Can I use a Proton Mail authenticator without a phone?

Yes. Proton needs an app that produces standard six-digit codes and does not care which device runs it. The Authenticator extension generates them in Chrome on your computer and reads the QR code straight off the Proton settings page.

Do I need Proton Authenticator, or does any app work?

Any app that supports time-based codes (TOTP) works — Proton recommends its own Proton Authenticator, but Google Authenticator, Microsoft Authenticator or a browser extension like this one take the same QR code. Proton pairs every device with the same QR code or key, so if you want the codes in two apps, add the code to both during setup; adding one later means turning the toggle off and on and setting 2FA up again.

What if I lose access to my authenticator?

Sign in with one of your recovery codes, or with a security key if you added one, then turn the authenticator off and set it up again. Without either, enter your username and password and choose “I don’t have my 2FA device” → “I don’t have my back-up code” to get a code through your recovery email or phone. Still signed in somewhere? “Lost access to your 2FA device?” under Two-factor authentication turns 2FA off with a recovery method.

Proton Mail Authenticator App — Set Up 2FA for Your Proton Account

Your Proton Account is one sign-in for Proton Mail, Drive, VPN, Calendar and Pass, and the inbox is where other services send their password-reset links. Proton’s encryption keeps outsiders out of your mail, but not someone who signs in with your password. With an authenticator app on, signing in to any Proton app also takes the six-digit code from your device, so a leaked password alone is not enough.

Turn on two-factor authentication in your Proton Account

2FA is set up once for the whole Proton Account and is available on free and paid plans. After that, every Proton app — Mail, Drive, VPN, Pass — asks for the code when you sign in. Proton also lets you add a security key alongside the authenticator app.

Sign in at account.proton.me on your computer and open “Settings” ⚙️ → “All settings”.
Select “Account and password” in the sidebar and scroll to “Two-factor authentication”.
Turn on the “Authenticator app” toggle and enter your password to continue.
When Proton shows a QR code, leave that page open and add it to the extension as described below. If you would rather type the key, click “Enter key manually instead”.
Click “Next”, enter your password and the six-digit code from the extension, and click “Submit”.

Proton Mail’s own instructions

Add Proton Mail to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Proton Mail page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Proton Mail and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Proton Mail confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Proton Mail’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Save your Proton 2FA recovery codes

Right after you click “Submit”, Proton gives you several one-time recovery codes. Save them somewhere other than this computer: each one signs you in once if you lose your authenticator. Proton’s other way back is a recovery method — a recovery email, phone number or recovery phrase — so check that one is set on your account, and keep the extension’s automatic backups on.

The code is not accepted?

Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.

Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Can I use a Proton Mail authenticator without a phone?: Yes. Proton needs an app that produces standard six-digit codes and does not care which device runs it. The Authenticator extension generates them in Chrome on your computer and reads the QR code straight off the Proton settings page.
Do I need Proton Authenticator, or does any app work?: Any app that supports time-based codes (TOTP) works — Proton recommends its own Proton Authenticator, but Google Authenticator, Microsoft Authenticator or a browser extension like this one take the same QR code. Proton pairs every device with the same QR code or key, so if you want the codes in two apps, add the code to both during setup; adding one later means turning the toggle off and on and setting 2FA up again.
What if I lose access to my authenticator?: Sign in with one of your recovery codes, or with a security key if you added one, then turn the authenticator off and set it up again. Without either, enter your username and password and choose “I don’t have my 2FA device” → “I don’t have my back-up code” to get a code through your recovery email or phone. Still signed in somewhere? “Lost access to your 2FA device?” under Two-factor authentication turns 2FA off with a recovery method.
Why does Proton say “Incorrect login credentials” when I enter the code?: Most often the account in the extension came from an earlier QR code — the setup was started again or the page was reopened — so it no longer matches. Add the QR code that is on the screen now and type its code in straight away; if there are two Proton entries in the extension, use the newest. If you set 2FA up in another app, the codes come from that app until you set it up again here.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.