proton account

Every command under proton account, with the arguments and flags it takes. For these commands in use, see the account guide.

Holds breaches, delete, get, keys, login, logout, profiles, security-log, sessions and settings.

delete

Delete the account and everything in it: every address, message, contact, event, file and password. It cannot be reactivated.

Proton may refuse before anything is asked. Otherwise you confirm, then give your password. A member of a family or duo plan leaves the plan first.

–message says in at least ten characters why you are leaving, and is left out with –reason merge. It reaches the people who improve Proton, not support.

Afterwards this machine keeps nothing of the account: the profile’s session, index and short-ID cache are removed.

proton account delete

proton account delete --reason other-service --message 'Moving everything to one provider'
proton account delete --reason merge
proton account delete --reason other --message 'Checking the preview' --dry-run

Flag	Description
--message string	Why you are leaving, in at least ten characters
--password-file string	Read the account password from a file, or - for stdin
--reason string	The main reason you are leaving: different-account, too-expensive, missing-feature, other-service, merge, other
--totp string	Two-factor code

get

Show the account, its storage and this machine’s session.

proton account get

proton account get
proton account get --output json

login

Sign in and save the session for this profile.

Signing in also unlocks your keys, so your password is needed once per machine and not again. Anything a flag has not set is asked for, as long as this is a terminal.

Security key: you are asked to touch it. If the account also has an authenticator app, pressing Enter at the code prompt reaches for the key instead. A key needs a person present, so unattended jobs want –totp.

Two-password mode: the second password is asked for after signing in. That is the password your keys are locked with. A one-password account is never asked for it.

Pass extra password: not asked for here. The first pass command asks, and the session can then reach Pass for as long as it lives. Pass it now with –extra-password-file when there is nobody to ask.

Human verification: Proton may ask you to prove you are human. The page is printed and can be solved on any device, so a machine with no display signs in like any other. A run that cannot ask prints the page and the token to repeat the command with.

–qr asks for nothing at all. It prints a code to approve on a device that is already signed in, and signs in as whoever approves it, so it takes none of the flags that name an account or carry a secret. A code lasts nine minutes.

Signing in again as the same account, with any of its addresses, changes nothing, so an unattended job can run it first to recover from an expired session.

proton account login

proton account login
proton account login --profile work
proton account login --user me@proton.me --password-file /run/secrets/proton
proton account login --user me@proton.me --password-file - --totp 123456
proton account login --user me@proton.me --password-file /run/secrets/proton --second-password-file /run/secrets/proton-second
proton account login --user me@proton.me --password-file /run/secrets/proton --extra-password-file /run/secrets/proton-pass
proton account login --qr

Flag	Description
--extra-password-file string	Read the Pass extra password from a file, or - for stdin
--password-file string	Read the account password from a file, or - for stdin
--qr	Sign in by approving a code on another device
--second-password-file string	Read the second password (two-password mode) from a file, or - for stdin
--totp string	Two-factor code
--user string	Proton account email to sign in as

logout

Discard the saved session for this profile.

The key password on disk is sealed with a key held by Proton, so deleting the session file is enough to make it unreadable.

–revoke also invalidates the session at Proton, the same as signing out in a Proton app. Use it if the file may have been copied.

proton account logout

proton account logout
proton account logout --revoke
proton account logout --all

Flag	Description
--all	Act on everything in scope, rather than a subset
--revoke	Also invalidate the session at Proton

---

Every command also takes the flags that work everywhere.