Protonmail Bridge on Unraid

Now more than ever in this Social Media day and age I think it is important to encrypt your private communications.  Most people think they are boring but as the current news feeds amplify, if you dare speak out on a subject you may be a target.  I won’t get into details beyond that but …….why not encrypt your on-line conversations?   No one needs to know what you like and don’t like, and what you stand for or don’t stand for.  Or what your vaccination status is.

If you think Gmail, Hotmail, and Yahoo are not spying on you there is no hope for you.  You need to move on from here.  Email encryption is nothing new and in fact I remember the first consumer grade stuff ………Pretty Good Privacy (PGP) in the mid 90’s.   It was super cool but people just would not take the extra steps to do this.   I suspect they still won’t.  But they should.

There are several secure email services and in this blog I will focus on ProtonMail   They use end to end encryption and if you have a ProtonMail account and you email someone that doesn’t…….you can still create an encrypted environment.

ProtonMail is web based, and for most of you that isn’t an issue.  You are used to logging into your Gmail or Yahoo account on a web browser, so don’t let this scare you.  You’re simply using another service except this one is more secure.

Let’s move on with this discussion.

Yes you can use Protonmail online and yes that might be the easiest way to do it.   But Protonmail has added something called a Bridge (for paying customers) that allows you to see your emails in Outlook, Mac Mail, Thunderbird, etc.  NOTE:  Paying may seem a bit extreme but with a Plus account you also get a secure file storage area (ProtonDrive) and a VPN.  Yes, a freaking VPN.  So I pay $5 a month but I also have another VPN service that costs $5.  I can dump it now and keep more stuff together.

You can download a free bridge client for each OS you are on but that is another program running on your computer using your resources.  There is another way.  You can install ProtonMail-bridge on a server and just connect that account to it.

Sure.  You travel.  And in that instance you can just use the app on your tablet or computer that acts as a bridge.  But if you have multiple devices, and usually use them at home………put that resource on a server and let your server handle the load.

I use Unraid.  And there is a ProtonMail-bridge, app but it is a home-made mother to install and get working.  And as usual in cool things…..nobody puts all the data in one place. The answer to crack the code is in 3 or 4 or 5 places.

That’s where I come in.  I put it all together Barney style and make it so a layman can take advantage of this powerful solution.  I spent 2 days figuring this out and the installation literally takes 5 minutes if you do it correctly.  Such is my life.

So let’s get started. I’m going to install ProtonMail-bridge on Unraid. It is based on this docker container and is Open Source  And configuration is a snap.  Go to apps, find it and install it.  The installation page pops up and you only need to populate a couple of things.  Add 1025 to the port 25 container and 1143 to the 143 container and hit apply. Bam.  Bob = Uncle.

Protonmail-bridge Configuration (click pic to enlarge)

That was easy.

Now we want to open the docker terminal and run the following commands:

docker exec -it protonmail-bridge /bin/bash
chmod +x
./ init

Also easy.  Now you need to run the command (actually the script above runs this command but following up the script with “login” will never actually let you login).

protonmail-bridge --cli

Except there is one problem. It won’t work.  You can issue a “login” command but it won’t log you in. You first need to run the command “top”.


Now let’s kill “Proton-bridge”

Kill Protonmail-bridge (click pic to enlarge)

Issue this command:

kill 18

or whatever your process number is.

Once it is killed we can again run this command:

protonmail-bridge --cli

Yer doing it. Now you can log in with your ProtonMail account.  I don’t know why killing the process and re-issuing the command works……but it does.

ProtonMail login (click to enlarge pic)

Again, you have to have a paid account to do this and you have to know all your ProtonMail credentials.

Once you log in you can issue the command:


to see your login details.

Login Bridge (click pic to enlarge)

Be sure to copy this info so you can add it to your email client.  That’s really all you do.  Set up your IMAP server, and SMTP server.  This is the account config on Thunderbird.  It is super easy.

Now, this part is important.  GO TO YOUR DOCKER AND RESTART PROTONMAIL-BRIDGE.  Check the logs to make sure it is okay.

Thunderbird Email Server Config (click to enlarge pics)

Just add your:

  • Host IP (address of your Unraid server)
  • Port Number (1143 for IMAP, and 1025 for SMTP)
  • Security Settings (STARTTLS)
  • Authentication (PASSWORD)
  • user name
  • Bridge password

The BRIDGE PASSWORD is DIFFERENT than your ProtonMail credentials and what you saw after running the “info” command above.

Again, you can install the bridge from ProtonMail on your computer easily by downloading the bridge app.

I have no less than 10 computers at home and it just makes sense to install the bridge on my server and I can configure MOST email client apps to work with it.  I can confirm that Mac Mail, and Thunderbird work great.

This is great but again I want to remind you that if you want to send a fully end-to-end encrypted email …….. you need to use their web app. Or the email has to be from a ProtonMail address TO a ProtonMail address.

Again, the bridge JUST LETS YOU SEE YOUR EMAIL ACCOUNT.  To use end to end encryption for a person who DOES NOT HAVE Protonmail, you have to log into the web based app, and click the lock button to encrypt.  They then get an email with a web link, and they need a password to open your encrypted email.  That password has to be pre-determined by the users.

ProtonMail Encryption (click pics to enlarge)

When using the bridge though……….everything is not end to end encrypted.  Here are two emails I sent myself.  One from proton to outside proton, and one proton to proton.  Note that the proton to proton is END TO END ENCRYPTED………EVEN FROM THE BRIDGE!

Bridge Encryption Comparison (click pics to enlarge)

If both the sender and recipient have Protonmail accounts everything is encrypted from the bridge.  Again, if the recipient is not, you have to send it from the web based ProtonMail which creates a link they click and apply a password too.

If you are using free email, why not use an Open Source, encrypted service?

So the next time you want to email someone that you are headed to the shooting range, or going to the school board meeting……… probably should encrypt your communications.  I hate that the world has come to this but it has.




11 thoughts on “Protonmail Bridge on Unraid

  1. Matt Reaver

    Wow, thank you so much for putting this together. I’m primarily looking to send email so I tested the bridge in the unraid notification settings. I had to use the SMTP Port number there to find success.

  2. Hank

    Thank you! I couldn’t figure this out until this document. I will say though, that Starttls for IMAP doesn’t work for me. Was there an extra step for that?

  3. Dylan

    This was incredibly helpful.
    If anyone by chance has found a way to either replace the self-signed certificate for or update the configuration for a published address/hostname, it would be incredibly helpful.

  4. Andrew

    I get mine to work, able to get imap and smtp settings, but i do get a weird error:

    Adding account …
    WARN[Dec 16 03:37:41.670] Problem to load store events error=”open /root/.config/protonmail/bridge/cache/c11/user_info.json: no such file or directory” pkg=store

  5. Andrew

    Ok so I was able to follow all that, but I did get a warning/error once I signed in and got my IMAP and SMTP settings:

    Adding account …
    WARN[Dec 16 03:37:41.670] Problem to load store events error=”open /root/.config/protonmail/bridge/cache/c11/user_info.json: no such file or directory” pkg=store

    Nevertheless, I went ahead and used my SMTP settings which had the address and port 1025 along with the special credentials to setup Nextcloud, but I now I got the following error:

    “A problem occurred while sending the email. Please revise your settings. (Error: Connection could not be established with host :stream_socket_client(): Unable to connect to (Connection refused))”

    I tried researching but no luck

  6. Pingback: Network Server Apps - John's Tech Blog

  7. Steven Vaughan

    Hello fellow brother in Christ — cool seeing you post about prophetic stuff too. I’m in the same game!

    Could you help me on getitng this working, I switched full time for my biz to Protonmail and need a relay going for things like nextcloud and mattermost as I’m trying to keep all my data in house away from the NSA. (course they’ve already seen this at this point :P) Can you help me figure out why I’m not getting any success here. I’ve got Bridge up and running and info tells me everything. but my web apps just won’t talk to localhost…not sure what’s going on

      1. steven vaughan

        Goodness I didn’t get a notification!

        things like Mattermost, and other docker containers that are asking for SMTP!

  8. Dan Ionita

    This worked… sort of.
    The Bridge randomly stops working (no crash, no errors). This happens once every few days. I have to restart it manually to get it working again. Because it’s impossible to know when the bridge stops working and because my website depends on the bridge for sending e-mails, the only solution I found was to keep auto-updates on so that it restarts every so often because of the updates…
    However, for the last month or so, Protonmail bridge refuses to do work. Every connection is refused with no meaningful error. My conclusion: use MXRoute if you need custom e-mail domains. They offer unlimited domains for a fraction of the price and no need to fiddle with a bride.


Leave a Reply

Your email address will not be published. Required fields are marked *