Proton Mail Deploys Post-Quantum Encryption for All Users
Proton Mail has launched an optional post-quantum encryption feature across all account tiers to protect future communications from potential quantum computing threats.
Proton Mail has introduced post-quantum cryptography (PQC) as an optional security feature for all users, including those on the free tier. This update is designed to safeguard future encrypted communications against potential decryption by future quantum computers, a threat often referred to as "harvest now, decrypt later" Help Net Security.
The mechanism functions by generating new encryption keys specifically architected to withstand quantum-based attacks. To facilitate this, Proton has integrated support for OpenPGP v6, a framework that allows for the implementation of modern, quantum-resistant algorithms Help Net Security. Users must manually enable this feature by navigating to their account settings under the "Encryption and keys" section, where they will be prompted to confirm the change and re-enter their password to trigger the key generation process Help Net Security.
There are several technical constraints associated with this rollout. Importantly, the feature does not retroactively re-encrypt existing emails; it only secures new messages sent after the feature is activated Help Net Security. Furthermore, enabling post-quantum protection is currently incompatible with end-to-end encrypted forwarding, which will be automatically paused upon activation. Users may also experience a minor performance impact, though Proton anticipates that the service will remain responsive on standard hardware Help Net Security.
Because the new keys rely on updated cryptographic standards, users must ensure their Proton applications are fully updated. Older versions of the Proton apps lack the necessary support for these new keys and will not function correctly with the feature enabled Help Net Security. Despite these changes, users retain the ability to manage their PGP keys, download them, and utilize them with other PGP-compatible services as they did previously.
Proton has stated that it is actively working to standardize these quantum-safe practices across the broader email ecosystem. The company is collaborating with projects like Thunderbird to ensure that encrypted email remains secure and interoperable between different providers, regardless of the specific service a user chooses Help Net Security.
This move reflects a growing industry trend toward proactive cryptographic agility in the face of long-term quantum computing threats. By providing these tools to all users, Proton aims to mitigate the risk of intercepted data being stored today for decryption once sufficiently powerful quantum hardware becomes available. Future developments will likely focus on expanding compatibility and potentially addressing the current limitations regarding encrypted forwarding Help Net Security.