X (formerly Twitter) ·
Hey
@ProtonPrivacy! As much as we value your email service, this password manager announcement is so full of bold but untrue statements, it makes you look really bad. No, you are not "raising the bar" by using full encryption like literally almost any other PW manager out there.
Also you are certainly the not "first" to support 2FA autofill. Besides technically not being 2FA anymore if it comes from the same source, KeePassXC has supported TOTP since 2017 and we weren't even the first (far from it).
And yes, great you are not using PBKDF2, but stop insinuating that this some unique selling point of yours. Apart from few exceptions, it's simply not true. Most modern PW managers use either Argon2 or bcrypt.
So if you do indeed have a unique selling point that makes Proton Pass a real "milestone for password managers," then all power to you. But so far you have only presented yet another password manager and are trying to gaslight your customers with insincere marketing babble.
To summarise: You are publishing a new password manager? Cool! It's fully open source? Awesome! You are posting a bunch of insincere, misleading, and made-up reasons why people should be using it? Not cool!
A more detailed security model covering more elements has been shared here:
