Proton Mail is an encrypted email service and client that keeps message contents readable only to the sender and recipient, adding password-protected external messages, alias addresses, tracker blocking, and two-factor login protection on top of ordinary mailbox features.
Proton Mail is an email service that encrypts messages so their contents can only be read by the intended recipients, rather than by the provider hosting the mailbox. Reading and sending work like any other mail application: messages arrive in folders, rules sort them, and attachments open as usual. The difference is what happens underneath, since mail is encrypted on the device before it is stored, remote content and tracking pixels are blocked until approved, and messages sent to people outside the service can be protected with a password and an expiry date. Desktop and mobile applications, plus a web interface, all work from the same encrypted account.
Account protection is treated as part of the product rather than an add-on. Two-factor authentication can be required at sign-in, hardware security keys can be registered as a second factor through the FIDO2 standard, and passkeys offer a phishing-resistant alternative to a typed password. Because email is often the recovery route for everything else, that combination matters: a stolen password alone should not be enough to read a mailbox. Address handling in Proton Mail is flexible too, with extra addresses, catch-all rules, and aliases that keep a primary address out of circulation. Administrators who issue hardware keys usually master a configuration utility such as Yubi Key Manager before handing the devices to staff.
The case for Proton Mail rests on a simple asymmetry: almost every account a person owns can be reset through an email address, which makes the mailbox the most valuable target in a digital life. Encrypting stored mail and blocking remote content limits what a provider, an attacker, or a marketing network can learn, and messages exchanged between users of the service never expose their contents in transit. Protection for outside recipients is practical rather than theoretical, because a password-protected message with an expiry date reaches a client, a supplier, or a lawyer without exposing the content to their mail host indefinitely. Tracker blocking stops senders learning when and where a message was opened, and alias addresses absorb the marketing mail that would otherwise accumulate against a real address. The result is a mailbox that behaves normally while leaking considerably less.
Key capabilities and highlights.
Messages sent between users of the service are encrypted on the sender's device and decrypted on the recipient's, so contents are never readable by the servers in between. Stored mail is encrypted with keys the provider does not hold, which means a breach of the mailbox backend exposes ciphertext rather than readable correspondence.
Mail sent to recipients outside the service can be protected with a shared password and given an expiry date, so the body is not readable by that person's mail provider. This keeps confidential documents usable with clients, suppliers, or legal contacts who do not use encrypted mail themselves.
Remote images and tracking pixels are blocked by default and loaded only when approved, which stops senders learning when a message was opened and from which address. Links can also be reviewed before opening, which reduces the chance of landing on a phishing page disguised as a legitimate notice.
Sign-in can require a second factor in addition to the account password, and hardware security keys can be registered using the FIDO2 standard. Passkeys are supported as a phishing-resistant alternative, which matters because a mailbox is usually the recovery route for other accounts.
Additional addresses, catch-all rules, and alias addresses can be used so a primary address is not published everywhere. Aliases can be disabled once they start attracting spam, which also reveals which service passed the address on in the first place.
Folders, labels, filters, and scheduled sending keep a busy inbox manageable, and search covers the mailbox without exposing its contents to the search infrastructure. Auto-delete rules can remove newsletters and notifications after a set period instead of letting them accumulate indefinitely.
Dedicated applications and a web interface provide the same encrypted mailbox, and a bridge component allows standard desktop mail clients to send and receive through the account. That makes a move possible without abandoning long-established workflows or local archiving habits.
Calendar events and shared files sit alongside mail in the same account, and advanced account protection adds monitoring for suspicious sign-in attempts. Security keys, recovery options, and active sessions can all be reviewed from one place rather than scattered across different settings screens.
Browse historical releases and previous builds.
Common questions about Proton Mail.
It is an email service for sending and receiving messages with encryption applied to stored mail and between users. It also provides calendar events, file sharing, address aliases, and account protection features such as two-factor authentication and hardware security keys.
Yes. A message can be protected with a password and an expiry date, and the recipient opens it through a web page rather than receiving readable content in their own mailbox. That works with any recipient, regardless of which mail service they use.
The mailbox works through the dedicated applications and the web interface, and desktop clients can connect through a bridge component that handles encryption locally. That allows familiar software to keep working while messages remain encrypted in transit.
Yes. Remote images and tracking pixels are blocked until they are explicitly approved, and they can be proxied so the sender does not learn the reader's address. That stops the common practice of measuring opens and building profiles from them.
Two-factor authentication can be enabled so a password alone is not enough, and hardware security keys can be registered as the second factor. Passkeys are also supported for sign-in, which reduces the risk of a typed password being captured.
Yes. A custom domain can be connected so addresses use a chosen name, with multiple mailboxes and addresses available under it. Aliases and catch-all rules can then route mail to the right place without publishing every individual address.
They are delivered to the account and appear once the client connects, and the applications keep recently accessed mail available for reading without a live connection. Attachments and older messages may need a connection before they can be opened.
Proton Mail is an encrypted email service and client that keeps message contents readable only to the sender and recipient, adding password-protected external messages, alias addresses, tracker blocking, and two-factor login protection on top of ordinary mailbox features.
Microsoft.Azure.ArtifactSigningClientTools is the Windows package that installs the Artifact Signing client plugin, letting SignTool sign code and artifacts through Azure without a local certificate.
Microsoft Safety Scanner is a free, portable on-demand scanning tool from Microsoft that finds and removes malware, spyware, and unwanted software from Windows PCs without installing anything.
1Password CLI is a command-line tool that reads secrets from a 1Password account and injects them into scripts, environment variables, and configuration files at runtime, so no plaintext credential has to be stored on disk.
Element is a Matrix-based secure messenger and collaboration app with end-to-end encryption, group calls, and file sharing. It targets individuals, teams, and public institutions that want to self-host their own messaging network instead of renting one.
Comments