Proton Review: Mail, VPN, Pass and Drive Tested

Proton sells one account that covers encrypted email, calendar, cloud storage, a password manager, a VPN, a Bitcoin wallet and an AI assistant. No other consumer privacy company offers that spread, and the spread is the reason to buy it. This review covers what you actually get for the money, what the encryption does and does not protect, the Swiss jurisdiction argument and the asterisk that appeared on it in 2025, and the cases where you should buy something else.

For head-to-head rankings against competitors, our best encrypted email, best VPN, best password managers and best encrypted cloud storage guides do that comparison product by product. This page is about Proton as a single decision.

The verdict, up front

Rating: 4.6 / 5. Buy Proton Unlimited if you want a strong privacy default across mail, files, passwords and browsing on one bill and one account, and you accept the trade of some convenience against Google's ecosystem. Buy Mail Plus if email is genuinely all you want. Buy something else if you need anonymity from the provider, a plain IMAP mailbox with no local bridge, or the single strongest product in one category.

The individual services are each beatable. Tuta encrypts subject lines and Proton does not. Mullvad takes anonymous accounts and Proton does not. Bitwarden is more portable than Proton Pass. Proton wins by being good at all of them at once, under one company whose incentives are clear and whose clients you can read.

What the plans cost

Proton prices in your local currency and runs frequent promotions, so treat these as the published list rates, verified on Proton's own plan documentation in August 2026.

Standalone plans exist for the individual services: Drive Plus is 200 GB at about USD 3.99/month on annual billing, and Pass Plus dropped to about USD 1.99/month on annual billing. VPN Plus is sold on its own with the aggressive multi-year discounting the whole VPN market uses, so check the renewal rate at checkout rather than the headline.

Is Proton Unlimited worth it?

Yes, if you will use more than one Proton service; no, if you only want email.

Unlimited costs EUR 6/month more than Mail Plus. For that difference you add VPN Plus across 10 devices, Pass Plus, an extra 485 GB of storage and Proton Wallet. Buying VPN Plus and Drive Plus separately alongside Mail Plus already costs more than Unlimited before you count Pass. There is no configuration where two paid Proton services are cheaper bought separately, which is the point of the pricing.

The referral credit. Proton's refer-a-friend program gives a new subscriber a USD 20 account credit on Mail Plus, VPN Plus, Pass Plus, Drive Plus or Unlimited, plus a two-week trial without payment details up front. The credit is issued after the referee has been subscribed for a full month, and the referrer earns the same up to USD 1,000. A first year of Unlimited at EUR 119.88 with USD 20 back is the cheapest legitimate entry to the suite outside a Black Friday promotion.

Proton Mail

The mailbox is the original product and still the centre of the account. Stored mail is held under zero-access encryption, meaning Proton encrypts it to a key derived from your password and cannot decrypt the contents. Between Proton users, messages are end-to-end encrypted automatically. To PGP users outside Proton, you can exchange keys and get the same guarantee. To everyone else, which is most people, the message is protected by TLS in transit and sits readable on the recipient's server.

Strengths. Open-source clients on every platform. Hide-my-email aliases via the SimpleLogin technology Proton acquired in 2022, with unlimited aliases on Unlimited. Custom domain support from Mail Plus up. A usable free tier that does not carry ads. Encrypted search in the web app, which builds an encrypted index inside your browser so full-text search works without the server ever reading your mail.

Real limits. The subject line is never encrypted end-to-end, and neither is who you mailed or when. IMAP and SMTP require Proton Mail Bridge, a local application that decrypts on your machine and speaks IMAP to your desktop client, which works well and adds a moving part that plain providers do not have. The web client ships JavaScript that Proton controls, so a fully adversarial threat model has to account for a compelled or compromised client build; the desktop and mobile apps narrow that surface. Search and filtering are weaker than Gmail's, which is a direct consequence of the server not being able to read anything.

Read our email security guide for the threat model this sits inside, and end-to-end encryption explained for why the recipient's provider decides how far the guarantee reaches.

Proton VPN

Proton VPN is the strongest single product in the suite and it would be a credible purchase on its own.

It has passed five consecutive independent annual no-logs audits, the most recent with Securitum reviewing production infrastructure rather than documentation, and the auditors reported no persistent records that would tie a user to activity on a reviewed server. The apps are open-source everywhere. The network is above 20,000 servers across more than 140 countries. Secure Core routes traffic through a hardened first hop in Switzerland, Iceland or Sweden before it exits, so a compromised exit server still cannot see your real address. The free tier has no data cap, no ads and the same no-logs policy, funded by paying subscribers, which is the only free VPN we recommend.

Where it loses: Mullvad and IVPN accept anonymous account numbers and cash, charge flat fees with no discount theatre, and give a government nothing to subpoena in the first place. If the VPN is the entire purchase and adversarial anonymity is the goal, compare them properly before defaulting to Proton. If you are unsure what a VPN actually protects, start with what a VPN does.

Proton Pass

Proton Pass is the newest core service and the free tier is unusually generous: unlimited entries, unlimited devices and passkey support on every device at no cost, with open-source audited clients, a password generator and 10 hide-my-email aliases. Pass Plus adds unlimited aliases, a built-in 2FA authenticator, vault and link sharing, dark web monitoring and a custom alias domain for about USD 1.99/month annually, and it is included in Unlimited.

It is a good password manager rather than the best one. Bitwarden has a longer track record, wider third-party client support and a self-hosting option Proton does not offer. Pass wins if you are already paying for Proton, because it costs you nothing extra and it shares the aliasing infrastructure with your mailbox. See the password manager roundup for the comparison and our password manager guide for how to migrate safely.

