由瑞士隐私法保护的 VPN
真正无日志，永久免费可用
A VPN Protected by Swiss Privacy Law
Truly No-Logs, Free Forever
由 CERN 科学家创立，采用 Secure Core 安全核心架构，通过隐私友好国家服务器中转流量，确保您的在线活动不被追踪。免费方案永久可用，无需信用卡。
Founded by CERN scientists, featuring Secure Core architecture that routes traffic through privacy-friendly countries. Free plan available forever — no credit card required.
无需信用卡 · 30天退款保证
No Credit Card · 30-Day Money-Back Guarantee
🌍 已有超过 🌍 Over 5,000,000+
用户加入 ProtonVPN users trust ProtonVPN
为什么选择 ProtonVPN
Why Choose ProtonVPN
军事级加密
Military-Grade Encryption
采用 AES-256 与 ChaCha20 加密算法，完美前向安全性，确保您的数据在任何网络环境下都无法被破解。
AES-256 and ChaCha20 encryption with perfect forward secrecy ensures your data remains unbreakable on any network.
严格无日志政策
Strict No-Logs Policy
经独立审计验证，我们不记录任何连接日志或活动日志。您的在线行为完全属于您自己。
Independently audited and verified — we record zero connection or activity logs. Your online actions remain yours alone.
Secure Core 架构
Secure Core Architecture
流量通过瑞士、冰岛等隐私友好国家服务器中转，即使出口服务器被攻破，您的真实 IP 也不会泄露。
Traffic routed through privacy-friendly countries like Switzerland and Iceland — your real IP stays hidden even if exit servers are compromised.
全球高速服务器
Global High-Speed Servers
覆盖 70+ 国家，3000+ 服务器，全支持 10 Gbps 带宽，无论身在何处都能享受极速连接。
70+ countries, 3000+ servers, all supporting 10 Gbps bandwidth for blazing-fast connections wherever you are.
解锁流媒体与 P2P
Streaming & P2P Support
支持 Netflix、Disney+、BBC iPlayer 等主流平台，无带宽限制，P2P 文件共享完全自由。
Unlock Netflix, Disney+, BBC iPlayer and more. No bandwidth limits, complete P2P freedom.
全平台多设备支持
All Platforms & Devices
Windows、macOS、Linux、iOS、Android、浏览器扩展全覆盖，一个账号可同时连接 10 台设备。
Windows, macOS, Linux, iOS, Android, browser extensions — connect up to 10 devices simultaneously.
全球服务器实时网络
Global Server Network
覆盖全球 70+ 国家，实时负载状态一目了然
70+ countries worldwide, real-time load status at a glance
选择适合您的方案
Choose Your Plan
免费
Free
¥0$0
永久免费
Forever Free
- 1 台设备连接
- 1 device connection
- 中等速度
- Medium speed
- 3 个国家服务器
- 3 country servers
- 无日志保护
- No-logs protection
无需信用卡
No credit card
推荐Recommended
Plus
¥30$4.99/mo
按年计费
Billed annually
- 10 台设备同时连接
- 10 simultaneous devices
- 高速连接（10 Gbps）
- High-speed (10 Gbps)
- 70+ 国家服务器
- 70+ country servers
- 流媒体 & P2P 支持
- Streaming & P2P support
- Secure Core 访问
- Secure Core access
30天退款保证
30-day money-back
Unlimited
¥60$9.99/mo
按年计费
Billed annually
- Plus 全部功能
- All Plus features
- Proton 全家桶
- Proton ecosystem
- 优先客服支持
- Priority support
- 最高速度无限制
- Maximum speed
30天退款保证
30-day money-back
深度安全：我们的承诺
Deep Security: Our Commitment
Secure Core — 双重保护
Secure Core — Double Protection
您的流量首先经过位于瑞士或冰岛的 Secure Core 服务器进行加密中转，然后再到达目标出口服务器。即使出口服务器被攻破，攻击者也无法追溯到您的真实 IP 地址。这一架构专为抵御高级网络监控而设计。
Your traffic is first encrypted and routed through Secure Core servers in Switzerland or Iceland before reaching the exit server. Even if exit servers are compromised, attackers cannot trace your real IP address.
