Security events

Proton Mail provides security features that enable you to view sign in activity on your account. If you suspect that someone else has access to your account, you can check your activity in the security events file.

By default, detailed security events are not recorded. They capture IP addresses(new window) and the date and time of activity on your account. The settings for security events can be changed with the following steps:

1. Sign in to mail.proton.me(new window) and go to Settings → All settings → Account → Security and privacy → Security events.

2. Toggle the switches for Enable security events and Enable detailed events to on (or off to disable them). Enabling detailed events records the IP address for each security event.

Note: If you disable security events, you’ll clear your entire security event history and will not be able to track account activity.

4. You can also perform the following actions:

• Reload: Update the security events file with the latest activity
• Wipe: Delete all activity from the security events file
• Download: Download all security events as a CSV file

You can also enable the Proton Sentinel program, which offers advanced account security. It provides you with even more detailed security event information, including the operating system and device that attempted to log in to you account. This feature is available with Proton Visionary, Lifetime, Family, Unlimited, or Business plans.

We recommend the Proton Sentinel program for high-profile public figures, anyone who handles sensitive information, or anyone who thinks they might be at risk for cyberattacks.