Buying a ProtonMail Account: Privacy, Plans and Key Security

What Proton Mail offers privacy-minded users

Proton Mail, long known as ProtonMail, is an encrypted email service run by Proton AG in Switzerland. Messages between Proton users are end-to-end encrypted, mail to other providers can be sent as password-protected messages, and stored mail is kept with zero-access encryption, which means Proton itself cannot read it. Addresses end in proton.me or protonmail.com, and the same account opens Proton Calendar, Proton Drive, Proton VPN and Proton Pass.

Those who buy a ProtonMail account tend to be privacy-minded: journalists and researchers who want a separate encrypted address, small businesses keeping confidential correspondence apart, developers testing how their product handles encrypted mail providers, and people who keep work and personal mail separate. Follow Proton's own terms of use, which prohibit spam, fraud and other abuse.

One honest point: an account from a marketplace was created by someone else, who knew its credentials until you change them. Complete the steps below before you store anything sensitive.

Free and paid Proton plans in a listing

A free Proton account has modest storage and fewer features. Paid plans such as Mail Plus, Proton Unlimited and the family and business tiers add more storage, extra addresses, custom domain support and Proton Mail Bridge, the tool that lets desktop clients like Thunderbird or Outlook connect over IMAP. A listing should name the plan and explain what happens when the paid period ends. After login, open the subscription section of the dashboard to confirm it matches.

Why the password and encryption keys go together

In Proton's default setup, your account password also unlocks the private keys that decrypt your mailbox. That changes how you should take over an account:

• Changing the password while signed in re-encrypts the keys with the new password, so existing messages stay readable. This is the route to take.
• Resetting it through the forgotten-password flow restores access but leaves older messages locked under the old keys, unless you have the old password, a recovery phrase or a recovery file.

So change the password from the account settings, not through a reset. Then generate a fresh recovery phrase and keep it offline; if the previous holder saved the old one, the new phrase makes it useless. Proton also offers an optional two-password mode that separates the login password from the mailbox password.

Checking the seller's record

Every store on rStock goes through platform approval before it can sell, and every listing is reviewed before publication. For Proton orders, look for a description that states the plan, the address domain, whether recovery methods are set, and whether two-factor authentication is off at delivery so you can add your own. Then study the store's profile: sales count, rating and insurance balance, which is money the store keeps with the platform and a meaningful trust signal. Reviews remain visible, refunded orders carry a label, sponsored placements are always marked and paid plans bring no hidden ranking boost. Check the category page for current offers from independent stores before you buy a ProtonMail account.

How payment and delivery work

rStock requires a verified email address before any top-up or purchase. Balances are topped up with cryptocurrency through Cryptomus and credited in USDT, and purchases are paid from the balance alone. You buy one product at a time and pick the quantity. The credentials land on your order page as a delivery record for that order, no second buyer can receive the same item, and your money is held rather than paid to the store at once.

Resetting recovery methods after delivery

Work through this list while the dispute window is still open:

1. Sign in on the web or in the Proton Mail app and confirm the plan matches the listing.
2. Change the password from the account and password settings.
3. Set your own recovery email and phone, removing any left by the store.
4. Generate a new recovery phrase and store it offline.
5. Turn on two-factor authentication with an authenticator app or a hardware security key.
6. Open session management and sign out all other sessions.
7. Check forwarding, filters and auto-replies for anything you did not set.

Keep the delivered details private and never paste them into shared documents.

What to do if the account is disabled

Proton disables accounts linked to abuse and may remove free accounts that stay inactive for a long time. If you cannot sign in, the account is disabled on arrival, or the plan differs from the description, open a dispute on the order within the window. The store responds first, and a moderator can be called if you do not reach agreement. Possible results are a full refund, a partial refund, release to the store or a split, and refunds go to your rStock balance.