了解 Secure Core 详情 →Learn About Secure Core →| 对比项Feature | ProtonVPN | 其他VPN AOther VPN A | 其他VPN BOther VPN B |
|---|---|---|---|
| 无日志政策No-Logs Policy | ✓ 已审计Audited | ✗ | ✗ |
| Secure CoreSecure Core | ✓ | ✗ | ✗ |
| 开源透明Open Source | ✓ | ✗ | ✓ |
| 瑞士法律管辖Swiss Jurisdiction | ✓ | ✗ | ✗ |
用户与媒体评价
User & Media Reviews
“ProtonVPN 是我用过最值得信赖的 VPN 服务。开源透明和瑞士隐私法让我完全放心。Secure Core 功能是杀手级特性。”
“ProtonVPN is the most trustworthy VPN I’ve ever used. Open source transparency and Swiss privacy laws give me complete peace of mind.”
“作为一个经常出国旅行的人，ProtonVPN 的全球服务器网络让我在任何地方都能安全访问我需要的内容，速度从未让我失望。”
“As a frequent traveler, ProtonVPN’s global server network lets me securely access everything I need anywhere. The speed never disappoints.”
“免费方案没有广告、没有日志，这简直不可思议。我用了一段时间后毫不犹豫升级到了付费方案来支持他们。”
“A free plan with no ads and no logs is unbelievable. I used it for a while and upgraded to a paid plan without hesitation to support them.”
常见问题详解
Frequently Asked Questions
以下为6个核心问题的详细分步解答，帮助您全面了解 ProtonVPN
Detailed step-by-step answers to 6 core questions about ProtonVPN
🔒 ProtonVPN 如何保护我的在线隐私？
- 第一步：建立加密隧道 — 当您启动 ProtonVPN 并连接到服务器时，应用程序首先在您的设备与 VPN 服务器之间建立一条经过 AES-256 加密的隧道。这意味着您的互联网服务提供商、网络管理员或公共 Wi-Fi 上的任何窃听者都无法读取您的数据内容。加密隧道确保所有传输信息都被转化为无法辨认的密文。
- 第二步：隐藏真实 IP 地址 — 连接建立后，您访问任何网站或在线服务时，对方看到的将是 ProtonVPN 服务器的 IP 地址而非您的真实 IP。这有效防止了网站、广告商和第三方追踪器通过 IP 地址来定位您的地理位置、构建您的行为画像或关联您的多设备活动记录。
- 第三步：严格无日志政策执行 — ProtonVPN 在任何服务器上都不记录连接日志或活动日志。这意味着我们不会存储您访问过哪些网站、使用了哪些服务、传输了多少数据或您的原始 IP 地址信息。这一政策已通过独立第三方安全审计机构 SEC Consult 的全面验证。
- 第四步：Secure Core 双重路由 — 对于需要最高级别隐私保护的用户，Secure Core 功能将您的流量首先发送到位于瑞士或冰岛的专用服务器，经过额外加密后再转发到目标出口服务器。这样即使出口服务器所在的第三方数据中心被攻破，攻击者也只能追溯到 Secure Core 服务器的 IP。
- 第五步：DNS 泄露防护与 Kill Switch — 我们的应用程序内置了 DNS 泄露防护机制，确保所有域名查询请求都通过加密隧道进行，不会意外泄露给本地 DNS 服务器。同时，Kill Switch 功能在 VPN 连接意外断开时自动阻断所有网络流量，防止任何数据在未加密状态下传输。
- 第六步：瑞士法律保障与透明报告 — ProtonVPN 总部位于瑞士，受瑞士联邦数据保护法管辖，不属于任何国际监控联盟。我们定期发布透明度报告，公开所有法律请求及其处理结果。由于我们不存储任何日志数据，即使收到法律请求也无法提供用户活动信息。
⚡ ProtonVPN 的连接速度如何？
- 第一步：全网络 10 Gbps 带宽 — ProtonVPN 在全球范围内部署了支持 10 Gbps 带宽的高速服务器。这意味着每台服务器都具备充足的网络容量来处理大量并发用户的流量，不会因为带宽瓶颈而导致速度下降。我们的服务器硬件经过精心挑选和优化配置。
- 第二步：智能服务器选择算法 — 应用程序内置了智能服务器推荐功能，会根据您当前的网络状况、地理位置和服务器的实时负载自动推荐连接速度最快的服务器。您只需点击”快速连接”按钮，系统就会为您选择最优路径。
