kind of cloud for a password manager. Keepass database can by synchronized between devices with syncthing. Safer and free forever

[–] addictedtosongtitles@lemmy.blahaj.zone 18 points 1 day ago (1 children)

Bitwarden offers this feature for free using custom fields, although 2FA is paid unless you self-host IIRC

[–] jsnfwlr@lemmy.ml 11 points 1 day ago (1 children)

Vaultwarden is a great self hosted bitwarden clone

load more comments (1 replies)
[–] HugeNerd@lemmy.ca 6 points 1 day ago (1 children)

I don't think that's where entrees go.

[–] AnimalsDream@slrpnk.net 0 points 11 hours ago (1 children)

Hypothetically it should have. Those were additional fields that I added to the main account login entree, in order to keep all the relevant data in one place.

[–] HugeNerd@lemmy.ca 1 points 6 hours ago

Strange, I keep my entrees covered in the fridge and take them out about one hour before guests show up.

[–] blitzen@lemmy.ca 96 points 2 days ago (7 children)

Download BitWarden and be done with it.

[–] AnimalsDream@slrpnk.net 17 points 2 days ago (1 children)

Keepass is tried and true, I'm going back to Keepass.

[–] Hexadecimalkink@lemmy.ml 1 points 1 day ago

Welcome back 👍

[–] Creat@discuss.tchncs.de 35 points 2 days ago (5 children)

If you can, just self-host vault warden (compatible with bit warden and supported). Gets your data out of the cloud entirely.

[–] blitzen@lemmy.ca 40 points 2 days ago (12 children)

I’m with you, but the hosted subscription is miles more secure than I can make my installation, and at $10 per year probably cheaper than the electricity to self host. Plus it supports the devs.

But I do make regular backups in case I need to migrate.

[–] Creat@discuss.tchncs.de 1 points 1 day ago* (last edited 1 day ago)

Your first point is debatable. You still have to trust them to be that secure, and you can't verify that. If they are ever breached, it's literally the worst case scenario. You can self-host their solution, but only in the enterprise tier (6$ per user per month). Also BitWarden is a target woth attacking, I am not. BitWarden hosts thousands of instances worthy of being attacked individually. A personal VaultWarden instance of "Mike and Molly Peterson" isn't exactly an attractive target. I do think they are pretty secure, but a single mistake with these stakes can have immense consequences. LastPass was also breached repeatedly, with a similar buiseness model.

The second point about electricity wouldn't be true in my particular case, as the server for self-hosting it is running anyway. Running VaultWarden or not doesn't change the power usage noticably. Obviously this is different for someone who doesn't just have a server at home running anyway.

Side note: I'm not actually running a personal VaultWarden instance, as my personal requirements are being met just fine with KeePass files. We do run an instance at work, but it isn't world-accessible (internal access only).

load more comments (11 replies)
load more comments (4 replies)
load more comments (5 replies)
[–] babyfarmer@lemmy.world 5 points 1 day ago

Have you considered upgrading to Proton Lux™?

Because a bunch of dementia patients started leaving 1 star review as they kept on forgetting their passwords

[–] hector@lemmy.today 24 points 2 days ago (1 children)

I know someone that signed up for an account with them, they froze it immediately for suspicious activity. He does nothing with that IP address, reads, social media, that's it. No way to get off the shit list without giving up personal information like a phone number and or alternate email and no guarentee that would fix it.

Their IP was on a blacklist from some shady company for some strange reason. But other companies let you write the company and plead your case, proton does not.

They further suspended a bunch of accounts based on some half baked unproven accusations by the government(s) if I recall.

They aren't trustworthy, they will give you up at the first sign of friction it appears.

[–] unsettlinglymoist@lemmy.world 6 points 1 day ago (1 children)

That happened to me. I wasn't even on a VPN when I created my first and only Proton account, and within minutes they restricted it so I couldn't send any mail. They said I would have to upgrade to a paid account if I wanted to send mail.

I would never trust Proton after that. I'm just glad they immediately restricted my account instead of waiting until I'd switched everything over.

[–] hector@lemmy.today 2 points 1 day ago (1 children)

Check your ip against the lists of blacklists, there are sites that do it directly from the search page, there are a few dozen blacklists supposedly for spam and the like.

I suspect israel critics get dropped on them. A brazillian firm did the one we found.

[–] unsettlinglymoist@lemmy.world 2 points 23 hours ago* (last edited 23 hours ago)

Interesting theory and I've definitely made posts and comments critical of Israel. I've switched ISPs since creating that Proton account and I wonder if they'd restrict me again (not going to try though).

[–] photonic_sorcerer@lemmy.dbzer0.com 57 points 2 days ago* (last edited 2 days ago) (6 children)

KeepassXC + Syncthing has worked fine for me for a few years. Sure, it's a bit of a hassle and not exactly perfect, but nothing is. I have control over my data and I don't have to pay anyone anything, that's enough for me.

