Proton Mail protects messages with encryption, which changes what recovery can and cannot do. Getting back into the account is one thing; keeping access to old encrypted mail depends on the recovery method you set up before the lockout.
Does this affect you?
Use this for Proton Mail on the web, iPhone, Android, or desktop apps when the password is forgotten, the two-factor device is lost, or you are deciding whether to reset the account.
If you have a recovery method
A recovery email, recovery phone, or recovery phrase gives Proton a supported path back in.
- Open the Proton sign-in page and choose Forgot password.
- Select the recovery method already attached to the account, such as recovery email, recovery phone by SMS, or recovery phrase.
- Verify ownership through the prompt Proton provides.
- Set a new password.
- If two-factor authentication is also blocking sign-in, use one saved one-time 2FA backup code.
- After signing in, open Settings > Recovery and confirm the recovery methods are still current. Generate new 2FA backup codes if you used one.
If you have no recovery method
Read the warning before confirming a reset.
- Open the Proton sign-in page, choose Forgot password, and follow the recovery flow even without a saved method.
- Understand that resetting without data recovery can create a working login but cannot decrypt mail encrypted with the old password.
- Before confirming, check old devices, browser-saved passwords, and password managers for the old password.
- If you reset anyway, accept that older encrypted mail may be permanently inaccessible.
- After access returns, set up a recovery phrase and recovery email immediately.
More control
The recovery phrase matters most
A Proton recovery phrase can restore encrypted account data after a password reset. A recovery email helps with login access, but it does not replace the data-recovery role of the phrase.
Save 2FA backup codes
When two-factor authentication is enabled, Proton gives single-use backup codes. Store them in a password manager or printed record so a lost authenticator app does not block you.
Use multiple recovery options
A recovery phrase plus a recovery email or phone gives you more than one way back when one device or contact method is unavailable.
Privacy creates responsibility
Proton support cannot decrypt old messages for you because Proton is designed not to hold that key. That is the privacy tradeoff: stronger confidentiality, but recovery must be prepared in advance.
Sources
- Proton Support – Common questions about password resets and Proton (2025)
- Proton Support – Set up a recovery method (2025)
- Proton Support – Two-factor authentication 2FA (2025)