Proton Drive: login succeeds but key unlock fails — "gopenpgp: decrypting message with private keys failed: openpgp: incorrect key"

STOP and READ USE THIS TEMPLATE NO EXCEPTIONS - By not using this, you waste your time, our time and really hate puppies. Please remove these two lines and that will confirm you have read them.

What is the problem you are having with rclone?

Hi all,

I'm unable to use the Proton Drive backend at all — login succeeds but every command fails at key unlock.

Environment:

  • rclone v1.76.0-beta.10667 (also reproduced on v1.75.2 stable)
  • macOS arm64 (M-series), zsh
  • Proton Visionary account, 2FA enabled (TOTP authenticator app)
  • Primary address is @pm.mepm.me; account is not in two-password mode

Command:

rclone lsd proton:

Result:

ERROR : error listing: gopenpgp: decrypting message with private keys failed: openpgp: incorrect key
NOTICE: Failed to lsd with 2 errors: last error was: gopenpgp: decrypting message with private keys failed: openpgp: incorrect key

Notably, Proton's own security log shows a successful sign-in for the rclone client at the same timestamp — so authentication is passing and only the key decryption step fails.

Already tried, without success:

  • Clean remote deletion and full recreation (multiple times)
  • Username as full primary address (@pm.me) rather than bare handle
  • Fresh TOTP codes supplied via --protondrive-2fa= immediately after rotation
  • Logging into drive.proton.me in a browser beforehand to initialize keys
  • VPN disabled; system clock confirmed auto-syncing
  • Confirmed two-password mode is off; no mailbox_password set
  • Upgrading from v1.75.2 stable to v1.76.0-beta

Verbose log and redacted config attached below. Any guidance appreciated — happy to run further diagnostics.

Thanks!

Run the command 'rclone version' and share the full output of the command.

rclone v1.76.0-beta.10667.6e01cb6e2

  • os/version: darwin 27.2 (64 bit)
  • os/kernel: 27.2.0 (arm64)
  • os/type: darwin
  • os/arch: arm64 (ARMv8 compatible)
  • go/version: go1.27.3
  • go/linking: dynamic
  • go/tags: cmount

Which cloud storage system are you using? Proton Drive

The command you were trying to run (eg rclone copy /tmp remote:tmp)

clone lsd proton:

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

[proton]
type = protondrive
username = d...t@pm.me
password = XXX
2fa = 697765
client_uid = XXX
client_access_token = XXX
client_refresh_token = XXX
client_salted_key_pass = XXX

A log from the command that you were trying to run with the -vv flag

2026/10/29 12:00:39 DEBUG : rclone: Version "v1.76.0-beta.10667.6e01cb6e2" starting with parameters ["rclone" "lsd" "proton:" "-vv"]
2026/10/29 12:00:39 DEBUG : Creating backend with remote "proton:"
2026/10/29 12:00:39 DEBUG : Using config file from "/Users/dwight_macbook_air/.config/rclone/rclone.conf"
2026/10/29 12:00:39 DEBUG : proton drive root link ID '': Has cached credentials
2026/10/29 12:00:43 DEBUG : proton drive root link ID '': Used cached credential to initialize the ProtonDrive API
2026/10/29 12:00:54 ERROR : error listing: gopenpgp: decrypting message with private keys failed: openpgp: incorrect key
2026/10/29 12:00:54 DEBUG : 6 go routines active
2026/10/29 12:00:54 NOTICE: Failed to lsd with 2 errors: last error was: gopenpgp: decrypting message with private keys failed: openpgp: incorrect key

welcome to the forum,

please test using the latest beta and test again.

Tested on the latest beta: v1.76.0-beta.10675.5152a0d96 — same failure: ERROR : error listing: gopenpgp: decrypting message with private keys failed: openpgp: incorrect key (Verbose log shows: cached credentials → ProtonDrive API initialized → key decrypt fails.) Attached full -vv output.

2026/10/29 12:32:32 DEBUG : rclone: Version "v1.76.0-beta.10675.5152a0d96" starting with parameters \["rclone" "lsd" "proton:" "-vv"\]

2026/10/29 12:32:32 DEBUG : Creating backend with remote "proton:"

2026/10/29 12:32:32 DEBUG : Using config file from "/Users/dwight_macbook_air/.config/rclone/rclone.conf"

2026/10/29 12:32:32 DEBUG : proton drive root link ID '': Has cached credentials

2026/10/29 12:32:36 DEBUG : proton drive root link ID '': Used cached credential to initialize the ProtonDrive API

2026/10/29 12:32:45 ERROR : error listing: gopenpgp: decrypting message with private keys failed: openpgp: incorrect key

2026/10/29 12:32:45 DEBUG : 6 go routines active

2026/10/29 12:32:45 NOTICE: Failed to lsd with 2 errors: last error was: gopenpgp: decrypting message with private keys failed: openpgp: incorrect key

please understand, that the proton remote is labeled experimental
no expectation that it will work.