How to use NetShield Ad-blocker

NetShield Ad-blocker is a feature that protects your device and speeds up your browsing by blocking ads, trackers, and malware. When enabled, it offers you two levels of protection:

• The first level prevents your browser from loading resources from domains that host malware, spyware, or other malicious software. Malware protection is on by default.
• The second level blocks ads and the online trackers that adtech companies use to target you in addition to malware.

NetShield Ad-blocker is available to everyone on a paid Proton VPN plan.

Upgrade

How NetShield Ad-blocker protects you

Proton VPN has dedicated DNS servers that are active on each Proton VPN server you connect to and responsible for resolving all the domain requests for every resource (image, scripts, ads, etc.) for every website you visit and app you use. When you are connected to Proton VPN, your DNS requests are encrypted to prevent DNS leaks from exposing your browsing history.

Learn more about DNS leaks.

When you enable NetShield Ad-blocker, the DNS server will check these domains against databases of domains known to host malware, ads, or trackers. If any of the domains match, our DNS server will automatically block that resource from loading, keeping your device clean and speeding up your browsing.

NetShield Ad-blocker offers three levels of protection:

• Don’t block
  This means that NetShield is not active.
• Block malware only
  This prevents your browser from loading resources from domains that host malware, spyware, or other malicious software. Malware protection is enabled by default.
• Block malware, ads, & trackers
  This blocks malware as well as ads and the online trackers that advertisement companies use to target you.
  

Note: If you change your NetShield settings while you are connected to a VPN server, the VPN will need to disconnect and reconnect before your new settings are implemented.

How to use NetShield Ad-blocker on Windows, macOS, and Linux devices

You can control your NetShield protection level by clicking on the shield icon on the Proton VPN app home screen.

You can select the level of protection you like by clicking

• Don’t block
• Block malware only (default)
• Block malware, ads, & trackers

If you are already connected to a VPN server but change your NetShield Ad-blocker settings, your connection will be reestablished. During this reconnection, Proton VPN will automatically enable Kill Switch (even if you had turned it off previously) to prevent DNS leaks.

How to use NetShield Ad-blocker on Android devices

You can set your NetShield preferences by tapping Settings in the app menu. That will bring up the screen below:

By tapping the toggle switch on the right, you can turn NetShield Ad-blocker on or off. Once it is turned on, you can choose between two levels of protection:

• Block malware only (default)
  
• Block malware, ads, & trackers

You can also adjust NetShield Ad-blocker once you have set up your VPN connection. Once you have connected to a VPN server, the NetShield toggle switch will be the first option below the Connected to [your VPN server here] line. (In the example below, the user is connected to a VPN server in the United States.)

If you tap the toggle switch to turn NetShield Ad-blocker on, you will see a drop-down menu that lets you choose what level of protection you want for your current VPN connection.

If you adjust your NetShield Ad-blocker settings while connected to a VPN server, the Proton VPN app will ask your permission before it disconnects and reconnects.

Tap Reconnect to restart your VPN connection and implement your new NetShield settings.
Tap Cancel to maintain your current VPN connection and NetShield settings.

Note: If you have enabled the Android Private DNS feature in Android 10+, this takes precedence over Proton VPN NetShield. If you want to use NetShield, please ensure Private DNS is set to Off or Automatic.

How to use NetShield Ad-Blocker on iOS devices

You can set your NetShield Ad-blocker preferences by tapping the Settings button in the bottom corner. That will bring up the screen below:

Tap NetShield. The app will take you to another screen where you can choose which level of protection you would like:

• Off
• Block malware only (default)
• Block malware, ads, & trackers

You can also adjust NetShield Ad-blocker after you have set up your VPN connection. Once you have connected to a VPN server, your connection screen will show what level of NetShield protection you are currently using.

If you adjust NetShield Ad-blocker while you are connected, the Proton VPN app will ask your permission before it disconnects and reconnects.

Tap Continue to restart your VPN connection and implement your new NetShield settings.
Tap Cancel to maintain your current VPN connection and NetShield settings.

How to use NetShield Ad-blocker on Linux CLI

If you are using our Linux app with graphical user interface, the instructions are identical to other desktop platforms, as described above. Linux CLI users can choose between three levels of NetShield protection:

• Off
• Block malware only (default)
• Block malware, ads, & trackers

To turn NetShield off, you can use the command

protonvpn-cli netshield --off

or

protonvpn-cli ns --off

To block malware only, use the command

protonvpn-cli netshield --malware

or

protonvpn-cli ns --malware

To block malware, ads, and trackers, use the command

protonvpn-cli netshield --ads-malware

or

protonvpn-cli ns --ads-malware

NetShield Ad-blocker and Tor over VPN

When using Tor over VPN, DNS queries are handled by whatever DNS services the individual Tor nodes use, not by Proton. This means NetShield Ad-blocker does not work when using Tor over VPN.