692 results found

1. Critical Security Vulnerability: Missing Default-Deny Policy – Why Whitelist Fails Against Zero-Click Exploits (State Trojans)

   Dear Proton Team,

   Currently, Proton Mail under "Blocked and Allowed Senders Lists" offers only a whitelist as a positive exception in a system that standardly accepts everything ("Default-Allow").

   • The "Allowed" function serves merely to move important emails back from the Spam folder to the Inbox. It does not prevent the receipt of emails from other domains.

   • The "Blocked" function serves to block known, malicious senders.

   The Fundamental Security Problem: For users who need to protect themselves against Zero-Click Exploits (e.g., advanced state trojans like Pegasus or similar spyware), this "Default-Allow" model is fundamentally insufficient and dangerous.

   1. The Impossibility of a Complete Blocklist: An attacker can register thousands of domains or use hacked servers to send malicious emails. A "Blocked" list can never cover all future, unknown attackers. As soon as a new, malicious domain is created, it is not on the list, and the email is accepted.

   2. The Risk of Server-Side Acceptance: As long as the Proton server accepts every connection from an unknown domain (even if it is later moved to Spam), there is a critical risk that a Zero-Click Exploit could be executed during the processing phase (rendering images, parsing metadata, analyzing attachments). The malicious code does not even need the user to open it; it can compromise the email client or server infrastructure as soon as the data touches the server.

   3. Misunderstanding of the Current "Allowed" List: Many users mistakenly believe that an "Allowed" list automatically blocks everything else. This is technically not the case. The current list is only a filter ensuring that certain emails do not land in Spam. It is not a firewall that cuts off access for everyone else.

   The Demand: A True "Strict Allow-Only Mode" (Default-Deny Policy) I demand the introduction of a separate, explicit setting "Allow Only Permitted Senders" that fulfills the following technical requirements:

   • Server-Side Rejection (TCP-Level Blockade): The server must immediately reject every connection from a domain/sender that is not explicitly on the whitelist (e.g., with 550 Access Denied) before the email data is even transmitted.

   • No Data Acceptance: The connection must be severed at the entrance. No data packets containing a potential exploit may be received.

   • Full User Control: Users must be given the opportunity to completely close their digital gate ("Air-Gap" principle for email) without relying on infinite and never-complete blocklists.

   Why Proton Urgently Needs This: Proton advertises worldwide with "maximum protection" and "end-to-end encryption." Yet, without a "Default-Deny" option, the door remains physically open to unknown attackers.

   • Competitive Advantage: With this function, Proton would be the only commercial email provider enabling users to protect themselves against state surveillance and zero-day attacks through strict perimeter security.

   • Existential Necessity: For journalists, whistleblowers, and activists, this is not an optional comfort feature, but a matter of survival.

   Next Steps: Please evaluate this request for technical feasibility and prioritize its integration into the roadmap for security updates. The responsibility for maintaining the whitelist lies with the user this is the principle of every high-security system. Proton should offer this choice to substantiate its position as the world's safest provider.

   Thank you for your work on a safer internet.

   Dear Proton Team,

   Currently, Proton Mail under "Blocked and Allowed Senders Lists" offers only a whitelist as a positive exception in a system that standardly accepts everything ("Default-Allow").

   • The "Allowed" function serves merely to move important emails back from the Spam folder to the Inbox. It does not prevent the receipt of emails from other domains.

   • The "Blocked" function serves to block known, malicious senders.

   The Fundamental Security Problem: For users who need to protect themselves against Zero-Click Exploits (e.g., advanced state trojans like Pegasus or similar spyware), this "Default-Allow" model is fundamentally insufficient and dangerous.

   1. The Impossibility of a… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. UI elements for Emails - too much & too big

   When opening an email - especially on mobile - UI elements are too big, to much of them and maybe they shouldn't all be there. See screenshot here - https://drive.proton.me/urls/0G7Y7D3WF0#mL6N900V24rk

   1. "This image is from a mailing list" - I know this and usually there is a link for unsubscribe, so not needed there. Also people might feel forced every time they open an email from a list to unsubscribe.

   2. "Some images failed to load...." - This is also not necessary. I would rather have a general settings for all emails. Maybe you could find a solution to load images to a temporary place, remove trackers then serve us the clean images.

