Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Proton Pass is rolling out three major features announced on October 15, 2026: folders and unlimited-depth subfolders for organizing vault items, more precise URL and autofill rules, and compromised-password alerts that run locally on your device. The release is being phased in over the next few days and is expected to reach all users soon.
What Proton Pass is adding
The update addresses three common password-manager problems: keeping large vaults organized, preventing autofill on the wrong site, and checking whether saved passwords appear in known breaches without sending the passwords to the provider.
Folders and subfolders
Pass users can place vault items in folders, create subfolders nested as deeply as needed, and move items between folders and vaults with drag and drop. Search and filtering can be limited to a folder and its subfolders, which is useful when a vault contains hundreds or thousands of logins, notes or other records.
Proton describes folders as a way to organize by project, team or year without creating a separate vault for every category. The feature also lays groundwork for broader organization features that Proton outlined in its April 24, 2026 roadmap.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Folder sharing is not independent
Folders do not yet have their own sharing permissions. A folder inherits the sharing settings of the vault that contains it. If a vault is shared, its folders are governed by that vault’s access rules; you cannot currently share one folder with a different group while keeping the rest of the vault private.
Independent folder and subfolder sharing is on Proton’s roadmap. Proton said implementing folders required changes to Pass’s cryptography model, so the eventual sharing design may arrive separately from the initial organization tools.
Who can create folders
Folder creation is restricted to specific paid and business plans. Free and Pass Essentials members cannot create folders themselves, but they can use folders inside vaults shared with them by someone on an eligible plan.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
| Plan | Create folders | Use folders shared by another user |
|---|---|---|
| Proton Pass Plus | Yes | Yes |
| Proton Pass Family | Yes | Yes |
| Proton Unlimited | Yes | Yes |
| Proton Pass Professional | Yes | Yes |
| VPN and Pass Professional | Yes | Yes |
| Proton Workspace | Yes | Yes |
| Free | No | Yes, when the vault is shared |
| Pass Essentials | No | Yes, when the vault is shared |
The rollout is gradual, so an eligible account may not show the folder controls immediately. Proton says the capabilities should become available to all users soon.
More precise URL matching and autofill
Pass now lets you decide more exactly when a saved login can autofill. The matching controls cover:
- Parent-domain matching, for applying a login across a domain’s related hosts.
- Subdomain behavior, so you can choose whether subdomains are included.
- Exact-host matching, which limits a rule to one host.
- “Never on this URL” exclusions for pages where autofill should be blocked.
- Wildcard patterns for broad but controlled matching.
- Regular expressions for advanced URL rules.
- Field-level controls that specify which fields may autofill.
These options are useful when one organization operates several services under related domains, or when a login should work on one host but not another. Field selection can also prevent sensitive values from being inserted automatically when only a username or password is needed.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
For an exact-URL policy, choose exact-host matching rather than a parent-domain rule, then use the field controls to allow only the data required on that page. Add a “never” exclusion for a particular URL when a site has a page that should never receive autofill. Wildcards and regular expressions provide broader patterns, but they require more careful testing because an overly broad expression can match unintended pages.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Compromised-password alerts run locally
Proton says compromised-password detection runs on the user’s device. Pass creates a fingerprint of a password and compares that fingerprint with fingerprints associated with known data breaches published by security researchers. According to Proton, the service does not receive the password or other contents of the vault during this check.
A match means the password resembles one included in a known breach; it does not prove that the specific account in your vault was the account exposed. Treat an alert as a reason to change the password anywhere it is reused, enable multifactor authentication where available, and review recent account activity.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What this release means for Pass users
If you manage a large vault
Use nested folders to separate areas such as work, personal accounts, projects or years, then search within the relevant folder instead of the entire vault. Moving items between folders and vaults by drag and drop should make reorganizing an existing collection less disruptive than rebuilding vaults.
If you share access with a team or family
Keep in mind that folder boundaries are organizational, not independent security boundaries. Anyone with access to the containing shared vault remains governed by that vault’s permissions until Proton delivers separate folder-sharing controls.
If autofill has been too broad
Review the URL rule for each sensitive login. Exact-host matching, exclusions, wildcard or regular-expression rules, and per-field autofill settings let you trade convenience for tighter control instead of accepting one global behavior.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
Roadmap context
In Proton’s April 24, 2026 roadmap, Son Nguyen Kim, the Proton Pass and SimpleLogin leader, called folders “a significant building block” that would go beyond basic organization. The roadmap identified project, team and year-based organization as intended uses and listed future folder and subfolder sharing as planned work. The current release delivers the organizational foundation, while independent sharing remains unfinished.
The Bottom Line
Proton Pass folders are rolling out now, with unlimited nesting and vault-level permissions. Eligible paid and business plans can create them, while free users can use folders shared with them. The same release adds granular URL and field-level autofill rules and performs compromised-password checks locally through fingerprint comparisons.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
