If a profile overrides the global protocol setting, a banner at the top of Settings shows which profile is active. The protocol shown in the row reflects the profile’s setting, not your global preference.
Available protocols
- Smart (recommended)
- WireGuard UDP
- WireGuard TCP
- Stealth (WireGuard TLS)
Smart protocol automatically selects the best available protocol for your current network. It tries each protocol in order of performance and falls back to options that work on restricted networks.Best for: most users who want reliable connectivity without manual configuration.Smart is the default selection and is marked Recommended in the protocol list.
NAT type
The NAT type setting controls how Proton VPN handles Network Address Translation. You can find it in Settings → Advanced → NAT type.
Moderate NAT requires a paid Proton VPN plan. A reconnect is required after changing the NAT type.
LAN connections
The Allow LAN connections toggle is in Settings → Advanced. When enabled, traffic to private IP ranges (such as192.168.x.x and 10.x.x.x) bypasses the VPN tunnel, letting you reach printers, NAS devices, smart home hubs, and other local devices while the VPN is connected.
When LAN connections are enabled, an additional Allow direct connections checkbox becomes available. When checked, the app allows devices on your local network to initiate connections back to your device — useful if you are running a local server.
LAN connections require a paid Proton VPN plan. A reconnect is required after toggling this setting.
How protocol choice affects performance
If you are unsure which protocol to use, leave the setting on Smart and Proton VPN will handle the selection for you.