Edit: I made a mistake, I meant to add Mailfence instead of Fastmail, but forgot to update both the icon and text
Hey everyone, here’s a follow up to my previous post, I tried to summarize all your suggestions and these are the options I have for the main Proton products I’ve been using.
I removed Bitwarden based on your feedback (basically they’re enshittifying).
I’m not including Tuta, because I dislike their UX/UI, also they seem to not apply their LLM policy to their own devs.
I’m not including Mullvlad, because of one of the founder’s donation to a far right political party in Sweden, said founder has a blog post to justify this, which links to another blog post where he claims to be a libertarian anarchist which is just another word for Ancaps which is a dealbreaker for me.
A lot of people recommended using one’s own domain for email stuff, I forgot to mention I do have a custom domain, which will make migrating a lot easier indeed. Just need to update my accounts credentials.
Let me know what you think!
Since you’re picking a new provider anyway, it’s worth thinking about how you pay. A card ties the account to your name even if the mail itself is encrypted. Tuta and addy.io both accept Monero, and Mailbox.org lets you pay by bank transfer without a card. For aliases, addy.io with any of those works really well.
“I still use Proton because I don’t know which alternatives are better. The problem is that when I look for ways to protect my digital privacy, almost no app seems safer than the others. There’s always something missing, which makes it hard to feel confident that a service is actually any good.”
I am kinda in the same bota. But i think mailbox.org is a solid alternative for protonmail.
My main problem is protondrive.
This site is great for finding safer alternatives. I only heard about it from a YouTuber I used to watch. Maybe there’s something there that could help you :)
I don’t think you want to include Windscribe: https://retro.social/@ifixcoinops/117526586958025535
aaaaaand one more to remove, thanks for the heads up
AirVPN is sus too, never been audited so we can’t know for sure about their logging policy.
Tuta had honeypot allegations. https://gizmodo.com/tuta-email-denies-connection-to-intelligence-services-1851022465
Fun fact about KeepassXC: it also supports 2FA (via manually inserting totp tokens), so you could argue it’s also an alternative to Proton Authenticator assuming you don’t mind having your TOTP tokens and passwords are in the same place. Though I will say having them in the same place is at least better than not having 2FA at all, so it’s an option to consider
If you’re worried about it you could also have a seperate file for 2fa, different passwords. The embedded file and notes features are great for storing the backup/recovery codes good 2fa implementations give you.
I self host vaultwarden, which uses the bitwarden app on my devices. How are they enshitifying?
I missed the news - what’s wrong with the proton?
Mail : infomaniak or tuta VPN : Mullvad Authenticator : Ente auth Password : aliasvault
So, guys, I’ve had a pretty great experience with GMail, from a small company… they index the Internet, whatever that means. Anyway, the sign up is free and and I don’t have to bring a domain… again, not sure what that means, but it sounds nice.
Do you have an invite?
It sounds perfect, I sure hope they’re not evil or something
It’s funny you should mention that, because they go out of their way to specifically say that they aren’t!
I believe 'em. Especially after they bought a co called “doubleclick”. Not sure what that is, but they probably invented double clicking with my mouse buttons. Or sth like that. No way an evil co would be giving us stuff like that.
“Don’t be evil” seems like an aspirational sentiment rather than a reflective one. Like an addict writing “don’t do drugs” on their todo list.
Guess they should have aspired harder.
I always felt it was just a company telling me to not be evil. Rules for thee not for me, if you will.
Also, the storage they offer increases constantly in real time. There is a counter on their page if you wanna check.
Fastmail while an excellent product, is in a jurisdiction with “dubious” rules. I would give Tuta a second chance. Infomaniak is also a good alternative.
Tuta is going straight against their own policies on Ai, hard disagree on that 2nd chance. You might just as well do that with Proton then.
True, why not? it was clear that the people that work at proton were competent enough to raise the issue and make it a public discussion, I wouldn’t throw them away that easily.
That’s absolutely true
That’s my mistake, I meant to add Mailfence instead of Fastmail, but forgot to update both the icon and text
i had enough struggle to convince my friends to switch away from google, im sure as hell not getting them to switch again. especially not when i am the one paying for the family subscription
I think it’s fine. Proton is still better than big tech. I want to move away from Proton for myself but that’s because I am not tied to an address (custom domain) and am happy to do the switch. I would still encourage Proton over big tech for regular people. We do the best we can do.
I’m confused… If you’re the one paying for it, why do you need to convince them of anything? They can come along or pay for their own services.
it was unfortunately worded. the reason they switched at all is because im paying. if i stop paxing they will just switch back
That’s their prerogative.
Fastmail is in Australia. correct me if I’m wrong but doesn’t the Australian government basically backdoor every product hosted in their country? wouldn’t that be terrible for privacy?
No backdoors that I’m aware of but they do comply with the law: https://www.fastmail.com/policies/transparency-report/
That’s my mistake, I meant to add Mailfence instead of Fastmail, but forgot to update both the icon and text
KeePass can do TOTP, it’s better to have a separate database for those for obvious reasons, though.
Caveat: Right now keepass doesn’t really like working with multiple vaults. We also need keepass app to realize that totp is in another
castlevault.
Just a question, is there anything wrong with just KeePass?
KeePass is proprietary. KeePassXC is open source. I have experience with both and I find XC much better in many ways.
Thanks. I’m so used to KeePass that I just can’t get used to XC. I don’t like keeping the database open. I’m OK with XC on laptop with fingerprint reader, but on desktop, it just feels unwieldy. Also, I like to manually synchronize files between devices, because then they act as backup. And I can’t run syncthing at work.
But in that regard KeePass and XC work the same? Both just use the DB and lock if want them to lock…
I guess? Somehow i missed the autotype in XC before, maybe? I just checked it, switched to comapst mode and briefly tested and other than synchronisation of 2 databases, it ses to work mostly as I want to (better in some ways, maybe, more testing needed). And there’s Merge from database, which by the sound of it might do the synchronisation the way I want to. I will test it more! It looks like it might work for me too. Thank you!
No, but you need to backup/sync it yourself
I meant non-XC KeePass. You have to back up XC manually as well. But I think I saw someone saying something bad about KeePass without XC or DX and I’m curious now.
KeePass is made with Windows in mind, so it might not have come across OP’s radar if they don’t use Windows.
I’ve tried running the OG KeePass on Linux but it’s not nice sadly… Prefer the UI much more then KeepassCX
I wouldn’t trust a proprietary VPN, so I’d remove Xeovo. As someone else mentioned, Obscura uses Mullvad servers as the exit node. Not recommending Mullvad is fine and I’d do it too, but then recommending Obscura is weird.
Xeovo appears to use WireGuard and OpenVPN. They don’t even seem to have their own client.
