148 results found

1. Stop Advertising Upgrades to Paying Customers

   Stop advertising to paying customers to upgrade their Proton Pass. These UI elements are intrusive and disrupt users who have learned how to navigate the Proton Pass experience.

   The UPGRADE button is bigger than the button for me to create a new entry, why do I see this when I already have a subscription?

   370 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   16 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Advanced Protection (phishing-resistant MFA)

   Implement something similar to Google Advanced Protection or Apple iCloud (phishing-resistant MFA) - e.g. disable all non-phishing resistant (weak) factors when at least two of FIDO2/U2F keys or passkeys are added.

   Russian and Belarusian APT groups have been conducting targeted phishing operations to compromise Proton accounts for years. Through sophisticated social engineering tactics, these threat actors trick victims into revealing SMS and TOTP codes enabling unauthorized access to their accounts or accounts takeover. Example:
   https://citizenlab.ca/2024/08/sophisticated-phishing-targets-russias-perceived-enemies-around-the-globe/

   For high-risk individuals such as journalists, activists, and politicians, an account takeover can have extreme consequences, including imprisonment or torture. Training and awareness do reduce risk, but they cannot realistically eliminate it for most users. To meaningfully lower exposure, we recommend technical controls that make remote, phishing-based account compromise substantially harder or (ideally) impossible.

   Phishing-resistant 2FA became the de-facto standard years ago for high-profile users of Microsoft, Google and Apple services:
   - https://learn.microsoft.com/en-us/entra/identity/authentication/phishing-resistant-authentication-videos
   - https://landing.google.com/intl/en_in/advancedprotection/
   - https://support.apple.com/en-gb/102637

   So, please, implement an ability to enable Advanced protection for individual users and force Advanced Protection for Proton Business admins. The idea is to allow the user to blindly follow all the instructions on the phishing website, but still not be phished as using FIDO2/U2F keys or passkeys is safe on phishing websites.

   Implement something similar to Google Advanced Protection or Apple iCloud (phishing-resistant MFA) - e.g. disable all non-phishing resistant (weak) factors when at least two of FIDO2/U2F keys or passkeys are added.

   Russian and Belarusian APT groups have been conducting targeted phishing operations to compromise Proton accounts for years. Through sophisticated social engineering tactics, these threat actors trick victims into revealing SMS and TOTP codes enabling unauthorized access to their accounts or accounts takeover. Example:
   https://citizenlab.ca/2024/08/sophisticated-phishing-targets-russias-perceived-enemies-around-the-globe/

   For high-risk individuals such as journalists, activists, and politicians, an account takeover can have extreme consequences, including imprisonment or torture. Training and awareness do reduce… more

   90 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   7 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Domain Registration

   Offer a domain registration service (a la "Google Domains") so we don't have to keep renewing our custom domains elsewhere and Proton can get a buck or 2 for each registration or renewal.

   93 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   4 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Add Recovery Phrase Verification Tool (Without Resetting 2FA)

   Description

   Currently, ProtonMail users cannot verify whether their stored recovery phrase is correct without initiating an actual 2FA reset process. This creates uncertainty about whether users have properly saved their recovery credentials and could lead to account lockouts if the saved phrase is incorrect.

   Feature Request:
   Implement a dedicated "Verify Recovery Phrase" option in the security settings that allows users to:
   - Input their recovery phrase to confirm it matches the one on file
   - Receive immediate confirmation of whether the phrase is correct
   - Do this without triggering any actual account recovery or 2FA reset

   Benefits:
   - Peace of mind: Users can periodically verify they have the correct recovery phrase stored
   - Proactive security: Identifies issues with stored recovery phrases before an emergency occurs
   - Reduced support burden: Fewer users locked out due to incorrect recovery phrases
   - Better user experience: No need to go through a disruptive reset process just to test credentials

   Implementation suggestion:
   Add a "Verify Recovery Phrase" button in Account Settings → Security → Two-Factor Authentication section. When clicked, it opens a dialog where users can enter their phrase and receive a simple "✓ Verified - This recovery phrase is correct" or "✗ This recovery phrase does not match" message.

