this post was submitted on 13 Sep 2025
39 points (67.3% liked)

Proton

7851 readers
100 users here now

Empowering you to choose a better internet where privacy is the default. Protect yourself online with Proton Mail, Proton VPN, Proton Calendar, Proton Drive. Proton Pass and SimpleLogin.

Proton Mail is the world's largest secure email provider. Swiss, end-to-end encrypted, private, and free.

Proton VPN is the world’s only open-source, publicly audited, unlimited and free VPN. Swiss-based, no-ads, and no-logs.

Proton Calendar is the world's first end-to-end encrypted calendar that allows you to keep your life private.

Proton Drive is a free end-to-end encrypted cloud storage that allows you to securely backup and share your files. It's open source, publicly audited, and Swiss-based.

Proton Pass Proton Pass is a free and open-source password manager which brings a higher level of security with rigorous end-to-end encryption of all data (including usernames, URLs, notes, and more) and email alias support.

SimpleLogin lets you send and receive emails anonymously via easily-generated unique email aliases.

founded 2 years ago
MODERATORS
top 27 comments
sorted by: hot top controversial new old
[–] Nelizea@lemmy.world 4 points 2 weeks ago (1 children)

From Andy:


There's some misinformation floating around that I think is worth a post to clarify.

Proton generally only suspends accounts if 1) forced to do so by a Swiss govt order 2) we are sure beyond a reasonable doubt the user breached Protons Terms of Service (ToS) or 3) we detect that the user has been compromised.

Contrary to what some people think, Proton generally only suspends a single service and not all services. For example, let's say you decide to start sending spam in violation of Proton ToS, Proton Mail may be suspended, but Proton Pass will continue to work. There are of course exceptions to this (for example, if an attacker is hitting your account or has already gotten in, we'll lock the whole thing down until you get in touch with us).

In general, account suspensions due to (1) and (2) are extremely rare, with (3) being slightly more common. (2) typically happens with newly created accounts with are used for spamming or registering large number of accounts at third party services (such as Instagram, etc). The odds of an account you have been using for a while suddenly being suspended is virtually zero, and even then, we have a 24/7 team you can contact to appeal.

For ToS violations, it is irrelevant who reports the violation to us, if the violation is verified beyond a reasonable doubt, Proton will suspend the account. Proton data is encrypted, but we use OSINT techniques, our datasets of dark web chatter, information shared with us by other tech companies, and various other methods to do verification.

From time to time, there are claims that Proton is suspending accounts improperly. Our policy is not to comment publicly on specific cases, but there is usually more to the story than meets the eye, and the anonymous posters on the internet generally don't disclose the full story. Such claims should therefore not be taken as fact, as the facts themselves are usually wrong.

To give an illustrative example, recently it was claimed that Proton was blocking the account of journalists. However, these were not "journalists" in the traditional sense, but hacktivists who were involved in a number of hacking incidents, which is a violation of Proton's ToS, and therefore subject to suspension of all accounts. In this case, I made the decision to exceptionally restore two accounts because hacktivism cases are not always black and white. However, Proton's policy is that if you use some accounts for illegal purposes, you will also lose access to the accounts where you have not yet conducted illegal activities.

Proton has no choice but to enforce ToS, because if activities which are illegal under Swiss law, or other activities which are technically not illegal but damaging to Proton (such as sending spam) where not forbidden, Proton would unfortunately become blocked by other email providers, hurting legitimate users.

In enforcing our ToS, we show no favor or bias. It does not matter your ideology or which "side" you are on, Proton enforces the ToS uniformly.

Proton's ToS can be found here: https://proton.me/legal/terms

Proton's abuse appeal form can be found here: https://proton.me/support/appeal-abuse

Abuse and ToS violations can be reported here (all reports are treated confidentially): https://proton.me/support/report-abuse

Thank you for your understanding.

[–] KarnaSubarna@lemmy.ml 2 points 2 weeks ago

However, these were not "journalists" in the traditional sense, but hacktivists who were involved in a number of hacking incidents, which is a violation of Proton's ToS, and therefore subject to suspension of all accounts. In this case, I made the decision to exceptionally restore two accounts because hacktivism cases are not always black and white.

