We built ProtonVPN with extra security features to make it better at protecting your privacy than an ordinary VPN.
When you use ProtonVPN to browse the web, your Internet connection is encrypted. By routing your connection through encrypted tunnels, ProtonVPN's advanced security features ensure that an attacker cannot eavesdrop on your connection. It also allows you to access websites that might be blocked in your country.
ProtonVPN's Secure Core architecture gives our secure VPN service the unique ability to defend against network-based attacks. Secure Core protects your connection by routing your traffic through multiple servers before leaving our network. This means an advanced adversary who can monitor the network traffic at the exit server will not be able to discover the true IP address of ProtonVPN users, nor match browsing activity to that IP.
We use only the highest strength encryption to protect your Internet connection. This means all your network traffic is encrypted with AES-256, key exchange is done with 4096-bit RSA, and HMAC with SHA384 is used for message authentication.
We have carefully selected our encryption cipher suites to only include ones that have Perfect Forward Secrecy. This means that your encrypted traffic cannot be captured and decrypted later if the encryption key from a subsequent session gets compromised. With each connection, we generate a new encryption key, so a key is never used for more than one session.
We use only VPN protocols which are known to be secure - IKEv2/IPSec and OpenVPN. ProtonVPN does not have any servers that support PPTP and L2TP/IPSec, even though they are less costly to operate. By using ProtonVPN, you can be confident that your VPN tunnel is protected by the most reliable protocol.
In addition to strong technical security, ProtonVPN also benefits from strong legal protection. Because we are based in Switzerland, ProtonVPN is protected by some of the world's strongest privacy laws and remains outside of US and EU jurisdiction. This means that unlike VPN providers based in a fourteen eyes country, we cannot be coerced into spying on our users.
We are one of the only VPN companies that provide transparency so you know exactly who is running the service. Our team has a long track record in security, having previously built ProtonMail - the world's largest encrypted email service. Whether it is challenging governments, educating the public, or training journalists, we have a long history of fighting for privacy online and contributing to the open source community.
We have gone to extreme lengths to protect ProtonVPN's Secure Core servers to ensure their security. Critical infrastructure in Switzerland is located in a former Swiss army fallout shelter 1000 meters below the surface. Similarly, our Iceland infrastructure resides in a secure former military base. Our servers in Sweden are also located in an underground data center. By shipping our own equipment to these locations, we ensure that our servers are also secure at the hardware level.
Under Swiss law, we are not obligated to save any user connection logs, nor can we be forced to perform targeted logging on specific users. This allows us to ensure that your private browsing history does, in fact, stay private and cannot be turned over to a third-party under any circumstances. Our no logs policy applies to all our users, including anyone using our free VPN.
ProtonVPN doesn't just protect your browsing traffic, we also protect your DNS queries. By routing your DNS queries through the encrypted tunnel and not relying on third-party DNS providers, we ensure that your browsing activity cannot be exposed by leaks from DNS queries.
ProtonVPN applications offer a built-in Kill Switch feature or the Always-on VPN feature. In the event that you lose connection with the VPN server, Kill Switch blocks all network traffic, while Always-on automatically re-establishes a connection to a VPN server. These features prevent a VPN server disconnect from inadvertently compromising your privacy by revealing your true IP address.
ProtonVPN comes with Tor support built-in. Through our VPN servers that support Tor, you can route all of your traffic through the Tor anonymity network and also access dark web sites. This provides a convenient way to access Onion sites with just a single click.
We respect your privacy so no personal identifying information is required to obtain a ProtonVPN account. You can sign up with an anonymous ProtonMail email account and use our anonymous VPN without disclosing your identity.
For optimal performance, we use only high-speed servers. All ProtonVPN servers have at minimum 1 Gbps bandwidth, and many of our servers also utilize 10 Gbps connections. This means that even though we utilize only the strongest encryption, ProtonVPN also provides blazing fast speeds.
We understand that it is important for security technology to be easy to use. We have designed the ProtonVPN applications to have a simple and intuitive user interface so that browsing privately and anonymously can be done with a single click. Additionally, you can create custom connection profiles which automatically protect your device whenever you connect to the internet.