Affiliate links present. Disclosure
Proton VPN
The VPN that brings receipts instead of asking for blind trust — open-source apps and public audit reports
Pick Proton if you like privacy claims you can inspect instead of just trusting the logo. One small catch: some safety nets still need you to switch them on yourself. A parachute in the backpack is great; it still helps to know where the cord is.
Fact-checked and maintained by Softplorer Research
VPN sites love asking you to trust a logo and a reassuring privacy slogan. Proton at least gives you a few things you can actually check: the client apps are open source, the no-logs setup has been independently audited, and the audit reports are public. Its transparency record also includes real legal requests where Proton says the connection logs needed to identify a user weren't available. That's a much more useful test than a pretty privacy badge. That doesn't mean you can install it, close your eyes, and assume every switch is perfect. Some protections still need you to turn them on, and a few features change depending on the device. Think of Proton as the careful neighbor who keeps the receipts — trustworthy-looking for good reasons, but still worth checking before you borrow the ladder.
At a glance
Right fit if
- You hear 'no logs' and instinctively ask 'says who?'. Proton has an independent audit trail and the reports are public.
- You'd rather have the client apps open for inspection than sealed inside a black box with a shiny logo on top.
- You sometimes land on hotel, school, office, or public networks that don't play nicely with VPN traffic. Stealth is available, and it isn't limited to paid users.
- You want to poke around before paying. Free plan with unlimited bandwidth. That's nicer than buying the whole sofa before you've even sat on it.
Not the right fit if
- You install an app, tap Connect, and never open Settings again. The kill switch needs you to enable it first, so this is one safety net you have to hang up yourself.
- You need split tunneling on every device you own. Not available on iOS/iPadOS or Apple TV specifically — not a blanket Apple-platform exclusion, since macOS does have it. This is where 'works on the laptop' can turn into 'wait, where did the button go?' on another device.
- You need port forwarding everywhere. Not listed for iOS/iPadOS or Android apps; not available on the free plan. Check your actual device before building your setup around it.
Score breakdown
Scale reflects category fit and operational confidence — not absolute product quality.
Tap WHY to see the verdict · HOW to see the evidence
Privacy pages are easy to make pretty. What matters is whether there's anything behind the curtain you can actually inspect.
Privacy claims are easy to make. What matters is whether there are receipts: independent checks, public reports, clear ownership, and real-world evidence where we have it. A promise on a homepage is nice; something you can verify is better. Jurisdiction is only partially confirmed, so not every detail there should be treated as settled.
What exists
- five annual no-logs audits — server/infrastructure scope, 2026 review conducted May 20–22
- annual cadence since 2022
- full reports published without login
- The official Proton VPN transparency report documents legal requests and the data outcomes; current totals are maintained on the live report rather than frozen here
- distinct Securitum app-code security audit exists, separate from the annual no-logs infrastructure audits
- separate SOC 2 Type II operational-security attestation completed July 2025, audited by Schellman — see proton.me/blog/soc-2
- all client apps on GitHub
- Securitum app code audits
What's missing
- single audit firm (Securitum) for the no-logs series — no multi-firm rotation
- server-side infrastructure not published
- no traditional warrant canary — Proton states Swiss law's mandatory eventual notification makes one unnecessary; relies on the transparency report instead
Unresolved
- The audit scope is described in the reports, but lack of unsupervised auditor access is not scored as a negative unless the policy defines it as a requirement — unresolved
- The 2021 Proton Mail court event involved a separate product and is not scored as a Proton VPN jurisdiction event — unresolved
- Unenacted surveillance-law proposals are maintenance items, not current-law scored negatives — unresolved
Security features are like tools in a drawer: impressive counts mean nothing if the one you need is missing when the pipe starts leaking.
Here the score counts protections that are actually confirmed, then checks the awkward gaps that only show up when something goes wrong. It's less 'how many switches are in the app?' and more 'which ones matter when the Wi-Fi drops at the worst possible moment?'
What exists
- WireGuard UDP on Windows, macOS, Android, iOS/iPadOS, Android TV, Linux
- OpenVPN available on Linux GUI app only — not Windows/macOS/mobile
- Stealth: Windows, macOS, Android, iOS/iPadOS, Android TV (Linux GUI in beta)
- IKEv2 available on macOS only, but in active phaseout — server support removal began April 2026, final end February 2027
- standard kill switch: Windows, macOS, iOS/iPadOS, Android, Linux
- Proton-operated DNS
- full IPv6 leak protection
- NetShield DNS blocking (ads, malware)
What's missing
- official setup instructions require the user to enable the kill switch manually
- advanced kill switch: Windows and Linux GUI; iOS/iPadOS available in beta; not a universal cross-platform feature
- no per-app kill switch documented — system-wide blocking only
- WebRTC protection is a browser-extension toggle — not a separately labeled main-app setting; third-party test (Security.org, 2026) found full-tunnel mode leak-clean, see evidence_note
- obfuscation only via Stealth — OpenVPN and WireGuard not separately obfuscated
- Secure Core not available on free plan
Streaming support is a moving target. Today's green light can turn red after a service changes its blocking, so treat this like a weather report, not a wedding vow.
For streaming, we only give credit for what we can verify now. One successful Saturday night doesn't become a forever promise, because streaming services change the locks whenever they feel like it.
What exists
- labeled streaming servers on paid plans
- official list confirms Netflix access via Plus servers; exact country count is internally inconsistent on Proton's own page (10 vs 25) — see evidence_note
- Disney+, Prime Video, Max/HBO Max, BBC iPlayer, Hulu and 100+ other named services — official list
What's missing
- free plan: no streaming server access
- official list exists and is detailed, but is descriptive of current status — not a contractual guarantee of ongoing access
VPN speed isn't a single horsepower number. Your protocol, route, server, and location all get a vote.
This score isn't built from one heroic speed-test screenshot. It looks at the pieces that can affect day-to-day performance and keeps anything we can't verify out of the victory speech. Server Fleet is only partially confirmed, so not every detail there should be treated as settled.
What exists
- WireGuard UDP available on Windows, macOS, Android, iOS/iPadOS, Android TV, Linux
- proprietary speed optimization, up to 400% on long-distance links, enabled by default
- bare-metal hardware — no virtual machines stated
- bare-metal hardware — stated in Securitum 2025 audit
- no major public cloud providers reported in core VPN fleet
What's missing
- Secure Core adds latency — two-server path by design
- hardware in colocated facilities — data center buildings not owned by Proton
Unresolved
- Live fleet size is volatile and the scoring canon has no fixed threshold for “very large.” — unresolved
- Live country coverage is volatile and the scoring canon has no fixed threshold for “wide.” — unresolved
A VPN can be brilliant underneath and still make you hunt through Settings like you're looking for the fuse box in someone else's house.
For app experience, the useful question starts after installation: can you connect quickly, find the useful controls, and understand what a switch actually does without opening a support article in another tab? Connection Ux is only partially confirmed, so not every detail there should be treated as settled.
What exists
- Windows, macOS, Linux
- iOS, Android, Chromebook
- Android TV, Apple TV
- Chrome and Firefox extensions available
- native Apple TV app available at protonvpn.com/download-appletv
- official Proton VPN Linux GUI app is available and separately documented from the CLI
- Windows, macOS (experimental), Linux GUI, Android, Android TV, browser extension
- include/inverse mode available on Windows, Android, Android TV
What's missing
- not available on iOS/iPadOS or Apple TV specifically — not a blanket Apple-platform exclusion, since macOS does have it
- interface includes multiple configuration layers — not single-button
This is the boring category that becomes important the second your laptop has the feature and your phone doesn't.
Here we check where the important features really work, device by device. 'Supported' on the homepage isn't much comfort if the exact button you need vanishes when you move from your laptop to your phone.
What exists
- Chrome and Firefox extensions available
- guides for AsusWRT, DD-WRT, FreshTomato, GL.iNet, MikroTik, OpenWRT, OPNsense, pfSense, Vilfo
What's missing
- capped at 10 — not unlimited
- extension is Premium-only — not available to free-tier users
Unresolved
- Whether a fixed cap is “generous” has no policy-defined threshold and is not scored — unresolved
- No native-router-firmware negative is scored from absence in the checked documentation — unresolved
The number on the signup button is the first date, not the marriage. Renewal, refunds, and what the free tier leaves out matter later.
For value, look past the shiny first price. Renewal terms, refunds, free-plan limits, and what you actually keep after the honeymoon period all matter more than a giant discount badge.
What exists
- all plans and prices listed
- 2-year plan available in addition to monthly and 1-year
- monthly plan available
- free plan with unlimited bandwidth
- 30-day money-back on paid plans, full refund per official ToS
- canceling future renewal is self-service via Account dashboard, per ToS
What's missing
- per official ToS: "If the renewal price has changed, you will be charged the then-current price valid at the time of the renewal" — not guaranteed to match the initially discounted price
- monthly plan more expensive than annual per-month rate
- free plan: 1 connection, 10 server countries, no streaming-optimized servers
- the refund request itself requires contacting support — not self-service, distinct from cancellation
- cash and bank-transfer payments explicitly excluded from refund per ToS
Uptime is hard to verify from the outside, so we don't pretend a quiet week on the internet is proof. We lean on documented infrastructure and how openly real incidents are handled.
This is the category where guessing gets you into trouble. If there's no solid uptime or incident evidence, it stays unresolved instead of getting a gold star because nobody complained loudly this week.
What exists
- full-disk encryption — stated in Securitum 2025 audit
What's missing
- not RAM-only — encrypted disk model used
Unresolved
- Server Fleet Stability — not reliably verified right now
- Incident Communication — not reliably verified right now
Trade-offs
- The kill switch needs manual activation. If you're the person who never opens Settings after day one, make a point of doing this once.
- Secure Core takes the longer road for extra privacy, and Secure Core adds latency — two-server path by design.
- The renewal price isn't guaranteed to stay at the introductory price. Future-you may appreciate a calendar reminder.
When it breaks
- Picture the VPN dropping for a moment while you're still happily browsing. The kill switch is the thing meant to stop traffic from slipping out unprotected — but don't assume it's already on. Official setup instructions require the user to enable the kill switch manually. The stricter version is more limited: Advanced kill switch: Windows and Linux GUI; iOS/iPadOS available in beta; not a universal cross-platform feature.
- Secure Core is the scenic route: another server goes into the trip before your traffic reaches the exit. That's useful when you want the extra privacy layer, but Secure Core adds latency — two-server path by design. For a quick trip to the corner shop, the scenic route is usually more ceremony than you need.
- If you torrent or use something that needs incoming connections, port forwarding is one of those boring details that becomes very interesting five minutes after it doesn't work. On paid plans, it's currently available on Windows, macOS (early access), and Linux GUI apps. Not listed for iOS/iPadOS or Android apps; not available on the free plan.
Hidden trade-offs
- The checkout price and the future-you price aren't necessarily the same thing. Renewal isn't locked to the introductory price, so a calendar reminder before renewal can save you from the classic 'wait, where did that charge come from?' moment.
- Cancelling renewal and getting money back are two different chores here. The refund request itself requires contacting support — not self-service, distinct from cancellation. Think 'turn off the subscription' versus 'actually get the money back'.
- The free plan is useful, but it isn't the full tasting menu. Secure Core isn't included there.
Sources
Building a complete privacy stack?
A VPN handles network-level encryption. Password managers and antivirus cover the gaps it can't.
Quick comparisons
© 2026 Softplorer