Proton Pass (2026) review: a password manager that is finally boring, in the best way

Eight weeks as the only password manager on three devices, including a full migration off an incumbent and the part everybody skips — testing what happens when you try to leave.

Password managers are judged on the days they annoy you, not the days they work. Eight weeks with Proton Pass as the only manager across macOS, iOS and Windows produced very few annoying days, which two years ago would have been a surprising sentence to write.

What changed

Proton Pass launched competent at the cryptography and weak at everything surrounding it. The complaints were consistent: autofill missed fields, imports needed hand-repaired CSVs, the desktop experience was thin.

Those were the right complaints, and they have largely been addressed.

Autofill works. Safari, Firefox and Chrome, desktop and mobile. Multi-step logins, the awkward ones that split username and password across pages, and the airline and bank sites that seem designed to defeat automation. Across eight weeks it failed rarely enough that we stopped noticing it, which is the goal.

Import works. Migrating an existing vault completed without manual repair, and TOTP seeds, notes and custom fields survived. This sounds minor and is the reason most people never switch managers.

Export works, completely. This is the test we apply to everything in this category and the one several competitors quietly fail. Full export of entries, notes and custom fields, in a documented format, not gated behind a paid tier.

That last point deserves emphasis beyond this product. A password manager you cannot leave is not a tool. Export is what makes adopting one a reversible decision, and any product that restricts it is telling you something about its confidence in retaining you on merit.

What is still behind

Sharing. Family and team functionality works but is less developed than 1Password’s, which remains the reference implementation for households and small teams.

The desktop app. A wrapper rather than a native client, and it feels like one — heavier than it should be, occasionally sluggish. The browser extension is where the actual work happens and it is good.

Integrations. Fewer hooks into third-party tooling than the incumbents, which matters mainly for developer workflows.

The bundling question

Proton Pass is included with Proton Unlimited, which many privacy-conscious people already pay for. That changes the calculation: it is not a new subscription, it is a thing that arrives with one.

Worth being clear-eyed about, though. Bundling is a pricing decision, not a security property, and adopting a manager because it came free with something else is how ecosystem lock-in happens. If you are choosing on the merits with an open wallet, Bitwarden is cheaper, fully open-source with a long published audit record, and self-hostable. 1Password remains more polished and better at families.

Proton Pass is now good enough that if it comes with something you already buy, using it is a reasonable decision rather than a compromise. That is a meaningful change from two years ago, and it is roughly all it needs to be.

The verdict

8.3/10. A password manager that has become boring, which for this category is the highest available compliment.

Use it if you are already in the Proton ecosystem. Choose Bitwarden if you are picking on merit and price. Choose 1Password if polish and family sharing are what you are buying.

And whatever you use, export it once and confirm the file contains what it should. That is the five-minute exercise that tells you whether you own your credentials or merely have access to them.