   As you can see in the screenshoot around 80% of the screen is not the content of the email + instead of start reading the email, I have to address options with most of these emails.

   When opening an email - especially on mobile - UI elements are too big, to much of them and maybe they shouldn't all be there. See screenshot here - https://drive.proton.me/urls/0G7Y7D3WF0#mL6N900V24rk

   1. "This image is from a mailing list" - I know this and usually there is a link for unsubscribe, so not needed there. Also people might feel forced every time they open an email from a list to unsubscribe.

   2. "Some images failed to load...." - This is also not necessary. I would rather have a general settings for all emails. Maybe you could find a solution to load images to… more

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. When I open or use the preview in calendar, show the create date for repeating events.

   Since we don't have any task system, I create repeating events to remind me to complete some task like for example checking a credit card refund. 3 months down the track when I look at the event I want to be able to see the first date for this event. Easier than having to scroll back through a busy calendar trying to work it out.

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Buttons should be at the end of the mail

   Dear ProtonMail team,

   I would like to suggest a usability improvement for the webmail interface.

   Currently, the action buttons (such as delete, archive, etc.) are positioned above the email content. In practice, this creates friction: after reading a message, I often want to take an action, but I have to scroll back to the top to access those buttons.

   It would improve the user experience significantly if these action buttons were also available at the end of the email, or if they remained visible while scrolling. This would allow users to act immediately after reading, without unnecessary navigation.

   Thank you for considering this suggestion.

   Kind regards,
   Mihai

   Dear ProtonMail team,

   I would like to suggest a usability improvement for the webmail interface.

   Currently, the action buttons (such as delete, archive, etc.) are positioned above the email content. In practice, this creates friction: after reading a message, I often want to take an action, but I have to scroll back to the top to access those buttons.

   It would improve the user experience significantly if these action buttons were also available at the end of the email, or if they remained visible while scrolling. This would allow users to act immediately after reading, without unnecessary navigation.

   Thank you… more

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Show time zone names (or custom labels) in the calendar view, not just GMT offsets

   When two time zones are enabled, both columns are only labeled with their GMT offset. Example: Europe/Vienna and Africa/Johannesburg both display as "GMT+2" during European summer time — completely indistinguishable. In winter the offset differs by one hour, but "GMT+1 / GMT+2" still doesn't tell you which column belongs to which zone.

   Please show one of the following next to (or instead of) the offset:

   The IANA city name (e.g. Vienna, Johannesburg), or
   A user-defined label per zone, or
   The standard abbreviation (CET/CEST, SAST).

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Spam mails not forwarded to group members

   Currently Proton does not forward emails that are classified as spam to group members. The problem is that there no trace (at least for Visionary plan) of this retention. It is really annoying with wrong positive spams.

   Please find a way to warn at least the admin of the domain. Or simply distribute it to all group user spam folders.

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Icon and Text - Customize Toolbar

   Allow the option to have both Icon and Text when reading messages. Apple Mail has this option. I know what the trash and archive icons look like but it takes a half a second to focus that you are hitting the correct one so you don't delete an email that you want to archive. When the text is there (Archive, Trash) you can do it instantly without having to focus on it.

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Function to convert labels to folders including nesting

   Function within the Settings page to allow conversion of labels to folders

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. PST and MBOX files

   Add the ability to import PST and MBOX files via the import/export tool and not just via the Webui Easy Switch

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Partial export of .ics of Calendar

    In order to update records locally, it would be useful to be able to export only part of the calendar’s .ics file so that we can update local records without having to export the entire calendar every time, which becomes cumbersome for daily updates.

    Ideally, it would be possible to set a date range for the export.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Storing showing read/unread prefference

    Enable making showing only read/unread/... etc a default. We can already filter on this (on desktop using Show filter in the top right), but this isn't stored. I would love for this to be stored somehow. This could be done in many ways.
    - Store it as user preference after change
    - Adding an additional setting to the settings that allows us to set the default

    It is stored in the url (#filter=unread), but this is reset when clicking on the inbox button.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. A better cleaner, simpler new message window

    A broader open window more like google (sorry) but it is clean,simple and I don't feel like I'm trying to view the world through a mailbox slit.
    Also please when making a response.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating