The Proton VPN Blog

Plex: What to know about this media streamer

Douglas Crawford — Fri, 08 Aug 2025 13:13:02 GMT

Plex began as media server software that allows you to organize, manage, and stream your personal media collections, such as movies, TV shows, music, and photos, to various devices. However, thanks to its ongoing quest to monetize its undeniable popularity (around 25 million active monthly users), Plex now aims to be a centralized one-stop hub for all your media needs.

What is Plex?
Is Plex free?
Is Plex safe?
Is Plex legal?
How does Plex work for streaming?
Open-source Plex alternatives
Final thoughts

What is Plex?

Plex is essentially two separate things wrapped into a single service:

1. A (mainly free) media server

Plex is best known as a media server. Install the Plex server software on a computer, network-attached storage (NAS) device, or dedicated media servers, and you can stream your video, audio, and photo library for free on other devices on your local network, complete with cover art, trailers, descriptions, subtitles, and more.

You can do this using the Plex player apps, which are available for most platforms. You can also access your Plex library in a browser via the Plex web app player.

Plex also supports remote streaming over the internet, but as of May 2025, this feature is no longer free for video files. We discuss this further below.

The Plex media server software is available for Windows, macOS, Linux, Docker, and a wide selection of NAS devices.

2. A commercial streaming service

Plex also offers a free, ad-supported streaming service with a wide selection of TV channels and on-demand movies. It should be noted, though, that most of this content is either old and/or very much in the B-movie category.

In addition to these core functionalities, Plex allows you to:

Add any movie or TV show to a unified watchlist. Plex will list all the legal places this content is available and link to it if you subscribe to a platform where it’s available
Share watchlists, comments, and recommendations with friends

Although largely free to use, Plex is a proprietary closed-source platform.

Is Plex free?

Plex has tried various pricing models over the years. The following pricing is correct at the time of writing this article:

Local streaming

You can stream your personal content from a Plex server to devices on your local network for free. This now includes your mobile devices, in addition to your smart TVs, media streaming devices, and computers.

Remote streaming

You can still stream your personal music and photo collections over the internet for free. However, streaming video content remotely is now a premium feature that can be accessed in one of two ways:

Plex Pass — Anyone can connect to your Plex server and stream your content remotely for no additional charge. You also have access to a range of premium features, such as hardware transcoding, downloading files locally to your device, the ability to skip titles’ intro and credits, and more. A Plex Pass makes sense if you share your video collection with friends and family.
Remote Watch Pass — Allows you to stream videos remotely from the Plex servers of friends and family who don’t have a Plex Pass. It’s also useful for remotely accessing your own server’s content if you don’t share it with enough people to justify purchasing a Plex Pass.
Ad-supported content — You can watch ad-supported TV shows and movies for free. In fact, this is the only way to watch them. Upgrading to a paid Plex Pass or Remote Watch Pass plan doesn’t remove the ads.

Is Plex safe?

As long as you download the Plex server software and viewer apps from a reputable source (such as the official Plex website, Apple App Store, or Google Play Store), you can be confident they are free from malware. Connections to Plex servers and self-hosted remote streaming servers are secured using HTTPS.

When it comes to streaming content from a self-hosted media player, Plex is quite privacy-friendly. It doesn’t collect, share, or sell information about content or titles in your personal media library. It does however, collect some metadata about your media library, such as your device information, the types of files you have, and how often you access them. This data is used for analytics and to improve the service, but it also means that Plex has some insight into your media consumption habits.

If you watch Plex’s ad-supported free streaming service, you’re handing over much more information, which Plex sells to third parties and uses for targeted ads. This includes location data, detailed viewing history, search history, your friends list, interactions, and more. It’s worth noting that most other commercial streaming services also collect and monetize similar amounts of your personal data.

Is Plex legal?

Yes. Plex is just software. Its free streamlining service only offers content that’s been licensed from the copyright holders (which includes Warner Bros, MGM, Lionsgate, Legendary, Crackle, and more).

It is, of course, also fully legal to stream legal content from your personal Plex media server. For example, you can legally stream DVDs that you’ve purchased and ripped into a digital format suitable for streaming.

