Proton Mail: message encryption, Bridge and recovery

Your inbox is also a set of keys

An email address receives conversations, password reset links, invoices and purchase confirmations. Moving it affects more than your choice of interface. Before migrating, identify the accounts whose recovery depends on that address.

Proton Mail is an option for people who want a service designed around message encryption. Your contacts do not all need to become specialists. You do, however, need to understand what happens when a message leaves Proton. “Encrypted” describes several situations offering different protections.

Who are you writing to?

Messages between Proton users are automatically end-to-end encrypted. Ordinary messages to an external provider do not automatically receive that protection; configured PGP or a password-protected message offers another route. Subjects and some metadata are not end-to-end encrypted.

Consider sending an attachment to a Gmail address. Starting from Proton does not automatically protect the recipient’s copy from their provider. Choose the method around the content and what your contact can actually use.

Protected messages still need to be usable

Password-protected messages let an external recipient read the content through a dedicated interface. Share the password over a separate channel. Sending it alongside the notification link undermines much of the point.

Try harmless content before sending a personal document. Can your contact open the link, find the password and reply? If they abandon the process at the first obstacle, the conversation may end up being resent through a less protected channel. Agree on a workable method for recurring sensitive exchanges.

Thunderbird and Outlook use Bridge

Proton provides Bridge for compatible desktop mail software, with paid Mail plans. It runs a local IMAP/SMTP interface and handles the required encryption and decryption. This is not a direct IMAP connection to Proton’s servers using your account password alone.

The mail client may keep locally decrypted copies. Disk protection, session security and backups therefore remain relevant. On a shared computer, find out where messages become readable and who can open your session.

Start with a test account or folder before rebuilding every sorting rule. Check search, attachments, sender addresses and behaviour when Bridge is not running.

Recovering the account and recovering the messages

An email or SMS password reset can restore account access without unlocking older encrypted data. A Proton recovery phrase prepared in advance can recover the account and its data. Store it securely somewhere accessible without that same Proton account.

Settle this distinction at signup. Having a recovery email address can feel like a complete fallback, until you discover that access to old messages was not prepared. Check active recovery methods in settings and make sure your second factor is available.

Move your email in manageable stages

The difficult part is often remembering an account you rarely use. Keep the old inbox for a transition period, with its usual protections, to catch those messages. Even a simple migration checklist is better than relying on memory.

Do not announce the new address to everyone immediately. First confirm that expected messages arrive, replies use the right identity and important documents remain accessible. If you use your own domain, plan its mail configuration changes separately.

1. List important accounts and their sign-in or recovery addresses.
2. Prepare the new inbox’s credentials, second factor and recovery methods.
3. Exchange ordinary messages with several providers and check spam folders.
4. Move accounts gradually and record confirmation messages.
5. Check old archives and keep usable backups of documents you need.
6. Close the old inbox only after checking remaining dependencies.

Checks before changing your main address

Your reading and sending habits should guide the decision. If Proton’s webmail or applications suit you, the move can be fairly straightforward. If you rely heavily on a desktop mail client, take time to understand Bridge and its local implications.

Try an exchange with someone at another provider, open an attachment on your devices and prepare data recovery. Make sure you understand those steps before changing the address used to recover your other accounts.

• Tuta: encryption, apps and email recovery↗