r/ProtonMail • • 23h ago

Discussion Replying to a password-protected email thread silently sends your reply unprotected, with the original quoted in the clear

33 Upvotes

I think I’ve found a design flaw in how Proton handles password-protected emails, and I’d like to know if others see the same thing.

What happens:

  1. You send a password-protected email to a non-Proton recipient.
  2. They open it through the secure link and reply through the portal.
  3. That reply lands in your inbox like any normal message.
  4. Later, you hit Reply the way you would for any email. Nothing tells you the thread started out protected, and the reply goes out as a standard unencrypted email.
  5. The recipient’s regular inbox now holds your reply, with the original protected message quoted in the thread history.

Why I think it’s a real problem:

The only visual cue is a small blue lock that appears when you set a password. When you don’t, nothing appears, and a missing icon is easy to overlook. Someone less technical could easily assume that a conversation that started securely stays secure. And since the sensitive content sits in the quoted history, even a harmless reply like “sounds good, thanks” re-sends it in the clear.

The people most likely to use this feature are the ones sending to non-Proton contacts who don’t use PGP, who are often the least likely to notice.

What I’d suggest:

  • Default to re-applying password protection when replying to a thread that began as a protected message
  • Show a clear warning when sending an unprotected reply to such a thread
  • Strip or collapse the quoted protected content when the reply isn’t protected
  • Remember the password and expiry per conversation so re-enabling it is one click

Security state should fail loudly, not silently.

I’ve reported this to Proton’s security team and filed a bug report. I reproduced it on the website using Brave Origin on Linux, October 2026 and haven’t tested the mobile apps.


r/ProtonMail • • 19h ago

Feature Request I can't test Lumo Plus for 1-month due to my Proton Unlimited 1-year subscription

7 Upvotes

As in the title. I am currently on Proton Unlimited with several months left and I was enjoying using Lumo lately. I decided to test premium version for a month, but the only option available is 12 months. Is there really no way to run two separate billings on same account?

I could create second proton account and achieve that but why...


r/ProtonMail • • 11h ago

Possible bug ProtonSheets keep crashing

7 Upvotes

Basically the title. The application opens fine and everything but the second I try to type out a formula it crashes. More specifically the VERY SECOND I press a key that will reference a sector/cell it crashes(like when I type "=SUM(B" right when type "B" it crashes). Is there a fix to this because surely this isn't something that happens to everyone.


r/ProtonMail • • 21h ago

Tutorial Overcoming ProtonMail’s poor filtering by using SimpleLogin aliases

Post image
0 Upvotes