Why it is the default
If someone asks for one recommendation to replace Gmail, this is the answer, and it is not a close call.
Proton Mail combines zero-access storage, which means the provider holds mail it cannot read, with Swiss jurisdiction outside the intelligence alliances, open-source clients audited by Securitum in both 2023 and 2024, and an ecosystem that no other encrypted mail provider has built. One account carries mail, an encrypted calendar, encrypted storage, a password manager, alias services and Proton VPN. For most people leaving a big-tech provider, that breadth is what makes the switch survivable.
It also accepts cash and cryptocurrency, which matters to a small number of readers a great deal.
The rest of this review is about the parts the marketing is quieter on.
Ownership: the one that went the right way
Proton AG has been controlled by the Proton Foundation, a Swiss non-profit, since 2024.
Read our ownership explorer and the pattern across the privacy market is consolidation: independent brands acquired by holding groups, sometimes alongside the review sites that rank them. Proton moved in the opposite direction, placing control in a foundation rather than with investors who eventually need an exit. That does not make the company incorruptible, but it removes the specific mechanism by which privacy products usually decay.
The 2021 case, and what it proves
In 2021 a Swiss legal order compelled Proton to begin logging the IP address of one account belonging to an activist. Proton complied, and the fact became public through the case. The company has contested Swiss orders in court and has lost at least this one.
Most coverage of this reads it as a scandal. We read it as the most useful piece of evidence in the category, because it draws the boundary exactly.
What could be compelled was prospective metadata: from the moment of the order, connection IP addresses for a named account. What could not be produced was the content of stored mail, because zero-access storage means Proton holds ciphertext it has no key for. A provider with a spotless record tells you only that nobody has tested it. Proton was tested, the encryption held where it was supposed to hold, and the metadata gap was exposed where it genuinely exists.
The practical lesson for a reader is that Swiss non-profit ownership does not put you outside the law, and that if connection metadata is part of your threat model you need to be behind a VPN or Tor when you connect, not merely using an encrypted mailbox.
The OpenPGP limit
Proton’s encryption is built on OpenPGP, and OpenPGP has an unavoidable property that the category’s advertising tends to skip.
Mail between two Proton users is end-to-end encrypted automatically, with no configuration. Mail to a Gmail, Outlook or corporate address is not, unless your recipient uses OpenPGP and you have imported their public key. Without that, your message leaves Proton’s boundary encrypted in transit and then sits in the recipient’s mailbox in a form their provider can read.
Proton’s workaround is a password-protected message, where the recipient gets a link and opens the content on Proton’s side using a secret you shared out of band. It works, it is genuinely useful, and it is not the same thing as encrypted email, because the message never travels to them encrypted at all.
None of this is a Proton failing. It is how email works, and it is why our encrypted email ranking treats zero-access storage rather than end-to-end encryption as the property that actually distinguishes these products.
What it costs
| Plan | Intro | Renewal | True cost per month over 3 years |
|---|---|---|---|
| Free | $0 | $0 | $0 |
| Mail Plus, 1 year | $47.88 | $71.88 | about $5.32 |
| Mail Plus, 2 years | $71.76 | $143.76 | about $3.99 |
The three-year figures assume the introductory term followed by renewals at the published rate, with the two-year renewal pro-rated across the remaining twelve months. A 30-day money-back guarantee applies.
The renewal increase is substantial: Mail Plus goes from $47.88 to $71.88, a rise of half again. That is normal for this industry and it is still worth stating, because the price you see advertised is not the price you will mostly pay. Our true cost calculator exists for exactly this. Tuta is cheaper at every tier and does not raise its price at renewal, which is the single strongest argument for it.
The free tier gives 1 GB and one address. It is a real product rather than a demo, but 1 GB fills faster than people expect.
The iPhone app
Our App Store analysis used a sample of 50 recent reviews from the Great Britain storefront, against a listing rating of 4.75 stars from about 47,000 ratings.
Fifty is a small sample and we treat it accordingly. The sample mean was 3.32, well below the listing average, with sentiment improving between the older and more recent portions. The largest complaint theme by a distance was privacy concerns at 20 per cent of the sample, followed by interface and usability at 14 per cent and customer support at 10 per cent. Privacy complaints in reviews of a privacy product are usually about specific disappointments rather than a general judgement, and with a sample this size we would not draw conclusions from the proportion.
Where it lands
The strongest overall product in encrypted email, and the one we would put in front of someone who has never thought about their mailbox before. The ecosystem is the differentiator, the ownership structure is the best in the market, and the 2021 case is a feature of the evidence rather than a mark against it.
Choose Tuta instead if price and encryption thoroughness matter more than breadth, or Mailbox.org and Posteo if you need normal IMAP at a lower price and will manage PGP yourself.
What we have not tested
We have not run our own hands-on testing of Proton Mail’s apps, Bridge, or its search performance over encrypted mail. Our provider record flags ownership, jurisdiction and audit history as still needing a primary-source check, and the Securitum audit entries carry no published report URL on file. The App Store figures above are the only numbers here we generated ourselves, and they come from Apple’s public review feed rather than from testing.