Accounts & payments
57 results found
-
Choose which identity to keep when downgrading
Please add the feature to allow paid users to decide which identity they get to keep if they return to the free plan.
I signed up with a protonmail.ch address but found myself mostly giving people my protonmail.com address. I want to go back to a free plan now but not being able to change my primary identity to the .com address is a problem.
171 votes -
Visionary Multi-User Support
Instead of creating new Member within the Organisation, let us "add" People that already have an Protonmail Account to our Organisation.
The benefit of that is, the Member will keep it's own Account even after he leaves the Organisation and the Admin/Visionary User just have to allocate the Addresses and Storage!
Simply said: The Admin Creates the Organisation and Add Member with their existing Protonmail Address. If the Member is on a Free Plan, he will get the benefit from the Visionary User.
When the Member leaves the Organisation, he will then fall back to the Free Plan.105 votes -
Reduce 2FA frequency
Having to grab my phone and get a code from Authy every time I want to check my mail is a major PITA. Google only asks for your second-factor authentication
A) every 30 days or
B) when you use a new app to login or
C) when you use a new machine to loginB and C are obviously required. Now, Google's 30-day period before reauthenticating might be too long, but I think users should be able to select how often then want to be required to provide a second-factor code. Allow users to require 2FA every time if they…
56 votes -
Delete (unlink) aliases from ProtonMail account
To protect ProtonMail user privacy and anonymity, we need an option to permanently unlink (delete) aliases from ProtonMail accounts.
Address counter can stay incremented, but the deleted identity (alias) should not be linked to the main account any more. Unlinked e-mail address should stay permanently disabled to prevent address recycling.
A 7, 14 or 30 day deletion waiting time can be implemented to prevent spammers from abusing ProtonMail aliases.
182 votes -
Wrong password limit
I suggest to add incorrect password limits.
a) For IP - eg. 5 incorrect passwords in 20 minuts from one IP will block logging in to ANY account from that IP for eg. 30 minutes.
b) For account (configurable in account settings) - X incorrect passwords in Y minutes/hours will block logging in from ANY IP not added to whitelist (in account settings) for Z minutes/hours and send notification to recovery email.c) After successful login show warning if there were any login attemps (invalid password).
206 votes -
Change Username
Right now if I sign up as username@protonmail.com, there's no way to change it, for instance to user.name@protonmail.com. Even though u.serna.me@protonmail.com and use.rname+change@protonmail.com already goes to username@protonmail.com.
Seems like we should be able to change this if we like!
23 votes -
SSO support
Allow employees to login using central user repository such as AD or OneLogin, typically using SAML.
32 votes -
Add security questions
You can add security questions on resetting password - after clicking link sent to recovery email, before you can enter new password, you should answer two (or three) security questions.
This will be additional security for resetting password.
156 votesAt this point, security questions have been shown to not be an effective way to validate a users identity. At this time the recovery email address is our sole means of identifying users ownership of an account.
-
Allow login username to be different from email and aliases
You can effectively make your login username a barrier from even giving hackers a starting point to get into your account. Since with this feature they would need to know your username first. This should squash any determine hacker and allow great protection to long term protonmail accounts for years to come. Thoughts of "working on hacking this account may take time" is diminished wouldnt ya say?
358 votes -
Put a country flag in security log entries
The security log fails to give the user a clear idea of who logged in. Just by the time and some ip adress it's difficult to distinguish me from a hacker.
Therefore, I propose there is a country flag in the security log entries. This way I can just take a quick look at the logs and if somehow someone in say cuba, china, russia whatever logged in, I know for sure that wasn't me.
Now obviously a hacker would use Tor or some other form of proxy but that proxy would still most likely be located in some other…79 votes -
Remove the .ch domain
All accounts ProtonMail bring by default the domain .ch and .com
We don't all live in Switzerland
So we don't want to have there the domain .ch
281 votes -
Import private keys
So we use multiple keys on one account. Eg. to continue using an old key from a previous email account with your new ProtonMail account.
122 votesWe will be adding full key management in the future.
-
Duress Password that wipes emails
A password which can be entered in times of coercion to reveal the mailbox password. When used a security mechanism (eg. wiping the mailbox) can be employed
461 votes -
Dead mans switch / legacy settings / post mortem
set something up where if your account goes inactive (no log in etc) for a settable period of time a preset email will be sent to a preset address.
example i set up something so if i dont log in in 3 or 14 or 30 or 90 days etc (let us choose how long) a message i have already set up for this will be sent..
this would have a few uses and is also a pretty decent fallback to losing your account info if you dont set a 2nd account.. you could even send yourself your own forgotten…
320 votes -
Buy additional aliases
Make it possible, to create new aliases for just <1€ per alias (lifetime price)
36 votes -
Fingerprint/ Image Login Password
Fingerprint/ Image Login Password
70 votes -
Separate Notification Email and Recovery Email Addresses
Please separate the notification email and recovery email fields, so that it is possible to set each one individually. For example, a user may wish to set up a notification email address that cannot initiate account recovery. Another user may also wish to set up a recovery email address that does not receive notifications for incoming emails.
That would be useful to use with a less-trustworthy email provider or a less-secure account, so that users can receive notifications without worrying about a malicious actor resetting the user's ProtonMail password from the notification email account. Thanks.
35 votes
- Don't see your idea?