   This feature would align with security best practices by encouraging users to regularly verify their backup access methods without compromising the integrity of their current security setup.

   Description

   Currently, ProtonMail users cannot verify whether their stored recovery phrase is correct without initiating an actual 2FA reset process. This creates uncertainty about whether users have properly saved their recovery credentials and could lead to account lockouts if the saved phrase is incorrect.

   Feature Request:
   Implement a dedicated "Verify Recovery Phrase" option in the security settings that allows users to:
   - Input their recovery phrase to confirm it matches the one on file
   - Receive immediate confirmation of whether the phrase is correct
   - Do this without triggering any actual account recovery or 2FA reset

   Benefits:
   - Peace of… more

   87 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Under review  ·  6 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Send an email notification when a new device accesses my Proton account

   For more security, it would be fundamental for me to have an email notification every time a new device and/or ip address connects to my Proton account.

   Without an email notification that tells you that a new device and/or ip address accessed your Proton account, you have to go and check manually, and on a daily basis, if all the accesses are yours or not.

   And it's impossible remember whether it was you by simply seeing "from iPhone/Mac" or by the IP address (especially if you use a vpn and it changes!).

   An email notification will let you know immediately if it was you or another person to log in into your account. And if it was not you, you can immediately remediate by changing the password!

   Come on guys, do it asap and I will pass everything to Proton and recommend it to everybody!!! ;)

   For more security, it would be fundamental for me to have an email notification every time a new device and/or ip address connects to my Proton account.

   Without an email notification that tells you that a new device and/or ip address accessed your Proton account, you have to go and check manually, and on a daily basis, if all the accesses are yours or not.

   And it's impossible remember whether it was you by simply seeing "from iPhone/Mac" or by the IP address (especially if you use a vpn and it changes!).

   An email notification will let you know immediately… more

   166 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Let users change their Proton account profile picture

   Users being able to add a pfp image of their own or whatever pfp they want wether it's 2D or 3D.

   79 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   5 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Allow Changing Original Proton mail

   Please allow us to permanently delete or change the original email address used to create our Proton accounts.

   Currently, adding a new email address only acts as a temporary alias, because the account automatically reverts to the original, permanent address if a paid plan expires. It would be highly beneficial if Proton could adopt a system similar to how Apple handles iCloud email addresses, allowing users to permanently delete and seamlessly replace their primary address without it being permanently tied to the account's creation.

   Additionally, allowing users to change their username would be a great improvement. Thank you!

   20 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Create your own plan. Select your services

   Why not be able to create a selected plan like those who really want unlimited but have no need for the wallet?; or the calendar many average users have no need for a calendar. Lots of people do not use crypto or even know how to use crypto it would make the primary services more available and in turn give you more subscriptions???

   171 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   5 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Lumo subscription for unlimited users

   As a long term Unlimited subscriber, I can't even get some discount. I can understand all the technical challenges, and costs related to the necessary infrastructure to deploy and keep LLM models, however, no discount? No trial?
   If am I an unlimited subscriber, what does that mean? Unlimited, but....

   27 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   3 comments  ·  Accounts  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Add support of hadware based recovery

    Add support of using hardware tokens (such as yubico) as account recovery method.

    It is far more secure than sms or recovery email and far more convenient that recovery phrase

    48 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Being able to change/replace the EXTERNAL default mail adress.

    Right now it's basically impossible to properly change / replace the primary external (non-Proton) recovery/login email address — please make it feasible.

    As of early 2026, changing the primary external email (the non-Proton address used for account recovery + alternative login) it's impossible. You have to create a new account with a new "external adress" and transfer the data from the old account. Attempt a risky manual deletion → potential lockout stress if anything goes wrong during the transition.

    Actually, the core issue isn't the technical difficulty of changing the primary external (non-Proton) recovery/login email — it's the fact that Proton effectively forces users to keep their original external recovery address for life.

