Proton Pass: Hide-My-Email Aliases on the Free Plan

Password managers with alias features usually treat them as a premium carrot. Proton Pass doesn't, and that single decision reframes the whole product. The free tier gives you unlimited logins, a password generator, weak-password alerts and hide-my-email aliases — throwaway addresses that forward to whatever inbox you already use, with no need to migrate to Proton Mail or anywhere else. For anyone who has watched a single newsletter signup metastasise into years of spam, that's an immediately legible benefit.

The alias implementation is more thought-through than the usual burner-address gimmick. Because each address is unique to a service, a leak points straight at the culprit, and you can simply switch the alias off rather than rebuilding your identity across the web. Replying from an alias keeps your real address out of outbound mail too, and there's support for forwarding to multiple inboxes and using custom domains — features that push this past a novelty and into something you could reasonably build a long-term email hygiene habit around.

Underneath, the fundamentals read like a checklist of what you'd want from a credential store: AES-256-GCM on vault items, a zero-knowledge end-to-end encrypted design, GPLv3 source on GitHub, an independent Cure53 audit, and a Swiss company behind it that says the relay never stores your mail. Coverage is broad, too, spanning Windows, macOS, Linux, iOS, Android, the three major browsers and a web vault, with TOTP, FIDO2/U2F keys and biometric unlock on the authentication side. This is aimed squarely at privacy-minded users and anyone consolidating away from browser-saved passwords — but it's approachable enough that it doesn't demand you be either.

It's hard to be stingy with a product this generous. The free plan is not a crippled demo; it's a functioning password manager with the headline privacy feature intact, and the open-source licensing plus external audit mean the security claims aren't asking for blind faith. The alias system in particular solves a real, daily problem in a way that survives contact with reality — deactivation and leak attribution are the parts most competitors skip, and they're the parts that matter after something goes wrong.

The compromises are real but predictable. Locking offline access behind Premium is the one that stings, because a password manager that needs connectivity is a password manager that occasionally isn't there when you need it most. Putting the built-in 2FA authenticator behind the paywall also blunts the appeal of consolidating everything in one vault, and the lack of live chat support will frustrate anyone who wants a human when their credentials are on the line. At $4.99/month or $35.88/year, the paid tier sits slightly above some rivals — defensible given the audit trail and Swiss jurisdiction, but not a bargain.

A note on confidence: much of the alias detail here comes from Proton's own descriptions rather than independent verification, so I'd treat the finer points — multiple-inbox forwarding, custom domain handling, the no-storage relay claim — as credible but not stress-tested by this review. The broad strokes, though, are corroborated elsewhere, and third-party reviewers rate the product highly.

• Best for: privacy-conscious users, people drowning in spam, and anyone who wants a serious password manager without paying up front.
• Think twice if: you need offline vault access or an integrated authenticator and don't want a subscription.

Four and a half stars. The free offering is close to best-in-class and the security posture is transparent and verifiable; the paywalled offline mode and authenticator are the only things keeping it from full marks.