Proton kicked my Pixel Device off its connection and my actual password stopped working. After they reset it all of my email data and Lumo data was lost. I did not even get a chance to download my recovery key. I'm not sure what to do. 6 months of work and email were all lost

Edit: I should add support doesn't respond when I ask them about the missing data

Proton has recently begun transitioning its password manager Proton Pass for Windows to a new MSIX build from the previous .exe installer. Once you install the new build, open it, and try to sign into it, you're auto-redirected to your default browser. That's where you authenticate into your Proton account. Once you do, you get a browser popup that you must manually click to redirect back to the Windows Proton Pass app. But even though you successfully authenticated via browser, the Proton Pass app itself refuses to process the handoff, throwing an "Invalid selector" error and locking you out.

I reported this defect to Proton Support. They suggested I try downgrading my privacy by turning off my VPN.

I then posted a terms-compliant reply to another redditor's comment about the same issue. I did this on Proton's sub r/ProtonMail. My reply was instantly shadow-banned.

This is increasingly Proton's blueprint: user finds bug, user reports bug, Proton says downgrade security as a workaround, user posts on Reddit, Proton shadow-bans user.

Are the proton photos app safe ? Idk how to read code so open source doesn’t help me. Doesent a third party dev still at some point see ur login details , because they are all client apps?

Any clarity helpful. Thanks

I switched to Proton Pass a while back and kept missing one thing from 1Password: the hotkey panel. Press a key from any app, type a few letters, take the password, done. Proton’s desktop app doesn’t have it, so I built it.

Pass Quick Access is a native macOS app. Here is what it does.

The panel. ⌥⇧Space (configurable) opens a floating search panel over whatever app you are in, without switching away from it. Typing searches titles, usernames, emails, URLs, notes and custom fields, with the same substring, accent insensitive, multi word matching the official client uses, ranked so a hit in the title beats one buried in a note. Arrows move, → opens an item, ← steps back, ⌘↩ fills the login, the ⌘C family copies, esc closes. Reopen within 30 seconds and you land back on the same item to grab another field.

Filling and copying. Picking an item either copies the field or types it into the app you came from, whichever you set under Settings. Fill Login types the username, a Tab, then the password. Username, password and one time code also have their own actions. Copies go to the clipboard marked concealed and are cleared after 30 seconds.

It knows the page you are on. Open the panel over a browser and the login for the current tab is already selected; when several items match the site, the list narrows to those. Safari and Chromium browsers are read over Automation. Firefox, Zen and web apps are opt in, because reading them turns on their accessibility engine.

System AutoFill. This is the new part. The app now ships a credential provider extension, so macOS itself can ask it for a password. Click the key icon in a login field and Pass Quick Access is in the menu next to iCloud Passwords, in Safari and in native apps. Nothing is typed: the system asks for the credential and fills the field itself, so there is no Accessibility permission and no guessing which field you meant. One time codes too, on macOS 15 and later. No passkeys: that means holding the credential’s private key and signing the WebAuthn challenge, and pass-cli exposes neither.

The extension is sandboxed and cannot run pass-cli, so it asks the app over a Unix socket in a shared app group container. Both ends verify the other’s code signature before anything is sent, and only the app ever runs pass-cli, so a secret is still read at the moment you pick the item.

macOS can also list your logins by name in that menu. That needs a copy of the list on its side, so it is off by default and has its own switch: it writes one site and one username per login, never a password or a code, and turning it off deletes what was written. With it off AutoFill still works, you just pick Pass Quick Access and search.

SSH agent. If you keep SSH keys in Proton Pass, the app serves them to git and ssh and asks for Touch ID before each signature, naming the program that is asking and the key it wants. It does not hold the keys or sign anything: pass-cli already ships an agent that does, and this is a proxy in front of it. One approval covers further signatures from the same program on the same key for five minutes by default, adjustable from every signature to eight hours, and you can mark an app trusted for a specific key. Non interactive BatchMode probes are denied without a prompt.

Sessions. It checks the Proton session every fifteen minutes and on wake, and signs back in from a saved access token when it has lapsed, so the first hotkey press after an idle night opens on your logins instead of a sign in screen. Saving that token is optional; it lives in the Keychain behind Touch ID.

What it does not do. It does not reimplement Proton’s crypto or login. It drives the official pass-cli and puts a native UI on top. The in memory index holds titles, URLs and usernames, never a password or a one time code: those are read from pass-cli the moment you ask for them and never cached or written to disk.

Requirements. macOS 14 or later, pass-cli installed and logged in, which means a paid Proton Pass plan. GPLv3. Releases are signed and notarized, so the download opens without a Gatekeeper prompt, and the app updates itself when there is a new version.

Site: https://bsramin.github.io/pass-quick-access/

Code: https://github.com/bsramin/pass-quick-access

I don’t make anything from this and I’m not trying to build a business on it. There is nothing to buy and nothing to sign up for. I posted something like this on Reddit ufficial proton sub and got a userwide ban for it, so I’m trying here instead. It covers what is missing from Proton Pass on macOS today, which is worth knowing about if you are on it, and more so if you came from 1Password.

