Click “Enter key manually instead” under the QR code.
Paste the key above, confirm with the six digits and your password.
Save the recovery codes Proton then shows.
Bridge and IMAPProton Bridge and any app-specific passwords keep working after enrolment. Only the web and mobile logins ask for the code.
Parameters Proton issues
Algorithm
SHA-1, the RFC 6238 default.
Period
30 seconds
Digits
6
URI format
otpauth://totp/Proton:you@proton.me?secret=…&issuer=Proton. Paste the whole URI above and the label fills itself in.
If the key is gone
Recovery codes, saved during setup.
Recovery email or phone, if configured beforehand.
Neither. Proton cannot decrypt your mailbox for you. Account recovery may restore the account without restoring old mail.
Questions
Does 2FA affect my encrypted mail?
No. Two-factor guards login; your mailbox encryption key is derived from your password. Losing the password is the serious failure, not losing the second factor.