These step-by-step guides will help you complete each item on the Information Security checklist for employees .
Store your passwords in Proton Pass
Reusing or memorising passwords leads to weak, predictable choices. A password manager lets you have a unique, complex password for every account without having to remember any of them.
- How to set up the Proton Pass macOS app
- How to set up Proton Pass for Windows
- How to use the Proton Pass desktop app
- How to use the Proton Pass browser extension
- How to use Proton Pass on your iPhone or iPad
- How to use Proton Pass on Android
Use passkeys
Passkeys replace passwords entirely with a cryptographic key stored on your device, making phishing and credential theft practically impossible.
- Passkey compatible devices & browsers
- How to use Proton Pass passkeys
- Guides per device:
- Passkeys on MacOS
- Passkeys on Windows
- Passkeys on iPhone
- Passkeys on Android
Export & import passwords to Proton Pass
Moving your existing passwords into Proton Pass in one go means you're fully protected from day one, with no accounts left behind in less secure places.
- Step 1: Export your passwords from your browser/old password manager:
- Step 2: Import your passwords to Proton Pass
- Proton manuals: export & import passwords
Delete saved passwords from browser(s)
Browsers offer far weaker protection for stored passwords than a dedicated password manager, so leaving copies there undermines the security you've just set up.
- Google Chrome: Delete saved passwords
- Firefox: Edit or delete a login with the Firefox Password Manager
- Brave: How do I delete my data in Brave? > Deleting individual data types
- Microsoft Edge: View or edit your passwords in Microsoft Password Manager
- Safari (Mac): Find saved passwords and passkeys on your Mac
- Safari (iPhone): Find saved passwords and passkeys on your iPhone
Turn off automatic password saving in each browser
If your browser keeps offering to save passwords, it's easy to accidentally store new ones there instead of in your password manager. Turning this off keeps everything in one secure place.
- Google Chrome: Turn off: "Offer to save passwords and passkeys".
- Firefox: Disable password saving in Firefox
- Brave: Toggle off "Offer to save passwords."
- Microsoft Edge: How to disable Microsoft Password Manager
- Safari (Mac): Turn off Passwords in iCloud settings
Replace weak passwords with strong passwords generated by Proton Pass
Weak or reused passwords are the single most common way accounts get compromised. Replacing them with randomly generated ones closes that vulnerability for good.
- Step 1: Find your weak passwords using Pass Monitor
- Step 2: Replace the weak password with a generated one
Enable SSO (preferred) or MFA/2FA on all your business accounts
SSO (Single Sign-On) is the preferred option where available: it centralises access control and removes per-user passwords entirely (more info: SSO, yes or no? ).
Start with the ones with the most sensitive data: e.g. financial data in accounting software, customer/donor data in CRM, etc.
Where possible, admins are advised to enforce SSO / 2FA (2 factor authentication) / MFA (multi factor authentication) for all users organization-wide via the Admin settings, removing the need for users to change their settings individually. Where SSO is not available, enable 2FA/MFA: even if a password is stolen, a second factor means an attacker still can't get in. Here you find an overview of tools that support SSO and/or MFA and links to their User guides: SSO & MFA overview — all tools
Get into Proton Pass if you forgot your password
Contact the Proton Pass administrator of your organisation. They can reset your password for you via the Proton for Business admin panel. You do not need to take any steps yourself.
(As a non-private user in a Proton for Business organisation, recovery methods such as recovery phrase, recovery email, and Signed-in reset are not available to you.)