This community is reportedly official, but I see no activity of the Proton Team here :(

Can the Proton Team comment on this test?

Source article:

https://venaksecurity.com/2025/06/04/keeper-is-the-only-password-manager-that-protects-against-infostealers/

Edit:

I am not associated with any tested company or this blog.

I am an ordinary user of all Proton products since his birth and I love him.

Because the test looks credible, I just want an expert from Proton to dispel my doubts or honestly confirm the problem.

I am aware that the test may be a product promotion, but the question is: can the threat be real for the Proton Pass?

  • rumba@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 day ago

    The memory protection attempts on keeper versus the rest seem pretty legit.

    The online protection is legitimate although if you’re required to do an online auth before you unlock a vault that means you have no ability to unlock your vault if you’re not online. So if you were having internet problems you might not be able to get into your router. Personally I think 2FA or yuby key is more than enough for that to allow offline authentication.

    The claim of browser extension protection is a little nebulous. They specifically call out a single memory related browser feature and say that no one else checks against any browser extension attacks.

    The whole document is definitely marketing slop but it’s not without some truth. Yeah, you can read unlock vaults through other programs. But you can also keylog from other programs, do 2fa interception attacks.

    They’re putting a f*** ton of marketing out there to the point it’s hard to find articles that aren’t biased. Almost nothing out there even talks about the cons of the being significantly more expensive than the rest. What I was able to find with user reviews as their autofill is wanting, trying to put credit cards into web pages is inconsistent at best. And most places that compared them even against bitwarden shows bitwarden handily over usability issues

    Honestly, I think using a zero knowledge password manager with built 2FA is sufficient enough right now.