- 第三步：WireGuard 与 VPN Accelerator — 我们全面支持新一代 WireGuard 协议，其精简的代码库和高效的加密算法使得连接建立速度极快，数据处理延迟极低。此外，我们自研的 VPN Accelerator 技术可将连接速度提升高达 400%。
- 第四步：全球分布式骨干网络 — 我们在北美、欧洲、亚洲、大洋洲和南美均设有服务器节点，并与多家顶级网络运营商建立了直接对等互联关系。这种分布式架构确保无论您身在何处，都能找到延迟最低的服务器接入点。
- 第五步：无带宽限制与无节流 — 付费用户享有完全无限制的带宽使用权限，我们不会对任何类型的流量进行限速或节流处理。无论是观看 4K 流媒体视频、进行大文件 P2P 下载还是参与实时视频会议，都能获得稳定一致的网络体验。
- 第六步：实时负载监控与动态扩展 — 我们的网络运营团队全天候监控所有服务器的负载状况。当某台服务器的负载超过预设阈值时，系统会自动将新连接引导至负载较低的服务器。同时我们会根据用户增长趋势持续扩容服务器集群。
🎬 如何使用 ProtonVPN 解锁流媒体内容？
- 第一步：选择合适的服务器位置 — 打开 ProtonVPN 应用程序后，浏览服务器列表并选择目标内容所在国家的服务器。例如要观看美国 Netflix，就连接到美国的 Plus 服务器。服务器列表会清晰标注哪些服务器针对流媒体进行了优化。
- 第二步：连接到优化服务器 — 点击选定的服务器进行连接。ProtonVPN 的 Plus 和 Unlimited 方案提供专门针对流媒体平台优化的服务器，这些服务器经过特殊配置以确保与主流平台的兼容性，连接成功率远高于普通 VPN 服务器。
- 第三步：清除浏览器缓存与 Cookie — 在首次连接新服务器后，建议清除浏览器的缓存和 Cookie 数据。这是因为流媒体平台可能通过之前存储的缓存信息识别出您的地理位置变化，清除这些数据可以避免定位冲突导致的访问失败。
- 第四步：登录流媒体平台并验证 — 打开您想观看的流媒体平台（如 Netflix、Disney+ 或 BBC iPlayer），使用您的账号正常登录。此时平台会读取您当前连接的服务器 IP 地址并将其识别为目标国家的用户，从而解锁对应地区的内容库。
- 第五步：切换服务器以访问不同地区内容 — 如果您想观看另一个国家独有的内容，只需断开当前连接并选择新目标国家的服务器重新连接即可。ProtonVPN 支持在 70 多个国家之间自由切换，每次切换后刷新流媒体页面即可加载新内容。
- 第六步：遇到问题时使用故障排除指南 — 如果某个服务器暂时无法解锁特定平台，可以尝试切换到同一国家的其他服务器。我们的支持中心提供了针对各平台的详细故障排除指南，涵盖常见错误代码和解决方案，帮助您快速恢复正常观看。
📱 如何在多个设备上设置 ProtonVPN？
- 第一步：创建 Proton 账户并选择方案 — 访问 ProtonVPN 官网注册一个免费账户，或根据需要选择 Plus/Unlimited 付费方案。付费方案支持同时在最多 10 台设备上使用同一个账户，涵盖您所有的手机、电脑和平板设备。
- 第二步：在各设备上下载官方应用 — 根据您的设备类型，从官方应用商店下载 ProtonVPN 应用。Windows 和 macOS 用户可从官网下载，iOS 用户从 App Store 获取，Android 用户从 Google Play 或直接下载 APK，Linux 用户可通过官方仓库安装。
- 第三步：使用同一账户登录所有设备 — 在每台设备上打开已安装的 ProtonVPN 应用，使用您注册时设置的用户名和密码登录。登录后应用会自动同步您的方案权限和配置偏好，无需逐台进行复杂的个性化设置。
- 第四步：配置浏览器扩展（可选） — 对于需要在浏览器层面进行更精细控制的用户，可以安装 ProtonVPN 的 Chrome 或 Firefox 浏览器扩展。扩展程序与桌面应用协同工作，允许您直接在浏览器工具栏中切换服务器和管理连接状态。
- 第五步：设置路由器级 VPN 保护（高级） — 技术用户可以将 ProtonVPN 配置在兼容的路由器上，这样连接到该路由器的所有设备（包括智能电视、游戏主机和 IoT 设备）都将自动受到 VPN 保护，且不占用设备连接数配额。
- 第六步：管理设备连接与安全监控 — 登录 ProtonVPN 官网的账户管理面板，您可以查看当前所有已连接设备的列表，远程断开不再使用的设备连接。面板还会显示安全相关的通知和账户活动摘要。
🆓 ProtonVPN 免费方案有哪些功能？
- 第一步：永久免费且无广告 — ProtonVPN 的免费方案是真正意义上的永久免费，没有任何隐藏费用，也不会在应用内展示广告或出售用户数据来盈利。这是由付费用户的订阅收入来支撑的可持续免费模式。
- 第二步：无日志政策完全适用 — 免费用户享有与付费用户完全相同的无日志保护。我们不会因为您是免费用户就降低隐私保护标准，所有服务器均不记录连接日志或活动日志，这一点已通过独立审计验证。
- 第三步：访问 3 个国家的服务器 — 免费方案提供对美国、荷兰和日本三个国家服务器的访问权限。这些服务器位置经过精心选择，能够满足大多数用户的基本隐私保护需求和日常浏览使用场景。