What isn’t legal is using Plex to stream libraries of content you obtained by less legitimate means. But the issue here isn’t really about Plex (which takes no legal responsibility for such behavior) — it’s about your libraries.

How does Plex work for streaming?

To watch ad-supported content, simply download the Plex app for your device and start watching. You don’t need to register for an account, but doing so gives you access to advanced features.

Setting up a Plex media server to stream your own content is also easy. You will need to sign up for an account for this.

1. Choose one of your computers or NAS servers to be the Plex server. It’s best to choose one that’s always on, so low-power devices like Raspberry Pis make excellent Plex servers.

2. Install the Plex media server software.

3. Name your Plex server.

4. Configure your media sources. Plex works best if each folder contains the same type of media (movies, TV shows, music files, etc.).

Plex will automatically scan your libraries and add metadata such as cover images, a synopsis, cast details, ratings, reviews, and more.

5. Install the Plex app on your devices and sign in. With a free account, you can watch your content over your local network. With a premium account, you can watch your content anywhere. Note that if you have a complex setup (such as you’re using a VPN on your media server), additional configuration may be required for remote streaming.

Open-source Plex alternatives

For many, one of Plex’s biggest drawbacks is that it’s proprietary closed-source software. Another is that remote streaming now requires a paid plan. Fortunately, there are some excellent free and open-source alternatives. The most notable of these (and closest drop-in alternatives) are:

Jellyfin

Jellyfin basically aims to be an open-source version of Plex with the commercial bits stripped out. As such, it closely follows Plex’s server-client model and behaves just like Plex in most ways.

You should be aware, however, that Jellyfin is less mature than Plex, so it doesn’t have as many advanced features and extensible plugins as its commercial rival (although all its features are free). And because no one is getting paid to run them, there are no proxy servers to connect for easy one-click remote streaming.

This means you’ll need to manually configure a remote streaming solution, such as setting up port forwarding, a reverse proxy, or a direct VPN connection (a feature not supported by Proton VPN). On the plus side, remote streaming is free.

It’s worth noting that Jellyfin is a fork of Emby, which despite having many open source components, now operates on a freemium model (like Plex). As with Plex, remote streaming is much easier on Emby than Jellyfin, but it’s a paid feature (as are mobile app playback and downloading files locally from your media server).

Kodi

Kodi is a highly versatile open-source media player known for its massive plugin ecosystem, which can greatly extend its functionality (this includes a range of dubious third-party IPTV add-ons). It doesn’t have a built-in server component like Plex or Jellyfin, but one can be added via a Jellyfin or Emby plugin.

Plex and Proton VPN

Using Proton VPN on your client device will prevent Plex from easily identifying you via your IP address when streaming ad-supported content, while having no effect on streaming from a self-hosted Plex media server.

You can also use Proton VPN to secure your Plex media server, but may need to upgrade to a paid plan for this:

To stream over your local network, simply allow LAN connections.
To configure remote streaming, you may need to port forward through the VPN server’s firewall.

Get Proton VPN Plus

Final thoughts

If you want a mature self-hosted streaming solution, Plex remains the go-to solution. This is especially true if you want hassle-free remote streaming while out and about, but this is something you’ll need to pay for.

If your streaming needs are not too complex and you prefer a solution that is open source and doesn’t try to push its money-making options on you (currently these are not too intrusive with Plex, but they have been much more so in the past), Jellyfin is an easy recommendation. Just be aware that you’ll need some technical know-how to access your media libraries while away from your home network.

Plex’s ad-supported content is best summed up as old. But it’s hard to criticize such a large catalog of free shows and movies, and there is some good (if old) content in there.

Omegle is gone, but Omegle alternatives are just as unsafe for kids

Elena Constantinescu — Tue, 05 Aug 2025 11:22:50 GMT

Imagine you’re a child signing on to a random chat generator and you get paired with a celebrity like Millie Bobby Brown. If the situation sounds too good to be true, that’s because it is: there’s a growing trend to use AI filters to fool kids into thinking they’re talking to their favorite celebrities.

