Proton Mail Protects Your Messages, Not Your Identity

Proton Mail is one of the best tools out there for keeping your emails private. But if your safety or your job depends on staying anonymous, as it might for a whistleblower, a journalist or a dissident, it's not enough on its own.

Plenty of people mix up two different ideas: keeping your messages secret and keeping your identity secret. Proton is brilliant at the first. The second takes a bit more effort from you.

What Proton Does Well

Proton uses what it calls zero-access encryption. Your emails are locked with your key before they're stored, and Proton never holds the key to unlock them. Even if someone seized their servers or showed up with a Swiss court order, Proton couldn't read your old messages.

That's a big deal. But email was built decades ago, and it has a few quirks that encryption can't fix.

The Secret to Staying Protected: Keep It in the Family

When you email from one Proton address to another, the message never travels across the open internet. It's encrypted on your device and only unlocked on the recipient's device. Nobody in between can peek inside.

Email a Gmail or Outlook address, though, and things change. The message leaves Proton's protected world in plain, readable form. Once it lands in Gmail, it sits there unencrypted, where it can be scanned and handed over if the authorities ask.

So if you're a source sharing something sensitive, ask the person on the other end to use a Proton address too. It keeps both ends of the conversation locked down.

What Proton Can't Hide

Even with all that encryption, some things are visible by design, because email can't be delivered without them:

• Who's talking to whom. Sender and recipient addresses, subject lines, timestamps and message sizes aren't hidden. In an investigation, that alone can show who contacted whom, and when.
• Plain emails to outsiders. As above, anything sent to a non-Proton address leaves unprotected.
• IP addresses, if a court demands it. Proton doesn't keep connection logs by default, but a Swiss court can order it to start recording them for a specific account.
• Sign-up details. A recovery email, a phone number or a credit card payment all leave a trail back to you.

Why You Shouldn't Use a Custom Domain

Setting up your own domain, like @my-cool-name.org, sounds tidy and professional. For someone who needs anonymity, it's a trap.

1. The paper trail. Domain registrars keep your payment details, billing address and login history. Even with "privacy protection" switched on, a subpoena to a registrar can unmask you, and that's far easier than going through the Swiss courts.
2. It can be hijacked. Custom domains depend on a system called DNS. If an attacker gets into your registrar account, they can quietly reroute your mail through their own server and read it before it reaches Proton.
3. You stand out. A unique domain is a flashing sign. Anyone monitoring a network can spot traffic going to it. An ordinary @proton.me address blends in with millions of others.

The Safest Setup

If you're up against a serious threat, this is the approach:

• Use a live operating system like Tails. It runs from a USB stick and leaves no trace on the computer.
• Connect through Tor. It hides your real IP address. Proton even has a dedicated Tor address for its service.
• Stick with a standard @proton.me address. No custom domain, no registrar, no billing trail.
• Leave out the personal details. Create a free account over Tor, with no recovery email, no phone number and no payment.
• Keep conversations Proton-to-Proton. If you must email someone outside Proton, use Proton's password-protected messages or PGP so nothing travels in the clear.

The Bottom Line

Proton protects what you say. It doesn't hide that you said it, or who you are. For everyday privacy, it's excellent. For high-stakes anonymity, pair it with Tor, a clean operating system and a habit of leaving no personal breadcrumbs behind.