2371 results found

1. Critical Security Vulnerability: Missing Default-Deny Policy – Why Whitelist Fails Against Zero-Click Exploits (State Trojans)

   Dear Proton Team,

   Currently, Proton Mail under "Blocked and Allowed Senders Lists" offers only a whitelist as a positive exception in a system that standardly accepts everything ("Default-Allow").

   • The "Allowed" function serves merely to move important emails back from the Spam folder to the Inbox. It does not prevent the receipt of emails from other domains.

   • The "Blocked" function serves to block known, malicious senders.

   The Fundamental Security Problem: For users who need to protect themselves against Zero-Click Exploits (e.g., advanced state trojans like Pegasus or similar spyware), this "Default-Allow" model is fundamentally insufficient and dangerous.

   1. The Impossibility of a Complete Blocklist: An attacker can register thousands of domains or use hacked servers to send malicious emails. A "Blocked" list can never cover all future, unknown attackers. As soon as a new, malicious domain is created, it is not on the list, and the email is accepted.

   2. The Risk of Server-Side Acceptance: As long as the Proton server accepts every connection from an unknown domain (even if it is later moved to Spam), there is a critical risk that a Zero-Click Exploit could be executed during the processing phase (rendering images, parsing metadata, analyzing attachments). The malicious code does not even need the user to open it; it can compromise the email client or server infrastructure as soon as the data touches the server.

   3. Misunderstanding of the Current "Allowed" List: Many users mistakenly believe that an "Allowed" list automatically blocks everything else. This is technically not the case. The current list is only a filter ensuring that certain emails do not land in Spam. It is not a firewall that cuts off access for everyone else.

   The Demand: A True "Strict Allow-Only Mode" (Default-Deny Policy) I demand the introduction of a separate, explicit setting "Allow Only Permitted Senders" that fulfills the following technical requirements:

   • Server-Side Rejection (TCP-Level Blockade): The server must immediately reject every connection from a domain/sender that is not explicitly on the whitelist (e.g., with 550 Access Denied) before the email data is even transmitted.

   • No Data Acceptance: The connection must be severed at the entrance. No data packets containing a potential exploit may be received.

   • Full User Control: Users must be given the opportunity to completely close their digital gate ("Air-Gap" principle for email) without relying on infinite and never-complete blocklists.

   Why Proton Urgently Needs This: Proton advertises worldwide with "maximum protection" and "end-to-end encryption." Yet, without a "Default-Deny" option, the door remains physically open to unknown attackers.

   • Competitive Advantage: With this function, Proton would be the only commercial email provider enabling users to protect themselves against state surveillance and zero-day attacks through strict perimeter security.

   • Existential Necessity: For journalists, whistleblowers, and activists, this is not an optional comfort feature, but a matter of survival.

   Next Steps: Please evaluate this request for technical feasibility and prioritize its integration into the roadmap for security updates. The responsibility for maintaining the whitelist lies with the user this is the principle of every high-security system. Proton should offer this choice to substantiate its position as the world's safest provider.

   Thank you for your work on a safer internet.

   Dear Proton Team,

   Currently, Proton Mail under "Blocked and Allowed Senders Lists" offers only a whitelist as a positive exception in a system that standardly accepts everything ("Default-Allow").

   • The "Allowed" function serves merely to move important emails back from the Spam folder to the Inbox. It does not prevent the receipt of emails from other domains.

   • The "Blocked" function serves to block known, malicious senders.

   The Fundamental Security Problem: For users who need to protect themselves against Zero-Click Exploits (e.g., advanced state trojans like Pegasus or similar spyware), this "Default-Allow" model is fundamentally insufficient and dangerous.

   1. The Impossibility of a… more

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. UI elements for Emails - too much & too big

   When opening an email - especially on mobile - UI elements are too big, to much of them and maybe they shouldn't all be there. See screenshot here - https://drive.proton.me/urls/0G7Y7D3WF0#mL6N900V24rk

   1. "This image is from a mailing list" - I know this and usually there is a link for unsubscribe, so not needed there. Also people might feel forced every time they open an email from a list to unsubscribe.

