Accounts & payments
136 results found
-
Delete (unlink) aliases from ProtonMail account
To protect ProtonMail user privacy and anonymity, we need an option to permanently unlink (delete) aliases from ProtonMail accounts.
Address counter can stay incremented, but the deleted identity (alias) should not be linked to the main account any more. Unlinked e-mail address should stay permanently disabled to prevent address recycling.
A 7, 14 or 30 day deletion waiting time can be implemented to prevent spammers from abusing ProtonMail aliases.
100 votes -
Reduce 2FA frequency
Having to grab my phone and get a code from Authy every time I want to check my mail is a major PITA. Google only asks for your second-factor authentication
A) every 30 days or
B) when you use a new app to login or
C) when you use a new machine to loginB and C are obviously required. Now, Google's 30-day period before reauthenticating might be too long, but I think users should be able to select how often then want to be required to provide a second-factor code. Allow users to require 2FA every time if they…
24 votes -
Wrong password limit
I suggest to add incorrect password limits.
a) For IP - eg. 5 incorrect passwords in 20 minuts from one IP will block logging in to ANY account from that IP for eg. 30 minutes.
b) For account (configurable in account settings) - X incorrect passwords in Y minutes/hours will block logging in from ANY IP not added to whitelist (in account settings) for Z minutes/hours and send notification to recovery email.c) After successful login show warning if there were any login attemps (invalid password).
117 votes -
Change Username
Right now if I sign up as username@protonmail.com, there's no way to change it, for instance to user.name@protonmail.com. Even though u.serna.me@protonmail.com and use.rname+change@protonmail.com already goes to username@protonmail.com.
Seems like we should be able to change this if we like!
20 votes -
SSO support
Allow employees to login using central user repository such as AD or OneLogin, typically using SAML.
15 votes -
Allow login username to be different from email and aliases
You can effectively make your login username a barrier from even giving hackers a starting point to get into your account. Since with this feature they would need to know your username first. This should squash any determine hacker and allow great protection to long term protonmail accounts for years to come. Thoughts of "working on hacking this account may take time" is diminished wouldnt ya say?
193 votes -
Add security questions
You can add security questions on resetting password - after clicking link sent to recovery email, before you can enter new password, you should answer two (or three) security questions.
This will be additional security for resetting password.
73 votesAt this point, security questions have been shown to not be an effective way to validate a users identity. At this time the recovery email address is our sole means of identifying users ownership of an account.
-
Put a country flag in security log entries
The security log fails to give the user a clear idea of who logged in. Just by the time and some ip adress it's difficult to distinguish me from a hacker.
Therefore, I propose there is a country flag in the security log entries. This way I can just take a quick look at the logs and if somehow someone in say cuba, china, russia whatever logged in, I know for sure that wasn't me.
Now obviously a hacker would use Tor or some other form of proxy but that proxy would still most likely be located in some other…83 votes -
Remove the .ch domain
All accounts ProtonMail bring by default the domain .ch and .com
We don't all live in Switzerland
So we don't want to have there the domain .ch
122 votes -
Import private keys
So we use multiple keys on one account. Eg. to continue using an old key from a previous email account with your new ProtonMail account.
65 votesWe will be adding full key management in the future.
-
Duress Password that wipes emails
A password which can be entered in times of coercion to reveal the mailbox password. When used a security mechanism (eg. wiping the mailbox) can be employed
322 votes -
Dead mans switch / legacy settings / post mortem / data inheritance
set something up where if your account goes inactive (no log in etc) for a settable period of time a preset email will be sent to a preset address.
example i set up something so if i dont log in in 3 or 14 or 30 or 90 days etc (let us choose how long) a message i have already set up for this will be sent..
this would have a few uses and is also a pretty decent fallback to losing your account info if you dont set a 2nd account.. you could even send yourself your own forgotten…
226 votes -
Buy additional aliases
Make it possible, to create new aliases for just <1€ per alias (lifetime price)
33 votes -
Fingerprint/ Image Login Password
Fingerprint/ Image Login Password
50 votes -
Separate Notification Email and Recovery Email Addresses
Please separate the notification email and recovery email fields, so that it is possible to set each one individually. For example, a user may wish to set up a notification email address that cannot initiate account recovery. Another user may also wish to set up a recovery email address that does not receive notifications for incoming emails.
That would be useful to use with a less-trustworthy email provider or a less-secure account, so that users can receive notifications without worrying about a malicious actor resetting the user's ProtonMail password from the notification email account. Thanks.
21 votes -
Factory Setting
It would be an advantage if you could put your user on the whitelist yourself if you wish. (Factory setting) When creating a new account, enter a passphrase for verification.
0 votes
- Don't see your idea?