Your organization password and key
Your Proton for Business(neues Fenster) account is secured by an organization password that is associated with your organization key.
Proton for Business accounts use end-to-end encryption(neues Fenster) to secure emails. This is achieved using a master encryption key called the organization key, which nobody other than the administrators of your organization has access to.
Because even we do not have access to this key, your data remains private, even from us.
To find out details about your organization key, log in to your Proton Account at account.proton.me and go to Settings → All settings → Organization → Organization and keys → Password and keys.
Your organization key fingerprint can be optionally used as a security feature to verify that all administrators in your account have the same key.
Organization password
Your organization key is protected by an organization password that is only known to the administrators of your organization. Because we do not know the organization password, we cannot read any of the emails associated with your organization.
However, because administrators have access to the organization password and the organization key, administrators are able to read the emails of all users of an organization unless the user is explicitly designated as a private user(neues Fenster).
For day-to-day management of your organization, administrators do not need to use the organization password because an administrator’s Proton Mail account password is sufficient for most organization management functions. However, the organization password must be used to perform some tasks. These include:
- Adding a new administrator to your organization
- Changing your organization keys
The organization password also serves as a recovery mechanism if an administrator loses administrative privileges to their Proton Mail organization (for example due to a password reset(neues Fenster)).
Changing your organization password
Any administrator can change the organization password. When this is done, it is the responsibility of each administrator to share the new organization password with all other administrators.
Resetting organization password
Please see restoring administrator privileges(neues Fenster) for more information about resetting your organization password,
Changing your organization key
Changing your organization key is not usually necessary, but we recommend doing it for security purposes if an administrator leaves your organization or if an administrator’s account is compromised.
Changing the organization key generates a new encryption key, which is used to encrypt all data for your organization. This replaces your old key. You will need to set a new organization password.
No data will be lost or destroyed in this process. However, after the organization key has been changed, all other administrators will be placed into a restricted privileges mode(neues Fenster). The administrator that changed the organization key will need to share the new organization password with all other administrators in order for them to restore administrative privileges(neues Fenster).
To change your organization key:
1. Log in at account.proton.me and go to Settings → All settings → Organization → Organization and keys → Password and keys → Change organization keys.
2. Choose a new password. Click Save when you’re ready.
How to set up an organization in Proton Mail
Step 1: Set up your custom domain(s)
Step 2: Create your organization(neues Fenster)
- Organization password and key(neues Fenster) (you are here)
- Restoring administrator privileges(neues Fenster)
Step 3: Add new users to your organization(neues Fenster)
Step 4: Migrate your existing email messages to Proton Mail(neues Fenster)