ProtonVPN App 4.2 setup guide revisions

Go back to topic: ProtonVPN App 4.2 setup guide

  1. v5 anchor; v5 full version
  2. v4 anchor; v4 full version
  3. v3 anchor; v3 full version
  4. v2 anchor; v2 full version

Revision #5

Edited on
2025-01-20
Edited by user
solene
# Optional hardening: Avoid DNS leaks > :information_source: You may also want to force using a defined DNS server (9.9.9.9 in the current example) and blocking all other DNS servers (this avoids dns leaks) # Optional hardening: Avoid DNS leaks when no killswitch. > :information_source: If you did not setup the killswitch, you may want to redirect all DNS queries to a custom server (9.9.9.9 in the current example) and blocking all other DNS servers.

Revision #4

Edited on
2024-03-06
Edited by user
solene
:warning: **The App killswitch doesn't work!** You need to manually configure one if you need it. > :information_source: You may want to force all qubes traffic to go through the VPN and block non-VPN traffic. ProtonVPN app offers a killswitch, but it doesn't seem to work. If it was working, the app could still crash and the killswitch wouldn't be guaranteed to work. > :information_source: You may want to force all qubes traffic to go through the VPN and block non-VPN traffic. ProtonVPN app offers a killswitch. However, if the app crash, the killswitch wouldn't be guaranteed to work. Here is how to make it more secure.

Revision #3

Edited on
2024-01-12
Edited by user
solene
- If you get a prompt asking for a keyring password (by the qube), this is an extra linux security feature that locks program passwords in a keyring. It's not really useful in Qubes OS and you can just accept with an empty password, or use a password if you prefer. - If you get a prompt asking for a keyring password (by the qube), this is an extra linux security feature that keep program passwords in a keyring. It seems that you need to use it (by putting a password for the keyring) otherwise ProtonVPN won't keep credentials...
- Configure the App as you want **NOTE: for some reasons, it doesn't save credentials upon reboot, I don't know if this is normal behavior...** # Hardening (optional) ## Killswitch > :information_source: You may want to force all qubes traffic to go through the VPN and block non-VPN traffic. ProtonVPN app offers a killswitch, but if the app crash the killswitch isn't guaranteed to still work. - Configure the App as you want # Killswitch configuration :warning: **The App killswitch doesn't work!** You need to manually configure one if you need it. > :information_source: You may want to force all qubes traffic to go through the VPN and block non-VPN traffic. ProtonVPN app offers a killswitch, but it doesn't seem to work. If it was working, the app could still crash and the killswitch wouldn't be guaranteed to work.
## Avoid DNS leaks # Optional hardening: Avoid DNS leaks

Revision #2

Edited on
2024-01-12
Edited by user
solene
If you want to setup a VPN using WireGuard without the App, see https://forum.qubes-os.org/t/wireguard-vpn-setup/19141 A cool thing with ProtonVPN is that they have a Free offer, although it comes with limitations it's nice. They seem also a legit service to use as per the trustable source https://www.privacyguides.org/en/vpn/ If you want to set up a ProtonVPN using WireGuard without the App, see https://forum.qubes-os.org/t/wireguard-vpn-setup/19141
- Give it 600 MB of memory minimum - Give it 800 MB of memory minimum
- `mkdir ~/.config/autostart` - `ln -s /usr/share/applications/protonvpn-app.desktop .config/autostart/`