I'll start off by saying everyone's economic situations are just as varied as their threat models and how people make decisions on which services can be specific to themself and not one that can apply to anyone else. The services one chooses to use for free or to pay for may be based more on what they can afford vs what's the best broad reaching plan.
That being said i'd like to see what others think about the proton suit of services. I've been eyeing it as an option for a paid service for a while but am hesitant to put all my eggs in one basket. I'm interested in a vpn, mullvad seems to be the other popular choice. I'm also interested in email address anonymizing service like anonaddy. At $5 for mullvad, $3 for anonaddy, and $3 for base proton email it comes out to a dollar more than protons premium tier which gets cheaper if you pay for 1 or 2 years at a time.
As said above would the biggest reason not to use proton for all of these separate services be not putting all your eggs in one basket?
I've been on the Proton premium plan for about a year and a half and love it.
I mostly use it for Email and the VPN, but I do use Proton drive for some random stuff.
I don't use Proton Pass because I already use Bitwarden for all my PW management needs.
Email and calendar services have been pretty much flawless so far. I like the interface, the Proton mail bridge works well for desktop clients like Thunderbird if you want to use those. The apps work really well on my Android device, all of them, Calendar, Mail, and VPN.
My torrent box Proton VPN CLI app has been solid too.
By default just did a video (piped link) on this and I 100% agree with him. The killer feature is simplelogin. Being able to use a different alias email for every single account I use is absolutely amazing.
There are other such services such as addy.io but SimpleLogin is a lot better integrated IME. Addy for example can be quite janky; adding a big message up top of the email and such.
There's also the fact that you only need to trust a single entity for email if you use SL + ProtonMail.
I used to subscribe to Simplelogin as well - but lately I have been seeing sites/merchants who do not accept the Simplelogin email domains as valid, and I have to put in my personal gmail ID to proceed (e.g. the restaurant POS system "Toasttab").
I switched from Proton to Tutanota for two main reasons.
I didn't want to put all my eggs into one basket, just like you. With Tutanota I get email and calendar in one package. For VPN and online storage I use independent solutions (Mullvad, local solution via syncthing). Related to this, I don't like paying for a bundle of programs when I only really want to use a subset.
Proton isn't following through all the way. They keep adding services (password manager and captchas recently), but they don't provide the same experience across all devices. I'm on linux and their drive doesn't offer a client that syncs my folder with essential documents. I have to manual upload. That's a dealbreaker for me.
This is not to counter your point (I agree they should probably offer a client to sync files on Linux), but rclone recently added (beta) support for proton drive, so you might want to check that out if you're still using it.
One reason for deciding on which service(s) to pay for is which service do you want sticking around. I can get a wireguard VPN from a number of providers. I like the way Mullvad does things and so I choose to get my VPN from them. One could make the same argument for email from Proton or groupware from Kolab.
Proton plus here too. I use the vpn, 500gb drive for backups, and have set up my own domain name email. I tried their password manager but didnt like it at all. I dont think it is ready yet.
I use Proton Pass to generate aliases with the browser extension but otherwise use 1password which is much more mature and has great support on all platforms.
I think they are unnecessarily expensive for email. I would rather go with tutanota. I don't like having all my eggs in one basket. Calendar/email/contacts in one provider and VPN service in another is the way to go, in my opinion.
Proton hosting mail for my domains so I don't have to anymore: Priceless. There, I said it. I'm very happy to pay for it.
Proton VPN: Nice. I use it a lot when I'm on the road.
Proton Drive: Nice for throwing backup copies of important stuff once in a while. I don't know anybody else who actually uses Proton Drive so sharing files isn't part of my use case (then again, I don't know anybody who actually uses Google Drive, so I've never shared files through that, either).
For what is worth I haven't been able to get the storage sync to work, the VPN app isn't as simple/fast/as easy as mullvad, proton has little support for Linux. I use proton because it works with portmaster but I'm not a huge fan of it.
VPN in docker with port forwarding. Didn't have any luck routing host traffic through it but I didn't dig too deep. Might be useful for a web based torrent docker container.
I've been using Mullvad for years. I buy the gift-card type voucher from Amazon, which has a code under a scratch-off type material on the back, & then put the code into the Mullvad app for additional time. No way to tie my Amazon account to that gift card (with a random anonymous code under the scratch off) and then to my Mullvad account. The gift card is also discounted from their normal pricing. According to their blog, they've also recently completed their "migration to RAM-only VPN infrastructure" further assisting with the "no log" policy. I previously used PIA, until Kape Technologies bought them (research "Kape Technologies malware" for my reasoning).
Until somewhat recently, I used to torrent everything. However, Mullvad stopped supporting port forwarding ("PF", which allows you to open a port, so others can connect to you and download content from you. This keeps a healthy "swarm" and helps keep a file seeded past when the original uploader has finished supporting / seeding the torrent. However, this also allowed scumbags to upload / share some horrible content -think children- and Mullvad didn't want to be a part of that, for an obvious reason, as well as others), in addition to some other VPNs dropping PF support. This has caused a big problem for me and many others completing files which are even somewhat old, like not even a year old, and very popular. Additionally, RARBG went down, and I was having trouble finding another website that I liked even somewhat as much.
I use usenet now. Although I don't need a VPN with usenet, I will most likely keep my Mullvad account because of how cheap it is, and how much I like their service and privacy policy.
