Proton

Announcing: The Proton Pass SSH Agent Do your private SSH keys currently live on disk, encrypted with a passphrase you type once per session, or with no passphrase at all? In both cases, there's now an easier and more secure way. Proton Pass now has an SSH agent, allowing you to store the key inside your vault instead. Unlock the vault once; no more re-entering a passphrase with every connection, or sessions that die on reboot. Managing keys becomes a vault action instead of a manual file chore. Easier to keep track of, especially on multiple machines and systems. Gain peace of mind from one less secret exposed on disk. Solve the one place key management actually breaks down: loose encrypted files scattered across machines, and replace it with one encrypted vault with biometric unlock and access controls. For the bulk of your SSH work (git, GitHub, GitLab, SSH to servers), using a vault is both cleaner and tighter. Give yourself centralized visibility into which keys are active and where. Gradually rolling out now to Visionary, B2B Bundles, Pass Professional, Plus, and Family. Desktop only.

I know you love videos so here's another one. What privacy tools do the people who build privacy software actually use? In this episode, Harley from Proton walks through some of the lesser-known privacy gadgets that help protect against real-world threats. Each one solves a very specific privacy or security problem. Some of these tools are designed for high-risk situations, others are gadgets that anyone with a phone or computer can benefit from. Whether you travel often, work from cafés, attend protests, or simply want to better understand how to protect your digital life, this episode will introduce you to practical tools you may have never heard of. https://youtu.be/WfVPjNAbkNY

Your home is your sanctuary, but do you know who you’ve allowed in? Your smart home may be convenient, but it's watching a lot more than your front door. The vacuum sees you on the toilet. The fridge knows what you eat. The TV binges on your viewing habits. And the bedroom? Don’t even think about it. https://youtu.be/9_WQZNEOhys

Looks like Google doesn't want to provide a list of links anymore...

3 in 4 European businesses fear their US tech provider could cut them off This finding, revealed in a Proton survey of 1,500 European business leaders, signals that leadership teams and boardrooms are now weighing a high-level geopolitical risk on the same scale as the everyday threat of hackers. https://proton.me/business/blog/business-continuity-survey

If you've ever had issues with Proton Pass’ ability to autofill on websites like your bank, or e-commerce checkouts, then this release is for you. iframe support V1.38 adds support for iframes. This sounds like a narrow technical fix, but it solves a real problem. Banking pages, payment processors, and OAuth providers frequently embed login forms in iframes for security and modularity reasons. This also includes e-commerce, social media, news and entertainment sites. These are all places where you need your password manager to just work. Pass is now significantly better at autofilling into those embedded forms, the same way it does a native one. This covers the sites where autofill matters most: places where you need a strong, unique password and you need it now. Other improvements in this release: - Automatic 2FA code copying: a time saver for situations where 2FA autofill doesn't trigger. - Windows .msix installer for Intune: If you're an admin rolling out Pass across company machines, you've been installing it machine-by-machine, or writing scripts to handle it. The new .msix package works natively with Microsoft Intune, so you can deploy and manage Pass centrally across all Windows devices in your organization. One deployment, not hundreds. Why this matters Autofill performance ensures that Pass works simply and elegantly for users regardless of which website they’re on. We knew this needed to be done because you told us; here, on UserVoice, and in other online communities. We heard you, and so we fixed it. https://proton.me/blog/pass-improved-autofill

Since 2021, we've been documenting censorship around the world using VPN signups. For 2026 alone, we have: 🇻🇪 Venezuela, 🇮🇷 Iran x3, 🇪🇬 Egypt, 🇺🇬 Uganda x2, 🇬🇦 Gabon, 🇹🇲 Turkmenistan, 🇷🇺 Russia, 🇬🇳 Guinea, 🇰🇷 South Korea, 🇹🇳 Tunisia, and 🇮🇳 India all featuring. https://protonvpn.com/internet-censorship-observatory

So, anyone using a duress PIN?

Don't put "eggs" in your password. Too easy to crack.

This looks to have been fixed but damn, sure were a lot of Claude convos visible via Google Search over the weekend. If you're going to use AI, make sure your settings are tight... maybe a privacy-preserving one would suit you better.

G(OS)OD MORNING!

Today we're announcing not one, but two, updates on iOS that have been requested a lot by our users. - liquid glass animations in Proton Pass, and - we've added a username generator You can see both of them in action in this video.

📄 Scan, save, and secure your paper documents on iOS and Android. Files are saved as PDFs, encrypted on your device, and securely stored in Drive, ready to access or share.

vibecoders setting up their custom domains

What is a firewall? What does it do, and how does it work? A firewall is a security system designed to monitor and control incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks, such as the internet, thus protecting against unauthorized access and other cyberthreats. Our latest blog is a deep dive on 🔥wallz https://proton.me/business/blog/firewall

!!! VITAL INFO FOR PEOPLE USING TELEGRAM LIKE YOURSELVES !!! tl;dw - stay here for the community broadcast, go elsewhere for privacy. end.

Your ISP watches more than you think. HTTPS hides what you're reading, not that you're reading at all. Time to answer the crucial questions: What do they see? Why does it matter? And how do we stop them? The core problem is that your ISP sits between you and the entire internet. Every website you visit, every app you open, every device on your home network routes through them. They don't see content, but they do see destinations, timings, volumes, and patterns. ISPs can see: the domains you visit, when and how long for, how much data is transferred, your approximate location, and what devices are on your network. A 2021 FTC report found major ISPs combined this data into ad profiles and sold this to advertisers. The real trap is you probably can't switch ISPs. Most markets have one or two options. Unlike Meta or Google, you can't log out. They have your traffic hostage. Structural surveillance is much harder to escape than commercial surveillance. Some ISPs own email products, streaming services, smart home gear. They can stitch data across services to build richer profiles. The incentives here don't point toward your ISP protecting your privacy. These data are valuable. Some ISPs control physical infrastructure too, meaning they can throttle your connection. Verizon slowed an emergency response vehicle's connection in 2018 until firefighters paid for a higher tier of their service. They control both the pipes and the terms. A newer risk is Wi-Fi sensing, where some routers can detect presence and motion through walls using reflected signals. Industry estimates suggest tens of millions of US households already have access to some level of this technology through provided hardware. So, what stops them? - VPN = ISP sees only that you're connected to a VPN server, not where you're going. - Encrypted DNS (DoH, DoT) = Hides which domains you're asking for. - Your own router = You control firmware. They don't. - HTTPS = Stops them reading page contents. No single tool solves this, but combining different pieces allows you to shrink what your ISP collects from "almost everything" to "you're online and using data." This is a substantial difference in terms of information being passively collected on what you're up to. The bigger picture is that ISPs occupy a structural surveillance position we all accept. Practical defence beats hoping for regulation. https://proton.me/blog/how-isps-track-you

Are you Team Random Password or Team Memorable Password?

Not to be an alarmist, but please don't send your friends YouTube links with Google's "?si=" parameter inside. Scrub your links, people.