ProtonMail
protonmail.com
An end-to-end encrypted anonymous email service. ProtonMail has a modern easy-to-use and customizable UI, as well as fast, secure native mobile apps. ProtonMail has all the features that you'd expect from a modern email service and is based on simplicity without sacrificing security. It has a free plan or a premium option for using custom domains (starting at $5/month). ProtonMail requires no personally identifiable information for signup, they have a .onion server, for access via Tor, and they accept anonymous payment: BTC and cash (as well as the normal credit card and PayPal).
- Homepage:protonmail.com
- GitHub:github.com/ProtonMail/WebClients
- Privacy:proton.me/legal/privacy
- iOS App:apps.apple.com/us/app/proton-mail-encrypted-email/id979659905
- Android App:play.google.com/.../ch.protonmail.android
- Subreddit:r/ProtonMail
- Web info:web-check.xyz/check/protonmail.com
ProtonMail Privacy Policy
Privacy Policy Summary
- The service provides two factor authentification for your account
- This service provides an onion site accessible over Tor
- Terms may be changed any time at their discretion, without notice to you
- Any liability on behalf of the service is only limited to the fees you paid as a user
- Instead of asking directly, this Service will assume your consent to changes of terms merely from your usage.
- This service is only available to users over a certain age
- Pseudonyms are allowed
- You can opt out of promotional communications
- Your IP address is collected, which can be used to view your approximate location
- The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection.
- Your account can be suspended for several reasons
- Third parties are involved in operating the service
- The service is not responsible for linked or (clearly) quoted content from third-party content providers
- This service assumes no responsibility and liability for the contents of links to other websites
- You are prohibited from sending chain letters, junk mail, spam or any unsolicited messages
- You can access most of the pages on the service's website without revealing any personal information
- The service informs you that its privacy policy does not apply to third party websites
- The service has a no refund policy
- You agree not to use the service for illegal purposes
- You agree not to submit libelous, harassing or threatening content
- You are prohibited from attempting to gain unauthorized access to other computer systems
- The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
- The service does not guarantee accuracy or reliability of the information provided
- Invalidity of any portion of the Terms of Service does not entail invalidity of its remainder
- Failure to enforce any provision of the Terms of Service does not constitute a waiver of such provision
- Information is provided about how your personal data is used
- The court of law governing the terms is in Switzerland
- Minors must have the authorization of their legal guardians to use the service
- Alternative accounts are not allowed
- The service is provided 'as is' and to be used at your sole risk
- No guarantee is given regarding quality
- This service assumes no liability for unauthorized access to your personal information
- The service assumes no liability for any damages the user incurs
- You agree to defend, indemnify, and hold the service harmless in case of a claim related to your use of the service
- This service is only available to users over 13 years old
- You authorise the service to charge a credit card supplied on re-occurring basis
- This service has a no refund policy with some exceptions
- Certain features may be throttled
- Other applicable rules, terms, conditions or guidelines
- The service suspends your account after inactivity for a certain or uncertain time
- Prices and fees may be changed at any time, without notice to you
- The service claims to be GDPR compliant for European users
- Referring and/or exit pages are tracked
- You agree to comply with the law of the service's country
- You are forced into binding arbitration in case of disputes
- The terms for this service are translated into different languages
- There is a date of the last update of the agreements
Score
Documents
- Information for Law Enforcement AuthoritiesCreated 23 Sept 19, Last modified 1 month ago
- Transparency ReportCreated 20 Sept 18, Last modified 6 months ago
- Data Processing AgreementCreated 23 Apr 19, Last modified 6 months ago
- Privacy PolicyCreated 24 Aug 18, Last modified 1 month ago
- Terms of ServiceCreated 24 Aug 18, Last modified 1 month ago
Domains Covered by Policy
- protonmail.com
- protonmail.ch
- getproton.me
- pm.me
- protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
- proton.me
- protonapps.com
About the Data
This data is kindly provided by tosdr.org. Read full report at: #491
ProtonMail Source Code
Author
Description
Monorepo hosting the proton web clients
Homepage
Repository
- LicenseGPL-3.0
- Created08 Jun 16
- Primary languageTypeScript
- Size4,070,349 KB
- Stars5,570
- Forks706
- Watchers5,570
Top Contributors
@mmso (5228)
@edvincandon (4391)
@EpokK (3108)
@flavienbonvin (2708)
@nico3333fr (2558)
@econdepe (1638)
@StraightOuttaCrompton (1453)
@Swiip (1292)
@LeGrosSancho (1245)
@Guillaumez (1221)
@proton-ci (1208)
@HeadFox (929)
@D-Bao (912)
@lkpch (904)
@Twikito (738)
@horejsek (562)
@vincaslt (446)
@MatthiasMargot (424)
@kevin-ta (408)
@dhoko (367)
@MantvidasProton (366)
@djankovic (357)
@larabr (281)
@p2kmgcl (255)
@Vijayasingam (236)
@WebAtProton (221)
@sergonius (217)
@jeremybenaim (208)
@pbondoer (206)
@owoloschin (206)
@RayoProton (202)
@pedroamaroproton (156)
@fraser-proton (141)
@eamonnmag (133)
@petreskizlatko (107)
@ElectroNafta (95)
@lubux (82)
@asieraduriz (77)
@nguyenkims (65)
@Yiin (64)
@atmoio (64)
@joelprat (62)
@gruyere-prog (57)
@kylekatarnls (38)
@gudmundur-proton (35)
@ackvf (33)
@irena-zaz (32)
@nicholas-proton (30)
@jpbochi (25)
@vlad-proton (25)
@Linquas (24)
@SoykanA (24)
@mateuszszklarek (23)
@ntnhon (22)
@tripurari001 (22)
@twiss (22)
@annatar (17)
@michaelsobol81 (14)
@Bolza (9)
@naorose-proton (9)
@finngundlach (9)
@giuseppe-arcuti (8)
@denyszet (6)
@Themistoklis (5)
@valentinbonneaud (5)
@acasajus (4)
@DeepSpaceHarbor (4)
@gzafirova (4)
@rob-patchett (4)
@proletarius101 (2)
@ThHareau (2)
@sveinki (2)
@GjorgjiProton (2)
@zhj4478 (1)
@the-narwhal (1)
@kwojwaj (1)
@keithfancher (1)
@zlatkopetreski (1)
@raincz (1)
@szepeviktor (1)
@Tobion (1)
@sathia27 (1)
@Richardds (1)
@ralphdolmans (1)
@nagromc (1)
@odontomachus (1)
@cuthix (1)
@emilio (1)
@itsmedondi (1)
@hoit-distance (1)
@ceriveraproton (1)
@cmolina (1)
@akanshgulati (1)
Recent Commits
MargeBot(03 Sept 26)
Merge branch 'IDTEAM-6445-remove-experimental-website-rules-flag' into 'main' [IDTEAM-6445] Remove PassExperimentalWebsiteRules feature flag See merge request web/clients!27759
[IDTEAM-6445] Remove PassExperimentalWebsiteRules feature flag
MargeBot(03 Sept 26)
Merge branch 'INWEB-1226/tar-upgrade-2' into 'main' INWEB-1226: Upgrade tar for SOC2 See merge request web/clients!27883
Paolo Chiabrera(03 Sept 26)
INWEB-1226: Upgrade tar for SOC2
MargeBot(03 Sept 26)
Merge branch 'INWEB-1226/decompress' into 'main' INWEB-1226: Upgrade @xhmikosr/decompress for SOC2 See merge request web/clients!27865
Paolo Chiabrera(03 Sept 26)
INWEB-1226: Upgrade @xhmikosr/decompress for SOC2
MargeBot(03 Sept 26)
Merge branch 'INWEB-1226/7zip' into 'main' INWEB-1226: Upgrade 7zip binaries for SOC2 See merge request web/clients!27871
Paolo Chiabrera(03 Sept 26)
INWEB-1226: Upgrade 7zip binaries for SOC2
MargeBot(03 Sept 26)
Merge branch 'update-family-invite-copy' into 'main' Update family invite modal copy to drop plan name check See merge request web/clients!27862
Update family invite modal copy to drop plan name check
MargeBot(03 Sept 26)
Merge branch 'refactor/components-plan-features' into 'main' refactor(components): plan features carry the icon component See merge request web/clients!27824
refactor(components): plan features carry the icon component `PlanCardFeatureDefinition.icon` becomes `PlanCardFeatureIcon` — a `ComponentType` rather than an element. Two reasons it cannot be a `ReactNode` like the rest of this series: eight of the thirteen feature configs are `.ts` files and cannot build JSX, and render sites choose their own `iconSize`, which a pre-built element cannot take without `cloneElement`. The same type now backs the cancellation-flow features, `getPlanFeatures`, the offers `Feature`, and the `UsagePanel` and `UpsellModalPanel` item types, which converts roughly 240 icon literals across the feature configs, the ten cancellation configs, the subscription and upsell panels, the three `FromFree` upsells, `DealFeatures`, and the test fixtures. Ten `as IconName` and fifteen `as const` casts go away with them. Three things the compiler caught that were relying on the icon being a string: - `SubscriptionPanel` decided whether to show the b2b users row by comparing `feature.icon === 'users'`; it now compares against `IcUsers`. - `UsagePanel`, `DealFeatures` and `MailShortDomainPostSubscriptionModal` used the icon name as a React key. They now key on the item text, or on an explicit `id` where the text is a `ReactNode`. - `UpsellPanel`, `UpsellPanelV2` and `SubscriptionItems` interpolated the icon into a fallback key; that segment is dropped. `MailShortDomainPostSubscriptionModal`'s list is local to a `.tsx` file, so it holds elements rather than components. `offers` `topButton.icon` stays an `IconName` — it feeds `PromotionButton`, which is a later tranche. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> refactor(components): plan features carry a stable id `PlanCardFeatureDefinition.id` is a required string: the React key at every render site, and the only thing business logic should match a feature on. Both were previously derived from properties that exist to be changed. The subscription panel decided whether to show the b2b users row by comparing `feature.icon` against `IcUsers`. The list renderers keyed on `typeof text === 'string' ? text : ...`, where the fallback was built from `tooltip`, `included` and `status` — with the `included: false` rows already filtered out above it, that is the same string for every feature whose text is not a plain string — or on the array index. Ids are kebab-case, derived from the builder name minus `get` and `Feature`, so `getNAddressesFeatureB2B` is `n-addresses-b2b`. Where two modules export the same name the id takes a module prefix: `calendar-`, `drive-` and `mail-end-to-end-encryption`, `b2b-support` against `support`, `vpn-priority-support` against `priority-support`. The per-plan objects nested in `PlanCardFeature.plans` take their row's `name`, so the five columns of the user-number row all read `user-number`; they are keyed by the row, not by themselves. Requiring the field rather than making it optional is what made this mechanical: the compiler enumerated all 392 literals, including the signup configurations in applications/account, `getPlanInformation`, and the test fixtures. Ten render sites now key on it: `SubscriptionItems`, `UpsellPanel`, `UpsellPanelV2`, `ReferralTopBanner`, the five `*FromFree` and `CurrentPlanInfoSection` lists, and `PlanCardFeatures`, which drops its `react/no-array-index-key` disable. The index key there existed so a skeleton row and the row replacing it would not remount; they share an id, so that still holds. `upsellsShowB2BUsersRow` replaces the icon comparison. It deliberately still matches the four features the icon-based check happened to match: contact groups, meet participants and manage-user-permissions all render the users icon too, so a Meet Business upsell has always switched the row on through "N participants". Narrowing it to the users feature changes what renders, so it is left to a follow-up. Four test files cover the invariant: - `featureIds.test.ts` scans the feature configs and asserts no id is produced by two different builders. `getB2BHighSpeedVPNConnectionsFeature` and `getB2BHighSpeedVPNConnections` return identical features and share one, which the test allowlists; they should be collapsed into a single builder. - `planCardFeatureIds.test.ts` asserts uniqueness within every column of the comparison table and within every short plan — the two list shapes `PlanCardFeatureList` can be handed. - `dashboard-upsells.test.ts` asserts the same for every upsell the dashboard can render, across five apps and fifteen plan states. - `subscriptionPanelHelpers.test.ts` pins the b2b users row, including the three inherited matches, so narrowing the list has to be deliberate. `PlanCardFeatureIcon` also becomes an alias of `IconComponent` rather than a hand-rolled `ComponentType<PlanCardFeatureIconProps>`; the icons package already exports exactly that type. Co-Authored-By: Claude Opus 5 <[email protected]> Benefits Key and id normalization
MargeBot(03 Sept 26)
Merge branch 'cursor/add-plans-rule' into 'main' chore: add cursor rule regarding plans See merge request web/clients!27863
Paolo Chiabrera(03 Sept 26)
chore: add cursor rule regarding plans
MargeBot(03 Sept 26)
Merge branch 'INWEB-1226/websocket-driver' into 'main' INWEB-1226: Upgrade websocket-driver for SOC2 See merge request web/clients!27868
Paolo Chiabrera(03 Sept 26)
INWEB-1226: Upgrade websocket-driver for SOC2
MargeBot(03 Sept 26)
Merge branch 'docs/fix-uninitialized-invites-loading' into 'main' Docs: avoid blocking public documents when Drive SDK is unavailable See merge request web/clients!27774
Daniel Guardiola(03 Sept 26)
Docs: avoid blocking public documents when Drive SDK is unavailable
MargeBot(03 Sept 26)
Merge branch 'feature/unleash-toolbar-docs' into 'main' Enable Unleash toolbar for docs See merge request web/clients!27855
Enable Unleash toolbar for docs
MargeBot(03 Sept 26)
Merge branch 'P2-2480-move-the-search-params-utilities-from-admin-to-proton-utils' into 'main' P2 2480 move the search params utilities from admin to proton utils See merge request web/clients!27838
Andrea Mannara(03 Sept 26)
P2 2480 move the search params utilities from admin to proton utils
MargeBot(03 Sept 26)
Merge branch 'INWEB-1226/babel-traverse' into 'main' INWEB-1226: Drop cross-var for SOC2 See merge request web/clients!27864
Paolo Chiabrera(03 Sept 26)
INWEB-1226: Drop cross-var for SOC2
MargeBot(03 Sept 26)
Merge branch 'meet-backgrounds-on-mobile' into 'main' Meet backgrounds on mobile See merge request web/clients!27707
István Barna(03 Sept 26)
Meet backgrounds on mobile
MargeBot(03 Sept 26)
Merge branch 'ref.payment.methods.one' into 'main' P2-2489 - Refactor: simplify payment method types See merge request web/clients!27807
Jonathan Bosi(03 Sept 26)
P2-2489 - Refactor: simplify payment method types
MargeBot(03 Sept 26)
Merge branch 'INWEB-1226/form-data-upgrade' into 'main' INWEB-1226: Upgrade form-data for SOC2 See merge request web/clients!27861
Paolo Chiabrera(03 Sept 26)
INWEB-1226: Upgrade form-data for SOC2
ProtonMail Website
Website
301 Moved Permanently
Redirects
Redirects to https://proton.me/mail
Security Checks
1 security checks failed (64 passed)
- External Redirect Detected
Server Details
- IP Address185.70.42.12
- Hostname185-70-42-12.protonmail.ch
- LocationFrankfurt am Main,Hessen,Germany,EU
- ISPProton AG
- ASNAS62371
Associated Countries
CH
DE
US
Safety Score
Website marked as safe
100%
Blacklist Check
protonmail.com was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
ProtonMail Android App
APK Info
- AppProtonMail - Encrypted Email
- Creation Date23 Nov 17
- Last Updated19 Jul 24
- Current Version1.7.2
- CreatorProtonMail
- Downloads500,000+ downloads
- Privacy ReportView on Exodus →
De-Googled Compatibility
- GrapheneOSNative3.7 / 4(63)
- LineageOSmicroG4.0 / 4(12)
- e OSmicroG4.0 / 4(7)
- LineageOSNative3.4 / 4(7)
- Stock (samsung SM-A047F)Native4.0 / 4(5)
- AxionOSNative3.0 / 4(2)
ProtonMail iOS App
App Info
Proton Mail - Encrypted Email
Keep your conversations private. Proton Mail is encrypted email from Switzerland. Used by millions worldwide, our all-new email app protects your communications and has everything you need to easily manage your inbox. The Wall Street Journal says: “Proton Mail offers encrypted email, which makes it virtually impossible for anyone to read it except the sender and the recipient.” With the all-new Proton Mail app, you can: • Create a @proton.me or @protonmail.com email address • Send and receive encrypted emails and attachments with ease • Switch between multiple Proton Mail accounts • Easily manage your email with conversations • Keep your inbox tidy and clean with folders, labels and simple swipe-gestures • Receive new email notifications • Send Password-protected Emails to anyone • Enjoy your inbox in dark mode Why use Proton Mail? • Proton Mail is free — We believe everyone deserves privacy. Upgrade to a paid plan to get more done and support our mission. • Easy to use — Our all-new app has been redesigned to make it easier to read, organize, and write your emails. • Your inbox is yours — We don’t spy on your communications to show you targeted ads. Your inbox, your rules. • Rigorous encryption — Your entire inbox is secured, on all your devices. No one can read your emails but you. Proton is privacy, guaranteed by end-to-end and zero-access encryption. • Unmatched protection — We offer strong phishing, spam, and spying/tracking protection for all your communications. Industry Leading Security Features Messages are stored on Proton Mail servers using end-to-end encryption at all times and are transmitted securely between Proton servers and user devices. This largely eliminates the risk of message interception. Zero Access to Your Email Content Proton Mail's zero access architecture means that your data is encrypted in a way that makes it inaccessible to us. Data is encrypted on the client side using an encryption key that Proton does not have access to. This means we don't have the technical ability to decrypt your messages. Open-Source Cryptography Proton Mail's open-source software has been thoroughly vetted by security experts from around the world to ensure the highest levels of protection. Proton Mail only uses secure implementations of AES, RSA, along with OpenPGP, while all of the cryptographic libraries used are open source. By using open-source libraries, Proton Mail can guarantee that the encryption algorithms used do not have clandestinely built-in back doors. Proton Mail in the press: “Proton Mail is a Gmail-like email system which uses end-to-end encryption, making it impossible for outside parties to monitor.” Forbes “A new email service being developed by a group who met at MIT and CERN promises to bring secure, encrypted email to the masses and keep sensitive information away from prying eyes.” Huffington Post Follow Proton on social media for all the latest news and offers: Facebook: /proton Twitter: @protonprivacy Reddit: /protonmail Instagram: /protonprivacy Our open-source code base: https://github.com/ProtonMail EULA: http://www.apple.com/legal/itunes/appstore/dev/stdeula
Rating
Version Info
- Current Version7.10.3
- Last Updated13 Jul 26
- First Released17 Mar 16
- Minimum iOS Version17.2
- Device Models Supported127
App Details
- IPA Size255.70 Mb
- PriceFree (USD)
- Age Advisory4+
- Supported Languages29
- DeveloperProton AG
- Bundle IDch.protonmail.protonmail
Screenshots
ProtonMail Docker
Container Info
protonmail-bridge
This is an unofficial Docker container of the ProtonMail Bridge. Some of the scripts are based on Hendrik Meyer's work.
View on DockerHub
shenxn/protonmail-bridge:latestRun Command
docker run -d \ -p 143/tcp \ -p 25/tcp \ -v /portainer/Files/AppData/ProtonMail-Bridge:/root \ --restart=unless-stopped \ shenxn/protonmail-bridge:latest
Compose File
version: 3.8
services:
protonmail-bridge:
image: "shenxn/protonmail-bridge:latest"
ports:
- 143/tcp
- 25/tcp
volumes:
- "/portainer/Files/AppData/ProtonMail-Bridge:/root"
restart: unless-stoppedPort List
- 143/tcp
- 25/tcp
Volume Mounting
- Container PathHost Bind
- /root/portainer/Files/AppData/ProtonMail-Bridge
ProtonMail Reviews
More Encrypted Email
A Berlin-based, eco-friendly secure mail provider. There is no free plan, the standard service costs €12/year. You can use your own domain, with the option of a catch-all alias. They provide good account security and email encryption, with OpenPGP, as well as encrypted storage. There is no dedicated app, but it works well with any standard mail client with SSL. There's also currently no anonymous payment option.
Not Open SourceMailfence supports OpenPGP so that you can manually exchange encryption keys independently from the Mailfence servers, putting you in full control. Mailfence has a simple UI, similar to that of Outlook, and it comes with bundled with calendar, address book, and files. All mail settings are highly customizable, yet still clear and easy to use. Sign up is not anonymous, since your name, and prior email address is required. There is a fully-featured free plan, or you can pay for premium, and use a custom domain ($2.50/ month, or $7.50/ month for 5 domains), where Bitcoin, LiteCoin or credit card is accepted.
Not Open SourceFree and open source email service based in Germany. It has a basic intuitive UI, secure native mobile apps and desktop email clients, anonymous signup, and an encrypted calendar. Tuta has a full-featured free plan and premium subscription plans allowing for custom domains (starting at $3/month). Tuta does not use OpenPGP like other encrypted mail providers, instead they use a standardized, hybrid method consisting of symmetrical and asymmetrical algorithms (with AES256, and RSA 2048 or ECC (x25519) and Kyber-1024). This causes compatibility issues when communicating with contacts using PGP. But it does allow them to encrypt much more of the header data (body, attachments, subject lines, and sender names etc) which PGP mail providers cannot do. The recent upgrades to Tuta's encryption algorithm makes data stored and sent with their service safe against attacks posed by quantum computers.
About the Data: ProtonMail
Change History
- Amended (description) #285
- Amended (androidApp, iosApp, subreddit)
Edit ProtonMail Data
You can edit ProtonMail's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external
sources, a list of these can be found data documentation.
Origin Data
Modify Data
API
You can access ProtonMail's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/protonmailThe REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share ProtonMail
Help your friends compare Encrypted Email, and pick privacy-respecting software and services.
Share ProtonMail and Awesome Privacy with your network!