Proton Mail Security: 2FA, Recovery Phrase and Account Recovery
Secure your Proton Mail account: turn on two-factor authentication, set up both password-reset and data-recovery methods, and understand two-password mode.
Proton Mail is end-to-end encrypted, which changes what account security means: protecting the account isn't enough — you also need a way to recover your encrypted data if you ever forget your password. Proton suggests doing it in this order: two-factor authentication first, then recovery methods.
Turn on two-factor authentication
Open your account settings, go to Account and password, and set up Two-factor authentication with either:
- An authenticator app that generates six-digit codes, or
- A physical security key (U2F or FIDO2), such as a YubiKey.
You can use both at once and link more than one device. When you set it up, Proton gives you several one-time recovery codes — save them offline. They're how you sign in if you lose your phone or key.
Set up recovery the Proton way
Proton separates recovery into two jobs, and you need both:
| Method | Resets your password | Decrypts your data |
|---|---|---|
| Recovery phrase | Yes | Yes |
| Recovery email | Yes | No |
| Recovery phone | Yes | No |
| Recovery file | No | Yes |
| Device data backup (staying signed in on a device) | No | Yes |
| Signed-in reset | Yes | Yes — but shouldn't be your only method |
With only a password-reset method you get back into the account but lose your old data; with only a data-recovery method you can't get back in at all. Proton's minimum recommendation: a recovery phrase, plus one more password-reset method and one more data-recovery method.
Set them up at account.proton.me/recovery, or in Settings › All settings › Recovery.
Two-password mode
Some accounts use a separate login password and mailbox password. Proton describes this as a legacy feature: one-password mode, the default since December 2016, is no less secure, and two passwords are harder to keep safe. Proton recommends two-factor authentication instead. To change mode, use the Two-password mode toggle under Account and password.
If Proton locks your account
Proton temporarily locks accounts when it sees signs that someone else is trying to get in — usually a password reused on a breached site, a phishing page, or malware. Sign in at mail.proton.me, verify with the code if asked, and change your password immediately: until you do, you can't read or send mail, and changing it signs out every other session. Proton can also lock accounts by mistake when you use a third-party VPN, Tor, or a shared network.
Good habits
- Use a password you don't use anywhere else.
- Check for the Official badge on any email claiming to be from Proton before acting on it.
- Keep your recovery kit and 2FA recovery codes somewhere offline.
Forgot your password? See resetting your Proton Mail password.
How this guide was checked · October 2026
Verified against 5 official sources
Every step, setting and limit in this guide was checked against the provider’s own documentation on proton.me. Anything we couldn’t confirm was left out.
Questions
Frequently asked questions
How do I enable 2FA on Proton Mail?
In your account settings, go to Account and password › Two-factor authentication and set up an authenticator app or a security key such as a YubiKey.
What is the difference between account recovery and data recovery in Proton?
Account recovery (email, phone) resets your password. Data recovery (recovery file, device backup) decrypts your existing emails. The recovery phrase does both.
Should I use Proton two-password mode?
Proton calls it a legacy feature and recommends one password plus two-factor authentication instead.
Why did Proton lock my account?
Its systems saw signs of an attempted break-in. Sign in, verify if asked, and change your password straight away. VPNs, Tor or shared networks can also trigger a lock by mistake.
Related guides
Keep reading
Proton Mail Troubleshooting
Proton Mail Not Working? Fixes for Sign-In, Apps, Bridge and Missing Mail
Proton Mail not working? Fixes for sign-in problems, the iPhone and Android apps, Outlook and Thunderbird through Bridge, the free plan's limits and websites that reject Proton addresses.
3 min read
Proton Mail Password Reset
How to Reset Your Proton Mail Password (Without Losing Your Emails)
Reset a forgotten Proton Mail password with your recovery email, phone or recovery phrase — and how to unlock your encrypted emails afterwards, which a normal reset doesn't do.
3 min read
Proton Mail Login
How to Sign In to Proton Mail
Sign in to Proton Mail with your username or Proton address, use two-factor authentication, and fix the most common sign-in problems — from wrong passwords to browser extensions.
3 min read
Proton Mail Sign Up
How to Create a Proton Mail Account (Free)
Create a free Proton Mail address (@proton.me or @protonmail.com), save your recovery kit, and know what the free plan includes — storage, sending limit and what needs a paid plan.
2 min read
Proton Mail Settings
Proton Mail Server Settings: IMAP, SMTP and POP3
Proton Mail IMAP, SMTP and POP3 settings, authentication requirements and provider-specific connection fixes in one verified guide.
2 min read
Yandex Mail Security
Yandex Mail Security: Yandex Key, App Passwords and Sessions
Protect your Yandex Mail with two-factor authentication, app passwords for email programs, a recovery phone and the log-out-everywhere switch.
3 min read