    Many users switch main emails over time (old Gmail → new Outlook → iCloud → custom domain → etc.), and being effectively stuck with the original external recovery address for life feels outdated and user-hostile compared to almost every other major email provider.

    Adding this core feature would make the process safer, intentional, and actually usable — without forcing users to stay locked to an old external address forever. "Forcing" users to keep a lifetime e-mail adress goes also against the good practices of privacy and security :

    => Violates modern security hygiene principles :
    Good security practice recommends rotating all recovery methods over time — just like passwords, 2FA backup codes, recovery phone numbers, or security questions.
    A recovery email that cannot be fully replaced becomes a permanent single point of failure for the entire account.

    => Creates a lifelong privacy leak :
    The original recovery email (often an old Gmail, Yahoo, Hotmail, etc.) is frequently the one most connected to your real identity, past data breaches, advertising profiles, and cross-site tracking.
    Being unable to remove it means you are forced to maintain a privacy-compromising link to your Proton account indefinitely — the exact opposite of what a privacy-first service should do.

    => Creates a lifelong privacy leak :
    The original recovery email (often an old Gmail, Yahoo, Hotmail, etc.) is frequently the one most connected to your real identity, past data breaches, advertising profiles, and cross-site tracking.
    Being unable to remove it means you are forced to maintain a privacy-compromising link to your Proton account indefinitely — the exact opposite of what a privacy-first service should do.

    => Damages trust in a privacy-focused service :
    When a company that positions itself as the champion of privacy and security prevents users from following basic, widely accepted privacy & security recommendations, it undermines its own core message.

    In 2026, keeping a recovery email immutable for life is not just inconvenient — it is actively harmful to both privacy and security, and stands in direct contradiction with everything Proton claims to stand for. Fixing this small but critical UX pain point would make the whole experience feel much more modern and user-respecting.

    Thanks for considering this.

    Any chance this could be prioritized in a future update ? 🙏

    Appreciate all the great work otherwise! 🚀

    Right now it's basically impossible to properly change / replace the primary external (non-Proton) recovery/login email address — please make it feasible.

    As of early 2026, changing the primary external email (the non-Proton address used for account recovery + alternative login) it's impossible. You have to create a new account with a new "external adress" and transfer the data from the old account. Attempt a risky manual deletion → potential lockout stress if anything goes wrong during the transition.

    Actually, the core issue isn't the technical difficulty of changing the primary external (non-Proton) recovery/login email — it's the fact that… more

    35 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Account recovery (Android App)

    Add Password Reset Option Using Active Proton Mail Session

    Description

    Currently, Proton users who are locked out of Proton Pass but still have an active authenticated Proton Mail session can become permanently stuck in a recovery deadlock.

    In my case, I am locked out of Proton Pass and unable to access my stored passwords or recovery codes. Proton Mail is the only session I still have access to. However, when attempting to change or reset my account password from Proton Mail, the system requires entering the current (old) password.

    This requirement defeats the purpose of account recovery. If the user still had access to their old password, recovery would not be necessary in the first place. Since Proton Pass is where account passwords and recovery codes are typically stored, being locked out of Proton Pass also means being locked out of all recovery options.

    As a result, users can end up fully authenticated in Proton Mail but with no available path to regain access to Proton Pass or reset their password, even though they are already logged into a trusted Proton application.

    Feature Request

    Implement a secure account password reset option that leverages an existing active Proton Mail session, allowing users to recover access when other recovery methods are unavailable.

    Add Password Reset Option Using Active Proton Mail Session

    Description

    Currently, Proton users who are locked out of Proton Pass but still have an active authenticated Proton Mail session can become permanently stuck in a recovery deadlock.

    In my case, I am locked out of Proton Pass and unable to access my stored passwords or recovery codes. Proton Mail is the only session I still have access to. However, when attempting to change or reset my account password from Proton Mail, the system requires entering the current (old) password.