- 第四步：中等速度但无带宽限制 — 免费用户享受中等连接速度，足以流畅进行网页浏览、社交媒体访问和标清视频播放。重要的是，我们对免费用户也不设月度带宽上限或数据流量限制。
- 第五步：单设备连接支持 — 免费方案允许在一台设备上使用 ProtonVPN。您可以在手机和电脑之间切换使用，但同一时间只能有一台设备保持 VPN 连接状态。
- 第六步：随时升级至付费方案 — 当您需要更多功能（如更快的速度、更多的服务器选择、流媒体支持和多设备连接）时，可以随时在账户设置中升级到 Plus 或 Unlimited 方案。升级过程即时生效，无需重新安装应用。
🛡️ ProtonVPN 的 Secure Core 架构如何工作？
- 第一步：理解传统 VPN 的潜在风险 — 传统 VPN 服务在用户设备和出口服务器之间建立直接加密连接。如果出口服务器所在的数据中心被恶意攻击者渗透或监控，用户的真实 IP 地址和浏览行为可能被关联分析，从而暴露隐私。
- 第二步：Secure Core 引入中间层保护 — Secure Core 在用户与出口服务器之间增加了一层专用保护服务器。这些服务器位于瑞士和冰岛——这两个国家拥有全球最强的隐私保护法律，并且 Proton 拥有对这些服务器的完全物理控制权。
- 第三步：流量首先路由至 Secure Core — 当您启用 Secure Core 功能后，您的加密流量不会直接发送到目标出口服务器，而是首先通过一条加密隧道传输到位于瑞士或冰岛的 Secure Core 服务器。这一步骤为您的连接增加了一层额外的加密保护。
- 第四步：Secure Core 服务器转发至出口节点 — 在 Secure Core 服务器内部，您的流量经过解密后立即在另一条独立加密隧道中重新加密，然后转发到您选择的目标出口服务器。由于 Secure Core 服务器完全由 Proton 控制，攻击者无法在此环节进行监控。
- 第五步：出口服务器完成最终连接 — 出口服务器接收来自 Secure Core 的加密流量，解密后代表您访问目标网站或服务。此时出口服务器只能看到 Secure Core 服务器的 IP 地址，而完全无法获知您的真实 IP 地址和设备信息。
- 第六步：全程多重加密保障 — 整个数据路径形成了三层保护：用户到 Secure Core 的加密、Secure Core 到出口服务器的加密、以及最终目标网站的 TLS 加密。即使攻击者控制了出口服务器，也只能获得完全无法追溯到用户真实身份的信息。
🔒 How Does ProtonVPN Protect My Online Privacy?
- Step 1: Establish Encrypted Tunnel — When you launch ProtonVPN and connect to a server, the application first establishes an AES-256 encrypted tunnel between your device and the VPN server. This means your internet service provider, network administrators, or any eavesdroppers on public Wi-Fi cannot read your data. The encrypted tunnel transforms all transmitted information into indecipherable ciphertext, ensuring end-to-end confidentiality.
- Step 2: Hide Your Real IP Address — Once the connection is established, any website or online service you visit will see the ProtonVPN server’s IP address instead of your real IP. This effectively prevents websites, advertisers, and third-party trackers from using your IP address to pinpoint your geographic location, build behavioral profiles, or correlate your activities across multiple devices.