   2. "Some images failed to load...." - This is also not necessary. I would rather have a general settings for all emails. Maybe you could find a solution to load images to a temporary place, remove trackers then serve us the clean images.

   As you can see in the screenshoot around 80% of the screen is not the content of the email + instead of start reading the email, I have to address options with most of these emails.

   When opening an email - especially on mobile - UI elements are too big, to much of them and maybe they shouldn't all be there. See screenshot here - https://drive.proton.me/urls/0G7Y7D3WF0#mL6N900V24rk

   1. "This image is from a mailing list" - I know this and usually there is a link for unsubscribe, so not needed there. Also people might feel forced every time they open an email from a list to unsubscribe.

   2. "Some images failed to load...." - This is also not necessary. I would rather have a general settings for all emails. Maybe you could find a solution to load images to… more

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. “Read Receipt” as DEFAULT for Mac app users? Thanks.

   It would be very helpful, IMHO, to have a default setting option to request read receipts for outgoing messages. Thank you!

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. For Huawei devices

   Hi, I like the app and it would be nice if it is also available natively for Huawei devices in its app store, appgallery, for a better experience

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Booking Page - Sync availebility from my calendar

   I do photography on my free time, therefore my booking page might have availibility from 4pm to 10pm on weekdays and 10am to 6pm on weekends. I would like to have the option to sync my standard calendar into the availibility on the booking page.

   That way any meetings with friends etc. I have set in my calendar will automatically block the time in the booking calendar. In addition i want the option to then also block a selcted time before and after to make sure I can make both appointments.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Function to convert labels to folders including nesting

   Function within the Settings page to allow conversion of labels to folders

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Partial export of .ics of Calendar

   In order to update records locally, it would be useful to be able to export only part of the calendar’s .ics file so that we can update local records without having to export the entire calendar every time, which becomes cumbersome for daily updates.

   Ideally, it would be possible to set a date range for the export.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Add event to calendar from email app

   Possibility to add and event to the calendar from an email on the mobile app, as it exists on the desktop app or online

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Set message expiry in the mobile

   Allow users to set messages to expire directly on the mobile app. It is currently only supported through the web interface.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. SimpleLogin Alias Export CSV Should Include Display Names

    The "Display Name" field for aliases should be backed up into the CSV file that gets produced when going to Alias import/export -> Export Aliases under Settings.

    At present, notes entered under "Alias Description" are included, but Display Names are absent.

    The Display Name field allows for custom per-alias user entered names that should certainly be preserved in backups, and restored in the event that the CSV file gets used "for a future batch import" -- which is one of its explicitly stated purposes.

    At present, my manual workaround is to ensure that custom Display Names are also copied and pasted into the Description fields for their respective aliases, so that they at least get backed up in some fashion.

    The "Display Name" field for aliases should be backed up into the CSV file that gets produced when going to Alias import/export -> Export Aliases under Settings.

    At present, notes entered under "Alias Description" are included, but Display Names are absent.

    The Display Name field allows for custom per-alias user entered names that should certainly be preserved in backups, and restored in the event that the CSV file gets used "for a future batch import" -- which is one of its explicitly stated purposes.

    At present, my manual workaround is to ensure that custom Display Names are also copied and… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Birthday Entry is Very Difficult

    Presently, entering a birthday requires that I use the calendar pop-up to choose the birthday and it must require a year. My friends ar 70 years old. Scrolling the calendar back on moth at a time for something like 840 months is torture. Can you make it I can just type in the birthdate so I can get on with my life?

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Search function in Newsletters

    I use the Newsletters feature and have over 300 active newsletters that are listed. When looking to make a change it would be helpful to have a search function to easily find a particular newsletter.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Mute a conversation/thread

    Like in other email providers, it should be possible to "mute" a thread.
    By doing so, other emails coming in the thread would not trigger a notification, nor put back the archived thread in the inbox.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Passwords for Password-protected emails selected by recipient

    Currently when sending Password-protected emails to non-proton recipients the sender has to select the password, notify the recipient of the password, and manually record the password for future correspondence. It is tedious and has two major issues.
    1. The first issue is if you want to send the message to multiple people they must both have the same password.
    2. If a recipient receives password-protected emails from more than one protonmail senders, they would need to track and keep a log of passwords for each and every sender.
    A solution would be to have the recipient select a password to decrypt the email link and store the password on a server in the same manner that passwords are handled for any other email (proton to proton, etc).
    Because the process of sending password-protect emails is tedious, it is rarely used (by me at least) and any email sent or cc'd to a recipient is on the gmail, yahoo, hotmail, etc. servers in plain text where companies like google can glean the content. Furthermore in the US, Section 702 of the FISA act allows the government to gather texts and emails from overseas without a warrant. Protonmail originates from overseas (Switzerland).
    An easy way to send and receive secure email from protonmail to non-proton recipients would go a long way to making protonmail secure.

    Currently when sending Password-protected emails to non-proton recipients the sender has to select the password, notify the recipient of the password, and manually record the password for future correspondence. It is tedious and has two major issues.
    1. The first issue is if you want to send the message to multiple people they must both have the same password.
    2. If a recipient receives password-protected emails from more than one protonmail senders, they would need to track and keep a log of passwords for each and every sender.
    A solution would be to have the recipient select a password to… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. search bar - ios search

    It would be great if the search icon/bar could be implemented at the bottom next to the write button and not at the top right corner, such as in the iOS system like in Mail, Settings, etc.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Move Multiple Messages Simultaneously

    For better organisation it would be useful to be able to move multiple messages (in a single conversation) to another mailbox by selecting the "Move to" function in the highest message in that conversation.

    Unless anyone can tell em otherwise this does not appear to be the case at present.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Booking Page - Disable feature altogether

    The booking pages form a great feature for business users, but seeing as I use Proton as my personal account, I now have a permanent button to a feature that I don't use - and thus - have a cluttered calendar. I would prefer if I was able to disable the booking pages feature altogether, via the integrations settings, for example.

    https://i.gyazo.com/6022bc6552df86c6f7e903aba002f22e.png

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Couleurs mail et calendrier et personnalisation fond par images personnelles

    Il conviendrait rapidement
    1 . d'augmenter sensiblement la palette des choix de couleurs disponibles pour marquer les évènements courriels et calendrier.
    2 de permettre la personnalisation de l'affichage avec des fonds d'images personnelles

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Auto-delete unwanted messages options

    Would be useful to enable auto-delete only for trash or spam separately, and being able to decide the number of days to wait (at least among a list of presets)

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Please enable the ability to make an email pop out so we're not restricted to reading and editing emails in the limited preview window.

    I’d like to request the ability to open emails in a separate window (pop-out) directly from the inbox or preview pane.
    Currently, emails can only be viewed within the preview pane, which limits visibility of content and access to full functionality. This creates friction when reviewing longer or more complex messages.
    Ideally, this would function similarly to other email clients, where a user can:
    preview an email in the reading pane, and open that same email in a separate window or tab for full viewing and interaction
    At present, there does not appear to be a clear or consistent way to do this in the current interface.
    Adding this capability would significantly improve usability and workflow efficiency.
    Thank you for your consideration.

    I’d like to request the ability to open emails in a separate window (pop-out) directly from the inbox or preview pane.
    Currently, emails can only be viewed within the preview pane, which limits visibility of content and access to full functionality. This creates friction when reviewing longer or more complex messages.
    Ideally, this would function similarly to other email clients, where a user can:
    preview an email in the reading pane, and open that same email in a separate window or tab for full viewing and interaction
    At present, there does not appear to be a clear or consistent way… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating