735 results found

1. (Current) Critical Security Vulnerability: Missing Default-Deny Policy - Why Whitelists Fail Against Zero-Click Exploits (State Trojans)

   (Current Text) April 26, 2026
   Dear Proton Team,

   Currently, Proton Mail under (Filters) "Blocked and Allowed Senders Lists" offers only a whitelist as a positive exception in a system that standardly accepts everything ("Default-Allow"). The "Allow" function serves merely to move important emails back from the Spam folder to the Inbox; it does not prevent the receipt of emails from other domains. The "Block" function serves only to block known, malicious senders.

   The fundamental security problem is that for users who need to protect themselves against Zero-Click Exploits (e.g., advanced state trojans like Pegasus or similar spyware), this "Default-Allow" model is fundamentally insufficient and dangerous. An attacker can register thousands of domains or use hacked servers to send malicious emails. A "Block" list can never cover all future, unknown attackers; as soon as a new, malicious domain is created, it is not on the list, and the email is accepted. Furthermore, as long as the Proton server accepts every connection from an unknown domain (even if it is later moved to Spam), there is a critical risk that a Zero-Click Exploit could be executed during the processing phase, such as rendering images, parsing metadata, or analyzing attachments. The malicious code does not even need the user to open it; it can compromise the email client or server infrastructure as soon as the data touches the server. Many users mistakenly believe that an "Allow" list automatically blocks everything else. Technically, this is not the case. The current list is merely a filter ensuring that certain emails do not land in Spam, not a firewall that cuts off access for everyone else.

   I therefore demand the introduction of a separate, explicit setting "Allow Only Permitted Senders" that fulfills the following technical requirements. First, the whitelist must offer flexible granularity by supporting both individual email addresses and entire domains. This allows users to define permitted senders with two distinct levels of granularity to balance maximum security with practical usability. Individual email addresses are essential for high-security scenarios where only a specific person is trusted (e.g., john.doe@company.com); this prevents access even if other accounts within the same domain are compromised. Entire domains, on the other hand, serve for the efficient management of trusted organizations or partners (e.g., @trusted-partner.com) and allow all current and future senders from that domain without manual maintenance. The system must evaluate incoming mail against both lists, with a specific address rule taking precedence over a general domain rule if conflicts arise.

   Second, server-side rejection at the TCP/SMTP level is required. The server must immediately reject the connection before any data transfer if the sender is not explicitly on the whitelist. This requires validation already during the SMTP handshake, ideally immediately after the EHLO/HELO command or at the latest before the MAIL FROM command. If the sender is not allowed, the server must immediately terminate the TCP connection or return an SMTP error code (e.g., 550 Access Denied or 554 Transaction Failed) before the actual email data transfer (DATA command) begins. No data packets containing potential exploits may be received; the server must not buffer or analyze the email content even temporarily if the sender is not on the list. The connection must be severed at the entrance so that no data packet containing a potential exploit is received by the server infrastructure.

   Third, full user control must be guaranteed. Users must be given the opportunity to completely close their digital gate ("Air-Gap" principle for email) without relying on infinite and never-complete blocklists. The responsibility for maintaining the whitelist lies with the user; this is the principle of every high-security system.

   Proton advertises worldwide with "maximum protection" and "end-to-end encryption." Yet, without a "Default-Deny" option that supports both address and domain whitelisting, the door remains physically open to unknown attackers. With this function, Proton would be the only commercial email provider enabling users to protect themselves against state surveillance and zero-day attacks through strict perimeter security. For journalists, whistleblowers, and activists, this is not an optional comfort feature, but a matter of survival. The ability to whitelist entire domains simplifies communication with teams, while the option to whitelist single addresses ensures precision against targeted attacks.

   Please evaluate this request for technical feasibility and prioritize its integration into the roadmap for security updates. Proton should offer this choice to substantiate its position as the world's safest provider.

   Thank you for your work on a safer internet.

   (Current Text) April 26, 2026
   Dear Proton Team,

   Currently, Proton Mail under (Filters) "Blocked and Allowed Senders Lists" offers only a whitelist as a positive exception in a system that standardly accepts everything ("Default-Allow"). The "Allow" function serves merely to move important emails back from the Spam folder to the Inbox; it does not prevent the receipt of emails from other domains. The "Block" function serves only to block known, malicious senders.

   The fundamental security problem is that for users who need to protect themselves against Zero-Click Exploits (e.g., advanced state trojans like Pegasus or similar spyware), this "Default-Allow" model… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Improve email masking in Daily Notifications (Show first and last characters)

   Currently, Daily Email Notifications only show the first two characters of the recipient address. This makes it difficult to distinguish between similar aliases or folders (e.g., support@... vs super@...).

   I suggest updating the masking logic to show both the beginning and the end of the local part of the email address.
   * Current: su********@proton.me
   * Proposed: su****rt@proton.me or s******t@proton.me

   This provides better clarity while maintaining the privacy of the full address.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Calendar Weekly View: Select hours for better visibility

   add an option to "zoom in" on specific hours, or alternatively add selection tool for a "work day". For instance, I don't need to constantly see the hours of 10pm to 7am, as I never schedule events then. But currently in the weekly view they're always visible, pushing the existing events further down on the screen. Thanks!

   7 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Broader timezone-compatability in Calendar

   I routinely get calendar-invites that can't get imported into Proton Calendar because of some error in the timezone-encoding.
   To import it i have to save the .ics-file, open it in Outlook and then manually enter it into Proton..

   7 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Self-destruct multiple emails

   Currently, the self-destruct option can only be selected for each email individually. It would be really useful to be able to select multiple emails and choose a self-destruct time for all of them.

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. UI elements for Emails - too much & too big

   When opening an email - especially on mobile - UI elements are too big, to much of them and maybe they shouldn't all be there. See screenshot here - https://drive.proton.me/urls/0G7Y7D3WF0#mL6N900V24rk

   1. "This image is from a mailing list" - I know this and usually there is a link for unsubscribe, so not needed there. Also people might feel forced every time they open an email from a list to unsubscribe.

   2. "Some images failed to load...." - This is also not necessary. I would rather have a general settings for all emails. Maybe you could find a solution to load images to a temporary place, remove trackers then serve us the clean images.

   As you can see in the screenshoot around 80% of the screen is not the content of the email + instead of start reading the email, I have to address options with most of these emails.

   When opening an email - especially on mobile - UI elements are too big, to much of them and maybe they shouldn't all be there. See screenshot here - https://drive.proton.me/urls/0G7Y7D3WF0#mL6N900V24rk

   1. "This image is from a mailing list" - I know this and usually there is a link for unsubscribe, so not needed there. Also people might feel forced every time they open an email from a list to unsubscribe.

   2. "Some images failed to load...." - This is also not necessary. I would rather have a general settings for all emails. Maybe you could find a solution to load images to… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. When I open or use the preview in calendar, show the create date for repeating events.

   Since we don't have any task system, I create repeating events to remind me to complete some task like for example checking a credit card refund. 3 months down the track when I look at the event I want to be able to see the first date for this event. Easier than having to scroll back through a busy calendar trying to work it out.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Support Dutch language for Proton Scribe (writing assistant)

   Add the Dutch language to Scribe.

   9 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   5 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Jump to sent reply from the original email by clicking on reply icon beside sender name/address

   Once you've replied to an email Proton Mail adds an unfilled reply icon in front of the sender address on the replied-to email and it has "Replied to" as the hover text. However, clicking on this icon does nothing to do with replies, but instead opens the standard sender pop-up ("New message", "Messages from this sender", etc).

   I think that reply icon in front of the sender address to instead take you to the reply you wrote.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Spam mails not forwarded to group members

    Currently Proton does not forward emails that are classified as spam to group members. The problem is that there no trace (at least for Visionary plan) of this retention. It is really annoying with wrong positive spams.

    Please find a way to warn at least the admin of the domain. Or simply distribute it to all group user spam folders.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Icon and Text - Customize Toolbar

    Allow the option to have both Icon and Text when reading messages. Apple Mail has this option. I know what the trash and archive icons look like but it takes a half a second to focus that you are hitting the correct one so you don't delete an email that you want to archive. When the text is there (Archive, Trash) you can do it instantly without having to focus on it.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Clear Proton Mail Android notification, if that new email was read on desktop or another device

    So if I receive a new email, my phone notifies me, and notification stays until I open Proton Mail on my Android phone and read the email. However, if I am at home by my computer, I get a new email, my phone notifies me, but I read that email on my PC instead without touching my phone. The notification of that email stays on my phone screen until I unlock the phone and clear it.
    Gmail app would clear the notification of the new email, if that email was (marked) read through PC or other device.
    Why this is good idea? If I have my phone on my desk, while working with my PC, uncleared notifications of new email, which I already read on my desktop can falsely tell me that there is a new email.

    So if I receive a new email, my phone notifies me, and notification stays until I open Proton Mail on my Android phone and read the email. However, if I am at home by my computer, I get a new email, my phone notifies me, but I read that email on my PC instead without touching my phone. The notification of that email stays on my phone screen until I unlock the phone and clear it.
    Gmail app would clear the notification of the new email, if that email was (marked) read through PC or other device.
    Why this is… more

    9 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. "Reply-All" option is missing in mobile app

    In web browser there is a reply all button but in the app it is not. please add it

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Function to convert labels to folders including nesting

    Function within the Settings page to allow conversion of labels to folders

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. PST and MBOX files

    Add the ability to import PST and MBOX files via the import/export tool and not just via the Webui Easy Switch

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Partial export of .ics of Calendar

    In order to update records locally, it would be useful to be able to export only part of the calendar’s .ics file so that we can update local records without having to export the entire calendar every time, which becomes cumbersome for daily updates.

    Ideally, it would be possible to set a date range for the export.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Storing showing read/unread prefference

    Enable making showing only read/unread/... etc a default. We can already filter on this (on desktop using Show filter in the top right), but this isn't stored. I would love for this to be stored somehow. This could be done in many ways.
    - Store it as user preference after change
    - Adding an additional setting to the settings that allows us to set the default

    It is stored in the url (#filter=unread), but this is reset when clicking on the inbox button.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. A better cleaner, simpler new message window

    A broader open window more like google (sorry) but it is clean,simple and I don't feel like I'm trying to view the world through a mailbox slit.
    Also please when making a response.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Show full folder path in “Move message to…” search results

    Problem:
    When I move an email and type into Move message to…, results only show the leaf folder name. I have parallel structures for different children, e.g.

    Children/KidOne/SchoolOne

    Children/KidTwo/SchoolOne
    Both show up as “SchoolOne”, so I can’t tell which is which.

    Request:
    Display the full folder path (or at least parent folders) in the move dialog’s search results—for example:

    Children / KidOne / SchoolOne

    Children / KidTwo / SchoolOne

    Nice-to-haves:

    Show the full path as a secondary line or breadcrumb.

    Tooltip with the complete path on hover.

    Keyboard navigation should read the full path for accessibility.

    Option to toggle “Show full path in folder lists” in Settings.

    Why
    Reduces misfiling, saves clicks, and helps anyone with mirrored folder trees (families, clients, projects with identical subfolder names).

    Problem:
    When I move an email and type into Move message to…, results only show the leaf folder name. I have parallel structures for different children, e.g.

    Children/KidOne/SchoolOne

    Children/KidTwo/SchoolOne
    Both show up as “SchoolOne”, so I can’t tell which is which.

    Request:
    Display the full folder path (or at least parent folders) in the move dialog’s search results—for example:

    Children / KidOne / SchoolOne

    Children / KidTwo / SchoolOne

    Nice-to-haves:

    Show the full path as a secondary line or breadcrumb.

    Tooltip with the complete path on hover.

    Keyboard navigation should read the full path for accessibility.

    Option to toggle “Show… more

    8 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Customize Proton web mail client toolbar

    Currently in the toolbar you can; mark unread, trash, move, label, and filter.
    With an additional click you can; archive, move to spam, print, etc.
    It would be nice to be able to customize that toolbar and maybe even add more icons, there is plenty of blank space in the bar to add several more icons.
    Thanks!

    7 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating