We believe that in the current rapidly deteriorating cyber environment, with the rise of more numerous and capable state-backed actors, end-to-end encryption is the only viable approach to data security. Thus, in the event of a compromise, it is not possible for attackers to steal something that we don’t have, that is, the mailbox password and contents of your messages. By encrypting customer emails on the client side before they reach ProtonMail servers, ProtonMail does not have the ability to decrypt any of the emails stored on our systems. If the working assumption is that servers storing data will eventually be breached, the next best option is to not have data in the first place. This is the reason ProtonMail was designed from the ground up with end-to-end encryption. By definition, it simply isn’t possible to have 100% security. Thus, it is safe to assume that all services will eventually be breached. In short, cybersecurity is a form of asymmetric warfare which decisively favors the attackers, and as we have seen time and time again, even sophisticated tech companies with competent security teams such as Linkedin and Yahoo have been breached. There are a multitude of methods through which server security can be breached, and an attacker only needs to exploit a single vulnerability once, while a service provider on the other hand must constantly mount a successful defense against all attack vectors. This is because in our view, the existing paradigm of cyberdefense, which is “keep the bad guys out,” is a failed approach. We have a different threat model, where our starting assumption is that a security breach is inevitable, and we have designed our entire architecture around that premise. However, email is still an essential part of our lives, an integral part of our digital identity.Īt ProtonMail, we are addressing this problem by taking a completely different approach to email security compared to every other major email provider. While previously there was a reasonable expectation of security and privacy with email communications, now it is becoming fairly evident that most email systems are simply not capable of protecting user data. In the past couple years, the increasing number of high profile email hacks have clearly demonstrated that the threat model for email has changed dramatically. OctoUpdate: Yahoo now confirms that the hack impacts 3 billion accounts, and not the 1 billion or 500 million that was previously reported. Confirming what was long suspected by the security community, Yahoo has confirmed a massive breach of over 500 million email accounts, including both credentials and security questions.

Hack yahoo password online free 2015