Also, tasty entrees 🤤

[–] swelter_spark@reddthat.com 2 points 1 day ago (1 children)

I use KeepassXC with rclone, and that works well too.

Good tip, thanks

load more comments (5 replies)
[–] skozzii@lemmy.ca 11 points 1 day ago (2 children)

Pretty sure the warning signs were apparent when the CEO submitted to Trump. it just his "personal beliefs" and not representative of the company. Right.

[–] Tenderizer78@lemmy.ml 6 points 1 day ago (2 children)

The CEO was lobbying for online privacy by publicly shaming the Democrats. He was doing his job.

[–] Ohmmy@lemmy.dbzer0.com 5 points 1 day ago

Wait the Democrats respond to public shaming? At this point I thought they got off on it. He was doing his job but, he was kissing fascist ass just like Google, Microsoft, and Apple have not lobbying for privacy.

[–] stardust@lemmy.ca 2 points 1 day ago (1 children)

Why is it that just doing their job excuse or just following orders tends to be associated with questionable actions as opposed to positive ones? It's starting to seem like a red flag if those two phrases get used for an action.

[–] Tenderizer78@lemmy.ml 6 points 1 day ago (1 children)

He made a mean tweet about the Democrats, it's not like he loaded bullets into ICE guns.

[–] stardust@lemmy.ca 1 points 12 hours ago* (last edited 12 hours ago)

Complimentary remarks to Republicans depicting them as a party open to being privacy respecting and respect for the rule of law. Took the Joe Rogan hand book of trying to sane wash the Republicans and downplay concerns regarding them while trying to come off as moderate.

And it aged terribly. Someone who went to Harvard and spent significant time in the US wasn't blind to what those way less educated than him saw when it came to the direction the US was headed towards before Trump officially took office.

load more comments (1 replies)
[–] mrnobody@reddthat.com 54 points 2 days ago (18 children)

Dude, jfc calm down. You pay a little money to get premium services, instead of them monetizing user data. This is the way the world works with paid software, except they're not making money on your data and you, just you.

Maybe some context in what exactly you pay for would help too. I'm assuming you pay for a base tier of mail, bc I use their password manager too but pay for the full suite, and don't have this issue.

Maybe also a chat with support might find this to be an unexpected bug, but instead you're coming to Lemmy to the echo chamber of hate on proton which won't help.

[–] ttyybb@lemmy.world 111 points 2 days ago

I won't say your wrong, but IMHO it's unacceptable for a password manager to not warn you that information you give will be inaccessible without paying more money. Imagine if someone gave you 30 free entries before requiring a subscription, but let you add any number of accounts. Unless you want to reset all those passwords, your forced to pay them.

[–] fauxerious@lemmy.world 60 points 2 days ago

Their data should have been grandfathered in rather than locked out. Premium is a ransom with the lock out model

[–] panda_abyss@lemmy.ca 52 points 2 days ago (2 children)

It is a shakedown to accept your data for free then charge you to access it later. 

What the fuck else would you call that?

load more comments (2 replies)
load more comments (15 replies)
[–] Zerush@lemmy.ml 10 points 1 day ago (1 children)

??? I use Proton mail and I never saw something like this. Account with nick, other mail, password and go.

[–] AnimalsDream@slrpnk.net 13 points 1 day ago (3 children)

It's in Proton Pass. When you create an account entree, there is an option to create additional fields that you can name and fill out, kind of like multiple notes in one file. Somehow I was able to create those fields on my account just fine, but then to be given access to that data it turned out that I had to upgrade my account. In other words they duped me into entering data at no extra cost, but then charged me to access that same data later on.

[–] brooke592@sh.itjust.works 2 points 1 day ago

That's scummy as fuck.

I guarantee they do that on purpose just like all other scams that make you invest your time before telling you you need to pay.

load more comments (2 replies)
[–] mlg@lemmy.world 30 points 2 days ago (3 children)

I tried protonmail not for the privacy purpose but just to have a normal web email client.

After wasting an hour before finding out you can't disable the "sent from protonmail" footer without manually deleting it in each draft you make, I said screw it and deployed my own email server with stalwart lol.

It's receive only because outgoing SMTP is a pain to make reliable these days and my ISP blocks outgoing SMTP anyway, but for everything else I now use Thunderbird.

[–] Jack_Burton@lemmy.ca 20 points 2 days ago* (last edited 2 days ago) (5 children)

What do you mean? It's a slider setting you can thurn on or off individually for each address (if you want to keep it one one but not others). It's under identity and addresses.

load more comments (5 replies)
load more comments (2 replies)
load more comments
view more: next ›