Overview
ProtonVPN is the consumer VPN service operated by Proton AG, the Swiss privacy-tech company best known for Proton Mail. Launched in 2017, ProtonVPN is positioned as a privacy-purist option: applications are fully open-source and independently audited, the corporate entity sits in Switzerland outside both EU and US legal frameworks, and the product line includes a genuinely usable free tier that does not throttle bandwidth in the way most "freemium" VPNs do.
Where many providers prioritise marketing reach, Proton's positioning leans into transparency. The same group publishes Proton Mail, Proton Drive, Proton Calendar and Proton Pass, all under the same Geneva-based corporate umbrella with a shared identity system (a single Proton account unlocks all services). For ProtonVPN itself, the headline pillars are open-source code, audited no-logs claims, the proprietary Secure Core multi-hop network running through hardened bunker servers in privacy-friendly countries, and a comprehensive protocol stack covering WireGuard, OpenVPN, IKEv2/IPSec and Stealth.
This review covers ProtonVPN against the criteria we apply to every consumer VPN: real-world speed, privacy posture and jurisdiction, feature breadth, streaming reliability, app polish, pricing and refund handling. As always, plans and terms are set by the provider and may change — verify current pricing and conditions on the ProtonVPN website before purchase.
Swiss jurisdictionOutside EU/US frameworks, governed by FADP — no data-retention mandate
Open-source appsAll clients published on public repositories and independently audited
Secure CoreMulti-hop routing through hardened bunker servers in Switzerland, Iceland, Sweden
Free tierReal free plan with no fixed speed cap — rare in the VPN market
Pros & cons at a glance
Strengths
- Headquartered in Switzerland — outside EU/US/Eyes data-sharing frameworks
- All apps are open-source and independently audited; reports published
- Secure Core multi-hop routes traffic through hardened bunker locations
- Strict no-logs policy backed by published independent audits
- Comprehensive protocol stack: WireGuard, OpenVPN, IKEv2 plus Stealth
- NetShield blocks malware, ads and trackers at DNS level
- Genuine free tier — no data cap, no aggressive speed throttling
- P2P/torrenting permitted on dedicated servers
- Operated by the Proton AG group (Mail, Drive, Calendar) — established privacy track record
Considerations
- Headline monthly price on shorter terms is higher than the budget tier of competitors
- Server count (8,400+) lags the very largest networks for some niche country picks
- Free tier is limited to a small handful of countries and excludes streaming-optimised servers
- Streaming and Secure Core features are paywalled on the free plan
- Some advanced features (Tor over VPN, port forwarding) require the higher tier
Speed & performance
ProtonVPN's speed story has improved substantially since the rollout of WireGuard across all platforms. On gigabit fibre lines connected to nearby WireGuard servers, throughput typically retains 80–95% of the unencrypted baseline — competitive against the fastest WireGuard-based services in the consumer market. Latency overhead on close-by servers is minimal, often within single-digit milliseconds, which keeps real-time use cases (video calls, gaming, voice) comfortable.
Cross-continental connections (e.g., Western Europe to US East Coast or Western Europe to Singapore) hold up well, generally landing in the 50–75% throughput range depending on time-of-day and routing. The network's VPN Accelerator stack — a set of TCP/UDP performance optimisations Proton has developed in-house — is intended to reduce the long-haul speed penalty inherent to VPN tunnels and produces a noticeable improvement on long-distance routes versus stock WireGuard.
Secure Core trades raw throughput for stronger privacy: routing traffic through two servers in different jurisdictions has an unavoidable speed cost, generally 20–40% additional overhead on top of a single-hop connection. This is expected behaviour for any multi-hop architecture and is not unique to ProtonVPN. For everyday browsing the impact is barely noticeable; for large file transfers it is more visible.
OpenVPN remains the slowest option (as it is everywhere), so users prioritising speed should default to WireGuard. The Stealth protocol, designed for restrictive networks, runs on a TLS-tunnelled transport and is correspondingly slower than raw WireGuard but typically faster than OpenVPN-over-TCP.
