Proton VPN: Fast & Secure VPN Security & Privacy Scorecard
Android
Crash and error data is shared with Sentry, and Google Play handles subscription billing. Aside from those two services, traffic, browsing activity, and usage patterns stay on-device and are not shared with advertising or analytics platforms.
Best for
Privacy-minded users who want encrypted browsing
Findings
- 0 critical
- 0 high
- 2 medium
- 4 low
- 6 info
1 issue identified across security and privacy analysis.
Top security issues
- Unencrypted VPN Connection History Database
- Conditional SSL Error Bypass with Certificate Pinning
- JavaScript Enabled in Human Verification WebView
Top privacy issues
- Unencrypted VPN Connection History Database
- Unencrypted Split Tunneling Configuration
Full analysis
Proton VPN: Fast & Secure VPN
Version: 5.16.83.0 (Build 605168300)
Platform: Android
Scan Date: March 5, 2026
What This Means for You
Crash and error data is shared with Sentry, and Google Play handles subscription billing. Aside from those two services, traffic, browsing activity, and usage patterns stay on-device and are not shared with advertising or analytics platforms.
Recommendation: Very Secure
Best For: Privacy-minded users who want encrypted browsing
Key Findings
Data Security - 1 finding (1 medium)
Network Security - 1 finding (1 low)
Code Safety - 0 findings
Privacy - 1 finding (1 medium)
Privacy Concerns
What Data is Collected
This app collects a narrow slice of data. When the app encounters an error, a crash report is sent to Sentry so the developer can fix problems. Billing and subscription details are handled through Google Play.
Third-Party Data Sharing
User information reaches two external services:
- Sentry - receives crash and error diagnostics when the app encounters a problem
- Google Play Billing - processes subscription payments on behalf of the developer
Browsing activity, connection history, and usage patterns do not reach advertising networks or behavioral profiling services.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 94/100 |
| Privacy | 87/100 |
| Data Security | 88/100 |
| Network Security | 99/100 |
| Code Safety | 99/100 |
| Data Collection | 98/100 |
| Data Sharing | 100/100 |
| User Control | 98/100 |
Positive Security Features
- Encrypts internet traffic using WireGuard, a modern protocol with a strong and well-reviewed security track record
- Supports biometric login (fingerprint or face recognition) to protect access to the account on the device
- Implements FIDO2 standards, enabling strong hardware-backed authentication options
- Uses Certificate Transparency checks to protect against fraudulent certificates that could otherwise intercept the connection
Areas for Improvement
- Some data stored locally on the device could be protected more strongly, which would reduce risk if the device were ever accessed physically without permission.
- A minor refinement to how secure connections are verified would close a small theoretical gap and further strengthen protection while connected.
- A modest amount of usage data is collected that, while not linked to advertising, could be scoped more narrowly to reduce the overall data footprint.
About This Analysis
This scorecard is produced through automated static analysis of the app's code and structure. Scores reflect the app's privacy and security posture at the time of the scan.
App Details
- Package ID: ch.protonvpn.android
- Version: 5.16.83.0 (Build 605168300)
- Scan Date: March 5, 2026
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #6 (current) | 90/100 |