Proton Mail

What is Proton Mail?

Proton Mail is an end-to-end encrypted email service based in Switzerland, launched via a 2014 crowdfunding campaign by founders who met at CERN. It's become the go-to secure email for journalists, activists, and privacy-conscious users, though the 2021 logging case below and later data-handover incidents show exactly where the limits sit.

Since June 2024, Proton AG's primary and largest voting shareholder has been the nonprofit Proton Foundation, a Swiss entity whose board of trustees includes web inventor Tim Berners-Lee. A binding charter means no change of control can happen without the Foundation's consent, which structurally blocks a hostile takeover or a forced sale. One reputational note for the record: in late January 2025, CEO Andy Yen drew backlash for posts on X praising the Republican Party's antitrust stance, and Proton's official Reddit account posted then deleted a comment amplifying it. Proton said that post was not an official statement and reiterated the company is politically neutral. It is a communications flap, not a security or logging issue.

Key Features

Security Architecture

• End-to-end encryption - Automatic between Proton Mail users
• Zero-access encryption - Emails encrypted at rest
• PGP support - For external recipients
• Two-password mode - Separate login and mailbox passwords
• Self-destructing emails - Expire after set time

Privacy Features

• Swiss jurisdiction - Strong privacy laws
• No IP logging - By default (see controversy below)
• Anonymous signup - Tor/VPN allowed
• Open source - Clients are audited
• No tracking - No ads or analytics

The 2021 French Activist Incident

What happened:

Acting on a French police request routed through Europol, Swiss authorities (the Federal Department of Justice) issued a legally binding order requiring Proton to begin logging the IP address on one specific, named climate-activist account. Proton complied, and the logged IP helped identify the user. This dented the old "no IP logging" marketing line.

What the order actually was:

• Targeted prospective logging on a single named account, not blanket retention across all users
• A binding order from Swiss authorities, which Proton is legally bound to follow
• Proton still could not hand over message contents, which it cannot decrypt
• Proton notifies affected users when the law allows it

Later data-handover cases

Two more incidents sharpen the picture, and both turned on data the user attached to the account rather than on broken encryption:

• Catalan activist (reported May 2024): in a Spanish terrorism investigation, Proton gave authorities a user's recovery email address, an iCloud address. Apple then de-anonymized that iCloud account, handing police the person's name and home addresses. Proton's own framing is that it provides privacy by default, not anonymity by default, and that it does not require a recovery address.
• "Stop Cop City" FBI case (reported March 2026): via the US-Switzerland mutual legal assistance treaty, Proton handed over the payment identifier tied to an account linked to the Atlanta forest-defense movement - a credit card - to Swiss authorities, who passed it to the FBI. The FBI traced the payment identifier through the card-issuing bank to the account holder, who was arrested. Our full report on the case has the affidavit detail.

What this means for you:

• Access Proton Mail over Tor or a VPN so there is no useful IP for a logging order to catch
• Think hard before adding a recovery email or phone; it becomes compellable metadata
• Anonymous payment matters, because a card identifier can be traced back to you
• Swiss jurisdiction reduces exposure, it does not put Proton above the law

The Swiss Surveillance Law That Could Change This

Proton's whole pitch leans on Swiss privacy law, and that story got complicated in 2025. A revision of Switzerland's surveillance ordinance (the VUePF), whose public consultation closed in May 2025, would extend logging and lawful-intercept duties to any provider with as few as 5,000 users, email explicitly included. For an email service it would force three things that cut against Proton's model: mandatory IP-address logging kept for six months, mandatory identity verification at signup (an ID document or phone number, ending anonymous accounts), and an ability to decrypt user data on demand, with a carve-out only for content that is genuinely end-to-end encrypted between users. That last carve-out is exactly why Proton keeps stressing its zero-access design.

It has since stalled, but not died. In December 2025 the Council of States backed a motion demanding the Federal Council fundamentally rework the draft, and rather than push ahead the government ordered an external risk-impact study before a second consultation, with no binding timeline as of early 2026. Proton, Threema, and a coalition of civil-society groups including Amnesty International Switzerland oppose it. Proton has already begun moving most of its physical infrastructure abroad to hedge against the legal uncertainty, investing more than 100 million euros in EU facilities in Germany and Norway (starting with its Lumo AI), while insisting via Andy Yen that its HQ, legal entity, and core Mail and VPN infrastructure stay in Geneva. Treat Swiss jurisdiction as a real strength currently under active legal pressure, not a settled guarantee.