- Step 3: Strict No-Logs Policy Enforcement — ProtonVPN does not record connection logs or activity logs on any server. This means we do not store information about which websites you visited, which services you used, how much data you transferred, or your original IP address. This policy has been comprehensively verified through an independent third-party security audit conducted by SEC Consult.
- Step 4: Secure Core Double Routing — For users requiring the highest level of privacy protection, the Secure Core feature first sends your traffic to dedicated servers located in Switzerland or Iceland. After additional encryption, the traffic is forwarded to the target exit server. This way, even if the exit server’s data center is compromised, attackers can only trace back to the Secure Core server’s IP.
- Step 5: DNS Leak Protection and Kill Switch — Our application includes built-in DNS leak protection mechanisms, ensuring all domain name query requests go through the encrypted tunnel and are not accidentally leaked to local DNS servers. Additionally, the Kill Switch feature automatically blocks all network traffic if the VPN connection unexpectedly drops, preventing any data from being transmitted unencrypted.
- Step 6: Swiss Legal Protection and Transparency Reports — ProtonVPN is headquartered in Switzerland, governed by Swiss Federal Data Protection Act, and is not part of any international surveillance alliance. We regularly publish transparency reports disclosing all legal requests and their outcomes. Since we store no log data, we cannot provide user activity information even when receiving legal requests.
⚡ How Fast Is ProtonVPN’s Connection Speed?
- Step 1: Network-Wide 10 Gbps Bandwidth — ProtonVPN has deployed high-speed servers supporting 10 Gbps bandwidth across the globe. This means each server has ample network capacity to handle large numbers of concurrent users without speed degradation due to bandwidth bottlenecks. Our server hardware is carefully selected and optimized for peak performance.
- Step 2: Smart Server Selection Algorithm — The application includes an intelligent server recommendation feature that automatically suggests the fastest-connecting server based on your current network conditions, geographic location, and real-time server load. Simply click the “Quick Connect” button and the system selects the optimal path for you.