Proton Drive, Docs and Calendar

Proton Drive applies end-to-end encryption on every tier including the free 5 GB one, encrypting file contents and filenames on your device before upload, with open-source clients and Swiss hosting. Proton Docs launched inside Drive in July 2024, built with the Standard Notes team Proton acquired in April 2024, and gives you encrypted collaborative document editing. Proton Calendar encrypts event titles, descriptions, locations and participants.

These are the services where the convenience trade is most visible. Docs handles text collaboration and does not approach Google Docs on features. Calendar does not have the scheduling ecosystem Google and Microsoft built. Drive's sync clients have improved steadily and are still younger than Dropbox's. For most people that is an acceptable price for files the provider cannot read; for a team that lives in spreadsheets and add-ons, it is not. The encrypted storage roundup covers the alternatives.

Wallet and Lumo

Proton Wallet is a self-custodial Bitcoin wallet that ran in early access from July 2024 and opened to everyone on 10 February 2025. It is a reasonable on-ramp for someone who already trusts Proton with their keys and it is not a reason to buy the suite.

Lumo is Proton's AI assistant, launched on 23 July 2025 and now on its second version. Proton keeps no server-side logs of conversations, stores saved chats under the same zero-access encryption as Mail, builds on open-source language models, does not train on your inputs, and runs it from European datacenters. There is a free tier that works without an account, and a paid Lumo Plus tier for unlimited queries. It is the clearest example of Proton's pattern: a privacy-respecting version of a mainstream product, competitive on principle, a step behind the leaders on raw capability.

How Proton compares, service by service

Each Proton service has a specialist that beats it on one axis. The table is the honest version of the pitch: buy Proton for the account, not because any single product is the category leader.

Jurisdiction, governance and the parts that are genuinely uncertain

Proton is Swiss, which sits outside the Five, Nine and Fourteen Eyes arrangements and has strong data-protection law. Three facts complicate the marketing version of that story.

2021. Proton received a legally binding Swiss order, relayed from France via Europol, and was compelled to start logging the IP address of one named account tied to a climate activist group. Contents stayed encrypted, and metadata collection was compelled on a specific account despite a no-logs default. The lesson generalizes: jurisdiction governs what a company can be forced to start collecting, and Proton is not immune from that.

June 2024. The nonprofit Proton Foundation became the primary voting shareholder of Proton AG, with a board of trustees that includes Tim Berners-Lee. No change of control can happen without the foundation's consent, which makes a hostile acquisition or a change of mission far harder than it would be at a venture-backed competitor, and it is the strongest structural answer to the question of what happens to your data when a privacy company gets bought.

2025. A proposed revision of the Swiss surveillance ordinance (the VUePF), put to consultation on 29 January 2025 and closed on 6 May 2025, would extend logging duties to any provider with as few as 5,000 users, require IP addresses to be retained for six months, and require identity verification with an official document or a phone number at signup. Andy Yen said Proton would have no choice but to leave Switzerland if it passed. In July 2025 the company froze part of its planned Swiss investment, and by August 2025 it said it was moving the majority of its physical infrastructure out of the country, with Lumo hosted in Germany and further sites in Norway.

February 2026. The consultation went badly for the government. On 11 February 2026 the Federal Council took note of the results, commissioned an external regulatory impact assessment of what the duties would cost affected companies, and committed to a second consultation once a redrafted text exists. It also accepted two parliamentary motions demanding a fundamental rework. An independent assessment published in May 2026 put the cost of the revision at roughly CHF 10 billion in annual revenue and about 53,000 jobs by 2035. So the ordinance has not taken effect, will not proceed as drafted, and has no published timetable. It remains the single item on this page most likely to change the answer.

January 2025. Yen posted approvingly about the incoming US administration's antitrust appointment, Proton's Reddit account amplified it and deleted the comment, and the company called that an internal miscommunication before restating its political neutrality and committing to stop sharing political opinions. It changed nothing about the cryptography. It did remind a privacy-conscious user base that a suite this integrated is a bet on one company's judgement, and some of them left.

Who should buy something else

• You need anonymity from the provider. Proton knows your recovery address, your payment method and your connection metadata. An anonymous mailbox needs Tor and an identity that was never linked to you, which no mainstream provider sells.
• You want plain IMAP without a bridge. Mailbox.org and Posteo hand you a standard mailbox that any client speaks to natively. Proton requires the Bridge app on a paid plan.
• You want the strongest default cryptography in email specifically. Tuta encrypts the subject line and ships post-quantum TutaCrypt. Its trade is no PGP support at all.
• You want one best-in-class product. Buy Mullvad for a VPN, Bitwarden for passwords, Sync.com or Tresorit for storage, and accept four bills.
• You live inside Google Workspace collaboration. Proton Docs and Calendar will feel like a downgrade, and pretending otherwise leads to a migration that gets reversed in a month.

Bottom line

Proton is the best available answer to the question of how to get encrypted mail, files, passwords and browsing from one company you can actually inspect. Proton Unlimited at EUR 119.88 a year, with a USD 20 referral credit on the first subscription, is the version of it worth buying, because every Proton plan below Unlimited is priced to push you there and every combination above one paid service costs more separately.

Buy a custom domain the same week you sign up. It is the cheapest insurance you will ever buy against a price rise, a jurisdiction change or a company you stop trusting, and it turns leaving from a catastrophe into a DNS record. Then read phone privacy hardening, because a perfectly encrypted account still logs in from a device that leaks.

Related guides

• Best Secure & Encrypted Email Providers
• Best VPN Services
• Best Password Managers
• Best Encrypted Cloud Storage
• Email Security Guide
• End-to-End Encryption Explained