decoy logodecoy
decoy vs Proton Pass

a local-first password manager — with inbox ai proton pass doesn’t have.

proton pass gets passwords, aliases, and encryption right. it stops there — nothing reads your inbox for you, nothing lets claude help without handing over the keys, and there's no option to claim a personal alias where you invent prefixes on the fly.

see side by side →
decoy
free for founding members
Proton Pass
free tier limited · $47.88 / yr plus
the local-first password manager basics

everything Proton Pass does

  • end-to-end encrypted means even we can’t read your passwords, 2fa codes, or passkeys — only your device can.
  • aliases for every signup.
  • iOS autofill + safari extension for instant fill.
  • we don’t mine your data, sell it, or tie analytics to you. the business model is you paying us — not advertisers paying for you.
what decoy adds

and what Proton Pass skips

  • disposable emails on demand (@decoys.me) — same on-the-fly generation as proton pass. plus an optional personal alias (yourname.decoys.me) where you can invent any prefix, which proton pass doesn't offer. send + reply from any of them.
  • your inbox never leaves your phone — we use on-device ai so we can surface promo codes, catch 2fa, summarize mail, and flag breach hints, without any of it touching a server.
  • Decoy lets users choose which accounts and information an ai agent can access and for how long. every Decoy data access is recorded. proton pass has no official ai surface.

side by side

where decoy wins, and where it doesn't.

disposable emails
a different email for every signup — so when a site gets breached or starts spamming, you burn the decoy, not your real inbox. send and reply from any of them.
decoy
unlimited, send + receive
Proton Pass
limited free · unlimited on plus
password manager + 2fa
passwords, 2fa codes, and passkeys in one place, autofilled on iOS — so you stop juggling an authenticator app to sign in.
decoy
passwords, TOTP, passkeys
Proton Pass
yes (with TOTP)
end-to-end encryption
end-to-end encrypted means even we can't read your data — it can only ever be read on your device. if we ever got breached, there's nothing readable to steal.
decoy
yes
Proton Pass
yes
migration & import
move your whole vault over in one tap via apple's credential exchange (CXP) — and one tap moves it back out if you change your mind. no csv files, no lock-in.
decoy
CXP import from apple passwords
Proton Pass
multi-format import (no CXP)
on-device ai
your inbox never leaves your phone — we use on-device ai so we can pull out promo codes, catch 2fa automatically, summarize what's new, and flag breach hints, all without shipping your mail to a server.
decoy
iOS 26 foundation models
Proton Pass
no ai
ai agents
when an ai agent needs a login, inbox or personal detail, Decoy lets the user choose the exact accounts and information it can access and for how long. every Decoy data access is recorded.
decoy
MCP + user-controlled access
Proton Pass
not supported

be a nobody. get unlimited perks.

free for founding members. lock it in now.

switch to decoy if…

  • you want disposable emails on your own domain — decoys.me for the default, or an optional personal alias (yourname.decoys.me) for prefixes you invent on the fly. proton aliases are random strings on their shared domain.
  • you want to send and reply from your aliases directly — proton pass aliases forward incoming mail but can’t send from the alias itself.
  • you want promo codes, 2fa, and breach warnings pulled from your inbox on-device — proton pass doesn’t touch your inbox at all.
  • you want users to choose which accounts and information an ai agent can access and for how long.
  • you want an app that feels native on iphone, not a wrapped web page.
or pick Proton Pass if…
  • •you want one proton account bundling your password manager, encrypted mail, drive, and vpn — one bill, one identity.
  • •you need linux, windows, android, or web access today.
  • •you want to audit the full client source on github before trusting it with your vault.

free for founding members

join the waitlist to lock in founding-member status. paid tiers come later — you stay free.

questions

is decoy open source like proton?
the MCP server is open source so anyone can audit what ai assistants can actually do. the full-stack open-source story is a roadmap item — our encryption scheme is already public and independently reviewable.
proton is privacy-first. why pick decoy?
Decoy is end-to-end encrypted relative to the server, and inbox processing happens on the phone. users choose which accounts and information an ai agent can access and for how long. every Decoy data access is recorded.
can i use decoy alongside proton mail?
yep. decoy forwards to any inbox, proton mail included. keep proton as your real identity, use decoy emails for every signup.
does decoy have hide-my-email style aliases?
decoy has both. the default is a disposable email generated on demand for each signup — same as hide my email. on top of that, you can optionally claim a personal alias (yourname.decoys.me) and invent any prefix on the fly — gym@, shopping@, that-weird-app@. send and reply from any of them.
does decoy work with ai assistants like proton does?
proton does not offer an official agent surface. Decoy does. users can approve one request or standing access to selected accounts and information, and every Decoy data access is recorded.
does decoy only work on iPhone?
today, yes — the decoy app is iOS (iPhone + iPad) with a safari extension on iOS and macOS. desktop and other platforms are in active development. your decoys already forward to whatever inbox you use on any platform (gmail, outlook, proton), and any ai agent can manage them from any device via MCP.