The Proton Sentinel high-security program

The Proton Sentinel program is an advanced account protection program that provides maximum security for those who need it. It mitigates security threats by combining AI with human analysis.

Proton Sentinel is available on all paid subscriptions aside from Proton for Business Essentials. If you’re a journalist, activist, executive, or someone who deals with sensitive data and communications, we strongly encourage you to enable it.

The Proton Sentinel program provides:

• Advanced security protection, including strict challenges for suspicious login attempts
• Greater visibility on logins and account changes in their security logs
• 24/7 escalation of suspicious login attempts to security analysts who will review assessments made by the automated systems
• Support requests related to account security will automatically be escalated to trained security specialists.

This makes it much harder for an attacker to take over your account. However, accounts shared by multiple people without two-factor authentication may not want to enable Proton Sentinel at this time as they have a higher chance of being challenged during logins.

How to enable Proton Sentinel on personal accounts

1. Sign in using your Proton Account username and password at account.protnn.me. 
2. Go to Settings → All settings → Security and Privacy.
3. Toggle on the Enable Proton Sentinel.

Email notifications are enabled by default, so you will receive alerts in your Proton Mail account on suspicious activity.

How to use Activity monitor

We believe you’re the ultimate guardian of your security, which is why we enable you to self-monitor account events in case you notice something suspicious. To enable and disable Activity monitor:

1. Sign in using your Proton Account username and password at account.protnn.me. 
2. Go to Settings → All settings → Security and Privacy.
3. Scroll down to Activity monitor.

Enable Activity monitor to start recording account-related events. When you disable it, all recorded events will be securely wiped.

How to view detailed security events

By default, Activity monitor shows the following types of event information:

• Event: Shows the type of account activity that occurred, such as Proton Sentinel being enabled or disabled, successful sign-ins, or other security-related actions.
• Device: Displays information about the device and environment used for the event, such as the operating system and browser (when available).
• Protection: Indicates whether Proton Sentinel protection was active at the time of the event.

For a more comprehensive view of the event details, toggle on Enable detailed events. This will also show:

• IP: Shows the IP address associated with the event.
• Location: Displays the approximate location (city and country) associated with the IP address.
• ISP: Shows the internet service provider associated with the IP address. For example, if you connected using Proton VPN, it will show Proton.

You can reload event information, securely wipe all logs, or export information to CSV for closer inspection.

If you notice any suspicious activity in your security events, you should report it to us by contacting us using our online support form.

How to use Proton Sentinel for organizations

Organizations that have a Proton Business Suite or a Professional plan can enable Proton Sentinel for all users. In this case, individual users will not be able to opt out. If Proton Sentinel is not enabled by an organization admin, then individual users can enable or disable the feature independently.

1. Sign in using your Proton admin account username and password at account.protnn.me. 
2. Go to Settings → All settings.
3. Under Organization, select Security.
4. Click Enable Proton Sentinel.

Individual users can review enhanced security events in Security and Privacy settings, just like for personal accounts.

Administrators can view enhanced security events of all organization users in Settings → All settings → Activity Monitor (under Organization).

For Proton for Business administrators, the organization account monitor includes organization-level security activity.

What’s the difference between Proton Sentinel for organizations and for personal accounts?

For personal accounts, Proton Sentinel provides advanced login protection, enhanced monitoring, and detailed security logs for an individual account, including additional insight into login attempts and suspicious activity. It is available on all individual and Family plans except Free and Essentials plans.

For organizations, Proton Sentinel is managed by the organization’s administrator. When enabled by an admin, it applies to all users in the organization, cannot be turned off by individual users, and allows admins to monitor organization-level security activity across accounts. It is available on all Proton Business plans.