Is Proton Mail private? Email encryption boundaries explained

A blunt archived warning about Proton Mail compressed several different kinds of encryption into one claim. The more useful question is: who should be unable to read which part of your message? Email protection depends on the recipient, the way you send and the provider that receives it.

Check the recipient path

Proton states that mail between Proton users is end-to-end encrypted. It also supports OpenPGP with outside recipients who have a compatible public key, and password-protected messages for recipients outside Proton. A normal message to an ordinary external mailbox does not magically become end-to-end encrypted just because the sender used Proton. The receiving service's security and retention practices matter.

That does not mean an ordinary external email is necessarily sent in cleartext across the internet. Transport TLS and end-to-end encryption are different protections. Inspect the actual sending mode before describing a message as private.

Look beyond message content

Email addresses, timing, subject lines and routing information can still expose sensitive context depending on the system and mode. A password-protected link also creates a password-sharing problem: send the secret through a separate channel. For a high-risk conversation, decide whether email is the right medium at all.

Use a four-question threat model

1. Who is the recipient and what mail system do they use?
2. Is the message protected only in transit, stored encrypted, or end-to-end encrypted?
3. Which metadata do the sender and receiving providers see?
4. What happens if an account or device is compromised, and how are keys recovered?

Open-source client code and third-party audits can improve transparency, but they do not alone prove every server-side operation or every claim about a live service. Read the provider's current technical documentation and make a decision against your own threat model.