So, either your original judgement to suspend the account (and to reject subsequent appeal) was correct, or you latter judgement to reinstate the account was correct.

I fail to see how you can claim with a straight face that both of your actions were correct, while every other facts about the owner of that account remain the same during the whole drama.

[–] vermaterc@lemmy.ml 45 points 2 weeks ago (2 children)

You need to understand a few things. In order to keep email service usable, Proton need to fight any malicious activity. If they didn't do it, ProtonMail would be quickly blacklisted by other mail providers as it will be interpreted as source of spam. At the same time, they have very limited capabilities to verify this activity by themselves as they cannot read contents of their user's emails (it is encrypted) and they keep limited logs.

As an article states, here is what happened:

Proton’s official account replied the following day, stating that Proton had been “alerted by a CERT that certain accounts were being misused by hackers in violation of Proton’s Terms of Service. This led to a cluster of accounts being disabled. Our team is now reviewing these cases individually to determine if any can be restored.” Proton then stated that they “stand with journalists” but “cannot see the content of accounts and therefore cannot always know when anti-abuse measures may inadvertently affect legitimate activism.”

[–] KarnaSubarna@lemmy.ml 3 points 2 weeks ago (1 children)

While Proton does have an obligation to stop spread of SPAM mail, this incident is a bit different. Let's see -

  1. Proton was not approached by other Email providers (Gmail/Outlook) about suspected email SPAM campaign originating from their network.
  2. This matter is NOT even related to SPAM mails.
  3. krCERT - a Govt agency approached Proton and asked them to disable the account.
  4. Proton simply complied to that without verification.
  5. Appeal made by Owner of that email id was rejected.
  6. Subsequently follow ups were also ghosted.
  7. Until the tweet from the journalist went viral, Proton was not in mood to reinstate the account.

Note that while Proton Mail (server) is E2E encrypted, but once email exits their network it no longer remains as such. So, whoever (other email provider or incident reporter) reported the incident, should have a copy of unencrypted email to prove abuse of Proton Mail service.

Given that proton now reinstated the account, that proves Proton initially froze that account based on "Trust me, Bro" proof only from krCERT.

In ideal world, any service provider should require a court order to comply with Govt request to remain unbiased in such situation.

[–] hanrahan@slrpnk.net 1 points 2 weeks ago

Given that proton now reinstated the account, that proves Proton initially froze that account based on "Trust me, Bro" proof only from krCERT.

Pwrhaps ? or are the obligated to comply and wtwre able to reinstate becase krCERT backed down ?

[–] Atherel@lemmy.dbzer0.com 3 points 2 weeks ago (1 children)

So they simply suspend accounts because "they are evil, trust me bro" and only maybe investigate after? This is either stupid, negligent and/or bullshit.

[–] InternetCitizen2@lemmy.world 11 points 2 weeks ago (1 children)

Maybe I am misunderstanding something here, but this does seem like it could be ripe for abuse. Say I disliked a journalist and knew their proton mail. Could I report it as abuse and have them suspended?

[–] Apollo2323@lemmy.dbzer0.com 2 points 2 weeks ago (1 children)

Yes and then the journalist appeal and shows that he is not using his account for abuse and get reinstated. Even a privacy and a security product like Proton has terms of service.

[–] KarnaSubarna@lemmy.ml 3 points 2 weeks ago

If you read through the article, his appeal was originally rejected, and subsequent follow ups were also ignored.

It's only the tweet, directed at proton for ghosting them, that went viral and eventually forced Proton's hand to reinstate the account.

If a journalist has to go through this much trouble, what chance a common person from authoritarian or semi-authoritarian country have.

This loophole will certainly be misused by Governments to gag someone temporarily/permanently.

[–] CMDR_Horn@lemmy.world 7 points 2 weeks ago (2 children)
[–] victorz@lemmy.world 3 points 2 weeks ago
[–] Bonus@sh.itjust.works 0 points 2 weeks ago

Yet they keep posting it.

[–] Radiantly9267@lemmy.ca 3 points 2 weeks ago (1 children)

Isn't the title is misleading ?

[–] victorz@lemmy.world 3 points 2 weeks ago

Please elaborate, if you will 🙏

[–] calypho@lemmy.world 3 points 2 weeks ago