Neagent stands for the Network Extension Agent and it facilitates the connection from your Mac to our VPN servers. Since our VPN app for Mac uses the IKEv2/IPSec VPN protocol, allowing the neagent to access Keychain is a necessary step to create a secure VPN connection.
Before you can connect, the neagent must receive VPN authentication data stored in your Mac’s Keychain password management system. If you click Deny, the neagent will not connect to Keychain, and you will not be able to establish a VPN connection.
If you click Allow, this permission will only apply to your current session. You will need to give the neagent permission again the next time you try to connect to a VPN server.
If you click Always Allow, the ProtonVPN app will automatically access Keychain each time you log in, and you will not need to give the neagent permission upon each connection. (However, if you change your password, you will need to update the permission in the neagent popup window.)