520 results found

1. We’re still using Windows 7 (or Windows 10) – so what?

   We’re still using Windows 7 – so what? It’s none of your business; let us use the VPN version we’ve paid for.
   What’s the problem? All you need to do is let us use the latest compatible version we’ve paid for. Especially as I’ve read that you’re also going to ban Windows 10 users soon. Microsoft is using underhand tactics and you’re just going along with it? What’s got into you?

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Preventing Fake AI influencers across multiple platforms

   With the rise of AI , fake influencers are targeting the market. Most of these "experts" or "real life stories" dont exist. If proton had an option to filter or block AI vs real products it would be great. I know this wouldn't be an easy task, but with so many being targeted by AI , Proton could provide security from what is real vs generated.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. service available on lg webos

   Can you make the service available on lg webos and samsung tizen os

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Application Logs

   In settings > view logs - create a toggle to enable Application, WireGuard and Transaction logging within the application. There are benefits to having this logging available, however it should be disabled by default and only enabled for troubleshooting/debugging issues. This would improve application performance significantly and it would remove a potential privacy issue related to application log access.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. ProtonVPN + Tailscale compatability

   Hi Proton team,
   I really appreciate how fast Proton iterates. One recurring pain point for privacy-conscious self-hosters is VPN + Tailscale coexistence.
   When Proton VPN is active (especially with kill switch), Tailscale stops working properly. This forces users to constantly disable one or the other, which defeats part of the purpose of running self-hosted services privately.
   Would it be possible to improve split tunneling / "Allow LAN access" so that it reliably works with Tailscale (and similar tools like Netbird or Headscale)? Even a dedicated "Overlay network mode" or better documentation would help a lot of power users.
   Thanks for all the work you do.

   Hi Proton team,
   I really appreciate how fast Proton iterates. One recurring pain point for privacy-conscious self-hosters is VPN + Tailscale coexistence.
   When Proton VPN is active (especially with kill switch), Tailscale stops working properly. This forces users to constantly disable one or the other, which defeats part of the purpose of running self-hosted services privately.
   Would it be possible to improve split tunneling / "Allow LAN access" so that it reliably works with Tailscale (and similar tools like Netbird or Headscale)? Even a dedicated "Overlay network mode" or better documentation would help a lot of power users.
   Thanks for… more

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Don't require login credentials for the Proton VPN browser extension

   Why does the Proton VPN browser extension require you to log into your proton account? The mullvad browser extension doesn't require this. It somehow talks to the mullvad VPN app and it just works. Could you please change this for the proton vpn browser extension?

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Add Server(s) Location(s) to Atlantic Canada Region
   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. tunnel

   Full Split Tunneling Support Across All DevicesWhile I love Proton VPN, I would heavily rely on having a dedicated Split Tunneling / Custom Tunnel option fully available on all operating systems. Being able to choose exactly which apps or IP addresses route through the secure tunnel—and which ones bypass it—is a game-changer for balancing security with local network speeds.Having one ultimate account to unlock everything, paired with total control over my network tunnels, would make Proton the undeniable, all-in-one ecosystem for power users.Thank you for listening to community feedback, and keep up the spectacular work!Best regards,

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Add configurable notification display modes

   Add an option to customize how notification popups are displayed. Currently, notification text can be too long and wraps to a second line, making the compact notification window less convenient.

   The app should allow users to choose between two notification modes:

   Compact mode: shows only the most important information selected by the user, such as download and upload speed, without extra details like total downloaded or uploaded data.

   Full mode: shows the complete notification with all available information, similar to the current display.

   This would make notifications more flexible and easier to read depending on the user's needs.

   Proton notification: https://i.ibb.co/cc8qhhKm/Screenshot-20260630-100858-One-UI-Home.jpg
   1DM notification settings example: https://i.ibb.co/TqbFWZ1B/Screenshot-20260630-101350-1-DM.jpg

   Add an option to customize how notification popups are displayed. Currently, notification text can be too long and wraps to a second line, making the compact notification window less convenient.

   The app should allow users to choose between two notification modes:

   Compact mode: shows only the most important information selected by the user, such as download and upload speed, without extra details like total downloaded or uploaded data.

   Full mode: shows the complete notification with all available information, similar to the current display.

   This would make notifications more flexible and easier to read depending on the user's needs.

   Proton notification: … more

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Add a protonvpn website API or webpage to obtain public IP address

    The current https://protonvpn.com/what-is-my-ip-address website is convenient in order to find out my device's public IPv4 address. However, the way it is coded, the address is displayed using javascript (default 127.0.0.1). This makes it impossible to use curl from a script to find out the device's public IPv4 address. As a result, scripts have to use other websites. There are many that offer this, but it's not very private.

