Locked Out of Proton Mail: How to Regain Access Safely
Official Proton page for this problem: proton.me — we link it because the official flow is always the real path; this guide exists to help you get through it.
Being locked out of your Proton Mail account is stressful, but in most cases account access can be restored. The critical thing to understand before you touch anything: with Proton, getting back into the account and getting back your data are two separate problems. Proton uses end-to-end encryption, so if you reset your password without a recovery phrase or recovery file, your existing emails stay encrypted with keys derived from the old password — the account works again, but the old mailbox contents become permanently unreadable.
Slow down for five minutes before resetting anything. It can save your entire mail archive.
Before you start
Gather whatever you have of the following. What you have determines what is recoverable.
- Your recovery phrase — a 12-word phrase Proton offered when you set up the account or enabled account recovery. This is the best option: it restores both account access and your encrypted data.
- A recovery file — an encrypted
.pgpfile you may have downloaded from Settings → Recovery. This restores data after a reset. - A recovery email address or recovery phone number — these let you reset the password (account recovery) but do not decrypt old emails on their own.
- Any chance you might still remember the old password — even later. Proton can sometimes re-unlock old data if you recall the previous password after a reset, so write down anything you can remember about it.
- The exact address of the account (including the domain:
@proton.me,@protonmail.com, or a custom domain).
Also check the basics first: caps lock, keyboard layout, an old password manager entry, and whether you’re actually typing the right username. A surprising number of “lockouts” are one of these.
Step 1: Confirm what kind of lockout this is
Go to account.proton.me and attempt to sign in. Pay attention to the exact error:
- “Incorrect password” — this guide applies; continue below.
- A 2FA prompt you can’t complete — see our separate lost-2FA guide; the path is different.
- “Account disabled” or a similar notice — this is not a password problem. Skip to Step 5.
- Too many attempts / temporary block — wait an hour and try again before doing anything drastic.
Step 2: Try the reset flow — but stop at the warning
On the sign-in page, choose “Forgot password?” (or go directly to the password reset flow at account.proton.me). Proton may ask you to verify via your recovery email, recovery phone, or recovery phrase, depending on what you have set up.
Here is the fork in the road:
- If you have your recovery phrase, use it. Proton treats the recovery phrase as both an account and data recovery method, so a reset done this way should restore access to your existing encrypted emails as well as the account. This is the safe path.
- If you only have a recovery email or phone, Proton will let you reset the password, but it will warn you that your existing data will be locked. Read that warning carefully — it is accurate. Before proceeding, decide whether immediate access is worth potentially losing the archive, or whether you want to spend more time trying to remember the old password first.
If Proton’s wording differs slightly from this, follow the on-screen flow; the underlying mechanics are as described.
Step 3: Reset the password
Complete the verification Proton asks for and set a new, strong, unique password. Store it in a password manager immediately. If you used a recovery phrase, sign in and confirm your old emails are readable.
Step 4: Recover your data after the reset
If you reset without a recovery phrase, your old mailbox will appear locked or empty of readable content. Do not give up yet:
- Sign in and go to Settings → Recovery (Proton may surface a banner about locked data automatically).
- If a recovery file or recovery phrase existed before the reset, you can use it here to unlock the old data.
- If you later remember your old password, Proton provides an option to unlock the previous data with it. This works indefinitely as long as you haven’t deleted the old keys, so keep trying to recall it over the following days.
If none of those existed and the old password is truly gone, the old messages are cryptographically unrecoverable. That is not a policy choice by Proton; it is how the encryption works.
Step 5: If the account was disabled, not forgotten
If Proton disabled the account (suspected abuse, unusual signup patterns, payment disputes, or terms violations), a password reset won’t help. Instead:
- Note the exact message shown at sign-in.
- Use the link in that notice, or Proton’s support/abuse appeal form, to submit an appeal. Explain plainly who you are and how you use the account.
- Be patient — appeals are reviewed by humans and can take days. Sending multiple duplicate appeals slows things down.
Proton does reinstate accounts disabled by mistake, but they will not discuss another person’s account with you, and no third party can force a reinstatement.
What NOT to do
- Do not pay a “recovery service.” Proton’s end-to-end encryption means no outside company can decrypt your mailbox or bypass Proton’s login — full stop. Anyone claiming they can recover a Proton account for a fee is lying or phishing you.
- Never share your recovery phrase with anyone, including someone claiming to be Proton support. Proton will never ask for it in an email or chat. The phrase is equivalent to full access to your account and data.
- Don’t reset in a panic. The single most common way people lose their Proton archive is resetting via recovery email without understanding the data-loss warning. Exhaust your memory of the old password and search for a recovery phrase or file first.
- Don’t enter your credentials on links from emails. Type
account.proton.meyourself.
If nothing works
If you have no recovery phrase, no recovery file, no recovery method to reset with, and cannot recall the password, the honest answer is that the account and its contents cannot be recovered — by you, by Proton, or by anyone else. The encryption that protected your mail from attackers also protects it from recovery without your keys.
At that point: create a new Proton account (or another provider), set up a recovery phrase and download a recovery file on day one, notify your important contacts of the new address, and update logins at services that pointed to the old mailbox — prioritizing banking, government, and anything with account recovery tied to that email. Treat the old address as dead and watch for anyone impersonating it.
Frequently asked questions
If I reset my Proton Mail password, will I lose my emails?
If you reset without a recovery phrase or recovery file, your existing emails remain encrypted with the old keys and become unreadable. Account access is restored, but old messages are lost unless you later remember the old password or had a data recovery method enabled.
Can Proton support tell me my password or unlock my mailbox?
No. Proton uses end-to-end encryption and does not hold your password or decryption keys. Support can help with account-level issues but cannot decrypt your mailbox for you.
What is the difference between a recovery email and a recovery phrase?
A recovery email or phone lets you reset your password (account recovery) but cannot decrypt old data. A recovery phrase or recovery file also restores access to your encrypted emails (data recovery).
My account says it was disabled, not that my password is wrong. What do I do?
A disabled account is different from a forgotten password. Proton disables accounts for suspected abuse or payment issues. You'll need to appeal through Proton's abuse or support channels rather than resetting your password.
recover.email is not affiliated with Proton. This guide is informational and cannot guarantee recovery.