SecurityCAN I VIBECODE
Proton Unlimited?
BUILD FIRST
- A non-sensitive or read-only version of the core experience
- A manual review step wherever correctness or trust matters
- A narrow companion tool that removes a real piece of work
LEAVE FOR LATER
- Regulated decisions, payments, or irreversible actions
- Claims of correctness, compliance, or uptime that the MVP cannot support
- Sensitive integrations until security, support, and auditability are ready
RESEARCH NOTES
What this tool actually does.
Proton Unlimited is a paid subscription bundle from Proton AG (maker of Proton Mail) that unlocks premium versions of all its privacy services under one account. It costs €12.99/month or €119.88/year (one-year billing). Included: Proton Mail Plus (up to 15 email addresses, 500 GB storage shared with Drive, 3 custom domains, @pm.me address, unlimited labels/folders/filters, IMAP/SMTP via Proton Mail Bridge, unlimited hide-my-email aliases, dark web monitoring, Proton Sentinel); Proton VPN (10 simultaneous devices, 15,000+ servers in 120+ countries, NetShield ad-blocker, Secure Core, Tor over VPN, strict no-logs, kill switch, split tunneling); Proton Drive (500 GB encrypted storage, Proton Docs); Proton Calendar (25 calendars); Proton Pass (50 vaults, unlimited aliases); Proton Wallet (10 wallets). Also includes limited free tiers of Proton Lumo (AI assistant) and Proton Meet. All services
RESEARCHED BUILD PROMPT
Give this to your coding agent.
Build a working prototype of a 'Proton Unlimited'-style all-in-one zero-access privacy suite: one account that unlocks encrypted Mail, VPN, Drive, Calendar, Pass (vault), and Wallet as separate services behind a single sign-in and unified quota. Workflow: user registers/logs in once, lands on a dashboard showing service tiles, per-service usage, and shared 500 GB-style quota; opens Mail to read/compose/search end-to-end-encrypted messages with contacts and folders; toggles the VPN service on/off and sees connection status; uploads/downloads encrypted files in Drive and shares encrypted links; adds calendar events; stores and autofills credentials in Pass. User-facing requirements: unified auth + session, dashboard with storage meter, webmail with E2EE compose/read, VPN status toggle (stub or real WireGuard), Drive file CRUD with encrypted share links, calendar CRUD, password vault, and settings. Technical requirements: zero-access server (client-side encryption only, server sees ciphertext), OpenPGP for mail and WebCrypto for vault/drive keys, SRP or passkey auth, REST API + WebSocket sync, PostgreSQL for metadata and object storage (MinIO/S3) for encrypted blobs, per-service quota accounting against one shared pool. Sensible implementation: TypeScript React SPA, Node.js or Go API, OpenPGP.js, wg-quick-based sidecar for a real VPN tunnel, or a simulated VPN backend for the prototype. Do NOT copy Proton's brand, logos, proprietary assets, or UI design — use original naming, layout, and styling. Deliberately out of scope: real SMTP/IMTP delivery infrastructure, spam filtering, a 15,000-server VPN network, native mobile apps, billing/payments, dark web monitoring, and wallet/crypto network integration. Deliver a README with setup steps (env vars, key generation, running API + client + MinIO locally), architecture sketch, and explicit limitations of the prototype vs. the real product.