- Step 3: WireGuard and VPN Accelerator — We fully support the next-generation WireGuard protocol, whose streamlined codebase and efficient encryption algorithms enable extremely fast connection establishment and minimal data processing latency. Additionally, our proprietary VPN Accelerator technology can boost connection speeds by up to 400%.
- Step 4: Globally Distributed Backbone Network — We have server nodes deployed across North America, Europe, Asia, Oceania, and South America, with direct peering relationships established with multiple top-tier network operators. This distributed architecture ensures you can always find the lowest-latency server access point regardless of your location.
- Step 5: No Bandwidth Limits or Throttling — Paid users enjoy completely unlimited bandwidth usage. We do not impose speed limits or throttling on any type of traffic. Whether watching 4K streaming videos, performing large P2P file downloads, or participating in real-time video conferences, you will experience stable and consistent network performance.
- Step 6: Real-Time Load Monitoring and Dynamic Scaling — Our network operations team monitors the load status of all servers around the clock. When a server’s load exceeds preset thresholds, the system automatically directs new connections to servers with lower utilization. We continuously expand our server clusters based on user growth trends.
🎬 How to Unlock Streaming Content with ProtonVPN?
- Step 1: Choose the Appropriate Server Location — Open the ProtonVPN application, browse the server list, and select a server in the country where your desired content is available. For example, to watch US Netflix, connect to a US Plus server. The server list clearly indicates which servers are optimized for streaming platforms.
- Step 2: Connect to an Optimized Server — Click on your selected server to establish a connection. ProtonVPN’s Plus and Unlimited plans offer servers specifically optimized for streaming platforms, configured to ensure compatibility with major services. These servers have significantly higher connection success rates than standard VPN servers.
- Step 3: Clear Browser Cache and Cookies — After connecting to a new server for the first time, it is recommended to clear your browser’s cache and cookie data. Streaming platforms may use previously stored cache information to identify your geographic location changes, and clearing this data helps avoid location conflicts that could cause access failures.
- Step 4: Log Into the Streaming Platform and Verify — Open the streaming platform you wish to watch (such as Netflix, Disney+, or BBC iPlayer) and log in normally with your account credentials. The platform will read your currently connected server’s IP address and recognize it as belonging to the target country, unlocking that region’s content library.
- Step 5: Switch Servers to Access Different Regional Content — If you want to watch content exclusive to another country, simply disconnect the current connection and reconnect by selecting a server in the new target country. ProtonVPN supports free switching among over 70 countries, and refreshing the streaming page after each switch will load the new content.
- Step 6: Use Troubleshooting Guide When Issues Arise — If a particular server temporarily cannot unlock a specific platform, try switching to another server in the same country. Our support center provides detailed troubleshooting guides for each platform, covering common error codes and solutions to help you quickly resume normal viewing.
📱 How to Set Up ProtonVPN on Multiple Devices?
- Step 1: Create a Proton Account and Choose a Plan — Visit the ProtonVPN official website to register a free account, or choose a Plus/Unlimited paid plan based on your needs. Paid plans support using the same account on up to 10 devices simultaneously, covering all your phones, computers, and tablets.
- Step 2: Download the Official App on Each Device — Depending on your device type, download the ProtonVPN app from official app stores. Windows and macOS users can download from the official website, iOS users from the App Store, Android users from Google Play or direct APK download, and Linux users can install via official repositories.
- Step 3: Log Into All Devices with the Same Account — Open the installed ProtonVPN app on each device and log in using the username and password you set during registration. After logging in, the app automatically syncs your plan permissions and configuration preferences without requiring complex per-device customization.
- Step 4: Configure Browser Extensions (Optional) — For users who need more granular control at the browser level, you can install ProtonVPN’s Chrome or Firefox browser extension. The extension works in tandem with the desktop application, allowing you to switch servers and manage connection status directly from the browser toolbar.
