Has Proton Mail Ever Been Hacked?

This page is part of the Proton Mail FAQ Hub.

So has Proton Mail actually been hacked?

Has Proton Mail been hacked at the level that actually matters, meaning its servers handing over the contents of your encrypted mail? No. Proton uses zero-access encryption, so the messages stored on its servers are sealed with keys the company itself does not hold. Even in the nightmare scenario of a full server seizure, an attacker walks away with unreadable ciphertext rather than your Tuesday-morning inbox. That design choice is the entire point, and so far it has held up.

Here is the honest half. No email provider on earth can promise it will never face a security incident, and Proton is no exception to that rule. What Proton can reasonably claim, and what the public record supports, is that the encrypted contents of user mail have stayed encrypted. That is a narrower promise than ‘nothing bad will ever happen’, and it is the more truthful one to make.

What about the ‘Proton Mail got hacked’ headlines?

Most of those headlines describe compromised accounts, not a compromised Proton. Somebody reused a password already sitting in a leaked database, or typed their login into a convincing fake page, and the attacker strolled in through the front door with a valid key. That is phishing and credential reuse. It would defeat Gmail, Outlook or any provider you care to name, because the service never gets the chance to refuse.

The distinction gets blurred because ‘Proton hacked’ is a punchier headline than ‘user fell for a phishing email’. A breach of Proton and a breach of your account are entirely different animals. The first has not happened in the way people fear. The second happens to careless users somewhere in the world every single day, and it will keep happening regardless of how good the underlying cryptography is.

Does a Swiss court order count as a hack?

No, although the two get muddled constantly. Proton can be compelled under a Swiss court order to hand over the limited account data it genuinely holds, such as recovery details or the timing of logins. That is lawful legal process, not a break-in, and it still cannot produce the readable contents of your messages, because Proton has no way to decrypt them either. The distinction is boring but it matters.

Being candid about the edges: subject lines are not end-to-end encrypted, and metadata such as who you wrote to and when is less protected than the message body. Encryption guards the letter, not the envelope it travelled in. If your threat model includes hiding the fact that two people spoke at all, no mainstream email service fixes that, and Proton has never pretended otherwise.

How do I actually keep my Proton account safe?

The weakest link is almost always the human, which is oddly good news, because the human is the part you control. Close the doors that attackers actually use and the clever cryptography behind them stops being relevant to your daily risk. A few unglamorous habits do most of the heavy lifting, and none of them cost anything.

• Use a long, unique password kept in a password manager, and never recycle it on another site.
• Switch on two-factor authentication, ideally a hardware security key rather than SMS codes that can be intercepted.
• Treat every ‘verify your account now’ message with suspicion and check the real sender before you click anything.
• Keep a recovery method configured so a lockout never tempts you into a risky shortcut.

So can I actually rely on Proton Mail?

For a privacy-first daily driver, yes, with your eyes open. The cryptography has held up under public audits, the company’s record on protecting message contents is genuinely good, and the residual risk sits overwhelmingly with your own password hygiene. Moving up to Proton Mail Plus buys more addresses, storage and features, though it changes none of the underlying security maths one bit.

BAIZAAR keeps banging the drum about hardware keys for precisely this reason. The maths is sound, so you become the target. Sort out the human, and you have quietly shut the likeliest way in. That is where your attention pays off, not in fretting about a server breach that has not come.

---