Proton VPN

Name: Proton VPN
Author: Proton AG

by Proton AG · GPL-3.0

High-speed Swiss VPN that safeguards your privacy.

Record

These URLs are the ones Proton AG declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

innomachine scopevpn.protondownload.com · publisher-owned

innomachine scopevpn.protondownload.com · publisher-owned

Run this against the file on disk. If the output does not match the hash below, the file is not what Proton AG published. Delete it.

Windows · PowerShell

Get-FileHash "ProtonVPN_v5.1.6_x64.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "ProtonVPN_v5.1.6_x64.exe"

Expected output

907cea353a28ae0e8274375d49d8df318221c4e205f134575bd76c67b6fd64b1

Version on Homebrew: 6.5.1
Download URL: https://vpn.protondownload.com/download/macos/6.5.1/ProtonVPN_mac_v6.5.1.dmg
SHA-256: d50a49f14c50b0ef8ad68a89fc9685d5699ba2d4f92cb4c34317291b425435f8
Install with Homebrew: brew install --cask protonvpn

Signal	Finding	Points
SHA-256 hash published	2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	2 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	35 / 35
Served over HTTPS	2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	GPL-3.0A declared licence tells you what you are actually allowed to do with the software.	5 / 5

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/p/Proton/ProtonVPN/5.1.6
macOS cask: formulae.brew.sh/cask/protonvpn