The Feature that should be default Has Finally Arrived, Riding a Horse Called "Gradual Rollout"

Quasy_Complete was staring at his password manager. Eight hundred and twelve items. One list. One very long, very alphabetical list, stretching into the horizon like a digital Siberia.

Somewhere in that list  between "old-forum-account-2009" and "zoo-newsletter"  was the login he actually needed. He had been scrolling for ninety seconds. Which, in password-manager time, is a geological era.

"Ah," he muttered, staring at the ceiling. "The password manager paradox. The tool that exists to save you time, that wastes your time, because the average human now has more logins than memories. Eight hundred items. One scroll bar. We solved encryption. We solved zero-knowledge architecture. We solved secure sharing. And we organized it all... like a shoebox of receipts from 1997."

His neighbor, Mrs. Higgins, appeared at the door, holding a shoebox of receipts from 1997.

"Quasy! I've done it! I organized all my passwords! I made a system! Banking passwords in my head, shopping passwords on the fridge, and the wifi password under the cat's bowl!"

"Mrs. Higgins," Quasy said calmly, "you have invented a physical password manager with worse security and roughly the same scrolling problem. Also, the cat now guards your network perimeter. Put the shoebox down. Proton Pass just shipped folders."

She gasped. "FOLDERS?"

"Folders. Subfolders. Drag and drop. Filtering. The single most requested feature in password manager history. The feature so obvious that its absence became a meme, then a grievance, then a lifestyle. And now it exists. Rolling out gradually over the next few days. Which means you will get it 'soon'  and you know how I feel about that word. But this 'soon' appears to be a real one, of the 'days' variety rather than the 'calendar years' variety. Growth. Maturity. Character development for a roadmap."

Make Day-to-Day Life Easier With Folders (The Great Organization)

You can organize vault items into folders and subfolders, drag and drop across folders and vaults, filter and search within a folder and its subfolders, and create nested folders in as much detail as you need.

Quasy: "Study this list, because each line is a small act of mercy. Folders and subfolders: structure instead of one infinite list. Drag and drop: no 'move item' dialog with three dropdown menus. Filter and search within folders: find the needle inside the drawer of needles. Nested folders: 'Work → Clients → 2026 → That One That Pays Late.' Depth for those who need it. Sanity for those who've been scrolling.

And crucially: folders mean you don't have to create a new VAULT every time you want a category. The old workaround  one vault per project, vault sprawl, a shantytown of tiny vaults is retired. For businesses, this means team credentials can grow with the organization instead of metastasizing across the vault list.

One footnote, printed honestly: folder SHARING is on the roadmap for now, folders follow the sharing settings of their vault. Notice, Mrs. Higgins, that they said the quiet part out loud. What's not here yet is labeled as not here yet. This is the growth I mentioned. Some companies just hope you don't notice the missing part. This one told you where it isn't."

Which Plans Include Folders? (The Tollbooth)

Folders are available on Pass Plus, Pass Family, Proton Unlimited, and business plans including Pass Professional, VPN and Pass Professional, and Proton Workspace. Free and Pass Essentials users can't CREATE folders but can use folders in vaults shared by anyone with a paid plan.

Quasy: "The freemium curtain. You may not build shelves, but if a paying friend builds shelves in a shared room, you may place things on them. It's not generosity, it's commerce — but it's fairly disclosed commerce, which is the most honest kind available. And frankly, after eight hundred items in one list, Mrs. Higgins, the paid shelf starts looking like liberation."

Customize Autofill With URL Matching (The Bouncer)

Autofill saves time logging in. But there may be times you want to disable autofill on specific websites or restrict it to an exact URL for security purposes.

Quasy: "This is the feature for people who have been ATTACKED by their own convenience. You know the scenario: you're on a lookalike domain  's0cialnetwork-login.example'  and your password manager, ever eager to help, cheerfully offers your real password to the impostor. Autofill doesn't check vibes. It checks URLs. Mostly.

Now YOU control that behavior: basic modes  parent domain and subdomains, exact host matching, or never on a chosen URL. And for the strong of stomach: advanced modes with wildcards and regular expressions. Regex, Mrs. Higgins. In a consumer password manager. Somewhere, a sysadmin just shed a tear of joy into their coffee.

And the underrated part: you can choose which FIELDS to autofill. Forms complete themselves, while sensitive fields stay quiet when you don't want them speaking. Convenience with a muzzle. Finally."

Mrs. Higgins: "What's a regular expression?"

"It's a way of describing text so precisely that it becomes either a superpower or an incantation. Used wisely, it grants total control over where your passwords may appear. Used carelessly, it makes everything stop working and produces a small fire spiritually."

Stay Safe With Improved Compromised Password Alerts (The Local Doctor)

Compromised password detection joins existing checks for weak and reused passwords and breached email addresses. This new check happens locally on your device  no one at Proton Pass has access to your passwords or anything else in your vaults.

Quasy: "Read that second sentence twice, because it's the entire ballgame: the check runs LOCALLY. On your device. Your passwords never leave, not even for a checkup. Zero-access encryption isn't paused for convenience features  the security model and the feature ship together, rather than the feature shipping at the expense of the model.

So now Pass warns you about weak passwords, reused passwords, breached email addresses, and compromised passwords. Four alarms. The complete inventory of the ways humans ruin their own security.

And each alarm fires early before the risk becomes an incident. Which, if you recall our previous episodes, is the only direction security ever actually works: before. Never after."

Conclusion:

The Shoebox Retires Mrs. Higgins looked at her shoebox. Then at her phone, where  after a short wait  the folders update had already arrived.

"Work," she said, dragging. "Banking. Shopping. Grandchildren's logins. Cat's wifi duty  RESOLVED." She created a folder called "Fridge." Purely symbolic, she explained, for emotional continuity. "Progress," Quasy said.

"Note what actually happened today: a password manager admitted that organizing 800 items in one list was madness, that autofill should obey its owner rather than its enthusiasm, and that security checks can run on your device without your secrets taking a field trip. Three humble features. Zero drama. All shipped, all real, all  and this is the remarkable part  this month."

His phone buzzed. Notification: "Proton Pass: Detected 1 compromised password. Would you like to see it?"

Quasy looked at the notification. Looked at the ceiling. Looked at the notification again. "One," he whispered. "One compromised password. Locally detected. Never uploaded. I know exactly which one it is. It's the one I made in 2011 because the site demanded a symbol.

'quasy!2011.' The exclamation point fooled no one, ever, especially not me."

He rotated it. Flagged it. Filed the alert in a folder he had just now, for the first time in eight hundred items, created in four seconds.

Because in 2026, security isn't loud. It's a folder, a rule about where passwords may wander, and a quiet check on your own machine that never needs to see your secrets to save them.

And the shoebox? The shoebox now holds nothing but receipts. As it should.

As it always should have.

Quasy_Complete serves as Product Lead for Proton Mail and Drive and Director of LLM (Long Lasting Milestones) Engineering.

When not 'collaborating' with the kids on Reddit, he is busy penning the next chapter of the Proton ecosystem.

Before joining Proton in 2022, he spent years in Silicon Valley building products that were "coming soon" before the concept of "soon" was invented.

He holds a BSc in "Waiting for Updates" and an MSc in "Roadmap Delays" from the University of Warwick (which is currently under construction).