Proton Mail
Swiss encrypted email that behaves like normal email until the other side is also on Proton.
TL;DR verdict
Proton Mail is the encrypted mailbox most people can actually live inside. Between two Proton accounts it is genuinely end-to-end encrypted; talking to Gmail it gracefully degrades to something more like Fastmail with better defaults. The paid tiers add up quickly if you want the full stack.
What we like
- PGP support baked in, including automatic key discovery via WKD
- E2E encrypted by default between Proton accounts, with no user configuration
- Swiss jurisdiction with a mature legal track record for provider requests
- Proton Bridge lets desktop clients like Thunderbird and Apple Mail speak IMAP
Where it falls short
- Not free at scale — the free tier is deliberately tight on storage and aliases
- Subject lines are stored unencrypted, unlike Tuta
- Search inside the mailbox is slower than Gmail and requires a local index
- Ecosystem lock-in creeps in fast once you add Drive, VPN and Pass
TL;DR verdict
Proton Mail is the encrypted mailbox to move to if you want to stop feeding Gmail without giving up the ability to email your accountant. Proton-to-Proton is end-to-end encrypted with no configuration. Everything else works like normal email with better defaults and a Swiss legal address underneath.
What it does well
The default experience is the reason to move. New accounts get PGP keys generated on the client and stored encrypted with the login password. Messages between two Proton accounts are encrypted end-to-end without either user needing to think about it, which is the bar the rest of the encrypted-email space has been trying to meet for a decade.
Talking to the outside world is where most encrypted mail products get awkward, and Proton's answer is the least awkward one on the market. If the recipient has a discoverable PGP key, Proton uses it. If they do not, you can send a password-protected message that arrives as a web link. If neither is worth the friction, the mail goes out unencrypted like any other email — which is honest, and better than the alternative of pretending otherwise.
Proton Bridge is the quiet hero of the product. It runs locally, exposes an IMAP and SMTP interface to your normal desktop mail client, and lets you use Thunderbird, Apple Mail or mutt against a Proton account. Search inside the mailbox is client-side and requires a downloaded index, but once built it is fast enough.
Where it strains
Subject lines are stored encrypted at rest but exposed in transit and in the server's search indexes. This is a real limitation compared with Tuta, and Proton is upfront about it — the alternative is breaking interoperability with the rest of the email ecosystem.
The free tier is real but tight. One gigabyte of storage, one custom address, limited aliases. It exists to let you try the product, not to run a whole email life on. Paid plans are reasonable at the individual level and get expensive once you want Mail, Drive, VPN and Pass together in the Unlimited bundle.
The mobile apps are good, not great. Push notifications on iOS occasionally arrive late, and the app's own contact and calendar UIs are behind the web experience.
Who it's for
Journalists who need a mailbox with a defensible jurisdiction and PGP handling that does not require reading a manual. Activists who want their default inbox to stop being an ad-targeting surface. Remote workers who would rather pay Proton in Swiss francs than pay Google in attention. If you also want encrypted cloud storage and a VPN under one login, the ecosystem argument gets easier fast.
Frequently asked
Is Proton Mail actually end-to-end encrypted?
Between two Proton accounts, yes, without either user doing anything. To a Gmail or Outlook address, only if the recipient has a PGP key Proton can find, or you send a password-protected message that the recipient opens through a web link. Otherwise the message leaves Proton's servers in the clear, like any other email.
What does Swiss jurisdiction actually get me?
Switzerland is not in the EU or the Five Eyes, has strong constitutional privacy protections, and requires a Swiss court order before a provider can be compelled to hand over data. Proton has published its transparency reports for years and has a well-documented history of pushing back on foreign requests. It is not magic, but it is a genuinely better legal address than Delaware.
Why can't Proton encrypt my subject lines?
Because subject lines are part of the IMAP and SMTP header stack that the rest of the email world depends on. Proton stores them encrypted at rest but has to expose them to make standard mail clients and cross-provider delivery work. Tuta encrypts them by breaking that compatibility, which is a real trade-off in the other direction.