    For those of us who need an algorithmic way to find out IPv4 address using a script, it would be nice if Proton offered this same capability. For example, https://ifconfig.me/ can be used by parsing the HTML output to find the IPv4 address. Better is https://ipv4.icanhazip.com, but this also has privacy issues.

    Of course, the site should be rate limited, to prevent overload. My script usually checks every 30 minutes.

    Another approach would be to only serve the IPv4 address when presented with an OAuth token, which could be created by a logged in user on the protonvpn.com website. Even if this expires , say, on a yearly basis, I would not mind updating my script occasionally to use a newer token.

    The current https://protonvpn.com/what-is-my-ip-address website is convenient in order to find out my device's public IPv4 address. However, the way it is coded, the address is displayed using javascript (default 127.0.0.1). This makes it impossible to use curl from a script to find out the device's public IPv4 address. As a result, scripts have to use other websites. There are many that offer this, but it's not very private.

    For those of us who need an algorithmic way to find out IPv4 address using a script, it would be nice if Proton offered this same capability. For example, https://ifconfig.me/ can be… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Israel dedicated server static ip

    Add support for static IP on Israel deticated server

    We now have a large team of engineers working from Israel and the Europe servers are working very poorly for us

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Multiple WG Clients on One Router

    Hello ProtonVPN Support,

    I am running ProtonVPN on an ASUS RT-AX86U router using Asuswrt-Merlin firmware. I would like to run multiple ProtonVPN WireGuard client profiles simultaneously and route different LAN clients through different ProtonVPN exits using Merlin’s VPN Director policy-routing feature.

    The problem is that all of the ProtonVPN WireGuard configuration files generated for my account appear to use the same tunnel-side addresses:

    Interface Address:
    10.2.0.2/32

    DNS:
    10.2.0.1

    When I enable multiple ProtonVPN WireGuard clients at the same time on the router, all clients show successful handshakes, but traffic does not route correctly. The router’s route tables end up associating the shared tunnel-side address 10.2.0.1 with only one WireGuard interface, so DNS and/or internal tunnel routing for the other WireGuard clients appears to collide.

    For example, with multiple WireGuard clients enabled, several routing tables point 10.2.0.1 to wgc1, even when a LAN client is supposed to route through wgc5. When I disable all ProtonVPN WireGuard clients except one, the remaining client works correctly. In that state, 10.2.0.1 is routed through the active WireGuard interface and traffic passes normally.

    This strongly suggests that the issue is not the WireGuard tunnel itself, but the fact that multiple ProtonVPN WireGuard profiles use the same internal tunnel address and DNS address when active on the same router.

    Could ProtonVPN provide WireGuard configuration files suitable for simultaneous use on a single Linux/Asuswrt-Merlin router, with unique tunnel-side addresses per profile/device? For example, something like:

    Profile 1:
    Address = 10.2.0.2/32
    DNS = 10.2.0.1

    Profile 2:
    Address = 10.2.1.2/32
    DNS = 10.2.1.1

    Profile 3:
    Address = 10.2.2.2/32
    DNS = 10.2.2.1

    Or another supported configuration approach that avoids route collisions when multiple ProtonVPN WireGuard clients are active at the same time.

    My goal is to use multiple ProtonVPN WireGuard exits simultaneously on one router, assigning different LAN clients or subnets to different ProtonVPN WireGuard clients via VPN Director. OpenVPN clients work in this role because their tunnel interfaces receive distinct addressing, but the WireGuard profiles collide because they reuse 10.2.0.2/32 and 10.2.0.1.

    Please let me know whether ProtonVPN supports unique WireGuard tunnel addresses per profile/device, or whether simultaneous multiple WireGuard clients on a single router are unsupported with ProtonVPN-generated configs.

    Thank you.

    Hello ProtonVPN Support,

    I am running ProtonVPN on an ASUS RT-AX86U router using Asuswrt-Merlin firmware. I would like to run multiple ProtonVPN WireGuard client profiles simultaneously and route different LAN clients through different ProtonVPN exits using Merlin’s VPN Director policy-routing feature.

    The problem is that all of the ProtonVPN WireGuard configuration files generated for my account appear to use the same tunnel-side addresses:

    Interface Address:
    10.2.0.2/32

    DNS:
    10.2.0.1

    When I enable multiple ProtonVPN WireGuard clients at the same time on the router, all clients show successful handshakes, but traffic does not route correctly. The router’s route tables end up associating… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Onion Service for protonvpn.com

    Please add a Tor Onion Service for protonvpn.com

    Proton currently already has an Onion Service for the main site:

    • https://proton.me/
    • https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/

    However, there is no Onion Service for the vpn site:

    • https://protonvpn.com/

    Please create an Onion Service for the protonvpn.com site.

    I recommend doing this by a subdomain of the existing Onion Service, for example:

    • https://vpn.protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/

    After the Onion Service is available, please also update the 'onion-location` header, so that Tor Browser automatically notifies visitors of protonvpn.com that there is a more secure Onion Service available

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. 5 year, 10 year or even custom year subscription?

    Proton should consider offering longer‑term subscription options such as 5‑year, 10‑year, or even fully custom multi‑year plans. A lifetime subscription could also be an attractive option, provided the pricing remains reasonable rather than excessive.

    Introducing these plans would allow Proton to offer even more competitive month‑to‑month value, while loyal users would benefit from long‑term stability without needing to renew frequently or hunt for new deals when their current plan expires.

    Thank you for your consideration.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. ssh tunnels

    Ssh tunnels to allow a public ip and port to inbound to a lan device. Not a full vpn. Limited to a single port.

    Some providers block all inbound traffic that is unsolicited, on their network. Both ipv6 and ipv4. This also breaks ipv6. But, instead of using a full wireguard client which is much lighter than the extremely heavy protonvpn client, nevertheless it causes bsod. I would like to be able to simply use something like putty to get an inbound port opened to a local lan device. It does not have to be a fixed port number or ip. There would be some facility to report what the public ip and port is. The natpmpc currently only works in linux, when in combination with a vpn it is used to poll/detect/keep open the public port. It's a bit cumbersome, and as i said i have no interest in running the fully, heavy protonvpn client.

    Ssh tunnels to allow a public ip and port to inbound to a lan device. Not a full vpn. Limited to a single port.

    Some providers block all inbound traffic that is unsolicited, on their network. Both ipv6 and ipv4. This also breaks ipv6. But, instead of using a full wireguard client which is much lighter than the extremely heavy protonvpn client, nevertheless it causes bsod. I would like to be able to simply use something like putty to get an inbound port opened to a local lan device. It does not have to be a fixed port number or… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Split

    Split tunneling is extremely useful but could benefit greatly from another level of splitting so that apps could be put into a home country only vpn tunnel, switched to when opening. This would allow some apps that don't work under a vpn to work since geography often seems to be the issue. I realize this could mean a reconnect, but this ensures staying on vpn and not forgetting to re-enable it to the preferred default other country. When it switches, a second notification could effectively remind that a switch occurred (since the standard notification is there forever and so becomes background noise not paid attention to). A reroute notification would cover for the opted in use of this feature. Not sure if the best solution ro so many apps restricting vpn use, but many apps are no longer working under vpn, but many based on geography. 1/2 my daily apps are excluded via split tunneling it seems

    Split tunneling is extremely useful but could benefit greatly from another level of splitting so that apps could be put into a home country only vpn tunnel, switched to when opening. This would allow some apps that don't work under a vpn to work since geography often seems to be the issue. I realize this could mean a reconnect, but this ensures staying on vpn and not forgetting to re-enable it to the preferred default other country. When it switches, a second notification could effectively remind that a switch occurred (since the standard notification is there forever and so becomes… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Allow connecting via CLI as non-root

    Previously, I could run the CLI as my standard user on Arch without issue, so I added it to my ~/.zprofile, ensuring that I would always be connected to a VPN server. My login flow is to login to the TTY and then start a GUI from there.

    I updated my system on 2026-05-23, and since then, protonvpn fails with "unexpected error." If I open a terminal emulator after I start a GUI session and use the CLI from there, it prompts me for root privileges. I am the sole user of the laptop, but I do have a separate administrator account that I use solely for system maintenance. I should not have to use root credentials every time I log in.

    Previously, I could run the CLI as my standard user on Arch without issue, so I added it to my ~/.zprofile, ensuring that I would always be connected to a VPN server. My login flow is to login to the TTY and then start a GUI from there.

    I updated my system on 2026-05-23, and since then, protonvpn fails with "unexpected error." If I open a terminal emulator after I start a GUI session and use the CLI from there, it prompts me for root privileges. I am the sole user of the laptop, but I do have a… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. ability to use the vpn extension or app to indicate if a website has one of proton's ip banned due to other user's abuse

    WARNING the core ideea is people who are ABUSING proton vpn. Please be very very carfull because i am talking about people who abuse

    You visit a website? it's blocked? why? abuse

    well then to click on the extension or app and it will register it.

    then, proton will have a records that, Lumo, can have a look around and find who is who without invading the privacy of anyone who is serious.

    once found, said person, even if using proton pass, to recive a warning from Lumo, because again, 100% privacy, on said person's main account.

