this post was submitted on 28 Jun 2023
7 points (100.0% liked)

Privacy Guides

17555 readers
229 users here now

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.


You can subscribe to this community from any Kbin or Lemmy instance:

Learn more...


Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!


This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.


Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don't ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don't repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

founded 2 years ago
MODERATORS
all 40 comments
sorted by: hot top controversial new old
[–] MarioBarisa@vlemmy.net 3 points 2 years ago

I tried it and its pretty cool and polished, but Bitwarden is WAY better in every poseible way.

[–] Distributed@lemmy.ml 3 points 2 years ago (1 children)

I wish that proton would focus on the depth of their present stack, as opposed to breadth.

I've been begging for rclone support for proton drive for a long time now.. without it, I basically have 1tb sitting there useless.

[–] yote_zip@pawb.social 1 points 2 years ago (3 children)

Same thoughts here. ProtonVPN under Linux is very poorly supported.

[–] Borgzilla@lemmy.ca 1 points 2 years ago

It's horrible. I've had to hack together a shell script to switch between countries using a bunch of openvpn config files. The official app broke my Linux Mint network setup.

[–] SecurityPro@lemmy.ml 1 points 2 years ago

Wish I could up vote that 100 times!

[–] jjffnn@feddit.dk 0 points 2 years ago (2 children)

Just out of curiosity. How is it poorly supported?
I haven't used it much yet, but the times i have it seems to have worked fine.

[–] yote_zip@pawb.social 2 points 2 years ago* (last edited 2 years ago) (1 children)

IIRC it's missing a number of features that ProtonVPN Windows has. I last checked into it a year or so ago and the attitude was that it was a very shoddy application missing most features. I found this github issue expressing this sentiment but I don't see much in terms of specifics.

I don't have a paid ProtonVPN but I just downloaded the VPN on a free account and it only has 3 options on it:

  • Secure Core on/off (only select servers in privacy-friendly countries)
  • Netshield (DNS adblocking etc)
  • Killswitch

I use Mullvad so I opened that up alongside and will list out the features it has on its Linux client in comparison:

  • DNS adblocking
  • Killswitch
  • Wireguard
  • Auto-launch on pc start
  • Split tunnel support
  • Local network split tunnel allowance
  • Disable ipv6
  • Custom DNS server
  • Protocol obfuscation (UDP-over-TCP)
  • Multihop servers
  • Quantum-resistant tunnel (for Wireguard initialization)

The main ones for me are split tunneling and Wireguard. Using a VPN that doesn't support these is a non-starter for me, unfortunately. If any of this is different when you have a paid ProtonVPN account let me know - I don't have very much experience with it.

TBH, if protonVPN under linux was any good I would probably have Proton Unlimited. I can't justify paying for Mullvad and Proton Unlimited, so I DIY my own collection of services to match functionality for about the same price.

[–] jjffnn@feddit.dk 1 points 2 years ago* (last edited 2 years ago)

I just had a look and as far as i can tell ProtonVPN suppports everything Mullvad does. On windows...
On linux you get fuckall settings. No split tunneling, no dns, no wireguard, no nothing. There seems to be no parity between linux and windows. That is less than poorly supported, it's atrocious tbh.
On windows you even get a fancy map with triangles that shows server locations that can be used to quick connect.
And this is with an unlimited account so i don't believe it's an account level limit.

Edit: I just looked and to be fair they do state in the plan features that Split tunneling is only available on Android and Windows

[–] palebluedot@discuss.tchncs.de 1 points 2 years ago

Missing lots of features. Proton does not prioritize Linux at all

[–] Borgzilla@lemmy.ca 2 points 2 years ago (1 children)

I'm pretty sure the app is great, but I am not a fan of putting all my eggs in the same basket. I will keep using Bitwarden for the time being.

[–] Jarmer@kbin.social 1 points 2 years ago

Same here. I'm fine using Proton for my mail & drive, but I also like keeping my passwords separate in bitwarden, and my 2fa separate in my raivo. A healthy separation is good.

[–] Harrison@infosec.pub 1 points 2 years ago (1 children)

I’m all for open source alternatives to bitwarden but this is non competitive with a mandatory subscription fee. Bitwarden is completely free for most users.

[–] ram@lemmy.ca 1 points 2 years ago

I thought the same thing but it actually does have a limited free plan. Seems like, similar to BW, it restricts 2FA behind the pass, but also with the pass you get unlimited hide-my-email aliases, multiple vaults to organize in (I don't know what this means), and eventually autofill credit cards.

This is quite a bit more expensive than BW's paid plan though. Not sure what all differences it has to BW otherwise.

[–] Coeus@coeus.sbs 1 points 2 years ago

Tempting. I've been using Bitwarden for awhile now and it's been fantastic. I am not sure I need to switch.

[–] HorseFD@lemmy.buzz 1 points 2 years ago

Has anyone tried it yet? Two downsides for me:

  • there's no desktop app
  • there's no Safari desktop extension (I know most people don't care about this)

It's also more expensive than Bitwarden even at €1/mth

[–] narwhal@lemmy.ml 1 points 2 years ago

Any strong reasons to switch from KeePassXC?

[–] neardeaf@lemmy.ml 1 points 2 years ago

I’m a faithful Bitwarden user. No need to switch

[–] wounn@lemmy.pt 1 points 2 years ago (2 children)

Proton is starting to loose focus in my opinion. I've been a costumer for 5 years only using email and I moved this year to fastmail and I couldn't be happier. Unlimited emails alias, good apps, ability to use thunderbird without a self hosted bridge.

The promise of a encrypted email does not work if your contacts are not on proton too (for me was 100% of my contacts).

If you are really focused on privacy you would choose nextcloud for cloud for example and keypass or Bitwarden for password managers.

I would like them to focus on email client features and stop this side hustles.

[–] tate@lemmy.sdf.org 1 points 2 years ago

Proton's whole reason to exist is to provide privacy, not email client features.

[–] burndown@sh.itjust.works 0 points 2 years ago (1 children)

I hear what you're saying but Nextcloud is definitely not a viable option for reliable backups. Wayyyy too buggy to trust

[–] constantokra@lemmy.one 0 points 2 years ago

Certainly way too buggy if you're selfhosting. At least that was my experience. And if you're not, the privacy component really goes away.

[–] RandomLegend@lemmy.dbzer0.com 1 points 2 years ago* (last edited 2 years ago)

I was in the beta of it, didn't use it though as i am on 1password.

For me it's important that i have a desktop application. I don't want to open my fcking webbrowser anytime i need a password or want to edit some credentials.

And they simply don't have one. I gave it as feedback and they say it's on their roadmap. I said they should take 1passwords desktop as inspiration as it works so fcking good; I really love that floating quick search that you can summon with a keycombo.

[–] Sebo@lemmy.one 1 points 2 years ago

I use keepassXC and Ive never had a problem with it, Is there anything different about Proton Pass?

[–] yote_zip@pawb.social 0 points 2 years ago (1 children)

If they're going to try to compete with Bitwarden they could at least offer 2FA for free instead of paywalling it as a feature. It was disappointing when Bitwarden did it, and it's even more disappointing with Proton - it's like failing an open book test.

[–] HughJanus@lemmy.ml 0 points 2 years ago (1 children)

You shouldn't be using that feature anyway. Keeping your passwords and 2FA in the same place means you only have 1FA.

[–] yote_zip@pawb.social 1 points 2 years ago* (last edited 2 years ago)

It's mainly a difference in threat model. 2FA within a password manager is still 2FA for concerns of a website login being hacked by remote adversaries, which is the most important problem to solve.

If you use 2FA within your password manager, you should still lock that outer-most password vault with 2FA from a separate device (like you said), which solves your password vault being hacked by remote adversaries. Optionally, you can then use aggressive idle-locking of your vault on your personal devices, in case they're stolen physically.

[–] moxival@kbin.social 0 points 2 years ago (2 children)

What does 2FA authenticator mean? Is it a vault to store your 2FA seeds?

[–] noodlejetski@kbin.social 0 points 2 years ago (1 children)

yeah, although using a password manager as a 2FA provider sort of negates the "2F" part.

[–] AgileBed@kbin.social 0 points 2 years ago (1 children)

Depends. I use 1Password and let it store all my 2FA, because my 1Password login is secured with another 2FA.

[–] imrichyouknow@sh.itjust.works 0 points 2 years ago (1 children)
[–] Generator@lemmy.pt 0 points 2 years ago (1 children)
[–] Dalinar@lemmy.nz 0 points 2 years ago (2 children)

Goodbye LastPass (I'm aware I should have migrated already but I was holding out for this)

[–] DanielPlainview@lemmy.world 1 points 2 years ago

The most important step a man can take. It's not the first one, is it? It's the next one. Always the next step.

[–] PeachMan@lemmy.one 1 points 2 years ago

Oh my god you're still on Lastpass? RUN!