64-bit
innomachine scopevpn.protondownload.com · publisher-owned- File name
- ProtonVPN_v5.1.7_x64.exe
- SHA-256
- ab8c87d7db3cb76271df72186c1af0831362671b145acc449a8443a415379c8a
by Proton AG · GPL-3.0
High-speed Swiss VPN that safeguards your privacy.
These URLs are the ones Proton AG declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Proton AG published. Delete it.
Windows · PowerShell
Get-FileHash "ProtonVPN_v5.1.7_x64.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "ProtonVPN_v5.1.7_x64.exe"Expected output
ab8c87d7db3cb76271df72186c1af0831362671b145acc449a8443a415379c8a
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-3.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from protondownload.com, which is a domain we have tied to Proton AG.
Every one of the 2 installers on this page comes with the SHA-256 Proton AG declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Proton.ProtonVPN --exactUpgrade later
winget upgrade --id Proton.ProtonVPNWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Proton VPN, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Proton VPN version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Proton AG and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Proton VPN — just other entries, each with its own official URL and published hash.