ProtonBlog

We are happy to announce the release of Proton Mail v1.09. As usual, please completely clear your browser cache to make sure you load the latest version of Proton Mail. Among all the security researchers who helped us, we’d like to give special thanks this time to all participants in the first Proton Mail Hackathon for security tests for this Version 1.09 release.

New Features

  • Replied and Forwarded message is indicated.
  • Update encoding scheme to better support some foreign languages.
  • Reminder when leaving compose page without saving a draft.
  • Rearrange the message operation menu.
  • Attachments will be displayed if they are plain text of html text.
  • Add a new form field on sign up to allow user to add notification email to reset login password.
  • Add two extra security headers to enhance XSS protection.

Bug Fixes

  • Quotes in message title are now appropriately displayed.
  • The page will stay the same after enter Mailbox Password in the new opened page, instead of always redirecting to inbox.
  • Fixed the number of new messages in notification email.
  • Fixed a rare case which leads to ‘inside_not_exist’ error

Known Issues

  • Multiple attachments not properly supported.
  • Mobile and Tablet not yet fully supported.
  • Attachments are not encrypted.

Security Fixes

  • Session Cookies are set to HttpOnly. (credit to ElectronMail team in Proton Mail’s hackathon)
  • Security Headers updated for all pages to be more strict.
  • XSS attack on Contacts page (credit Prakhar Prasad @prakharprasad)
  • Enhanced brute-force attack protection.
Secure your emails, protect your privacy
Get Proton Mail free

Related articles

Google is one of the biggest obstacles to privacy. The Big Tech giant may offer quick access to information online, but it also controls vast amounts of your personal or business data. Recently, more people are becoming aware of the actual price you
What to do if someone steals your Social Security number
If you’re a United States citizen or permanent resident, you have a Social Security number (SSN). This number is the linchpin of much of your existence, linked to everything from your tax records to your credit cards. Theft is a massive problem, whic
compromised passwords
Compromised passwords are a common issue and probably one of the biggest cybersecurity threats for regular people. How do passwords get compromised, and is there anything you can do to prevent it? * What does compromised password mean? * How do pa
Is WeTransfer safe?
  • Privacy basics
WeTransfer is a popular service used by millions worldwide to send large files. You may have wondered if it’s safe or whether you should use it to share sensitive files. We answer these questions below and present a WeTransfer alternative that may su
what is a dictionary attack
Dictionary attacks are a common method hackers use to try to crack passwords and break into online accounts.  While these attacks may be effective against people with poor account security, it’s extremely easy to protect yourself against them by usi
Data breaches are increasingly common. Whenever you sign up for an online service, you provide it with personal information that’s valuable to hackers, such as email addresses, passwords, phone numbers, and more. Unfortunately, many online services f