    This requirement defeats the purpose of account recovery. If the user… more

    6 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    27 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Storage breakdown by service usage

    Display a breakdown of the storage space which each of the services is using, currently the system only shows the "total" space available but there is no way to know specifically how much of it is being used by email, which on a free tier has specific storage limitations (1 GB if additional tasks done).

    This is important if a user is moving from a paid tier to the free one for example to ensure they remain within storage limits.

    77 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    4 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Scheduled Account-Wide Login Restrictions (All Proton Services)

    My Idea

    I'd like the ability to choose specific hours when my Proton Mail and all the others Proton apps as well cannot accept new logins.

    Example:

    Set account to close from 8 PM to 7 AM daily
    No one (including myself) can log in during this window
    Automatically reopens at 7 AM
    Why This Matters

    When I'm sleeping, I don't want to worry about someone getting into my account if credentials are compromised or if there's physical access to a device. This would add a temporal security layer beyond password and 2FA.

    Key Requirements

    Flexible time windows — Choose start/end times, days of week
    Toggle on/off — Enable or disable instantly without losing settings
    Trusted device option — Certain devices could bypass restriction if needed

    My Idea

    I'd like the ability to choose specific hours when my Proton Mail and all the others Proton apps as well cannot accept new logins.

    Example:

    Set account to close from 8 PM to 7 AM daily
    No one (including myself) can log in during this window
    Automatically reopens at 7 AM
    Why This Matters

    When I'm sleeping, I don't want to worry about someone getting into my account if credentials are compromised or if there's physical access to a device. This would add a temporal security layer beyond password and 2FA.

    Key Requirements

    Flexible time windows — Choose… more

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Sign in to the account with email aliases

    I would like us to be able to choose the emails (main account email and email alias) that can be used to authenticate on the account. Currently it is possible to authenticate with all emails, principal and alias, this can induce a security risk by multiplying the connection possibilities.

    8 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Be able to merge Individual Proton account into one Duo or a Family plan.

    I have Proton Unlimited and love it. Wife finally wants to migrate from Gmail(SpyMail) but she doesn't use all the other google nor proton products. If we both have individual accounts; can the two proton accounts be merged under one Proton account in the future like a Duo or a Family plan when our kids are old enough?

    88 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    4 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Exclude Proton Pass From Account Suspension

    As a proton user who’s account is suspended by Proton’s anti-abuse algorithm (due to a false-positive or unintentional error)
    I want to still have access to Proton Pass
    So that I am not locked out of non-proton services

    We understand the need to enforce and anti-abuse policies, especially around email; but the current anti abuse implementation is heavy handed and does not take into account that proton pass now makes up a portion of a user’s proton plan. So currently when an account suspension is done it locks all proton services including pass, when probably the goal is merely to prevent email abuse, like spamming. Consider reworking the suspension to be more measured, for example only suspending specific services like mail or better yet just the ability to send email other than to proton support. Suspending access to proton pass and other services like drive, especially due to a false positive, is catastrophic for legitimate proton users; as it locks them out of critical non-proton services like online banking, government services and so forth. This is the number one reason Proton Pass cannot be relied upon; the fact that it can so easily become inaccessible and with it a user’s access to all other critical non-proton services. This is the one thing that keeps coming up when I talk to friends and family about moving to proton pass; the fact that someone always knows someone who lost access to pass, even if briefly for a day or two, and don’t want to risk migrating to pass from other password managers as a result. Personally I’ve never heard of anyone getting locked out of other password managers by the companies that provide them but with proton I’ve heard multiple times how this has happened; and then it happened to me for a few days (fortunately it had my passwords backed up in another password managers; but really I shouldn’t have to)

    As a proton user who’s account is suspended by Proton’s anti-abuse algorithm (due to a false-positive or unintentional error)
    I want to still have access to Proton Pass
    So that I am not locked out of non-proton services

    We understand the need to enforce and anti-abuse policies, especially around email; but the current anti abuse implementation is heavy handed and does not take into account that proton pass now makes up a portion of a user’s proton plan. So currently when an account suspension is done it locks all proton services including pass, when probably the goal is merely to… more

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Add a 7-day grace period to undo account deletion

    Currently, deleting a Proton account is immediate and irreversible. I propose adding a 7-day "grace period" (or pending deletion state) after a user requests to delete their account.