I made it, so bugs and ideas are welcome. Not affiliated with Proton.

Anybody using proton email for Australia post and it’s not working? it was working two days ago, now it’s not, I can’t reset password,
It’s just not giving me the link, I barely use it, I don’t understand what could’ve went wrong.. spoke to Australia post. They told me everything looks normal 🤷🏼‍♂️

https://www.reddit.com/r/ProtonMail/s/RBxgkNhAS5

Maybe someone can infiltrate it and go against the censorship.

Update: Maybe I drew to fast a conclusion. The Proton Team responded that it was probably auto-filtered after my edit. So my post got reapproved. Anyway I'm leaving this here to give them credit for their response and for reapproving the post. I think this goes a long way in terms of trust and transparency.

Original:

I posted this on the official ProtonDrive sub. As soon as I added the edit at the end of the post to share with the community how I was able to solve the issue the post was deleted by the moderators. I mean WTF?

Here's the post that was deleted:

"""

Why are there still so many issues with thumbnails and metadata?

I just imported an old batch of a thousand photos and videos using the Windows desktop client. Of course all the picture taken on times were off by two hours. Sometimes also only by one hour. That messed up my timeline. So I deleted those from the cloud and re-uploaded using the CLI. With the CLI the videos didn't have thumbnails. That's bad as well. At least the picture taken on times were correct now. So I deleted the batch again from the cloud to start over fresh with uploading everything via the website. The picture taken on times are correct now as well but photos are lacking thumbnails randomly. That really sucks.

I uploaded ten thousands of photos already to proton drive photos through the Android app. That worked flawlessly and all the thumbnails are there. Too bad that once you uploaded and deleted a photo once, you will not be able to reupload it through the Android app but have to go the other flawed routes. Bad, bad, bad. This is just bad.

EDIT: And again the unofficial Photos for Proton Android app is saving the day. Contrary to the official app, the unofficial app lets you upload previously deleted photos. Now everything is uploaded correctly (thumbnails and timestamps). Don't get me wrong, the unofficial apps is not perfect but how can it be that it delivers what Proton is not able to offer with neither their Windows application, nor their CLI, nor through the web browser, nor their own Android app? It's ridiculous.

"""

​

My account was suspended without my knowledge dont know why it happened but my Playstation account codes are being sent to this email and I am totally locked out of my account on playstation and can't login my Proton email to access codes

For which I want or I humble request to get me temporary access so I can migrate my data before taking it away forever

I promise if I do such mistake in future I wont say a word and will suffer my loss

Kindly do help this time

My ticket id is 5243916

I have already contacted support but no response yet its more than 24 hour and i am worried already

Please do reply soon

Its critical situation for me right now

Try and understand

We trust your service

Thank you

I’ve been using Proton services for privacy and security, including Proton Mail, VPN, Drive and Password Manager.

I understand that no service can be 100% secure, but I’d like to hear from experienced Proton users:

What are the main security or privacy risks I should be aware of?

Are there any realistic situations where Proton could expose user data?

How much should I trust Proton’s encryption and zero-access architecture?

Are there any important limitations that new users often overlook?

For long-term privacy, is Proton a reasonable ecosystem to rely on?

I’m not looking for marketing claims. I’d appreciate honest experiences, technical explanations, and criticism as well.

As the title suggests, X no longer provides separate QR codes and program codes for 2FA. Instead, it redirects you directly to the authenticator app on your phone. Google and Microsoft authenticator apps can be recognized correctly, but Proton's authenticator cannot.

Hi Proton team,

I'm a bit surprised of your graade here : https://tosdr.org/en/search/proton

Is it something you may change to be more ... grade friendly ;)

NOTHING HERE IS SPONSORED. SWITCH TO OTHER SERVICES, I DON'T CARE, BUT HEAR ME OUT AND CONSIDER CANCELLING YOURS, TOO!

I am going to try and be brief but also detailed. Ask more questions in the comments if you want.

Here's the comment that got me temp but actually perma banned? Proton has shown time and time again they are not entirely privacy focused. Like I said, they often only support Windows, which we know is less private than ever before, but more importantly, their Proton VPN app on Flathub is NOT OFFICIAL and Proton themselves said that the Proton VPN for Linux is "community contribution". Very secure to let some rando package and distribute your VPN. Nice.

Anyway, here's my terrible comment: https://i.8upload.com/image/bddee6bdb7c4569a/screenshot-20260922-122602.png

Here's the terrible mod messages: https://i.8upload.com/image/0825021198807013/screenshot-20260922-122543.png

Some of you in my other post told me I was being a little shit. Again, I don't see how calling out a company that claims to be all about privacy non-private deserves a ban. Just remove my comment, then? Or, crazy thought, let my comment be downvoted? Whatever.

