> If you can lose your password, and then hit "Forgot password" and get access to your emails again...then they can run the same routines without your password.

> If you can lose your password, and then hit "Forgot password" and get access to your emails again...then they can run the same routines without your password. runnerup, what leads you to believe this is possible? According to their password reset instructions, resetting your password will prevent you from decrypting any existing messages: https://protonmail.com/support/knowledge-base/reset-password/ https://protonmail.com/support/knowledge-base/reset-password... An attack using this specific method would require resetting your password and then reading any emails you receive afterwards.