Description:

When creating an account, Proton should generate a random internal username (e.g., x7k9f2@proton.me) that handles all encryption behind the scenes. Users wouldn't know or interact with it.

They would pick a public-facing address (e.g., elias.silva@proton.me). Paid users could swap it for one of their additional addresses. The public address is separate from the encrypted data.

Current problem:

My encryption key depends on my username
If I enter personal info in the username, I'm locked in forever
Changing it breaks the key or requires a new account

Proposed fix:
Generate random crypto username at signup (automatic, invisible)
Let users choose any public email address
Same account, same keys, different public identity

Why it matters:

Privacy-focused users might not realize the risk when signing up
Permanent lock forces people to keep personally identifiable emails
A privacy service should allow identity changes without starting over

Simple outcome:

New users get a hidden crypto ID + a public email of their choice
For old users, I see two scenarios:
- could be migrated: their current address becomes hidden and an additional address becomes the public one
- nothing needs to change: since both systems can exist at once, until and if a better fix is thought