    Like this anyone who was flagged by mistake can contact proton custom without any privacy issues.

    and anyone who abuses proton will now avoid paying money since their name will be on it to a degree or other.

    as in, a profile is build up. And people with malicious intention want to avoid that at all cost.

    and if they use proton free, there to be different ip from the one for people who pay... as if, as i said, such people want to stay away, they won't use the free proton vpn when others are "better".

    so at least we get rid of them via: website is blocked? we flag it. Lumo checks what users where the ones who recently where on that website, if they are pass or main account, and, even if lumo does not disclouse he email or otherwise, can report findings of abuse. And Proton's CS can then decide if there is enough for a warning, if not even ban, or even police or simple to just "rember" that account to build up a case of, if any further mesurments are even needed.

    WARNING: as i mentioned, i am talking JUST about people who abuse proton VPN

    also, me mentioning Lumo is because of how someone can "monitor" while 100% privacy.

    as in, no, it's not 2 or more ideeas. it's just one, the one for flagging if an IP is banned.

    So? we flag, proton recives the report? what can now proton do without affecting the 100% privacy trust? This is why i mentioned Lumo, because it's not possible to compromise privacy if people are involved.

    WARNING the core ideea is people who are ABUSING proton vpn. Please be very very carfull because i am talking about people who abuse

    You visit a website? it's blocked? why? abuse

    well then to click on the extension or app and it will register it.

    then, proton will have a records that, Lumo, can have a look around and find who is who without invading the privacy of anyone who is serious.

    once found, said person, even if using proton pass, to recive a warning from Lumo, because again, 100% privacy, on said person's main account.

    Like this anyone… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. VPN Status on Android Control Panel

    Instead of having the status of the connected VPN shown through notifications only. Can we also have the option to expand the quick connect button in the control panel of Android to show the status.

    I don't need to have it keep showing in my notifications but would like to be able to check once in awhile by swiping down to my control panel.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. WireGuard Stealth Mode API/Proxy Support for Third-Party Clients

    Hello Proton VPN Support Team,

    I am a Proton VPN user on Android and I have been using the WireGuard configuration profiles exported from the Proton VPN dashboard with a third-party client (RethinkDNS), which provides per-app firewall and DNS filtering and profiles (e.g. with NextDNS) features alongside VPN functionality.

    I have identified a specific issue with mobile network connectivity:

    • When I establish a WireGuard tunnel over Wi-Fi and then switch to a 5G mobile network, the existing session continues without interruption.
    • However, if I attempt to initiate a new WireGuard connection directly over 5G, the handshake fails entirely.

    This behavior strongly suggests that my mobile carrier performs Deep Packet Inspection (DPI) and blocks the initial WireGuard handshake packets — which have a well-known, identifiable signature — on 5G networks, while already-established UDP flows are allowed to pass.

    The Proton VPN application itself solves this via its Stealth (WireGuard over TCP) mode, which obfuscates traffic and bypasses DPI effectively. However, this feature is not available through the standard WireGuard configuration profiles exported from the dashboard, as it relies on a proprietary obfuscation layer that cannot be expressed in the standard WireGuard config format.

    My request:
    Would it be possible to provide an officially supported method for enabling Stealth/TCP mode in third-party WireGuard-compatible clients? This could be achieved through, for example:
    - A documented SOCKS5 or HTTP proxy endpoint on the Proton infrastructure that wraps WireGuard in TCP, usable alongside standard WireGuard profiles;
    - Or an open-source implementation of the Stealth obfuscation layer that third-party apps could integrate.

    This would greatly benefit users who rely on third-party clients for functionality not available in the official Proton VPN app, while still needing to bypass carrier-level DPI on mobile networks.

    Thank you for your time and consideration.

    Best regards

    Hello Proton VPN Support Team,

    I am a Proton VPN user on Android and I have been using the WireGuard configuration profiles exported from the Proton VPN dashboard with a third-party client (RethinkDNS), which provides per-app firewall and DNS filtering and profiles (e.g. with NextDNS) features alongside VPN functionality.

    I have identified a specific issue with mobile network connectivity:

    • When I establish a WireGuard tunnel over Wi-Fi and then switch to a 5G mobile network, the existing session continues without interruption.
    • However, if I attempt to initiate a new WireGuard connection directly over 5G, the handshake fails entirely.

    This behavior… more

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating