Proton VPN Spring/Summer 2026 Roadmap: A New WireGuard Core and the Long Wait for Post-Quantum

Proton VPN just published its Spring/Summer 2026 roadmap, and there is a lot to unpack. The headline is a rebuilt WireGuard codebase already in beta. The fine print is that post-quantum encryption is still not live, and the gap with competitors is growing.

Here is what is coming, what it means in practice, and where Proton honestly still needs to catch up.

A brand-new WireGuard codebase is the real news

Proton VPN is rewriting its client-side WireGuard implementation from the ground up. That might sound like plumbing work, and in some ways it is, but it matters more than most feature announcements.

The existing codebase was built incrementally over years, across multiple platforms, by multiple teams. The result is apps that work but carry significant technical debt. Each platform diverged slightly, making it harder to ship consistent features everywhere at the same time. Anyone who has noticed Proton rolling out the same feature to Android first, then waiting months before Windows or Mac catch up, has been living with the consequences of that fragmentation.

The rewrite gives Proton a single, unified core that all platforms will share. Faster releases, fewer platform-specific bugs, and a much cleaner foundation for everything that comes after.

The new WireGuard core is already in beta on Android and Windows. Mac, iOS, and Linux support will follow in the coming months. If the beta holds up, most users should be running it before the end of summer.

What does the rewrite unlock in practice?

• Faster app performance, especially connection times
• More consistent anti-censorship tooling across all platforms
• The technical foundation for post-quantum encryption

That last point is worth sitting with for a moment.

Post-quantum encryption: groundwork is not the same as delivery

Proton VPN is framing the WireGuard rewrite as the prerequisite for post-quantum encryption (PQE). That framing is accurate. Without a modern, unified codebase, integrating PQE properly across all platforms would be a fragile project.

But framing it as groundwork is also an honest admission: PQE is not coming this season.

Compare that to the competition. NordVPN has shipped post-quantum encryption across all its apps, using a hybrid X25519 + ML-KEM (Kyber-768) key exchange. Mullvad went further and made quantum-resistant WireGuard the default for all desktop users in 2025. ExpressVPN integrated PQE into its Lightway protocol in early 2025, though the rollout remains partial.

Proton VPN is behind on this specific front. The WireGuard rewrite is the right move structurally, but competitors did not wait for a rewrite before shipping PQE. They built it into their existing infrastructure. Proton chose architectural cleanliness over speed of delivery, and you can respect that call while still noting the gap.

The “harvest now, decrypt later” threat, where attackers collect encrypted traffic today to crack it once quantum computers mature, is not an immediate crisis for most users. The timeline for practical quantum attacks on current encryption is still measured in years, and most researchers put that window somewhere between five and fifteen years from now.

But that window is exactly why some users care about PQE today. Government agencies, journalists, lawyers, and others handling sensitive long-lived data may reasonably want their traffic protected from that threat right now, not in a future roadmap cycle. For those users, Mullvad and NordVPN are the honest recommendations at this point in time.

Linux users finally get some serious attention

The Linux app has historically been Proton VPN’s weakest client. It worked, but it looked and felt like an afterthought compared to the Windows and Mac versions. That changes with this roadmap.

Three things are coming for Linux:

A redesigned GUI. The Linux app is getting a full visual refresh to match the cleaner interface already shipping on other platforms. For anyone who switches between machines, the current visual inconsistency is a small but constant irritant. It should not exist in 2026 for a product at this price point, and it is good to see Proton fixing it.

Stealth protocol support. Stealth is Proton’s obfuscation protocol, built to disguise VPN traffic as ordinary HTTPS. It has been available on Windows, Mac, Android, and iOS for some time. Linux users working in restrictive network environments (tightly controlled corporate networks, countries with deep packet inspection, university firewalls) have been locked out of it. They will finally get it this cycle.

A new CLI tool. For users who do not want a graphical interface at all, Proton is shipping a redesigned command-line tool that stays in sync with the main codebase. The existing CLI works but has not kept pace with app-side features. A modern CLI that matches the rest of the product is an overdue fix for a large segment of Proton’s technical user base.

If you run Proton VPN on Linux, this roadmap matters more to you than anyone else.

Anti-censorship improvements tied to the new core

One under-discussed benefit of the WireGuard rewrite is what it means for users in censored regions.

Proton VPN’s existing anti-censorship tooling, including the Stealth protocol and its ability to bypass deep packet inspection, works well. But building consistent anti-censorship features across fragmented platform codebases is slow and error-prone. A feature that works reliably on Android might behave differently on Windows, or miss edge cases on iOS because the underlying code diverged years ago.

The new unified WireGuard core changes that. Proton can build obfuscation improvements once and deploy them everywhere. That matters for users in countries where VPN detection is aggressive. Stealth on Linux (finally arriving with this roadmap) is a direct example of this: the technology existed, but getting it onto Linux required architecture work first.

Proton has a lot of users in countries with serious censorship restrictions. They have been waiting for parity with desktop users on other platforms. The WireGuard rewrite is the mechanism that makes that parity realistic.

Windows gets smarter connection preferences

This one is smaller but practically useful.

Proton VPN is improving its connection preferences on Windows to let you permanently exclude specific countries, cities, or regions from the Fastest and Random server selection. The feature already exists on Android.

Right now, if Proton’s automatic selection keeps picking a location you do not want (wrong region for a streaming service, a country with higher latency for your setup), you have to manually override it every session. With the new preferences, you configure exclusions once and the app respects them going forward.

Not every improvement needs to be a headline. This one just removes friction that should not have been there.

Putting the roadmap in context

Proton VPN also published a Fall/Winter 2025-2026 roadmap earlier in the year. The Spring/Summer 2026 version builds on that work, with the WireGuard rewrite as the connecting thread across most of the platform updates.

Proton’s overall direction is sound. Swiss jurisdiction, open-source apps, and independently audited no-logs policy put it among the most credible privacy-focused VPN providers. The WireGuard rewrite reflects a genuine commitment to long-term reliability over the short-term feature velocity that some competitors chase.

But there is a consistent pattern in Proton’s roadmaps. The vision is ambitious and well-argued. The delivery timeline tends to run longer than the roadmap implies. Post-quantum encryption has been “coming” for a while. Linux improvements have been “coming” for longer. The beta performance on Android and Windows will be the real signal of whether this cycle breaks that pattern.

Proton is building something solid. The new WireGuard core is a genuinely better foundation than what it replaces, and the Linux work is both necessary and welcome. But if you need PQE today, or you have been waiting for Linux parity through multiple roadmap cycles, this update does not fully close those gaps yet.

To be fair, Proton’s approach has always been to move carefully rather than quickly. That is partly what makes them credible on privacy. The open-source apps, the independent audits, the Swiss jurisdiction are not marketing add-ons. They reflect a genuine organizational philosophy. The WireGuard rewrite fits that pattern: do it right, even if it takes longer. The question is whether users who need PQE today are willing to wait for Proton to do it right.

What to watch for

Before the end of summer, pay attention to:

• The WireGuard core moving out of beta on Android and Windows
• Mac, iOS, and Linux joining the new unified core
• Whether the Linux GUI redesign ships on the promised schedule
• Any concrete timeline for actual PQE deployment (not groundwork, actual deployment)

Proton communicates changes through its blog with more transparency than most VPN providers. Check protonvpn.com/blog as features move from announced to shipped.

Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.

Keep reading: ProtonVPN Review 2026: The Privacy-First Choice (At a Cost) and NordVPN vs ProtonVPN 2026: Speed and Features vs Privacy Principles.