Pricing Structure

Figures below are the current promotional rates. One honesty flag: Proton's pricing page computes prices in your browser, so exact numbers drift between sources. Proton says it locks your rate at signup for as long as you keep the same plan, but confirm your renewal rate at checkout rather than trusting any single figure quoted online. Annual billing is the cheaper per-month rate; monthly billing costs more.

Free

• 1 GB storage
• 1 email address
• 150 messages/day
• Limited support

Mail Plus ($4.99/month monthly, $3.99/month billed annually)

• 15 GB storage, shared across Mail and Drive
• Unlimited messages
• 10 email addresses, 1 custom domain
• 10 hide-my-email aliases
• Dark-web monitoring for your Proton addresses
• Priority support

Proton Unlimited ($12.99/month monthly, $9.99/month billed annually)

• 500 GB storage
• 15 extra email addresses, 3 custom domains
• Unlimited hide-my-email aliases and folders
• Bundles full Proton VPN, Pass, and Drive; Lumo AI is included only at the limited free tier, with Lumo Plus sold as an add-on

Business and family plans

• Mail Essentials (about $6.99/user/month billed annually): 10 addresses, 3 custom domains, catch-all, auto-forwarding
• Mail Professional (about $9.99/user/month billed annually): 50 GB, 15 addresses, 10 custom domains, SMTP submission
• Proton Duo ($19.99/month monthly, about $14.99/month annually): 2 TB, 2 accounts, includes Proton Scribe
• Proton Family ($29.99/month monthly, about $23.99/month annually): 3 TB, 6 accounts, 90 addresses

The old "Visionary" plan is legacy-only. Proton stopped selling Visionary to new customers at the May 2022 plan revamp (apart from a brief limited-time return in December 2023), and existing subscribers keep it as a grandfathered legacy plan. If you see it quoted as a current tier, that source is out of date.

Technical Details

Encryption Methods

Between Proton Mail users:

• Automatic E2EE
• No key exchange needed
• Zero-knowledge architecture

To external recipients:

• Password-protected emails
• PGP encryption (manual)
• Expiring messages option

What's Encrypted

✅ Email body content, end-to-end between Proton users

✅ Attachments

✅ Subject lines, with zero-access encryption: Proton's server reads the subject once on receipt, then encrypts it so only you can decrypt it. That is weaker than the full end-to-end encryption on the body, but it is not left sitting in the clear.

What's NOT End-to-End Encrypted

❌ Sender and recipient addresses

❌ Timestamps

❌ IP addresses (not logged by default, but can be if a court orders targeted logging)

❌ Any recovery email or phone number you add to the account

Proton Mail vs. Alternatives

Proton Mail vs. Tuta

• Proton Mail: Swiss, PGP compatible, more expensive
• Tuta (formerly Tutanota, renamed in 2023): German, proprietary encryption that also covers subject lines, cheaper

Proton Mail vs. Gmail

• Proton Mail: E2EE, no ads, limited storage
• Gmail: No E2EE, data mining, 15GB free

Proton Mail vs. Self-Hosted

• Proton Mail: Easy, maintained, legal protection
• Self-Hosted: Full control, complex, no legal shield

Security Considerations

Strengths

✅ Zero-access encryption on message bodies and attachments

✅ Named, dated audits: Securitum audited the web app and crypto (2021) and SEC Consult audited the Android app; separately, company-wide ISO 27001 certification (May 2024) and a SOC 2 Type II attestation (July 2025) cover organizational controls, not app-level code

✅ Public bug bounty program, with the maximum payout raised to $100,000 in November 2025

✅ Reachable over Tor, now covering account signup plus Mail, Calendar, and Drive

Weaknesses

❌ Metadata (addresses, timestamps) still visible

❌ Web app requires JavaScript; there is no no-JS webmail mode, because encryption and key storage run client-side

❌ Account recovery is unforgiving: lose your password with no recovery set and the mailbox is gone

❌ Swiss law compliance required; targeted logging orders are possible

❌ Server-side code is closed source (client apps are open source and audited)

When to Use Proton Mail

Perfect For

• Journalists protecting sources
• Activists organizing legally
• Business confidential communications
• Personal privacy from tech giants
• International communications

Not Ideal For

• Illegal activities (will comply with law)
• Nation-state level threats
• Complete anonymity needs
• Large attachment requirements

Setup Best Practices

Account Creation

1. Use Tor or VPN for signup
2. Choose strong password (20+ characters)
3. Enable 2FA immediately
4. Save recovery codes offline
5. Use anonymous payment if upgrading

Ongoing Security

• Access only via Tor/VPN
• Use Proton Mail apps, not web
• Enable two-password mode
• Regularly update recovery email
• Monitor account logs

