r/ProtonMail • u/Nietechz • 13h ago

Web Help Question about mailbox encryption

After I change my password PM stopped asking me the second password for "de-cryption" of the mailbox.

If I enable it again, my current mails will be lost?

3 Upvotes

81% Upvoted

6 comments sorted by

6

u/PutridProfit7498 13h ago

I would not use it: https://proton.me/support/switch-two-password-mode

When Proton Mail was first released, two-password mode was the default for all accounts. But since then, our research team has developed a way to offer the same level of encryption with a single password.

One-password mode has been the default for all new accounts since December 2016, and it’s no less secure.

1

u/Nietechz 13h ago

This doesn't mean Proton can read the mailbox since the second password was the key for the encryption of the mailbox?

3

u/PutridProfit7498 12h ago

https://proton.me/support/proton-mail-encryption-explained

All messages and attachments in your Proton Mail inbox are secured with zero-access encryption. That means nobody else can access your emails, not even Proton. Messages are encrypted in transit too, but the type of encryption depends on the recipient’s email provider.

All messages in your Proton Mail inbox are stored with zero-access encryption.

Body content and attachments are stored with end-to-end encryption. Subject lines, recipient email addresses, and sender email addresses are encrypted, but not end-to-end encrypted.

This includes messages sent from non-Proton Mail addresses.

Subject lines in Proton Mail messages are not end-to-end encrypted to remain compliant with standards and ensure interoperability. Proton Mail adheres to the OpenPGP standard. In PGP, the subject line is part of the header packet, which is not end-to-end encrypted.

1

u/Nietechz 4h ago

Thanks dude.

1

u/nuke1200 12h ago

Shoooot i have my main password, yubikey and then a second password

1

u/wildpine5 11h ago

agreed, theres no security benefit to two-password mode anymore