Is Protonmail Safe for Security and Privacy?

31 thoughts on “Is Protonmail Safe for Security and Privacy?”

• I will dedicate the live stream this coming Friday 8pm Pacific to analyzing the many choices you can make with email. There are too many possibilities in email and it depends on how much risk you accept.

• another nice video Rob ! … I have been trying Protonmail for 6 months now – works pretty good and blocks 90% of spam mail (my yahoo mail lets in 90% of spam mail ! … I will go for the email provider that can STOP ALL SPAM mail (I'm tired of trying to block (unsubscribe) spam for the first 30 minutes on my mail ! 🤮

• Yandex mail is safer if you are not an enemy of Russia. I use Yandex, Gmail and Proton. But I prefer Yandex.

• I'm guessing alternatives to sending emails like Slack are also read by the provides but not affecting by SMTP?
  Thx for the video! Guess I'll be hiding in plain sight w/ google

• I assume such claims aren't true if it involves an internet connection even a tiny bit, haha. Anyway, I use Protonmail, and Hotmail. Protonmail is only really used for a few account registrations and such – but I have a Hotmail account for 25 years – still the same one, so I assume my privacy is totally compromised either way, haha.

  I don't LIKE it and I don't CONDONE the breach of privacy, and I certainly don't accept it, but I also acknowledge the net is wide.

• Thanks for the video. I've run my own mail server for a long time. It is not for the technical illiterate or easily frustrated. While maybe you touch on this point in other videos, just because some traffic is unencrypted doesn't mean that the attacker necessarily has access to it. Yes, you should assume they do. Yes, there are lots of vectors. But things aren't as bad as they used to be, monitoring local switched LAN traffic is not the same as sniffing a shared bus, for instance. The parties involved would have to be complicit, like ISPs providing access to it on either end, or high speed interconnects being watched. If we're saying that bulk email collection is happening even nationwide, beyond just metadata, then storage, indexing, and search becomes a real issue. I'm just saying that raising the bar of your understanding, general opsec, and taking some precautions goes a long way in thwarting practical attacks. In general, if you piss off an unlimited budget attacker, you've got problems beyond SMTP being unencrypted by default.

• I lost a Protonmail account when I updated my icloud password.
  I updated my icloud password inside an ATT retail store in Bishop, Ca- using ATTs in house computers and phones.
  My Protonmail account was then stolen and upgraded to a business account using the same bank account I used to pay for my ATT contract phone.
  Then my Redbubble account was stolen…then my Linked In account…then Facebook page. ALL from a breach inside an ATT retail outlet and there is more…

• perhaps this is possibly the same reason why Jet shout down vampirefreaks as a gothic profile site, and just focused on poser goth, emo, sine kid retail site, the grandfather of profile sites before myspace and modern socal media

• Ladies and Gentlemen, the truth is that pretty much anything that has been developed up until 2023, be it opensource or closed source, if it is for the general public – it is not anonymous by itself. I never seen a software which could by itself provide anonymity, as even if it is encrypted, if glowies are monitoring on at least one end (which is usually what they do) or even at the middle, they can distinguish who is communicated with what. Moreover, if you could feed solid AI system with all packet contents AND metadata, then train it to separate noise, I'm sure it could come up with the actual content, the reason behind is because no software is generating so called "cover traffic", so a message could be 5 packets EVERY SINGLE TIME and work spoken by humans with various tones could also be certain amount of packets and if you add already that you know which cipher is being used and few more other things which I don't want to mention (but they are well known), you don't need to decrypt anything using old math way, because you can have what you want in just a different way. This my friends is not a delusion, but a reality we live in. Welcome to 2023, welcome to Orwellian Nightmare

• Most of these other mail systems is that they are Browser based and that is a HUGE NO NO for me i use a dedicated mail client on the PC i also am only interested in SMTP/POP . I also refuse HTML mail only accept plain text attachments are not automatically stripped and opened .
  Err you can do that using SMTP/POP just set the clients NOT to delete mails when read only set that switch on one client .

• My greatest concern for security is not the prying eyes of our governments, it is use of my personal information and time to make other people money.

• If you want privacy dont use email.

• What about vivaldi email? Thx Rob.

• No one talks about this because it’s not true. Nearly all MTA’s use TLS on port 25, where the message body is absolutely encrypted. This isn’t SMS or smtp 10 years ago. The message header isn’t encrypted because it’s needed for routing, but the body absolutely is.

• thanks!

• I am using Startmail, on my IMac. Now when I want to use dictation in the program "Notes" the system wants to use startmail login and password, should I be concerned? Thank you. I pay 6.00 a month for this e-mail service. Think of changing my e-mail server.

• I was only an exchange admin and I can tell you running your own email server is difficult for sure.

• I was using gmail for the longest time… now i switched to proton mail but it seems the government can always spy on us! This is criminal!
  Amazing video man.. liked and subscribed! Btw have you guys known that when you go and buy a laptop or just any pc… it always comes preloaded with WINDOWS.. the worst bill gates product! LINUX is the answear! im getting one of those !

• John McAfee is a weird dude I don't trust offhand. US companies that shut down is a bit different for what companies in other countries can do. The question is whether ProtonMail is better than many other alternatives. And despite email being old it is still used for a LOT. Is MTA always port 25 and plain text or does TLS etc change this? 100% disagree that it is better to not even try or be wide open to not be paid attention to. That is the ridiculous and dangerous suggestion. Yes, I have something to hide, that is stuff I don't want everyone and anyone to know. EVERYONE DOES! This nothing to hide stuff is pernicious bullshit. The question with my own server is if that server and its ownership is traceable to me then government just needs to hack or grab that server which they aren't shy about. Why not simply drop IMAP and use a modern version of POP where there is nothing that stays on the server, metadata or otherwise and the POP stuff is delivered encrypted? Home server device say on a PI could make the mail privately available on other devices from there. If not then why not?

• 10:14

• So, then what email provider is relatively safer?

• I just had an email hack. Never thought it would happen to me but they probably did a brute force of my password to get in. I was able to keep the account and set up two factor. They tried to scam me with the information they got. Be careful guys.

• No one of the worst paid email

• I use ProtonMail, just for fun and stuff.

• Answer is NO it's not safe. A kid skipped school and the police just asked protonmail to get into the child's email account without a warrant and protonmail just said yes.

• I still remember being stuck with dial-up. It was maybe 20 years ago that was one of the only options here. Of course if there was any alternative it would be expensive and likely not available here. I am thinking to the point that even if you could get it the price was just too high to justify it.

• I have heard that messages stored there are encrypted and if you lose your password you are SOL. I don't know how secure it really is. There is also ProtonVPN but how secure is that too?

• Who the hell uses "SMTP port 25" have you never heard of STARTTLS and SMTPS?

• 3:53 receiving email: POP3 or IMAP
  4:36 email infrastructure:
  Intra-domain interactions
  5:08 Inter-domain Interactions
  5:38 SMTP port 25: plain text!
  9:20 private email servers

• Thank you

• TY.
  280123/

Comments are closed.