Proton VPN has published its spring and summer 2026 roadmap, revealing a ground-up rebuild of its WireGuard implementation, the addition of its Stealth obfuscation protocol to Linux, and the introduction of post-quantum encryption across all platforms. The announcement marks one of the most significant infrastructure updates in the company's history and directly addresses the needs of users in countries with aggressive VPN blocking - Russia, China, Iran, and others.
WireGuard Rebuilt From Scratch
The centerpiece of the roadmap is a complete rewrite of Proton VPN's WireGuard client core. Rather than patching the existing implementation, the team has built a new architecture from the ground up. The stated goals are faster connection speeds, improved resistance to network censorship, and - critically - laying the foundation for post-quantum encryption (PQE).
Post-quantum encryption is currently in beta for Android and Windows users. The rollout to macOS, iOS, iPadOS, and Linux is expected over the coming months. This timing matters: intelligence agencies and state actors are already collecting encrypted VPN traffic today with the intention of decrypting it once quantum computing matures - a practice known as "harvest now, decrypt later." Post-quantum encryption addresses this threat before it becomes critical.
Stealth Protocol Finally Comes to Linux
Linux users have long been the underserved segment of VPN applications, and Proton VPN's roadmap directly addresses this gap. The company is bringing its Stealth protocol to Linux alongside a full redesign of the Linux GUI application, bringing it into visual parity with the macOS and Windows versions.
Stealth works by disguising VPN traffic as ordinary HTTPS traffic, making it indistinguishable from regular web browsing to deep packet inspection (DPI) systems. This is the primary technique used by governments in Russia, China, Iran, and similar countries to detect and block VPN connections at the network level. For Linux users who depend on command-line or GUI clients in these environments, Stealth support has been a critical missing feature.
The Linux release is in active development and is expected to ship alongside the new WireGuard core for that platform, meaning both features arrive together rather than in separate incremental updates.
Infrastructure and Business Features
Beyond the core protocol improvements, the roadmap includes expansion of the server network to over 20,000 servers across 145 countries. Windows users will gain refined connection preferences, including the ability to permanently exclude specific cities and countries from quick-connect selections - a feature already available on Android.
For enterprise and business customers, Proton VPN is introducing centralized web filtering policies, admin controls for Always-On VPN and split tunneling, and a real-time admin dashboard. These additions push Proton VPN further into the corporate network security space, competing more directly with dedicated business VPN solutions.
Why This Matters for Privacy in 2026
The combination of post-quantum encryption and Stealth for Linux is particularly significant given the current regulatory environment. The EU's ProtectEU strategy is pushing for mandatory data retention requirements for VPN providers. The UK's Children's Wellbeing Act requires VPN services to take "reasonable measures against circumvention." Intelligence agencies in the US and UK have publicly acknowledged collecting VPN traffic for future analysis.
Against this backdrop, a VPN provider investing in post-quantum encryption and advanced obfuscation is making a direct commitment to the long-term viability of private internet access. The question is no longer whether to use a privacy-focused service, but whether that service will remain technically effective as the threat landscape evolves.
For users who need reliable access to the open internet in restrictive environments, the combination of Stealth obfuscation, post-quantum encryption, and a rebuilt WireGuard core represents a meaningful upgrade to the practical security profile of a VPN connection.
