Last update Jan. 16, 2025
How to protect myself?
Tips to maximize privacy and security with ProtonMail.
- Enable Two-Factor Authentication (2FA)
- Regularly Update Your Recovery Email or Key
- Be Wary of Phishing Attempts
- Understand ProtonMail’s Limits: While ProtonMail encrypts your email contents, metadata like sender/recipient email addresses and timestamps may still be visible.
- Enable two-factor authentication for additional security.
- Use a strong, unique password for your account.
- Avoid sharing your account recovery email or phone number.
- Be cautious with phishing attempts and links in emails.
Can I delete my data?
Yes, ProtonMail allows you to permanently delete your account and associated data. Note that deleted data cannot be recovered. How to delete your Proton Account
How can I delete my data?
ProtonMail provides tools to delete your account and data permanently.
- Navigate to 'Settings' > 'Account' to access the delete account option.
- Deleting your account will permanently remove all emails and associated data.
- ProtonMail does not retain deleted data due to its zero-access encryption policy.
What happens when I sign up?
ProtonMail collects minimal data when you sign up.
- Only an email and password are required for basic accounts.
- Optional recovery email or phone number is used solely for account recovery.
- No IP addresses are logged.
What data are collected?
ProtonMail collects minimal data, primarily for account creation (e.g., email address and optional recovery email). It does not log IP addresses by default.
How long is my data stored?
Your data retention is managed securely by ProtonMail.
- Emails remain stored as long as you do not delete them.
- Deleted emails are removed permanently from servers.
- Data backups are encrypted and kept only temporarily.
Who can access my data?
ProtonMail has strict policies on who can access your data.
- Data is encrypted end-to-end, making it inaccessible even to ProtonMail.
- Only you have the encryption key to decrypt your emails.
- Requests for data by authorities must comply with Swiss law.
How are my data used?
ProtonMail encrypts emails end-to-end.
- Emails are encrypted locally before being sent.
- ProtonMail does not share your data with third parties.
- Only minimal metadata is collected to ensure functionality.
Does this service use AI?
ProtonMail does not use AI for email processing.
- AI is not used for analyzing or processing emails.
- No data is used for training AI models.
- ProtonMail prioritizes privacy over automation.
Are there ethical concerns with the service's AI implementation?
ProtonMail takes ethical approaches with its systems.
- No ethical concerns as AI is not used.
- ProtonMail is transparent about its non-AI stance.
- Focus remains on privacy and user control.
What encryption methods does this service use?
ProtonMail employs the best encryption practices.
- End-to-end encryption is applied using OpenPGP standards.
- All data at rest is encrypted with AES-256.
- TLS ensures secure communication during data transmission.
Does this service support two-factor authentication?
ProtonMail supports strong account security measures.
- Yes, ProtonMail supports two-factor authentication (2FA).
- 2FA options include TOTP and hardware security keys.
- Enabling 2FA significantly enhances account security.
Is my data secure?
ProtonMail ensures robust security to protect your data.
- Data is encrypted locally before being sent.
- Stored data is encrypted with AES-256 encryption.
- Servers are located in secure facilities in Switzerland.