Proton Mail Two-Factor Authentication: Setup Guide

Turn on two-factor in Proton Mail under Settings › Account and password. Use an authenticator app or a security key, and save the recovery codes.

Set it up

1. Sign in to Proton Mail on the web.
2. Open Settings › All settings › Account and password.
3. Turn on Two-factor authentication.
4. Scan the QR code with an authenticator app and enter the code.
5. Download or copy the recovery codes.

Methods

Proton does not use text messages for two-factor codes, which keeps codes away from SIM swap risks.

Recovery is different from two-factor

Proton accounts also have recovery methods: a recovery email, a recovery phone and a recovery phrase. These help you reset a forgotten password. Because your mail is encrypted, resetting without the recovery phrase may leave older messages unreadable.

• Save the recovery phrase offline.
• Add a recovery email you will keep.
• Keep the two-factor recovery codes separate from the phrase.

Lost your authenticator

Use a recovery code to sign in, then turn two-factor off and on again with the new device. Without codes, Proton support may not be able to remove two-factor, since that would weaken the protection.

Apps and Bridge

The Proton apps sign in with two-factor like the web. Proton Mail Bridge, used for desktop mail apps, creates its own password for those apps.

Proton Pass and other Proton apps

One Proton account covers Mail, Drive, VPN, Calendar and Pass. Two-factor protects all of them.

Using an authenticator for the first time? See authenticator apps explained.

Signing in on a new device

On a new phone or computer, Proton asks for your password and then a two-factor code. If you also use a mailbox password on older accounts, Proton asks for that as well. Keep both safe, since Proton cannot see or reset your mailbox password without losing access to encrypted mail.

Security keys

Proton accounts also accept hardware security keys that follow the FIDO2 standard. A key such as a YubiKey can sit beside your authenticator app, and having two methods means losing one device does not lock you out.

FAQ

How do I turn on 2FA in Proton Mail?

Settings › Account and password › Two-factor authentication.

Does Proton use SMS for 2FA?

No, it uses authenticator apps and security keys.

What if I lose my Proton 2FA device?

Use a recovery code.

Related: authenticator apps · passkeys · lost authenticator phone.