ProtonBlog(new window)
google search risk

In the past two months, many of you have reached out to us to ask about the mysterious tweets we sent to Google in August(new window). At Proton(new window), transparency is a core value, and we try to be as transparent with our community as possible. As many people have continued to point out to us, we need to be more transparent here to avoid continued confusion and speculation. Thus, we are telling the full story today to clarify what happened.

What Happened?

The short summary is that for nearly a year, Google was hiding Proton Mail from search results for queries such as ‘secure email’ and ‘encrypted email’. This was highly suspicious because Proton Mail has long been the world’s largest encrypted email provider.

When Proton Mail launched in Beta back in May 2014, our community rapidly grew as people from around the world came together and supported us in our mission to protect privacy in the digital age. Our record breaking crowdfunding campaign(new window) raised over half a million dollars from contributors and provided us with the resources to make Proton Mail competitive against even the biggest players in the email space.

By the summer of 2015, Proton Mail passed half a million users(new window) and was the world’s most well known secure email service. Proton Mail was also ranking well in Google search at this time, on the first or second page of most queries including “encrypted email” and “secure email”. However, by the end of October 2015, the situation had changed dramatically, and Proton Mail was mysteriously no longer showing up for searches of our two main keywords.

Between the beginning of the summer and the fall of 2015, Proton Mail did undergo a lot of changes. We released Proton Mail 2.0, we went fully open source(new window), we launched mobile apps in beta, and we updated our website, changing our TLD from .ch to the more widely known .com. We also doubled in size, growing to nearly 1 million users by the fall. All of these changes should have helped Proton Mail’s search rankings as we became more and more relevant to more people.

In November 2015, we became aware of the problem and consulted a number of well known SEO experts. None of them could explain the issue, especially since Proton Mail has never used any blackhat SEO tactics, nor did we observe any used against us. Mysteriously, the issue was entirely limited to Google, as this anomaly was not seen on any other search engine. Below are the search rankings for Proton Mail for ‘secure email’ and ‘encrypted email’ taken at the beginning of August 2016 across all major search engines. We rank on either page 1 or 2 everywhere except Google where we are not ranked at all.

All throughout Spring 2016, we worked in earnest to get in touch with Google. We created two tickets on their web spam report form explaining the situation. We even contacted Google’s President EMEA Strategic Relationships, but received no response nor improvement. Around this time, we also heard about the anti-trust action brought forward by the European Commission against Google(new window), accusing Google of abusing its search monopoly to lower the search rankings of Google competitors(new window). This was worrying news, because as an email service that puts user privacy first, we are the leading alternative to Gmail for those looking for better data privacy.

In August, with no other options, we turned to Twitter to press our case. This time though, we finally got a response(new window), thanks in large part to the hundreds of Proton Mail users who drew attention to the issue and made it impossible to ignore. After a few days, Google informed us that they had “fixed something” without providing further details. The results could be immediately seen.

google protonmail search risk

In the above plots, the x-axis is time and the y-axis is search ranking (lower number is better). The dates where there are no data points are times when we are not ranked at all by Google. After Google made some changes, Proton Mail’s rankings immediately recovered and are now ranked #1 and #3 for ‘secure email’ and ‘encrypted email’ respectively. Without any additional explanation from Google, we may never know why Proton Mail become unranked. In any case, we do appreciate Google finally taking action to resolve the issue, we just wished it happened sooner.

The Danger of Search Risk

This incident however highlights a previously unrecognized danger that we are now calling Search Risk. The danger is that any service such as Proton Mail can easily be suppressed by either search companies, or the governments that control those search companies. This can happen even across national borders. For example, even though Google is an American company, it controls over 90% of European search traffic(new window). In this case, Google directly caused Proton Mail’s growth rate worldwide to be reduced by over 25% for over 10 months.

This meant that Proton Mail’s income from users was also cut by 25%, putting financial pressure on our operations. We went from being able to cover all our monthly expenses to having to draw from our emergency reserve fund. The lost income and financial damage incurred as a result was several hundred thousand Swiss Francs (1 CHF = 1.01 USD), which will never be reimbursed.

The only reason we survived to tell this story is because the majority of Proton Mail’s growth comes from word of mouth, and our community is too loud to be ignored. Many other companies won’t be so fortunate. This episode illustrates that Search Risk is serious, which is why we now agree with the European Commission that given Google’s dominant position in search, more transparency and oversight is critical.

Defending Against Search Risk

This incident illustrates that for Proton Mail to be successful, it is important that we can continue to grow independently of search engines so that it is impossible for any search company to intentionally or unintentionally cripple us. This is easier said than done, but there are easy actions that we can all do to safeguard the future of Proton Mail:

  • Tell your friends and family about Proton Mail. The other benefit of this is that you will also get automatic end-to-end encryption when you email them.
  • Writing articles or blog posts about Proton Mail and help spread the word about online privacy.
  • Upgrading to a paid account(new window) so we can rebuild our depleted emergency reserve fund faster.
  • Helping Proton Mail reach more people through social media. You can Tweet or share Proton Mail on Facebook with the share buttons below.

Share on Twitter(new window)   Share on Facebook(new window)

The more we get the word out about the importance of online privacy, the more we make it impossible to suppress, ban, or otherwise pressure encrypted email services such as Proton Mail. We believe online privacy is critical for an open, democratic, and free future, and regardless of the obstacles ahead of us, we will continue building the tools necessary to protect this future. Thank you for supporting us and making this possible.

For questions and comment, you can reach us at

Get a free secure email account from Proton Mail(new window)

Proton Mail is supported by community contributions. We don’t serve ads or abuse your privacy. You can support our mission by upgrading to a paid plan.

Image Credit: Special thanks to Glasgow graphics designer James Belkevitz(new window) for providing the top image.

Protect your privacy with Proton
Create a free account

Related articles

passwordless future
With the advent of passkeys, plenty of people are predicting the end of passwords. Is the future passwordless, though? Or is there room for both types of authentication to exist side-by-side?  At Proton, we are optimistic about passkeys and have int
At Proton, we have always been highly disciplined, focusing on how to best sustain our mission over time. This job is incredibly difficult. Everything we create always takes longer and is more complex than it would be if we did it without focusing on
is icloud keychain safe
If you’re on any Apple device, you’re familiar with the iCloud Keychain, the Apple password manager. It’s a handy tool that stores passwords for you and helps you manage your logins.  For a program that stores all your most sensitive data in one pla
We recently announced that Proton Pass now supports passkeys for everyone across all devices. Universal compatibility is a unique approach to implementing passkeys, unfortunately. Even though passkeys were developed by the FIDO Alliance and the Worl
How to upload and share private video
Your private videos are for your eyes only. However, not all cloud storage services are good at storing videos securely, let alone privately. In this article we explain what you can do to keep file sharing companies from having access to the videos y
Many email services, citing security reasons, require a phone number for identity verification. This creates an unfortunate paradox in which you must give up a highly sensitive piece of personal data to Big Tech. But there are simple ways to create
Can you password-protect a folder in Google Drive?
Protecting a folder with a password is a simple yet effective way of securing files. You may wonder whether you can password-protect a folder in Google Drive. We explain what access controls Google Drive offers and what you can do to improve your sec