I’ve recently become more concerned about privacy and have switched completely from Gmail to Proton Mail. I’ve also started using aliases, and I’m using DuckDuckGo Email Protection for this.

I’ve changed the email address on all my accounts(100+-) to a unique alias, except for Bitwarden, Ente Auth, PayPal and services where aliases aren’t allowed.

And I have a question: is it safe to use aliases for everything?

On which accounts do you use aliases?

If DDG Email Protection suddenly stops working, I’ll lose access to many accounts, such as Steam with my games, social media, online shops, and so on. I also use aliases when asked for an email address to recover 2FA, just in case, like on Telegram.

I recently started switching from SimpleLogin to DuckDuckGo Email Protection.

When I was using SimpleLogin, all my accounts (around 100), apart from Bitwarden, Ente Auth, PayPal and other accounts that simply didn’t allow aliases, were registered under aliases. I’m now can set a separate alias for each account.

And is it actually safe to use aliases for all accounts?

Such as Steam (with games), various shops, and so on.DDG is a free service that looks too good in my opinion, and if it goes under, I’ll lose everything. Also I use Proton Mail as my main email providor.

For which accounts do you use DDG Email Protection, and what do you recommend?

Hello everyone. I recently remembered about passkeys and the fact that you can store them in Bitwarden. At first, I never used passkeys because I thought they weren’t secure, but it turns out they’re better than passwords.

I’ll be using the following security levels for all my accounts: (the higher the level, the more secure?)

• Yubikey Security Key as 2FA;

• Yubikey + OTP 2FA(Ente Auth), as some services require a backup;

• Only OTP 2FA(Ente Auth);

• Standard 2FA via email or phone number;

• Without 2FA. All my passwords in every account is randomly generated by Bitwarden.

And now I’ve learnt that Passkeys should be used, and that they’re actually better than OTP – they’re hard to enter on phishing sites, also thay are very easy to use, some of them you can use as password and 2fa, and you dont need to open Ente Auth and write a OTP code. And I’m completely confused now. As I understand it, there are two types of passkeys:

Cloud passkeys: these can only be stored in Bitwarden. But sometimes it seems you can also use them on a YubiKey. And here’s another confusion: such passkeys can act as 2FA, or they can completely replace the password and function as 2FA + password. So Yubikey can function as 2fa + password???

Hardware passkeys: Can these only be stored on a YubiKey, like in WebAuthn format? But usually the FIDO2 standard is used??

And every service uses all this differently, with different combinations! I wanted to create folders in Bitwarden for each security combination, but there are too many of them. It’s absurd. What should I do? I’m curious how you all use this? Or is it better to just give up and not use Passkeys at all?

EDIT: Thanks for all your advice. I've decided to switch to ProtonMail after all, and I'll also be using SimpleLogin. I've already transferred a lot of my accounts to the new email service.

I’ve recently started taking an interest in my online security (I’ve started using Yubikey, Bitwarden and Ente Auth) and now it’s time to look into privacy as well.

Many people say that Gmail isn’t a good choice because Google can read my emails. I have six Google accounts and I use email, just like everyone else(maybe), to sign up for other services and to use Google services such as Google Photo (I’m buying 1 TB of storage for the family).

So does it make sense to switch to Proton Mail, and if so, how?