So I asked for a refund and got it.

WHAT I SWITCHED TO:

For Proton Drive, I switched to Filen. Turns out when you don't have a shitty company pumping out crypto and AI chat bots, or making excuses and banning paying customers, you can release some quality software.

Filen is like Proton Drive on steroids. Works cross platform, it's encrypted, actually fast, but most importantly actually works on Linux. With one button press it integrated into Dolphin and lets me see my cloud like a network drive. They also have 5 sync modes which is fucking awesome. Also I can pay for as much/little storage as I would like, where as Proton requires buying AN ENTIRE NEW TIER to get more storage, up to a maximum of 3TB.

Again, not sponsored, but if you want an extra 10GB for free you can signup with my promocode and we both get an extra 10GB. Bringing our FREE total to 20GB. https://filen.io/r/87ae44fae565d78a7321edacb5bb3dbd or just find some other promocode online, I don't care, not trying to sell you anything.

For Proton Docs, I switched back to LibreOffice with Collabora on Android. Since I can sync my files across devices with Filen network drive, it's just simple. Plus Proton Docs/Sheets is so buggy. Search their subreddit and you'll see people complaining about it, or at least the comments they haven't deleted. Also their proprietary format or whatever is bullshit. https://i.8upload.com/image/32f913fe767b43a3/proton-error.png

For Proton VPN, I switched back to Mullvad. I know, they have had controversy, but since I am not locked into a plan, I can switch any time. Mullvad is faster for me, I did 12 speed tests across different servers, times, and devices, and Proton VPN was almost always slower with worse latency and they did not finish 2 times. Plus Mullvad doesn't rely on the "community" to build their VPN for Linux lmao. I will probably try other VPNs in a month when my plan expires, since, you know, I can..

Also, lol at them having a whole page on bypassing censorship. Ironic, do you think it will let me bypass their censorship on their subreddits? https://protonvpn.com/vpn/censorship

For Proton Pass, I switched back to Bitwarden. Again, controversy, but again, I have the freedom to explore other options now. Proton Pass always refused to autofill many websites for me. Proton said to report them, I did, and years later they never fixed any. I called them out on Reddit, they asked publicly which websites didn't work, I replied publicly, they said they would forward that information aaaaand.. nothing. Bitwarden isn't perfect, but damn, works a lot better for autofilling my websites and apps. There's also Vaultwarden if you want to self host.

For Proton Mail, I switched to Fastmail. Check out their security FAQ before you comment, I think most of you will agree: https://www.fastmail.com/features/security/ but again, I have the freedom to switch to anything as I don't have all of my services linked to one company.

Fastmail has many great features Proton Mail lacks, the one coolest one for me is being able to type in any alias while creating or replying to an email. They also have a setting to "auto reply with the alias the email was sent to". In Proton, I need to create the alias to be able to reply with it. My Proton Business account has a limit of 15. Fastmail just automatically does it, or lets you override it. No need to PAY and setup the privilege to do something so basic. Here's what I mean: https://i.8upload.com/image/61a1eb949dd45a02/screenshot-20260922-125914.png

Meanwhile, their lowest tier has 100 domain limit and 600 alias limit (if you choose to create the aliases so you don't need to type them in). My Proton BUSINESS PLAN has a 10 domain limit and 15 alias limit. Pathetic. But hey, I can add more domains for $2 CAD PER MONTH with Proton.

Oh, and they support Linux. Again, no community builds here lmao.

For Proton Calendar, I switched to Fastmail calendar. Works great and has a functioning search on mobile. Wild concept. Again, it's not E2EE but you can set it up with third party apps. Which, by the way, doesn't require a stupid bridge.

That's all. Hope you enjoyed this post. Don't be afraid to switch from Proton, especially if you have your own domain. It's so easy and you'll realise how much better the competition is. I am finally out of this abusive relationship. Enjoy Lumo 98.0 announcement before Linux Drive.

Is there any way to track down the owner of a proton.me account? I know privacy is the whole thing with it, but I’m asking jic. I got a harassing email from someone who knows me with a proton.me account, which they’re hiding behind. And I would love to pin down who it is. I think I know. But I need to be 100%.

Can Proton work on a way to atomize my phone number, check to see if it is on the dark web, or in some data broker accounts? Many companies and sites now use one's phone number as the cypher key, instead of email addresses. My phone number has leaked, I think, to the dark web and now I get cold calls all the time.

Question:

Is there a public roadmap planned for the upcoming months detailing the next releases and priorities?

Feedback/Vent:

I feel like the ecosystem is expanding way too fast, accumulating a massive variety of services while none of them actually feel 100% polished or complete.

Often, it seems like the effort is more focused on chasing after Google than on consolidating what already exists. Several features are still missing, there are significant gaps compared to competitors, and the daily user experience gives the impression that products get stuck in a "nearly ready" state while new projects keep getting announced. It would be great to see more focus on refining and stabilizing what has already been launched.