Our iOS and iPadOS apps allow you to choose between the OpenVPN and IKEv2 protocols. If enabled, Smart Protocol will choose the best option for you. We strongly recommend using our iOS/iPad app on your iPhone or iPad.
It is also possible to manually configure OpenVPN on an iOS device using the OpenVPN Connect app.
Shortcut: To download the ProtonVPN OpenVPN config log in to account.protonvpn.com and go to the Download section on the left.
How to manually configure OpenVPN on iOS and iPadOS
1. Download the app
Install OpenVPN Connect from the App Store.
2. Download configuration files
Currently, you can download configuration files onto your device using two methods; via iTunes or directly from the iOS device. We describe both below. Download the configuration file directly on the iOS device
- Go to account.protonvpn.com on your iOS device and log in using your account details. If you do not yet have an account, you can sign up for a Free plan for iOS.
- Click on the menu icon in the top left. A new menu drawer will appear on the left
- Select the Downloads section
- In the “OpenVPN Configurations” section, select the platform (iOS) and Protocol (per default UDP is fine)
- Choose server configs and download the server that you would like to connect to. Note: If you download a ZIP to your iOS device, then you will not be able to import the configuration files in to the OpenVPN application so please download files separately.
Download the configuration file of the server that you would like to connect.
When downloaded, you will have to open the configuration file with OpenVPN.
Now click on Green + sign to add the OpenVPN connection to the application:
When the pop up appears for allowing OpenVPN to enable VPN connection, please click “Yes”
When asked for a username and password, please enter your OpenVPN username and password.
If you don’t know your OpenVPN credentials, check out how to find and set the OpenVPN username and password. Note this is not your account username or password. Please also note that use our NetShield DNS filtering feature, append the suffix +f1 to your username to block malware, or +f2 to block malware, ads, and trackers (for example 123456789+f2).
You can tick on “Save password” to connect you to the server without entering the password each time.
After entering your username and password, click “Add” at the top right corner.
Now when the profile with the OpenVPN connection information will be added, you will have to allow OpenVPN application to manage the connections on your phone, otherwise the VPN will not work. On the nest pop up message, click “Allow”
3. Connect to ProtonVPN
Tap on the server you wish to connect to and toggle the greyed-out button.
Once a connection is established, a VPN icon will appear in the status bar and you will see additional information about the connection when scrolled down.
To add more connections, simply repeat step 6 in the previous section with different configuration files for your choice of server or country. Secure Core servers are marked as xx-xx-01.protonvpn.com.xxxxxxx.ovpn.
To disconnect ProtonVPN Select the connection you are currently using and switch the toggle off.
You can find the application settings by clicking on 3 horizontal lines in top left corner and then clicking on “Settings”
Here you will find a lot of different settings for the connection and the application.
Reconnect on Wakeup – As simple as it sounds, it will reconnect you to the VPN server whenever you wake up your phone.
Seamless tunnel – This feature works like a killswitch and blocks the internet traffic whenever the connection is paused or in reconnecting state.
VPN protocol – Advised to keep as “Adaptive” since you choose the UDP/TCP while downloading and not int the application settings.
IPv6 – Suggested to keep at IPv4 Tunnel only since ProtonVPN does not yet support IPv6 protocol.
Connection Timeout – This setting will keep the connection re-trying to initiate for selected amount of time. We suggest using “Continuously retry”
Compression – Keep this setting on “No”
No need to tick on the AES-CBC cipher
Minimum TLS version – Keep it “Profile default” Since all of these settings are server sided and not altered by client.
DNS Fallback – Ticked or not, does not matter, since all DNS traffic is still going trough our VPN DNS servers.
Connect via – these settings allow you to restrict one type of internet connection that VPN can connect to. We suggest to keep it on “Any network” but your preferences may wary.
Network state detection — How should OpenVPN handle network state changes or network reconfiguration events where the network comes up, goes down, or transitions between WiFi and Cellular data?
- Active (default) : When connected, always attempt to reconnect after network reconfiguration events.
- Disabled : Don’t consider network state when initially connecting, and don’t use network state changes to trigger pause/reconnect/disconnect behavior.
Layer 2 reachability – This will ensure of the connections strength whenever moving around the access points when to switch back to the cellular network.
How to setup ProtonVPN on Android