Privacy, jurisdiction & logging
Privacy is ProtonVPN's flagship pitch and the area where it is most differentiated from mass-market competitors. Proton AG operates from Geneva, Switzerland — outside the EU's data-retention frameworks, outside US jurisdiction and outside the 5/9/14 Eyes intelligence-sharing alliances. Switzerland's Federal Act on Data Protection (FADP) imposes strict obligations on data controllers and does not require VPN providers to retain user activity logs.
Proton AG publishes a strict no-logs policy and states this has been independently audited. The provider also produces a detailed transparency report documenting government data requests and how they were handled. Because all ProtonVPN client applications are open-source — Windows, macOS, iOS, Android and Linux source code is published in public repositories — third-party security researchers can verify the client behaviour against the no-logs claim. Proton commissions independent security audits of the apps and publishes the resulting reports.
Encryption uses AES-256-GCM on OpenVPN and IKEv2 and ChaCha20-Poly1305 on WireGuard, both modern, well-vetted cipher suites. Perfect Forward Secrecy is implemented through ephemeral session keys. Kill switch is offered at both standard and "Permanent" variants — the latter blocks all non-VPN traffic at the system level even before the client launches, eliminating the brief window where traffic could leak during boot. DNS leak protection is enabled by default and ProtonVPN runs its own DNS resolvers.
For users facing higher threat models, the combination of Secure Core multi-hop (entry through hardened servers in Switzerland, Iceland or Sweden) and Tor over VPN (paid tier) provides a layered approach unusual in the consumer space. None of these features replace operational security discipline, but they meaningfully raise the bar against passive network observation and exit-node compromise.
Modern protocols & server architecture
WireGuard protocol
ProtonVPN supports the modern WireGuard protocol on every native platform, alongside OpenVPN and the proprietary Stealth obfuscation layer for restrictive networks. The WireGuard implementation is open source — the same transparency standard ProtonVPN applies to its mobile and desktop apps.
RAM-only server architecture
ProtonVPN states that most of its server fleet runs on RAM-only / disk-less hardware, with no persistent storage to seize. Combined with full-disk encryption on supporting infrastructure and the Swiss legal jurisdiction outside 5/9/14 Eyes, this is one of the more carefully engineered privacy postures in the consumer VPN market.
Features & security tooling
According to ProtonVPN's product documentation, the service includes:
- WireGuard — the default high-speed protocol on all clients
- OpenVPN (UDP/TCP) and IKEv2/IPSec as alternative protocols
- Stealth — proprietary obfuscated protocol designed to evade VPN blocking and DPI in restrictive networks
- Server network advertised at 8,400+ servers in 110+ countries
- Open-source applications — full client source code on public repositories
- Independent audits — apps and no-logs policy externally reviewed; reports published
- Secure Core — multi-hop routing through bunker servers in Switzerland, Iceland and Sweden
- NetShield — DNS-level malware, ad and tracker blocker (paid tier)
- Tor over VPN — direct routing into the Tor network from selected servers
- Kill switch with standard and Permanent (always-on) modes
- Split tunneling on Windows and Android (per-app routing)
- Port forwarding on the higher-tier plan for users who need it (e.g., for self-hosted services)
- P2P-optimised servers with explicit torrenting support
- Up to 10 simultaneous devices on paid plans
- Free tier with no fixed bandwidth cap (limited country selection)
- 30-day money-back guarantee per the provider's terms
Streaming & geo-unblocking
For streaming, ProtonVPN advertises support for the major platforms — Netflix, Disney+, Amazon Prime Video, BBC iPlayer, HBO Max and others — on its paid Plus tier. The apps surface Plus servers tagged for streaming, which are the ones to use when accessing geo-restricted catalogues. The free tier explicitly does not include streaming access; this is a deliberate design choice to keep the free plan sustainable.
In practice ProtonVPN's streaming reliability is solid on the major US, UK, Canadian, Australian and core European catalogues. As with every VPN, streaming is a continuously moving target — platforms refresh their VPN-detection systems and individual servers can be temporarily blocked, requiring a switch to a different city or country in the same region. ProtonVPN's apps do not currently expose a "streaming mode" toggle; users select a Plus server in the relevant country and connect.
