Proton is gradually releasing three major Proton Pass features announced on October 15, 2026: folders and nested subfolders for vault organization, detailed URL-matching controls for autofill, and redesigned compromised-password alerts. The rollout is expected to reach all users soon, but folder creation is limited to specified paid and business plans.
What is changing in Proton Pass
The update targets three common password-manager problems: keeping a large vault organized, preventing autofill on the wrong website, and checking exposed passwords without sending vault data to a service. Availability is staged over the next few days, so an account may not show every control immediately.
As an Amazon Associate I earn from qualifying purchases.
Folders and subfolders organize large vaults
Proton Pass users can now place vault items in folders, create subfolders, and move items between folders and vaults with drag and drop. Folders can be nested as deeply as needed. Search and filtering work within a folder and its subfolders, making it possible to narrow results without searching the entire vault.
Free tools Windows power users keep installed
One-click scans. No signup required.
For people with hundreds or thousands of logins, this hierarchy can reduce the need to create a separate vault for every project, team or year. Proton product leader Son Nguyen Kim described folders in an April 24, 2026 roadmap as “a significant building block” that would extend beyond simple item organization.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Folder plan availability
| Plan | Create folders? | Use folders shared from another vault? |
|---|---|---|
| Proton Pass Plus | Yes | Yes |
| Proton Pass Family | Yes | Yes |
| Proton Unlimited | Yes | Yes |
| Proton Pass Professional | Yes | Yes |
| VPN and Pass Professional | Yes | Yes |
| Proton Workspace | Yes | Yes |
| Free | No | Yes, when a paid-plan user shares the containing vault |
| Pass Essentials | No | Yes, when a paid-plan user shares the containing vault |
Free and Pass Essentials subscribers can use folders inside vaults shared with them, but they cannot create folders themselves. Folder permissions are inherited from the vault: independent folder-level sharing is not available yet. Proton has listed folder and subfolder sharing as a future capability.
Autofill rules can be limited to the right site
New URL-matching controls let you decide where a saved login or identity item may autofill. Depending on the rule you choose, Proton Pass can match a parent domain, include or exclude subdomains, or require an exact host. You can also create “never on this URL” exclusions, use wildcard patterns, and define regular expressions for more specialized sites.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Useful matching choices
- Parent-domain matching: allows a rule to apply across a domain and its relevant subdomains when that is appropriate.
- Subdomain controls: let you include or avoid individual subdomains instead of treating every host alike.
- Exact-host matching: restricts autofill to one host, useful when separate services share a parent domain.
- URL exclusions: block autofill on a particular address even when a broader rule would otherwise match.
- Wildcards and regular expressions: handle repeatable URL patterns that cannot be expressed by a single host rule.
The update also allows field-level choices about what autofills. You can permit a username while withholding a password, or prevent sensitive fields from being inserted on pages where only limited information is needed. These controls are intended to reduce accidental filling into the wrong form.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Compromised-password detection runs on your device
Proton says the new compromised-password detection is performed locally on the user’s device. Pass creates a fingerprint of a password and compares that fingerprint with fingerprints associated with known data breaches published by security researchers. According to Proton, the service does not receive the password or other vault contents during this check.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
A local check can identify credentials that appear in breach data while keeping the underlying vault material on the device. A warning indicates that a password should be replaced, but it does not by itself change the credential on the affected website; updating that login still requires the site’s normal password-change process.
How the rollout affects your account
- Update Proton Pass on each device you use and sign in normally.
- Check the vault organization controls for folder creation. If the controls are missing, the staged rollout may not have reached the account yet.
- Create a folder structure that reflects projects, teams or years, then move items by drag and drop as needed.
- Review each saved login’s URL-matching settings before enabling autofill on additional hosts or subdomains.
- Choose which fields may autofill and add exclusions for pages where autofill should never occur.
- Review compromised-password alerts and change any flagged password on the corresponding service, using a unique replacement.
Because folder sharing follows vault permissions, place items in a vault whose existing members should have access. Do not assume that moving an item into a folder creates a new sharing boundary.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What is still missing
Independent sharing for a single folder or subfolder is not part of this release. Teams that need different permissions must continue to organize access at the vault level until Proton implements the roadmap item. Proton has also said that introducing folders required changes to its cryptography model, which helps explain why sharing behavior is arriving in stages.
The announcement does not provide a published numerical performance benchmark or a fixed date for every account to receive the controls. Availability should therefore be treated as a gradual October 2026 rollout rather than a simultaneous switch.
Quick Recap
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
