Accounts & payments
317 results found
-
Monero as a direct payment option
Proton should support Monero payments for all services, in particular email and VPN.
At present, Proton does not accept Monero payments directly, but rather refer to some 3rd party option.
This proposal is specifically regarding Proton accepting Monero payments directly, similar to how they currently do for Bitcoin.
18 votes -
Longer Paid Plans - say 3 and 5 Years options
Provide LONGER PAID PLANS, 3 and 5 years options would be nice.
Pricing should of course be decreasing the longer the purchased plan.
This reduces our exposure as customers to random pricing increase every 1 or 2 years, and Proton gets a nice and loyal captive paid membership base to who you can sell other services.
680 votes -
[Business Account Setup] Proton-first or Proton-only Setup for Businesses
When signing up for a company account (paid plans), one has to enter an existing company e-mail-address. While that works for existing companies seeking to switch to Proton, new companies that want to go Proton-first (no other e-mail provider) have to use a personal e-mail-address or another provider. It would only make sense to leave the e-mail-address of the "Business Information"/"Tell us about your business" step entirely and allowing for account creation with proton only.
2 votes -
Require password & 2FA to disable sentinel
Currently, Proton Sentinel can be enabled/disabled just from a click from Proton Pass (i didnt check if on the Proton Mail settings and the bar on the right if it did ask or not), without typing a password.
For security reasons, the activation or deactivation of Proton Sentinel should ask for password and 2FA
5 votes -
Feature Request: FIDO2 only authentication on new devices
Summary
Add an account security option that enforces FIDO2 security keys as the only allowed 2FA method when a user signs in from a new or untrusted device.Problem / Current Behavior
In the current login flow, when a user has a FIDO2 key enabled the user can fallback to OTP-based 2FA rolling codes. This creates a downgrade path.Desired Behavior (What should change)
Provide a ON/OFF setting such as: “Require FIDO2 security key for new/untrusted devices.”When enabled
• FIDO2 is required when signing in from a new/untrusted device.
• OTP fallback is not offered in that same new/untrusted…17 votes -
Proton Unlimited Lite – for everyday users
Many people are growing wary of U.S. tech giants, yet Proton is still seen as a niche solution for power users. Most of us only need a reliable email address, a modest amount of cloud storage for document backups, and strong password protection with 2FA.
I propose a Proton Unlimited Lite plan that bundles exactly those essentials:
• Proton Mail (basic inbox)
• 20–30 GB of Proton Drive for secure document backup
• Proton Pass for password management (including 2FA)
• Optional family add‑on so households can share the same subscriptionThe current “Mail Pro” tier feels over‑engineered—too many email aliases and unnecessary features—while the full…
16 votes -
Share custom domain between different paid plans
Note: this request is for multiple separate accounts (on separate plans) to be able to use the same custom domain, not multiple users/accounts on the same plan. In my case I have a custom domain I'd like my family to use (my spouse and kids, 6 total users) as well as my parents and siblings (another 6 users). Moving to a business plan is cost-prohibitive ($48/mo total for two family accounts vs. $156/mo for 12 business users), and I really don't want to have to register a different custom domain for each family plan.
5 votes -
Account Lockout & Deletion Policy
The logic is straightforward: if 20 or more consecutive failed login attempts are detected on an account, the system automatically locks it as a security measure. Once locked, the legitimate account owner must complete an identity verification step — such as confirming via email, phone, or a backup authentication method — in order to regain access and unlock their account.
If the account remains locked and the owner fails to verify within a configurable inactivity window (defaulting to 3 months, but adjustable by the user up to 8 months or more), the account enters a deletion process — not an…3 votes -
anonymous code instead of username in cash payments
I love the privacy-first approach of your services, but I noticed a gap when using cash payments by mail. Currently, you require users to write their Proton username on the envelope to identify the account for crediting
Suggested improvement:
Generate a unique, anonymous payment reference code (e.g., PAY-8XJQ92-MNB7) in the user's account dashboard. The user writes only that code on the paper inside the envelope—not their username. Proton links the code to the account internally.
This small addition would make cash payments truly anonymous end-to-end. Thank you for considering it.Best regards
3 votes -
Onetime payment for lifetime Proton Unlimited
There is some things I see that I would never use in the Mail plus/proton pass plan, but I really would like to just pay once. I like the idea of having a 50-99year "unlimited/lifetime" since once I'm gone you can either forward the logins to a designated person I say and give them 90 days to download the archive, or just shred/delete everything once I leave the earth.
I despise monthly payments. Its the principal of it and the fact some cars have DLC for things already built into the car is crazy. Let me bite the bullet, and…
19 votes -
Improve and expand QR code sign-in so it works from a PC
The QR code sign-in is fantastic, however, it should also allow users to sign in outside portable devices. For example, using a logged in session within the browser could improve the logging workflow experience for users with degoogled devices as the user can then only have a security key setup in their account and avoid altogether less secure forms of 2FA such as TOTP. At the moment, degoogled devices pretty much must have TOTP enabled, which is not ideal for those seeking maximum security within a degoogled ecosystem.
5 votes -
Stop Spam and Bad Actors by Separating Username from Email and Aliases
As Proton user,
I want my username to be completely separate from my email address and aliases
So that bad actors and others that attempt to email any proton domain containing my username will automatically get a 500 5.1.1 Address does not exist and that bad actors who use a list of email addresses to get into my proton account won't be able to because the email addresses they have have nothing to do with my usernameThis will solve two problems. So in future when you sign up for proton you first create a username, thereafter you can register…
5 votes -
Attract MORE UPGRADES and NEW USERS by guaranteeing no runaway billing when someone dies or becomes incapacitated.
Attract MORE UPGRADES and NEW USERS by guaranteeing no runaway billing when someone dies or becomes incapacitated.
A Proton USP: Guarantee PRIVACY DURING LIFE (as now) AND NO RISK OF BILLING AFTER DEATH OR INCAPACITY. Avoid the executors of someone's estate having to (a) discover that the deceased has a Proton account, (b) find out the user name and password, (c) contact Proton with that information, (d) deal with all the paperwork. OFFER the ability to pay for upgrades and new accounts by buying credits. Services are terminated and billing stops when the credits run out. This model is used…
3 votes -
Use random hidden username for encryption, let users pick public email
Description:
When creating an account, Proton should generate a random internal username (e.g., x7k9f2@proton.me) that handles all encryption behind the scenes. Users wouldn't know or interact with it.
They would pick a public-facing address (e.g., elias.silva@proton.me). Paid users could swap it for one of their additional addresses. The public address is separate from the encrypted data.
Current problem:
My encryption key depends on my username
If I enter personal info in the username, I'm locked in forever
Changing it breaks the key or requires a new accountProposed fix:
Generate random crypto username at signup (automatic, invisible)
Let…3 votes -
Security concern regarding the shared session between Proton Pass and Proton Mail.
Hello,
I would like to report a behavior that I find inconsistent and potentially problematic from a security perspective.
I use the Proton Pass extension in Chrome. When I initially signed in, I entered the main password for my Proton account. I then configured a PIN to lock Proton Pass, with an automatic locking delay of two minutes.
Once Proton Pass is locked, the PIN is correctly required to access the vault. However, when I open Proton Mail in the same browser, my mailbox opens immediately, without asking for either my main password or the Proton Pass PIN.
It therefore…
4 votes -
Grace period for deliquent accounts
My credit card company got swallowed up by a larger company and as a result my credit card number was changed. As a result auto-renew failed. Instead of deleting delinquent accounts perhaps put them in stasis for a month or two?
5 votes -
Separate billing cycles for products
It would be nice if not all products had the same billing cycle. For example, I have a Proton Duo plan that renews every 2 years. However, if I want to subscribe to Lumo+ it changes my Duo plan to be an annual plan and locks Lumo+ in for the whole year.
Likewise, as a Duo subscriber, if I want to add Meet Professional it adds it for both users, even though I might only want it for 1 user, and perhaps for only a month or two. We need more nuance and variations for how products are billed.
3 votes -
allowing business customers to regularly pay by bank transfer and add a button for that
Dear all, since business customers do not prefer recurring payments being done by credit card or PayPal, would it be possible to accept payment by bank transfer as a normal option? Currently, I have to write to your support every month, showing that I have paid my plan for the upcoming month, and proton matches my payment manually. The business suite only earns that name when business customers can pay by bank transfer. This is standard business practice.
5 votes -
Passwordless login using hardware key / passkey only
Enable the user to use a FIDO2 hardware key or an iOS or Android biometric passkey as the sole login method for users that desire it. It would be for all Proton services, in my case mail, drive and pass.
I would like to eliminate using passwords altogether and solely rely on a passkey in my iOS Passwords app OR my Feitian FIDO2 hardware key with fingerprint sensor.
Requiring multiple keys would be a way to help prevent users from locking themselves out.
1password is currently in beta with passwordless login and google already supports it.
10 votes -
OAuth flow for external applications to use to access Proton services
Allow developers to implement their own apps integrated to the Proton enviroment and, through an auth flow, get the required permissions to use users accounts
Examples of implementation
Proton Drive SDK (Existing Proton Drive SDK implementation of authentication and app indentification is easily forjable and apps wth bad intentions will store user credentials)
A future Proton Mail SDK (which would allow open email clients like Thunderbird to implement Proton Mail without the need of Proton Mail Bridge)
Proton VPN SDK (An SDK where apps can tunnel requests via a Proton VPN server)
Proton Docs & Calendar SDK (SDK to develop…6 votes
- Don't see your idea?