    Why is this needed?


    • Accidental Deletion & Regret: Users might make a hasty decision or accidentally confirm deletion. A small window allows them to change their mind and avoid losing critical emails, Drive files, and Passwords.


    • Account Hijacking: If a malicious actor gains access to a user's account, they can currently delete it instantly to destroy data. A 7-day window gives the real owner a chance to recover the account before everything is permanently wiped.


    • Industry Standard: Most major tech platforms offer a recovery window (e.g., 14 to 30 days) for exactly these reasons. A 7-day window strikes a perfect balance between user security and prompt data removal.

    How it would work:
    When a user deletes their account, it logs them out and disables incoming mail. If they log back in within 7 days, they get a prompt asking if they want to cancel the deletion request and restore the account. After 7 days, the data is permanently wiped from Proton's servers.

    Since encrypted data already remains on Proton's backup servers for a standard period after deletion, I am not asking to change the data retention policy. I simply request that the immediate destruction of the user's Private Encryption Keys is delayed by 7 days. During this grace period, the account is disabled, but the keys remain intact to allow full recovery if needed.

    Currently, deleting a Proton account is immediate and irreversible. I propose adding a 7-day "grace period" (or pending deletion state) after a user requests to delete their account.

    Why is this needed?


    • Accidental Deletion & Regret: Users might make a hasty decision or accidentally confirm deletion. A small window allows them to change their mind and avoid losing critical emails, Drive files, and Passwords.


    • Account Hijacking: If a malicious actor gains access to a user's account, they can currently delete it instantly to destroy data. A 7-day window gives the real owner a chance to recover the account before everything… more

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Safeguard Preferred Email on Downgrade

    Safeguard Preferred Email on Downgrade

    As a Paid Proton User,
    I want to change my primary account username to any other active Proton alias I own,
    So that my preferred email address remains the permanent, primary identifier for my account even if I downgrade to the free tier in the future.

    6 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Feature Request: FIDO2 only authentication on new devices

    Summary
    Add an account security option that enforces FIDO2 security keys as the only allowed 2FA method when a user signs in from a new or untrusted device.

    Problem / Current Behavior
    In the current login flow, when a user has a FIDO2 key enabled the user can fallback to OTP-based 2FA rolling codes. This creates a downgrade path.

    Desired Behavior (What should change)
    Provide a ON/OFF setting such as: “Require FIDO2 security key for new/untrusted devices.”

    When enabled
    • FIDO2 is required when signing in from a new/untrusted device.
    • OTP fallback is not offered in that same new/untrusted device flow.
    • On already trusted devices, the service may continue using the existing “trusted session” behavior.

    Trigger Condition
    FIDO2 only enforcement is triggered only when the service determines the login attempt is from:
    • a new device, or
    • an untrusted device/session

    Preconditions and Safety Net (Required before enabling)
    To prevent lockouts, require the following before the user can enable the option:

    • Recovery code generated and confirmed by user
    • At least two registered FIDO2 keys
    • A clear warning + acknowledgement: enabling this can block access if keys are lost

    Summary
    Add an account security option that enforces FIDO2 security keys as the only allowed 2FA method when a user signs in from a new or untrusted device.

    Problem / Current Behavior
    In the current login flow, when a user has a FIDO2 key enabled the user can fallback to OTP-based 2FA rolling codes. This creates a downgrade path.

    Desired Behavior (What should change)
    Provide a ON/OFF setting such as: “Require FIDO2 security key for new/untrusted devices.”

    When enabled
    • FIDO2 is required when signing in from a new/untrusted device.
    • OTP fallback is not offered in that same new/untrusted… more

    17 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Accounts  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating