Case file · Email
Proton Mail
The market leader, and the clearest lesson that private is not the same as anonymous. Signup needs no phone, and stored message bodies are zero-access encrypted - but documented cases show that IP, payment and recovery data are reachable under a Swiss court order, and subject lines are not encrypted.
The systematized overview
The bureau vs the internet.
8.0/10 · Phone-on-trigger
Proton Mail is genuinely private for message content - bodies are zero-access encrypted, so Proton cannot read stored mail - and you can create a free account with no phone number. But it is not anonymous under legal pressure, and documented cases prove it: in 2021 it was compelled by a Swiss order to log a French activist’s IP, and in the "Stop Cop City" case it handed over a pseudonymous account’s payment (card) data via an MLAT, which the FBI matched to a name. A separate Catalan case saw Proton disclose a recovery email. Subject lines are not encrypted, anti-abuse can demand SMS on Tor/VPN signups, and the only crypto option is Bitcoin (no Monero) with payments not decoupled from your identity. Excellent content privacy; metadata and identity are lawful-order-reachable.
3 recurring praises · 2 recurring gripes
Most praised: genuine, audited content encryption. Most cited downside: ip/metadata handed over under order (twice documented).
We track our editorial score and community sentiment separately — neither moves the other. Read together, they're the systematized overview.
The facts
Jurisdiction, sign-up & encryption.
- Jurisdiction
- Proton AG, Geneva, Switzerland
- Sign-up needs
- No phone required by default; SMS/CAPTCHA anti-abuse can trigger (esp. Tor/VPN)
- KYC trigger
- Anti-abuse verification on suspicious signups; IP logging of a named account under Swiss order
- Encryption
- Zero-access on message bodies + PGP; subject lines and some metadata NOT encrypted
- Provider access
- Cannot read stored bodies; can be ordered to log IP; recovery + payment data held unencrypted
- Anon. payment
- Bitcoin (after signup), postal cash, card/PayPal; no Monero - payment data is retained and NOT decoupled from the account (it was handed over in the 2024 Stop Cop City case)
- Logging
- No IP logs by default; temporary logging on a named account under binding order
- Open source
- Yes (apps)
- Audited
- Yes - independent audits
- Custom domain
- Custom domains on paid plans
- Free tier
- Yes
- Since
- 2014
The full read
Our analysis, in plain words.
Proton Mail is the most popular private email service, and for message content the privacy is real: bodies are zero-access encrypted, so Proton cannot read your stored mail, the apps are open source and independently audited, and you can open a free account without a phone number. For the average person leaving Gmail, that is a genuine and large improvement.
The reason it sits below the German providers in our scoring is that Proton’s own history proves private is not anonymous. In 2021 a binding Swiss order compelled it to log a French activist’s IP address, after which it quietly revised its "no IP logs" homepage wording. In the "Stop Cop City" case the FBI used a mutual legal assistance treaty request (dated January 2024) to have Switzerland compel Proton to hand over a pseudonymous account’s card-payment data, which it matched to a name; in a separate Catalan case Proton disclosed a recovery email. Neither broke the content encryption - they used the data Proton necessarily holds in readable form: IP on order, recovery contact, payment details, and unencrypted subject lines. Anti-abuse SMS checks on Tor/VPN signups and Bitcoin-only (no Monero) payment round out the gaps.
So Proton scores well but not top: excellent, audited content privacy undercut by a demonstrated, lawful reachability of metadata and identity. We do not treat these as betrayals - Proton cannot ignore a binding Swiss order, and it reports its compliance transparently - but they are exactly what a user relying on Proton for anonymity, not just confidentiality, needs to understand. Use it for private mail; do not assume it makes you untraceable.
The score, broken down
How the 8.0 is built.
Privacy
weight 50%What identity, data and metadata the service can demand or collect.
80 × 50% = 4.0 of 10
Trust
weight 30%Whether it can technically deliver what it claims — code, audits, age.
86 × 30% = 2.6 of 10
Reliability
weight 20%Whether the no-KYC claim holds under real-world pressure.
70 × 20% = 1.4 of 10
Weighted total 8.0 / 10 · no reliability rule triggered, so the score stands. See the rubric →
Every point, sourced
What earned the score.
Privacy
Trust
The fine print, read for you
The clause they bury.
“Proton Mail does not keep IP logs by default. However, Proton may be legally compelled to log the IP address of a specific user account by a binding Swiss court order, and payment and recovery data are not end-to-end encrypted.”
What it meansThis is the crucial distinction Proton’s own cases teach: end-to-end encryption protects the content of your stored mail, but it does not make you anonymous. A binding Swiss order can force Proton to start logging a named account’s IP going forward, and data it necessarily holds in readable form - your recovery email, payment details, and unencrypted subject lines - can be handed over. Two documented cases turned exactly that data into a real-world identification.
Read the source →You can create a free Proton account without a phone number, but anti-abuse checks may require SMS or CAPTCHA verification - reported far more often on Tor/VPN signups - so it is phone-on-trigger rather than never-phone. More importantly, Proton can be compelled by a Swiss order to log a specific account’s IP, and payment/recovery data is not encrypted and has been handed over. We rate it KYC level 2.
Policy review — point by point
-
Zero-access content encryption
Message bodies are encrypted so Proton cannot read stored mail; apps are open source and audited. ↗
-
IP loggable under Swiss order
A binding Swiss order can compel Proton to log a named account’s IP - done for a French activist in 2021. ↗
-
Unencrypted metadata handed over
Card-payment data was handed over in the 2024 Stop Cop City MLAT case, and a recovery email in a separate Catalan case (neither is E2EE); subject lines are not encrypted either. ↗
-
Anti-abuse phone step
SMS/CAPTCHA verification can be required at signup, reported more often on Tor/VPN connections. ↗
Proton AG is Swiss. Switzerland has strong privacy law but its providers must comply with binding Swiss court orders, including foreign requests routed via mutual legal assistance treaties - as both documented cases show. Proton’s transparency report (tens of thousands of orders, the large majority complied with) is a primary source; the two identification cases are documented in reputable press. We frame these as lawful compliance, not bad faith.
We keep watching
Incident & policy timeline.
- Sep 2021
Compelled to log a French activist’s IP address
Following a request routed through Europol to Swiss authorities, a binding Swiss order compelled Proton to log and hand over the IP address and device type of a French climate activist’s account. Proton subsequently revised its homepage "no IP logs" wording. Message contents stayed encrypted; the IP metadata did the identifying.
source ↗ - 2024
Payment (card) data handed over in the "Stop Cop City" case
Via a mutual legal assistance treaty request (dated January 2024), the FBI had Swiss authorities compel Proton to hand over the payment (bank-card) identifier tied to a pseudonymous account, which the FBI matched to a name to help unmask a protester. In a separate case - the Catalan "Democratic Tsunami" account - Proton disclosed a recovery email to Spanish authorities. Neither payment data nor a recovery email is end-to-end encrypted.
source ↗
The verdict
Where it stands.
Strengths
- Zero-access encryption on message bodies - Proton cannot read stored mail
- Free account with no phone number required
- Open source, independently audited, Swiss jurisdiction
- Detailed, honest transparency reporting
Trade-offs
- IP can be logged for a named account under a binding Swiss order (done twice)
- Subject lines and payment/recovery data are not encrypted
- SMS/CAPTCHA anti-abuse often triggers on Tor/VPN signups
- Only Bitcoin among crypto (no Monero); payments not decoupled from identity; recovery contact pushed
Across the internet
What reviewers report.
Consistently praised
- Genuine, audited content encryption
- Easy no-phone free signup
- Large, well-resourced, transparent
Recurring complaints
- IP/metadata handed over under order (twice documented)
- Subject lines unencrypted; no Monero
Proton is widely recommended for content privacy but widely criticized after the 2021 activist case for the gap between "anonymous" marketing and metadata reality. The 2025 case renewed that debate. Sentiment splits between "best mainstream private email" and "do not mistake it for anonymity." Synthesized from press coverage and privacy-community discussion.
Keep exploring
Related lists & categories.
Ask the bureau
Proton Mail, common questions.
Is Proton Mail no-KYC?
Partly. You can create a free account with no phone number, but anti-abuse verification (SMS or CAPTCHA) frequently triggers on Tor or VPN signups, so it is phone-on-trigger, not never-phone. We rate it KYC level 2.
Can Proton Mail be forced to give up my data?
Yes, within limits. It cannot read your stored message bodies (they are zero-access encrypted), but a binding Swiss court order can compel it to start logging a specific account’s IP address, and it can hand over data it holds unencrypted - your recovery email, payment details, and subject lines. This is documented: an activist’s IP in 2021, a protester’s card-payment data in the Stop Cop City case (2024 MLAT), and a recovery email in a separate Catalan case.
Is Proton Mail still worth using?
For content privacy, yes - the encryption is genuine and audited, and for most users it is a large upgrade over Gmail. Just understand what it does and does not protect: your stored mail is unreadable to Proton, but your identity and metadata are reachable under a Swiss order. Pair it with anonymous signup habits and do not treat it as untraceable.
Your exact case not covered? The live Ask the bureau answers it and turns it into a public FAQ.