For sport, regional broadcaster access during major tournaments is typically workable from countries with strong server presence (UK, Germany, France, US, Canada). Latency on streaming Plus servers is generally good thanks to VPN Accelerator routing.
Apps & usability
ProtonVPN's apps are among the few in the market with a polished native Linux GUI client — a meaningful advantage for desktop Linux users who otherwise have to fall back on CLI or generic WireGuard configurations. The Windows and macOS apps follow a clean modern layout: server list with search and country filtering, performance/load indicators per server, profile creation for quick reconnection, and a map view for users who prefer visual selection.
The mobile apps (iOS, Android) integrate with system VPN frameworks (Apple's per-app VPN, Android's Always-On VPN) and offer split tunneling on Android. Browser extensions are available for Chrome, Firefox, Edge and Brave for users who want a lightweight HTTPS-proxy mode separate from the system tunnel.
The single Proton account also unlocks Proton Mail, Drive, Calendar and Pass — useful for users already invested in the Proton ecosystem, but no obligation to use those services for VPN-only customers. Onboarding is straightforward: account creation (or sign-in to an existing Proton account), client install, one-click connect. Sensible defaults are applied — WireGuard, kill switch on, NetShield available — so non-technical users get a hardened baseline with no configuration required.
Pricing & plans
ProtonVPN sells across a free tier and paid plans. The paid tiers — typically branded VPN Plus and Proton Unlimited — differ mainly in scope: VPN Plus covers full ProtonVPN feature access, while Proton Unlimited bundles ProtonVPN with Proton Mail, Drive, Calendar and Pass on a single subscription. Plan length is the dominant pricing lever: 2-year terms typically deliver headline rates around €4–5 per month on VPN Plus, with monthly billing several multiples higher.
As with most premium VPNs, the discounted rate applies to the first term. Renewal is billed at the provider's standard rate — set a reminder before the term expires if you want to renegotiate or churn. The 30-day money-back guarantee applies to paid plans and provides risk-free evaluation.
The free tier is genuinely usable: while limited to a handful of countries (typically United States, Netherlands, Japan and Romania per the current free plan, subject to change) and excluding streaming and Secure Core, it does not impose a fixed monthly data cap and does not throttle to deliberately unusable speeds. This is unusual in the VPN free-tier landscape, where most "free" VPNs are effectively trial nags.
Payment is accepted via card, PayPal and cryptocurrency (Bitcoin, with cash payments documented for users requiring fully pseudonymous billing). All paid plans are billed inclusive of VAT for European customers.
At-a-glance specifications
OperatorProton AG
JurisdictionSwitzerland
ProtocolsWireGuard, OpenVPN, IKEv2, Stealth
EncryptionAES-256-GCM, ChaCha20-Poly1305
Server count8,400+ (advertised)
Countries110+
Open-source appsYes — all platforms
Simultaneous devices10 (paid)
No-logs auditedYes — published reports
Refund window30 days
Free tierYes — no data cap
Kill switchYes — standard & permanent
Customer support
ProtonVPN provides support primarily via an online ticketing system and an extensive knowledge base. Live chat is available for paying customers during business hours; first-line response for ticket-based support is typically within a working day for non-urgent issues. The knowledge base is well-organised by platform and topic and is generally up-to-date with current app versions.
Because the apps are open-source, technical issues can be investigated and reported directly via the public repositories — a route not available with closed-source VPNs. The community around Proton's services is active on platforms like Reddit and the official Proton forum, which is often a faster source for niche configuration questions and edge-case troubleshooting.
Refund window & cancellation
ProtonVPN advertises a 30-day money-back guarantee on paid plans. Refunds are pro-rated against the time used in some scenarios per the provider's published terms, so users wanting a full refund should initiate the request promptly. Eligibility conditions, eligible payment methods (App Store / Play Store purchases follow platform refund policies) and the cancellation procedure are documented in Proton AG's terms of service — review these before purchase.
Cancellation can be initiated from the Proton account dashboard. Auto-renewal can be disabled at any time without affecting the active subscription; users keep VPN access until the end of the paid term and then simply lapse without re-billing. Users on the free tier never need to cancel — the free plan continues indefinitely subject to the provider's published terms.
Who ProtonVPN is for
- Privacy-purists who prioritise jurisdiction and want to avoid US/UK/EU legal frameworks
- Users who require open-source client code and independently audited applications
- Higher-threat-model users who need multi-hop (Secure Core) or Tor-over-VPN routing
- Linux desktop users who want a polished native GUI rather than CLI-only tooling
- Users who want to start with a real free tier before committing to a paid plan
- Existing Proton Mail, Drive or Calendar users looking to consolidate on one account
- Activists, journalists and researchers operating in restrictive networks (Stealth protocol)
Users prioritising the absolute lowest headline price on a 2-year deal may find slightly cheaper options in the budget tier of the market. Users who need unlimited simultaneous connections should see our comparison for alternatives like Surfshark.
Editorial verdict
ProtonVPN is the closest the consumer VPN market currently comes to a privacy-purist's default. The Swiss jurisdiction, fully open-source apps, published independent audits, Secure Core multi-hop, transparent provenance through the wider Proton AG group, and a free tier that is genuinely usable add up to a coherent product where the marketing claims are unusually well-supported by verifiable artefacts.
The trade-offs are commercial rather than technical: headline pricing on shorter terms sits above the cheapest competitors, and the free tier deliberately excludes streaming and Secure Core. Neither is unreasonable, and the 30-day refund window on paid plans provides comfortable risk-free evaluation. For users who weight privacy posture and transparency above all else, ProtonVPN is one of the strongest picks on the market in 2026.
Frequently asked questions
Where is ProtonVPN based?
ProtonVPN is operated by Proton AG, headquartered in Geneva, Switzerland. Switzerland sits outside the EU and the 5/9/14 Eyes intelligence-sharing alliances and is governed by its own Federal Act on Data Protection (FADP).
Are the ProtonVPN apps open-source?
Yes — Proton AG publishes the source code for ProtonVPN's Windows, macOS, iOS, Android and Linux applications in public repositories. The provider also states that the apps are independently audited and the audit reports are published.
What is Secure Core?
Secure Core is ProtonVPN's multi-hop feature. Traffic is routed first through hardened servers located in privacy-friendly countries (such as Switzerland, Iceland and Sweden) before exiting to the public internet, which mitigates risk if an exit server is compromised or monitored.
Does ProtonVPN have a free tier?
Yes — Proton AG offers a free tier with limited country selection and no fixed bandwidth cap on the current free plan per the provider's documentation. Free-tier conditions and country availability are documented on ProtonVPN's website and may change.
Which protocols does ProtonVPN support?
ProtonVPN supports WireGuard, OpenVPN (UDP and TCP) and IKEv2/IPSec. The provider also offers a Stealth protocol designed to evade VPN-blocking and deep-packet inspection in restrictive networks.
How many devices can connect simultaneously?
Paid ProtonVPN plans advertise up to 10 simultaneous device connections. Verify the current device limit on the ProtonVPN plans page.
Can I get a refund from ProtonVPN?
Proton AG advertises a 30-day money-back guarantee on paid plans. Refund eligibility conditions and the cancellation procedure are documented in the provider's terms.
Does ProtonVPN keep logs?
Proton AG states ProtonVPN operates a strict no-logs policy that has been independently audited. The provider operates from Switzerland, a jurisdiction without mandatory data-retention obligations for VPN providers.
Does ProtonVPN support the WireGuard protocol?
Yes. ProtonVPN supports WireGuard on every native platform alongside OpenVPN and the proprietary Stealth obfuscation protocol. The WireGuard implementation is open source.
Does ProtonVPN use RAM-only servers?
Yes. ProtonVPN states that most of its server fleet runs on RAM-only / disk-less hardware, with no persistent storage to seize. Combined with full-disk encryption on supporting infrastructure, this is one of the more carefully engineered privacy postures in the consumer VPN market.