Proton Drive

Proton Drive is a zero-knowledge encrypted cloud storage service built by the same team behind ProtonMail. Every file you upload is encrypted on your device before it leaves — Proton's servers never see your data in plaintext. For someone preparing to protect sensitive documents during a crisis, this means immigration paperwork, financial records, identity documents, and contingency plans can be stored in a place that even Proton itself cannot access or hand over.

What makes Proton Drive particularly valuable in a crisis context is its integration with the broader Proton ecosystem. A single Proton account gives you encrypted email, calendar, VPN, and file storage — all under the same zero-knowledge architecture. This reduces the number of accounts you need to manage and the number of identity surfaces you expose. If you already use ProtonMail for anonymous communication, adding Drive to your setup requires zero additional registration.

Proton Drive is best suited for people who need a mainstream-quality cloud storage experience with genuine end-to-end encryption. It is not the most anonymous option available — it does require an email address to sign up — but it strikes an unusually strong balance between usability and cryptographic rigor. If you need to access critical documents from any device, anywhere in the world, without trusting the storage provider, Proton Drive belongs in your toolkit.

Proton Drive uses end-to-end encryption based on elliptic curve cryptography (ECC Curve25519) and AES-256. Files are encrypted on the client before upload using keys derived from your account password, which Proton never receives. The encryption extends to file names, folder structures, and metadata — not just file contents. Each file gets its own unique encryption key, and those keys are themselves encrypted with your account key.

The zero-knowledge design means that even if Proton's servers were compromised or compelled by a court order, the attacker would get only ciphertext. Proton cannot perform server-side decryption because it never possesses your private key. This architecture has been in production since 2014 across ProtonMail and was extended to Drive with the same cryptographic foundation. The protocol uses OpenPGP standards, which have decades of peer review behind them.

Proton allows account creation with just a username and password — no phone number or recovery email is strictly required. However, during periods of high registration volume, Proton may require an SMS or email verification to prevent abuse. To maximize anonymity, sign up over Tor or a VPN, use a throwaway email for verification if prompted, and avoid linking the account to any real-world identity.

Once registered, Proton Drive can be accessed through the web interface over Tor without issues. The desktop and mobile apps work behind VPNs without triggering blocks. Proton does log the time of last login and the IP address used for that login (visible in account settings), so using a VPN or Tor for every session is critical if you want to avoid IP-based correlation.

All Proton client applications — including the Drive web app, desktop clients, and mobile apps — are fully open source under the GNU General Public License. The source code is published on GitHub under the ProtonMail organization. Proton has commissioned multiple independent security audits from firms including SEC Consult and Securitum. The most recent comprehensive audit of the Drive cryptographic implementation was published in 2023.

Proton also runs an active bug bounty program through HackerOne, with payouts for verified vulnerabilities. The open-source codebase has an active community of contributors and reviewers. While the server-side code is not open source (a common limitation in the encrypted cloud space), the client-side encryption means the server code is less security-critical — all cryptographic operations happen in auditable client code.

Proton Technologies AG is incorporated in Geneva, Switzerland. Swiss privacy law is among the strongest in the world, and Switzerland is not a member of the European Union, the Five Eyes, Nine Eyes, or Fourteen Eyes intelligence-sharing alliances. Swiss law requires a Swiss court order to compel data disclosure, and foreign government requests must go through a mutual legal assistance treaty (MLAT) process that Proton has historically challenged when overbroad.

Proton publishes an annual transparency report detailing the number of legal requests received and complied with. Because of the zero-knowledge architecture, even when Proton does comply, the data handed over consists of encrypted blobs and minimal metadata (account creation date, last login IP). Proton has fought multiple legal battles in Swiss courts to protect user privacy, including a high-profile 2021 case where they were compelled to log an activist's IP — an incident that led them to recommend Tor usage and to build ProtonVPN's Tor-over-VPN feature.

Proton has operated continuously since 2014, founded by scientists who met at CERN. The company has never suffered a known breach of encrypted user data. The 2021 IP logging incident — where Proton was legally compelled by Swiss authorities to log a French activist's IP — was a significant trust event, but Proton was transparent about the limitations of what they can and cannot protect against, and used it to improve their guidance around Tor usage.

The Proton ecosystem is used by journalists, activists, and dissidents worldwide. The company is backed by the European Commission's Horizon 2020 program and FONGIT (a Swiss government innovation fund), giving it institutional stability without dependence on venture capital that might push for monetizing user data. The team has grown to over 400 employees, and the product has over 100 million accounts globally.

Proton Drive is one of the most user-friendly encrypted storage options available. The web interface is clean and modern, with drag-and-drop uploads, folder organization, and file sharing via encrypted links. The experience is comparable to Google Drive or Dropbox — there is no technical overhead for basic use. Sharing a file generates an encrypted link with optional password protection and expiration dates.

The desktop sync client (available for Windows and macOS) enables automatic folder syncing, so files placed in a designated folder are encrypted and uploaded in the background. The mobile apps for iOS and Android support photo backup, offline access, and file browsing. For someone fleeing a crisis, the ability to access critical documents from any device with just a username and password — no key files or special software — is a significant practical advantage.

Proton Drive is available on Windows, macOS, iOS, and Android, with a full-featured web interface accessible from any browser. Linux support is available through the web app, with a native Linux desktop client in development. The mobile apps support automatic photo and video backup with end-to-end encryption, which is useful for preserving evidence or documentation.

Feature parity across platforms is strong. File sharing, folder organization, and encrypted link generation work identically on web, desktop, and mobile. Sync is automatic across all connected devices. The 1 GB free tier is usable for essential documents, though the paid plans (starting at the Proton Unlimited bundle) offer 500 GB and include Mail, VPN, Calendar, and Pass.

Proton accepts Bitcoin for all paid plans, which can be used with reasonable anonymity if the Bitcoin is acquired through a non-KYC method or properly mixed. Cash payment is accepted via mail to their Swiss office for annual plans. The free tier offers 1 GB of storage, which is sufficient for storing critical documents like passport scans, financial records, and contingency plans without paying anything.

Credit and debit cards are also accepted but create an identity link. For maximum anonymity, use the free tier or pay with Bitcoin acquired through a decentralized exchange like Bisq. Proton does not accept Monero directly, which is a limitation for those seeking the highest level of payment anonymity. Gift cards purchased with cash at retail stores can sometimes be used to purchase Bitcoin, which can then fund a Proton subscription.

Start by navigating to proton.me/drive from a Tor Browser or VPN connection. Click "Create a free account." Choose a Proton username that has no connection to your real identity — do not reuse usernames from other services. Set a strong, unique password and store it in your password manager. If prompted for verification, use an anonymous email address or a temporary phone number from a service like Silent.link.

Once your account is created, log in to Proton Drive at drive.proton.me. Upload your most critical documents first: passport scans, bank account details, insurance information, property records, and your contingency plan. Organize them into folders by category. For any document you need to share with a trusted contact, use the "Get link" feature to generate a password-protected, time-limited sharing link — send the link and password through separate channels (e.g., the link via email and the password via Signal).

For ongoing use, install the Proton Drive desktop client on your computer to sync a local folder automatically. Install the mobile app for on-the-go access and photo backup. Enable two-factor authentication in your Proton account settings using an authenticator app — this protects your encrypted vault even if your password is compromised. Remember: always access Proton through a VPN or Tor to avoid IP logging, and never access your anonymous Proton account from the same network or device where you use your real identity.