Passwords are designed to protect one thing: your online security. Weak passwords pose a serious threat to your online security — once a hacker gains access to your online accounts, they can impersonate you online, steal your financial data, or sell your private information to hostile third parties.  Strong passwords are the first line of …

Since email was invented, it has become a crucial form of communication in our private and professional lives. Even with the growing popularity of other communication platforms, such as instant messaging and video conferencing, email continues to hold the keys to our digital identities. Over 300 billion emails were sent and received per day in …

若要暢遊網路世界，人們必須擁有電郵地址。要註冊成為YouTube、Facebook、Twitter、Reddit 用戶或使用其他線上服務，電郵都是您必填的資訊。電郵也是是我們辦理網銀業務、購物和進行商業交易的首要溝通媒介。因此，全球有超過一半的成年人是電子郵件用戶，人們也在電郵中提供了大量的個人資訊。 然而，電郵並不像大家所認知的那樣安全或私密。 電郵具有互通性，例如 Gmail 帳戶可以與 Yahoo 帳戶通信，Yahoo 帳戶可以與 ProtonMail 帳戶通信。 遺憾的是，這也意味著，無論您使用何種電郵服務，當您傳送訊息給隱私保護有待加強之電郵服務（如 Gmail）的用戶時，您的訊息都可能受制於其隱私政策。 所有主要電郵供應商都會提供一定程度的保護，以防止其用戶電郵被竊聽或篡改，但大多數的供應商都沒有提供最大程度的隱私與安全。 我們認為每個人都應享有電郵隱私和安全，意即沒有任何人可以存取您的電子郵件。因此，我們使用端到端加密 (E2EE) 保護您的電郵。 什麼是端到端加密電子郵件？ 傳送電子郵件時，您的訊息會從一個伺服器行經另一個伺服器，直到抵達收件人的收件箱。 所有主要電郵供應商都使用 TLS（傳輸層安全協議），該協議會在電郵於伺服器間傳輸時加密路由，使您的訊息在傳輸過程中保持私密。 但使用 TLS 加密時，電郵並不是在到達收件人的裝置時才被解密，而是一旦到達電郵供應商的伺服器就會被解密。 這使得只使用TLS的電郵供應商能夠存取儲存在其伺服器上的所有訊息。 相比之下，端對端加密電子郵件的使用能夠確保除了目標收件人之外，任何人都無法存取該訊息，讓電郵更加安全。 端到端加密電郵在源頭（您的裝置）進行加密，並只有在到達端點（收件人的裝置）後才會進行解密。 由於只有對話的兩方可以存取和閱讀端到端加密電子郵件訊息，因此無論是您的電郵供應商、網際網路服務供應商或政府機構都無法存取所附資訊。 但是，端到端電郵加密僅在兩個人都使用 PGP 或使用相同的 E2EE 電郵服務（例如 ProtonMail ）時才能發揮作用。 （我們使用 PGP 加密來確保 ProtonMail 的使用者可以與共用其公鑰的其他 PGP 使用者私密通信，即使那些使用者非 ProtonMail用戶。） 如果向使用僅採用 TLS 的電郵服務（例如 Gmail）用戶傳送電郵，您的電郵將受到其隱私策略之約束。並且，即使您使用 ProtonMail 帳戶傳送電郵，對方的電郵供應商還是可以存取您的郵件。 為了解決這些隱私問題，我們使用端到端加密和零存取加密，以保護您的電郵。 您還可以使用我們的「外部加密」功能向未使用 E2EE 電子郵件服務的使用者傳送端到端加密訊息 — 這些訊息會受到於 …

You need an email address to exist at all in the online world. Signing up for YouTube, Facebook, Twitter, Reddit, or any other online service requires one. It’s also our go-to method of communication for online banking, purchasing, and business deals. As a result, over half the world’s adult population uses email, and we trust …

This article is part of a series discussing various aspects of HIPAA compliance. ProtonMail is the world’s largest secure email provider, used by millions to protect their messages. We provide HIPAA compliant email to thousands of organizations, and we created this guide to explain how to select the best HIPAA compliant email provider for your …

The Health Insurance Portability and Accountability Act (HIPAA) defines how healthcare services and their business associates in the United States handle sensitive data about their clients.  Regulated by the Department of Health and Human Services (HSS), it is a collection of closely aligned regulations aimed at ensuring the privacy and confidentiality of personal medical data. …

As discussed in our article on HIPAA Compliance, the Health Insurance Portability and Accountability Act (HIPAA) is a collection of closely aligned regulations that protect the medical data of patients in the United States. In that article, we also discuss who must be HIPAA compliant — covered entities and business associates — which basically means …

Facebook, the owner of WhatsApp, has forced an ultimatum upon WhatsApp’s users: share future transactional data and metadata from the end-to-end encrypted messenger with Facebook, or lose access to your WhatsApp account.  Users are being informed of this new requirement via an in-app notification. If they do not accept the sweeping changes to WhatsApp’s terms …

ProtonMail was created to help build a more free and open internet that puts people first. This makes it a great Gmail alternative for those who value privacy and security. Founded by scientists who met at CERN, ProtonMail protects all messages with end-to-end encryption and zero-access encryption to ensure nobody can access your emails’ contents.  …

We updated this article on Sept. 25, 2020, to provide more context about why Proton is joining the Coalition for App Fairness. In recent months, regulators in both the US and Europe have begun looking into app store policies. These investigations are not only centered on Apple, but are also looking at Google Play and app stores …

The number of Google searches in all languages for a privacy-focused Gmail alternative (e.g., “private email” or “encrypted email”) increased 39 percent worldwide between May 2019 and April 2020.  This surge in interest is a promising sign that online privacy is starting to become a priority for people. It also indicates that a broad swath …

On Wednesday, the CEOs of four massive tech companies — Google, Apple, Facebook, and Amazon — testified before a congressional investigation about those companies’ anti-competitive practices. The CEOs were eager to portray their companies as under constant threat from competitors. However, the congressional subcommittee raised multiple examples of the companies using their power to spy on, …