Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Proton Pass

VERIFIZIERT
Passwort-Manager · Switzerland
Gegründet 2023 · proton.me/pass ↗

Swiss zero-knowledge password manager (Proton AG / Proton Foundation), open-source apps + extensions, Cure53-audited, free unlimited tier.

Kurzfassung

Proton Pass aus der Kategorie Passwort-Manager ist ein EU-eigener Dienst mit Switzerland als Hosting-Standort und ohne erkennbares CLOUD-Act-Risiko.

Bewertungsnotizen

Proton Pass is part of the Proton AG product portfolio (Plan-les-Ouates, Geneva, Switzerland), controlled since 2024 by the non-profit Proton Foundation which structurally shields the company from VC/PE acquisition. Launched June 2023 as freemium with open-source apps and browser extensions on GitHub, audited by Cure53 in 2023 (full audit, no critical issues), end-to-end zero-knowledge encryption, account data stored exclusively in Switzerland/Germany/Norway alongside the rest of the Proton estate. Swiss non-profit ownership, EU-adequate jurisdiction, open-source clients, Cure53-audited; the US sub-processors (Zendesk support, Stripe/PayPal/Chargebee billing) are ancillary and never touch the end-to-end-encrypted vault data held on Proton's own infrastructure, so under a customer-data-at-rest definition CLOUD Act exposure is none, mirroring the rest of the Proton estate.

CLOUD ACT
OWNERSHIP
SUB-PROCS
7 · 4 US
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
  • Zahlung ohne Kreditkarte möglich
    Akzeptiert neben Karten auch Bitcoin und Bargeld per Post.
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
JUMP TO
OVERVIEW

Über Proton Pass

Proton Pass is the password-manager product in the Proton AG portfolio, the same Geneva-headquartered Swiss company operated under the non-profit Proton Foundation (CHE-418.863.304) since the 2024 founder share donation by Andy Yen, Jason Stockman, and Dingchao Lu. The product launched in beta on 20 April 2023 and globally on 28 June 2023 under a freemium model and now serves the broader Proton group's 100M+ accounts. Feature set covers password storage, passkey support, integrated 2FA authenticator, secure password sharing, file attachments, hide-my-email aliases (a Proton-network-native privacy feature for breach isolation), dark-web breach monitoring, and dedicated business tier with admin controls, SSO, and compliance reporting.

Compliance posture mirrors Proton VPN. End-to-end zero-knowledge encryption means Proton itself cannot decrypt customer vaults under any circumstance. The Android and iOS apps plus browser extensions for Firefox and Chromium-based browsers are open-source on GitHub (protonpass/ + ProtonMail/WebClients). Cure53 conducted a full security audit in May–June 2023 of the mobile apps, browser extensions, and API. No critical issues were found and moderate findings were fixed before global launch. Account data is stored exclusively in Switzerland, Germany, or Norway alongside the rest of Proton's portfolio (same DCs and same engineering ops as Proton Mail and Proton Drive). Switzerland's EU adequacy decision (Art. 45 GDPR) makes cross-border transfers between CH and EU SCC-free.

Pricing is freemium with one of the most generous free tiers in the category: unlimited logins / notes / credit cards / devices, plus 10 hide-my-email aliases, passkeys, and weak/reused-password alerts. That is comprehensive enough that many users never need to upgrade. Pass Plus is the entry paid tier (industry-reported ~€2/month, multi-currency CHF/EUR/USD); business plans with SSO and admin controls above. Best fit: privacy-maximalist consumers, families, and EU SMBs who want a password manager from the same structurally-protected ownership architecture that provides Proton Mail and Proton VPN, and any procurement-grade buyer who wants Cure53-audited zero-knowledge encryption with the lowest possible parent-jurisdiction risk (non-profit Swiss foundation).

SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · 7

Quelle ↗
  • Chargebee, Inc. US
    United States

    Payment data processing; ancillary

  • PayPal group US
    United States

    Payment data processing; ancillary

  • Stripe, Inc. US
    United States

    Payment data processing; ancillary

  • Zendesk, Inc. US
    United States

    Customer support data processing; ancillary

  • Atlassian Pty Ltd non-US
    Australia

    Customer support data storage

  • ProtonLabs DOOEL Skopje non-US
    North Macedonia

    Customer support / direct communications (Proton group entity)

  • ProtonLabs Taiwan Co., Ltd non-US
    Taiwan

    Customer support / direct communications (Proton group entity)

4 von 7 Unterauftragsverarbeitern sind in den USA registriert. Dies sind ergänzende Verarbeiter, die keine geschützten Kundendaten speichern, und ändern daher die Bewertung nicht. Das CLOUD-Act-Risiko wird mit „keines“ bewertet.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-05-11).
FEATURES

Funktionsmatrix

Passkeys Ja
Autofill Ja
Leak-Überwachung Ja
Familienfreigabe Ja
Datenexport Ja
Geräte Unbegrenzt
Plattformen iOS macOS Windows Android Linux Web
INTEGRATION & ZUGRIFF
REST API No
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Preise & Tarife

FREEMIUM
ab €2/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    proton.me/legal…
    Öffnen ↗
  • Liste der Unterauftragsverarbeiter
    proton.me/legal…
    Öffnen ↗
  • Nutzungsbedingungen
    proton.me/legal…
    Öffnen ↗
ALTERNATIVES

Alternativen in dieser Kategorie

heylogin
Germany · Gegründet 2021
EU-SOUVERäN

German passwordless zero-knowledge password manager (heylogin GmbH, Braunschweig), all-German sub-processor stack, ISO 27001:2022, no CLOUD Act exposure.

Öffentl. AVV Subprozessoren Open Source
FROM
€4/Mt.
CLOUD ACT
NONE
KeePassXC
Germany · Gegründet 2016
EU-SOUVERäN

GPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016): no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
NONE
LC-Pass
Germany
EU-SOUVERäN

German-hosted business password manager from LC by vBoxx GmbH; collections, group sharing, central management, unlimited devices; an EU-hosted 1Password / LastPass alternative.

Öffentl. AVV Subprozessoren Open Source
FROM
€3.99/Mt.
CLOUD ACT
NONE