Open Settings → Protocol to change the VPN protocol Proton VPN uses. Your selection is saved when you navigate back; a reconnect is required for it to take effect on an active connection.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/ProtonVPN/android-app/llms.txt
Use this file to discover all available pages before exploring further.
If a profile overrides the global protocol setting, a banner at the top of Settings shows which profile is active. The protocol shown in the row reflects the profile’s setting, not your global preference.
Available protocols
- Smart (recommended)
- WireGuard UDP
- WireGuard TCP
- Stealth (WireGuard TLS)
Smart protocol automatically selects the best available protocol for your current network. It tries each protocol in order of performance and falls back to options that work on restricted networks.Best for: most users who want reliable connectivity without manual configuration.Smart is the default selection and is marked Recommended in the protocol list.
NAT type
The NAT type setting controls how Proton VPN handles Network Address Translation. You can find it in Settings → Advanced → NAT type.| NAT type | Description |
|---|---|
| Strict (default) | Randomized NAT. Provides the strongest privacy by assigning a different source port for each connection. |
| Moderate | Non-randomized NAT. Uses a consistent source port, which improves compatibility with peer-to-peer applications and online games that require NAT traversal. |
LAN connections
The Allow LAN connections toggle is in Settings → Advanced. When enabled, traffic to private IP ranges (such as192.168.x.x and 10.x.x.x) bypasses the VPN tunnel, letting you reach printers, NAS devices, smart home hubs, and other local devices while the VPN is connected.
When LAN connections are enabled, an additional Allow direct connections checkbox becomes available. When checked, the app allows devices on your local network to initiate connections back to your device — useful if you are running a local server.
LAN connections require a paid Proton VPN plan. A reconnect is required after toggling this setting.
How protocol choice affects performance
| Concern | Recommended protocol |
|---|---|
| Lowest latency / highest throughput | WireGuard UDP |
| Reliable connection on restrictive networks | WireGuard TCP |
| Bypassing censorship or firewalls | Stealth (WireGuard TLS) |
| Automatic best-effort | Smart |