Proton Pass

Proton Pass comes from Proton AG in Geneva, the company behind Proton Mail and Proton VPN, founded in 2014 by scientists who met at CERN, majority-owned by the non-profit Proton Foundation and, by its own account, never funded by venture capital. That ownership is the point of the product: the vault is governed by Swiss law, Proton says it discloses the little data it holds only on a binding request from the competent Swiss authorities, and the vault contents are end-to-end encrypted with AES-256-GCM under per-vault keys that Proton states it can neither read nor create. The clients are open source, Cure53 audited the browser extensions, mobile apps and API in May and June 2023 and published the report, and Proton runs an in-house bug bounty that pays up to $100,000. What Proton does not publish is a SOC 2 or ISO 27001 certificate for Pass, and there is no self-hosting option.

Prices as shown to a UK visitor on 8 September 2026. Individuals are priced in pounds: Free, with unlimited devices and logins, passkeys and ten hide-my-email aliases; Pass Plus at £2.39 a month on the annual plan (the list price is £3.99 monthly), adding unlimited aliases, the built-in two-factor authenticator, sharing, dark web monitoring and emergency access; Pass Family at £3.99 a month for six accounts. Business is priced in euros with no pound option on the page: Pass Essentials at €1.99 a user a month on annual billing (€4.99 month to month, minimum three users) gives an admin panel, shared vaults, unlimited aliases and password health reports but no single sign-on; Pass Professional at €4.49 a user (€6.99 monthly) adds SSO with SAML, SCIM provisioning, activity logs, enforced policies, group sharing and the CLI. Both carry a 14-day trial and a 30-day money-back guarantee, a 99.95% uptime commitment and phone support for teams of six or more. Tax "may apply" on the page, so treat the figures as before VAT.

The developer story has moved fast: a command-line tool arrived in November 2025, and in May 2026 Proton added read-only, time-limited access tokens scoped to a single vault so that scripts and AI agents can fetch a credential with an audit-log entry for every use. There is no official MCP server yet, only community ones, and the grid says so. Passkeys are stored and filled on every plan, but the vault itself still unlocks with a password, PIN or biometrics rather than a passkey, and a hardware key protects the Proton account as a second factor. The reputational caveat is real and company-wide: Trustpilot rates proton.me 2.2 on 1,779 invited reviews, 56% of them one star, with billing lockouts and slow support the themes, most of them about Mail and VPN rather than Pass; G2 rates Pass for Business 4.7 on 121 reviews.

In our experience: Saaskly's own secrets, including every credential this site runs on, live in Proton Pass, and it has been reliable for us. We chose it for the jurisdiction, the ownership and the open-source clients as much as for the price. Saaskly has an affiliate link for Proton Pass; the verdict came first and the link does not affect the score.