Proton Profile picture
May 7, 2020 4 tweets 2 min read Read on X
Happy #WorldPasswordDay! Don't forget your security is only as strong as the weakest link. We have several resources to help you understand how passwords can be compromised and what you should do to protect them. Image
First of all, should you use a "password" or a "passphrase"? The answer is that it depends. Learn about the password vs. passphrase debate: protonmail.com/blog/protonmai…
Next, explore the considerations behind how long your password should be. It turns out, even some long passwords can be hacked, so "length" is not synonymous with "secure." protonmail.com/blog/how-long-…
And finally, here are our three steps to create a strong password:
1. Use a password manager.
2. Generate unique, random passwords for all your accounts.
3. Use a long passphrase for passwords you must memorize.
More details: protonmail.com/blog/how-to-cr…

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Proton

Proton Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @ProtonPrivacy

Apr 24
The Proton ecosystem has grown significantly, with private AI, a 2FA app, encrypted spreadsheets, video calling, and appointment scheduling all joining the ranks recently.

Now we're sharing our spring/summer 2026 roadmaps.

Here's what's coming...

🧵 1/13
Proton Mail: Your inbox is getting more organized.

A new category view automatically sorts emails by type, so attachments and key messages are easier to find.

Focus on what matters, cutting through the noise. Turn them off or on at any time.

2/13
Multiple inbox management is also coming.

You'll be able to send and receive from your existing Gmail address directly inside Proton Mail.

Retain your old address while you settle into your Proton Mail account. Support for more email providers is also planned.

3/13
Read 13 tweets
Mar 27
The era of end-to-end encrypted DMs on Instagram is coming to a close, luckily we’ve got a ready-made list of WhatsApp alternatives (which are relevant here too) if you’re looking to shift conversations elsewhere.

(and to be clear, you should…)

1/10 Image
Let’s start with the gold standard:

Signal

🔐 End-to-end encrypted by default
🧾 Collects almost no metadata
🔍 Open-source + independently audited
📞 Calls, groups, disappearing messages

Downside: requires a phone number

2/10
Telegram

📱 Huge user base
⚙️ Feature-rich (channels, bots, multi-device sync)
⚠️ NOT encrypted by default
🕵️ Collects a lot of metadata

Note that only “secret chats” are actually E2EE, and most people never use them

3/10
Read 10 tweets
Feb 16
Hanging out in spicy Discord servers? Well this one’s for you! 🌶️

But even if you aren’t, read on...

Discord is expanding its age verification to all 200+ million (or so) users worldwide.

Until verified, all users will be "teen-by-default", affecting what they can see.

1/6
Unless verified as an adult:

- No access to age-restricted channels, servers, & commands
- Mature content will be blurred
- You won't be able to receive DMs from unknowns
- Friend requests from unknowns will come with a warning
- No speaking on Stage (streaming) channels

2/6
Discord are keen to point that, in most cases, its new inference model with analyze data and decide if you're 18 or over with available data.

Private messages will not be analyzed for this.

If the inference model can't decide you're an adult, it'll ask you to verify...

3/6
Read 6 tweets
Dec 16, 2025
If like many across the world you'll soon be off and looking for something to do, here’s your annual privacy & security tune-up.

Cue a looooong thread to bookmark for when you’re ready to lock it down.

If you've already done all of this, you dropped this: 👑

1/15
Audit your browser extensions

Why?

People add extensions to their browsers for many different reasons.

They will often have wide-ranging permissions, meaning they could access and track your online activity.

Not useful? bin it!

Even if it is, proceed with caution.

2/15
Enable 2FA for anything that matters

Why?

Authenticating with 1 factor, like a password, leaves you vulnerable.

Why would you just use one key to get into your house when you can have the security of two? Especially when that 2nd can be hard-to-fake like biometrics.

3/15
Read 15 tweets
Dec 2, 2025
The GrapheneOS team has said that “France isn’t a safe country for open source privacy projects,” pointing to what it describes as the expectations of encryption backdoors.

Last week, it announced it has removed all servers from France.



1/5
This raises some questions: what is GrapheneOS, why do people use it, and what's up with France? 🇫🇷

For the first question: GrapheneOS is a nonprofit, open-source, and Android-based operating system used by many people seeking better privacy, security, & control.

2/5
It offers no bloatware, Google lock-in, forced apps, or background data collection, as well as advanced privacy & security.

GrapheneOS has also begun to end its relationship with hosting provider, OVHCloud.

There are open questions on if OVH can guarantee data sovereignty.

3/5
Read 5 tweets
Nov 24, 2025
Security researchers say a design flaw in WhatsApp’s contact-lookup feature has enabled what they call the “largest data leak in history”, exposing billions of phone numbers without breaking encryption.

Normally the lookup process would incur rate limits, normally...

1/5 Image
But in this case, they were able to run through 7k phone numbers /second (and session), using 63bn numbers generated by their tool.

None of this required decrypting a single message.

They confirmed 3.5bn phone numbers, more than the number officially stated by WhatsApp.

2/5
More than 57% of the active accounts they grabbed had a profile picture; two thirds of this group had images containing human faces.

~29% had text in their profile which could be used to discover more about them, such as their sexuality, political views, or drug use.

3/5
Read 5 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(