In regards to Proton email, the base account is free, which I use as my personal account now (with my real name) for family, friends & business. Proton "Mail Plus" is $3.99/Mo., billed on an annual basis (at least that's what I'm seeing). Then, I also have a Tutanota email account (also free) that I use for all other uses (buying stuff, bills, etc.), and I also like their integrated calendar (although I may continue using the Thunderbird calendar). (Edit: I also completed 4 easy "tasks" with Proton, like getting the app, and they upgraded storage from 500MB to 1GB.)
I use the Firefox browser, but I've never used the Mozilla "Firefox Relay" add-on, so not sure if that's a reliable free alternative to your anonaddy. With me splitting up my two email uses, with Proton & Tutanota, I haven't really considered a need for something like Relay or anonaddy. I'll also mention that as far as I know, the VPN that Mozilla/Firefox offers I believe is still Mullvad rebranded.
Their last independent audit was in 2021 and was done for beta version of their email
The audit itself was for security, nothing related to privacy
They advertise their email service as encrypted:
encrypted:
End-to-end encryption
Proton Mail is a private email service that uses open source, independently audited end-to-end encryption and zero-access encryption to secure your communications.
This protects against data breaches and ensures no one (not even Proton) can access your inbox. Only you can read your messages.
Which I see as deceptive: end-to-end encryption is working without user involvement only for emails between Proton mailboxes. In other cases user needs to establish PGP encryption on their own. Inbox may be not accessible by Proton (we actually have no clue because server side code is closed source), but unencrypted incoming messages can be easily intercepted by Proton relays.
I'm not saying that Proton does all this nefarious stuff, but their marketing is questionable.
When you send an encrypted email to a non-Proton user, you click on the lock icon to encrypt the email and assign it a password, which you need to get to your user. The recipient then receives an email with a link. They click on the link, enter the password and and can then view your email, which to my understanding is decrypted client-side.
I prefer mullvad because it has the option to pay with monero. It also seems more trustworthy than proton because they don't sell out users (that we know of), or make false claims
If you live in a location that has Amazon, and they sell the Mullvad gift-card type voucher, this may be a good alternative option for payment. It has a code under a scratch-off type material on the back, & then you put the code into the Mullvad app for additional time. No way to tie my Amazon account to that gift card (with a random anonymous code under the scratch off) and then to my Mullvad account. The gift card is also discounted from their normal pricing.
Just in case you don't know, you should do an internet search for "nordvpn data breach." I'm not saying you should switch, or that Nord is bad, but you should at least be aware that this situation occurred and it has been a consideration for a lot of privacy first type people ever since.
Yeah, I paid for a year's worth of service, then found out. I'm cheap as hell so I'm gonna ride out my subscription, but I'm definitely switching...I just haven't decided on the service yet
Proton unlimited, and I don't understand why did they go with Proton Pass. There's products like Bitwarden and LastPass (and more) that are feature rich. Bitwarden is open sourced.
I think having separate services is good, especially if it's cheaper that way. For photos I use ente even though I have 500gb just because they specialize in photos (same reason why Pass isn't useful IMO)
So what if LastPass exists? They got hacked twice and covered it up. Proton pass auto fill works better than LastPass. Use what you want but why suggest a product shouldn’t exist because there is competition?
I'm arguing that they seem to waste resources instead of solidifying their existing product suite.
Like features for Drive, basic ones like a desktop client for auto sync.
I know you can't make a baby in 1 month with 9 women, adding another product with only basic fetures seems wasteful to me given the state of the other ones.
So when there's products like Bitwarden I wouldn't pay for Unlimited if you're looking for the most bang for your buck.
Honestly, I think it boils down to our ecosystems. There are other mail + calendar providers out there. When children are involved, I think it's worth a few bucks to get a custom DNS, a privacy-focused email/calendar provider, and give children the space to grow up in a world that collects as little metadata as possible.
Proton Visionary for few years now, iirc paying about $200/y. Honestly I mostly just use for ProtonMail. Once or twice a month I use ProtonVPN but it's rare. Same for calendar. I don't use ProtonDrive as I prefer to rely on NextCloud on Webo, mostly due to rich document editing capabilities.
Overall very happy with it but I admit one of the motivation for paying so much for Visionary was both to support the project AND to rely on my own domain. This way if for whatever reason Proton goes to shit, which I surely hope not, I can seamlessly switch to another provider, or self host, and nobody would notice the difference, no lock-in despite quality and trust.
I don't have a valid reason but there's something about the way Proton do things that I just don't like or trust. I realise that argument can be applied to all providers but it just feels like everything Proton do is a bit half hearted. Product after product is , like, 75% good. I'd much rather pay specialists in key product areas that I value and that have excellent reputations and go out of their way to add as much privacy and value as possible into their particular product than a 'jack of all trades, master of none' like Proton seem to be.
I was in te same situation as you . I had anonaddy (addy) , Bitwarden, Mullvad , and was using google drive for stuff I don’t care about privacy. The thing is that
Bitwarden : has more development than proton pass , but pass is great anyway and has all my needs even 2fa.
addy: has plenty of free things enough for me but started to find most of their domains are blocked to register a user. SimpleLogin from proton feels more developed and works flawesly with proton pass
Mullvad: is an execelent vpn , very simple , fast , cheap , but it has very few locations and mine particular one was missing, also it doesn’t have port forwarding . All these thins proton vpn have it.
cloud drive: I really needed something to store more sensitive data, proton drive now have a desktop client so it is perfect por my needs.
If you sum all the services it will be like 8 or 9 dollars I think , and the benefits of the proton services integrations I think $13 is a win.
I cant remember which plan i am on but it costs $5/.o (paid in crypto) and allows me to use @mydomain.tld as my email address so if i ever leave them i dont have to change my email addresses again.