Proton Mail Supports Sending Password-Protected Emails to Non-Users
Proton Mail has officially stated that users can send password-protected end-to-end encrypted emails to recipients without Proton accounts, who can view them via a link without needing to register.
When sending, click on the external encryption (lock icon) in the compose interface, set a message password and optional hint, then send; the recipient receives a notification email, clicks to unlock the message, and enters the separately shared password to decrypt and read in their browser. The content and attachments remain end-to-end encrypted and do not leave Proton's servers.
By default, password-protected emails expire after 28 days (including draft retention time), with a maximum of 28 days; the expiration time can be customized when sending. After expiration, the content is immediately deleted, and the copy in the sender's sent folder is also cleared.
This feature is available for all Proton Mail plans (including the free version); recipients can securely reply, but under the free service, each email can be replied to a maximum of 5 times to prevent abuse; the sender must share the password through other secure channels.
Proton Mail recently promoted this process by sending confidential information to journalists: after composing the email, adding a password, and setting an expiration time, the recipient receives a link and the password through other channels to read it without needing a Proton account.
This feature is an extension of privacy tools driven by product capability enhancement, allowing users to restrict confidential content to a limited time and known recipients through passwords and expiration mechanisms, facilitating end-to-end encrypted privacy email services that support non-user recipients; the beneficiaries are senders needing to convey sensitive information to external journalists or non-platform users, while the burden falls on traditional email paths that rely on permanent storage or lack expiration mechanisms.
Source: Public Information
ABAB AI Insight
Proton Mail has long positioned end-to-end encryption as its core differentiator, and the password-protected email feature has previously been made available to all plans (including free) for sending encrypted content to non-users; the official support documentation clearly states mechanisms such as the default 28-day expiration, browser-based decryption, and content remaining on the server, continuing its product strategy of bringing encryption capabilities to ordinary users rather than just professionals.
Resources are primarily directed towards external encryption processes and expiration control, allowing senders to complete encrypted transmission without requiring the recipient to register, while sharing the password through separate channels reduces the risk of single-point leakage; the motivation is to expand the usable scenarios for privacy emails, covering non-user groups such as journalists and external partners, thereby increasing adoption rates without forcing account migration.
Similar paths can be seen in Signal's disappearing messages and self-destructing mechanisms, as well as Tutanota and other privacy email services' support for external encryption; currently, Proton Mail is in the stage of normalizing cinematic "confidential transmission" scenarios, attempting to lower the usage threshold by simplifying password protection and expiration settings.
Essentially, this is a reconstruction of communication privacy driven by technological substitution: traditional email relies on trusted service providers or permanent storage, while password protection and enforced expiration shift control to the time and password set by the sender, transforming sensitive information from being "potentially retained long-term" to "automatically destroyed after limited access windows," thereby changing the risk exposure structure of confidential communication.
ABAB News · Cognitive Laws
Expiration limits exposure more than encryption
Separately sharing passwords is true control
No need for the recipient to register makes privacy easier to spread