Advanced Features

Proton Mail Bridge

Desktop email client integration:

• Use Thunderbird, Outlook
• Maintains E2EE
• Local email storage
• Requires paid plan (Mail Plus and above)

Proton Scribe (AI writing assistant)

• Optional, opt-in writing assistant launched July 2024, built on the open-source Mistral 7B model
• Two modes: fully on-device (the model runs locally, no data leaves your machine) or server-side on Proton's no-logs servers, where only your prompt is sent and nothing is retained after the draft
• Proton says the model does not train on your data; it is bundled by default in Duo and Family plans and sold as an add-on elsewhere

Desktop app and secure forwarding

• Native Windows and macOS desktop app launched March 2024 (Linux in beta), for paying subscribers
• Automatic forwarding keeps end-to-end encryption Proton-to-Proton via proxy re-encryption; forwarding to a non-Proton address drops E2EE for those messages

Custom Domains

• Use your own domain
• Multiple addresses
• Professional appearance
• Catch-all option

Organization Features

• Sub-users
• Admin panel
• Shared addresses
• Compliance tools

Common Issues

Account Recovery

⚠️ Critical: If you forget your password, emails are permanently lost. Proton Mail cannot decrypt them.

Prevention:

• Use password manager
• Set recovery email
• Save emergency kit
• Regular backups

Sending Limits

Free accounts are throttled to limit spam:

• 150 messages/day
• 50 messages/hour
• Up to 100 recipients per message
• Upgrade for higher limits

Integration with Proton Ecosystem

Proton VPN

• Same account
• Swiss privacy company
• Free tier available
• Bundle discounts

Proton Drive

• Encrypted cloud storage
• End-to-end encryption
• File sharing
• Photo backup

Proton Calendar

• Encrypted calendar
• Event reminders
• Shared calendars
• Mobile apps

Government Requests

Transparency Report Data

• Proton Mail received 9,301 legal orders in 2025 and complied with 8,313; in 2024 it received 11,023 and complied with 10,368, roughly triple the volume older write-ups quote
• Can only provide limited metadata, never message contents
• Cannot decrypt email bodies or attachments
• Publishes a running transparency report

What They Can Provide

• Account creation date
• Last login time
• IP addresses (if logging ordered)
• Recovery email (if provided)
• Payment information

What They Cannot Provide

• Email contents (encrypted)
• Contacts
• Calendar entries
• Drive files

Foreign governments cannot compel Proton directly. Article 271 of the Swiss Criminal Code bars Proton from handing data straight to a foreign authority, so requests must run through Swiss authorities or a mutual legal assistance treaty, which is the exact route used in the 2024 Catalan and 2026 Stop Cop City cases above. Today Swiss law allows a targeted logging order on a named account but no blanket retention, and it cannot force Proton to decrypt what it never holds keys to. The pending VUePF revision is what would change that math.

Tips for Maximum Privacy

Operational Security

1. Always use Tor - Hide your IP
2. Separate identities - Don't mix accounts
3. Anonymous payment - Bitcoin or cash
4. Unique passwords - Never reuse
5. Compartmentalization - Different purposes

Avoid

• Using real name in address
• Linking to phone number
• Same password as other accounts
• Accessing without VPN/Tor
• Sending sensitive data in subject lines

The Bottom Line

Use Proton Mail when:

• You need encrypted email
• Swiss jurisdiction appeals
• Ease of use matters
• You understand the limitations

Consider alternatives when:

• Complete anonymity required
• Nation-state adversary
• Need self-hosting control
• Budget is very tight

Frequently Asked Questions

Is Proton Mail really secure?

Yes, the encryption is solid. But remember: they must comply with Swiss law and can be ordered to log specific accounts.

Can Proton Mail read my emails?

No. Message bodies are encrypted with your password. Even Proton Mail cannot decrypt them.

Is the free version sufficient?

For basic use, yes. Limited storage (1GB) and sending limits may require upgrading.

Should I use Proton Mail for illegal activities?

Absolutely not. They will comply with valid legal requests. No email service is above the law.

Can I use Proton Mail with my email client?

Yes, with Proton Mail Bridge (paid plans only). Maintains encryption while using Thunderbird, Outlook, etc.

Additional Resources

• ProtonMail Security Details
• ProtonMail Transparency Report
• ProtonMail Threat Model
• ProtonMail Onion Site

--- Last updated: July 6, 2026 Proton Mail remains one of the best encrypted email options despite its limitations. Understanding what it can and cannot protect is what matters.