- Step 5: Set Up Router-Level VPN Protection (Advanced) — Technical users can configure ProtonVPN on compatible routers, so all devices connected to that router (including smart TVs, gaming consoles, and IoT devices) will automatically be protected by the VPN without counting against the device connection limit.
- Step 6: Manage Device Connections and Security Monitoring — Log into the ProtonVPN website’s account management panel to view a list of all currently connected devices, remotely disconnect idle device connections, and review security-related notifications and account activity summaries.
🆓 What Features Does ProtonVPN’s Free Plan Offer?
- Step 1: Truly Free Forever with No Ads — ProtonVPN’s free plan is genuinely free forever, with no hidden fees, no in-app advertisements, and no selling of user data to generate revenue. This sustainable free model is supported by the subscription revenue from paid users who value premium features.
- Step 2: Full No-Logs Policy Applies — Free users enjoy the exact same no-logs protection as paid users. We do not lower privacy standards for free users. All servers, regardless of which plan you use, record zero connection logs or activity logs, a fact verified through independent auditing.
- Step 3: Access to Servers in 3 Countries — The free plan provides access to servers in the United States, Netherlands, and Japan. These server locations have been carefully selected to meet most users’ basic privacy protection needs and everyday browsing scenarios.
- Step 4: Medium Speed with No Bandwidth Caps — Free users enjoy medium connection speeds, sufficient for smooth web browsing, social media access, and standard-definition video playback. Importantly, we do not impose monthly bandwidth caps or data transfer limits even on free users.
- Step 5: Single Device Connection Support — The free plan allows usage on one device at a time with ProtonVPN. You can switch between using it on your phone and computer, but only one device can maintain an active VPN connection simultaneously.
- Step 6: Upgrade to a Paid Plan Anytime — When you need more features such as faster speeds, more server choices, streaming support, and multi-device connections, you can upgrade to the Plus or Unlimited plan at any time through your account settings. The upgrade takes effect instantly without requiring app reinstallation.
🛡️ How Does ProtonVPN’s Secure Core Architecture Work?
- Step 1: Understanding the Potential Risks of Traditional VPNs — Traditional VPN services establish a direct encrypted connection between the user’s device and the exit server. If the data center hosting the exit server is infiltrated or monitored by malicious attackers, the user’s real IP address and browsing behavior could potentially be correlated and analyzed, exposing their privacy.
- Step 2: Secure Core Introduces an Intermediate Protection Layer — Secure Core adds a dedicated layer of protection servers between the user and the exit server. These servers are located in Switzerland and Iceland — two countries with the strongest privacy protection laws globally — and Proton maintains full physical control over these servers.
- Step 3: Traffic Is First Routed to Secure Core — When you enable the Secure Core feature, your encrypted traffic is not sent directly to the target exit server. Instead, it is first transmitted through an encrypted tunnel to a Secure Core server located in Switzerland or Iceland. This step adds an additional layer of encryption to your connection.
- Step 4: Secure Core Server Forwards to the Exit Node — Inside the Secure Core server, your traffic is decrypted and immediately re-encrypted within a separate independent encrypted tunnel, then forwarded to your chosen target exit server. Since the Secure Core servers are fully controlled by Proton, attackers cannot conduct surveillance at this stage.
- Step 5: Exit Server Completes the Final Connection — The exit server receives the encrypted traffic from Secure Core, decrypts it, and accesses the target website or service on your behalf. At this point, the exit server can only see the Secure Core server’s IP address and has absolutely no way to obtain your real IP address or device information.
- Step 6: Multi-Layer Encryption Throughout the Entire Path — The complete data path forms three layers of protection: encryption from user to Secure Core, encryption from Secure Core to the exit server, and TLS encryption to the final destination website. Even if an attacker gains control of the exit server, they can only obtain information that is completely untraceable to the user’s true identity.