Welcome to Omegle and its many alternatives. Omegle was a popular chat platform that randomly and anonymously paired strangers around the world through text or video. For over 14 years, it attracted millions of young people with a tagline that flew in the face of every childhood safety rule: “Talk to strangers.” The problem was that anyone could join, including kids pretending to be older — or adults pretending to be teens.

In November 2023, Omegle officially shut down after mounting public backlash and its connection to over 500 criminal investigations involving child predators. However, countless Omegle copycat platforms still exist, often with the same lack of moderation, weak privacy protections, and high risk of abuse.

If your child is curious, bored, or seeking connection online, they may already know about these Omegle alternatives. Here are the risks involved with such platforms and what you can do to keep your child safe online.

What is Omegle and how does it work?

Omegle was a free, anonymous chat website that connected users with random strangers for real-time conversations via text or video. No account or age verification was required — anyone could access the site, click a button, and instantly be matched with someone else.

Omegle and its clones generally use a peer-to-peer (P2P) connection for video chats, meaning they share your data (including video and audio streams and potentially your IP address) directly with the person you’re talking to.

Omegle offered several chat options:

Text mode for standard one-on-one conversations
Spy (question) text mode, where one person asked a question and two strangers debated or answered it
Video mode for one-on-one video chats, where participants could see and hear each other
Unmoderated video mode for adults over 18, which carried a warning but had no real safeguards
College student mode for users with college email addresses
Interest-based mode for pairing two strangers with similar interests

At its peak in January 2023, Omegle attracted 70 million monthly visitors, with 38% of users aged 18–24. Its simplicity and anonymity made it especially appealing to teens — and predators.

What risks does your child face on apps like Omegle?

Omegle might be gone, but many similar platforms still exist, often exposing their users to the same dangers.

Lack of meaningful moderation and safety controls

Omegle had community guidelines meant to discourage harmful behavior, including harassment, sexually explicit content, threats, impersonation, and the unauthorized sharing of personal information. But enforcement was practically nonexistent.

While you could report abuse to Omegle, it banned offenders based on their IP address, making it easy to bypass them. Unfortunately, many Omegle alternatives still operate using the same ineffective procedures. For example, TinyChat and CamSurf don’t require registration, so anyone can join.

While some of these websites claim to use AI or human moderation, there’s often little transparency around what that actually means or whether it’s effective — especially on platforms that prioritize fast, anonymous access over user safety.

Exposure to inappropriate content and online predators

Due to poor moderation and nonexistent age verification, Omegle became a hotspot for nudity, sexually explicit behavior, and graphic conversations, often within seconds of joining a chat. Many kids were exposed to adult content and pressured to perform inappropriate acts before they even knew what was happening.

Many disturbing cases involving Omegle have surfaced, including users sharing confessions after sexting with underage teens, sexual abuse, and a man convicted of sextorting over 100 children across platforms like Omegle, TikTok, and Snapchat.

Involuntary sharing and recordings

Everything kids share on platforms like Omegle — whether its’s text, photos, or videos — can be secretly recorded or screenshotted without their knowledge. These recordings may later become tools for threats, humiliation, extortion, or AI-generated deepfakes — realistic photos or videos that are manipulated to make it appear the child said or did something they never did. The emotional damage can be irreversible.

Manipulation and scams

On anonymous chat platforms with little to no supervision, like Omegle, it’s easy for bad actors to pose as someone they’re not. Some may take their time, building trust through casual conversation before asking for access to private photos, files, or personal information — a classic form of social engineering that can quickly lead to doxing or blackmail.

Scammers may also share links that lead to malware or phishing websites designed to steal credentials or install spyware. It only takes a simple, casual message like “Can you vote for me in this contest?” to trick someone into clicking.

As we mentioned in the intro, people have recently started using AI-generated deepfakes to impersonate celebrities — often to gain views. In the wrong hands, this technology can exploit a child’s trust by mimicking a public figure they admire, making it easier to pressure them into doing or sharing things they normally wouldn’t.

Data collection and privacy risks

Even if your child doesn’t share anything personal in a chat, just using an app like Omegle can expose them to privacy risks. These platforms often collect IP addresses, device details, and chat logs — and with so many different copycats out there, it’s difficult to tell how trustworthy any platform’s privacy policies really are.

For example, OmeTV’s privacy policy says that the platform collects various data, including:

IP addresses, shared with service providers and other users in video chats. Although an IP address reveals only a general location, it can be correlated with parts of a conversation to help pinpoint where your child lives or build a profile of who they are
Profile data, including your child’s name, age, and information from their connected social profiles
Video frame snapshots from cameras during bans or complaints

In the case of Omegle, it allowed users to save chats, generating a unique link for each one. Anything your child typed in what felt like a private conversation could be permanently stored and shared online by the other person. However, a security flaw allowed anyone to access the chat links of other Omegle users.

What can parents do to protect their kids online?

Here’s what you can do to help your child stay safer on the internet:

Talk about online risks and keep the conversation open

If your child is old enough to go online, they’re old enough to understand the risks. That’s why it’s important to have regular, honest conversations, ideally before any issues arise. Help them understand:

The risks of talking to strangers, such as grooming and exposure to explicit content.
Why they should never share personal information, like their real name, school, where they live, or photos.
How photos or videos of them can be misused, including for AI training, deepfakes, and extortion.
That people online can easily lie about who they are, impersonate celebrities, and may try to build trust through flattery or fake identities to manipulate them.
That nothing online is ever truly private — even disappearing messages or private chats can be made public.

Most importantly, let your child know that if a stranger asks for something personal or makes them uncomfortable, it’s always okay to leave the conversation — no explanation needed — and come talk to you.

Set clear rules and stay involved

To help your child form healthy boundaries around video chat platforms like Omegle, set expectations together about what’s okay to do online, what’s off-limits, and when to ask for help. Go through the app or website with them and explore how to report, block, or mute users when something feels off.

Set ground rules about which apps they’re allowed to use, when, and for how long. You might also consider using parental control tools that can send alerts about suspicious or unsafe activity, explaining they are there to keep them safe, not invade their privacy.

Teach kids how to spot red flags

Here are some common warning signs that could signal grooming, scams, or social engineering attempts:

Strangers asking to move the conversation to another app
Requests for photos, especially “just for fun” or “just between us”
Messages that suddenly turn flirtatious or overly personal
Users who hide their face on video or use fake-looking profiles
Pressure to keep the conversation secret
Being asked to click on links or download files
Sudden threats or guilt-tripping if the child doesn’t respond

Set up a VPN for your family

Even if your child doesn’t share personal details, platforms like Omegle may expose the IP addresses of users, which can reveal their approximate location and other device information.

A VPN (virtual private network) helps hide your IP address and encrypt your internet traffic. With a VPN enabled, strangers, websites, and apps will have a harder time tracking your child’s location and gathering data about them.

Proton VPN allows you to protect up to 10 devices under one account and works on all major platforms, including Windows, macOS, Android, iOS, and Linux. You can also set it up on your home router, so every device connected to your WiFi is automatically protected.

Want more tips for raising privacy-smart kids? Explore our guide for families.

Shady platforms like Omegle aren’t going away anytime soon. But with the right tools, honest conversations, and clear boundaries, you can help your child stay safe, confident, and in control of their digital life. At Proton, we believe privacy should be the default — especially for kids. That’s why we build tools that protect your data without asking you to trade it away.

Pluto TV: What’s the catch?

Douglas Crawford — Fri, 01 Aug 2025 16:08:59 GMT

Pluto TV is a US-based streaming app that offers a mix of live TV channels and on-demand content. It stands out in today’s crowded streaming marketplace as one of the few options that’s completely free to access. You don’t even need to sign up or sign in to watch over 250 live TV channels and thousands of on-demand movies and shows without paying a penny.

So what’s the catch? In this article, we’ll take a comprehensive look at Pluto TV, delving into its features, security measures, and potential risks, so you can make an informed decision about whether this service is for you.

What is Pluto TV?
Is Pluto TV safe?
Other Pluto TV downsides
Can you stream Pluto TV with Proton VPN?
Pluto TV alternatives
There isn’t really a catch
Frequently asked questions

What is Pluto TV?

Pluto TV is a free, ad-supported streaming service owned by the Paramount Global mass media entertainment conglomerate.

Although it does offer on-demand content, its primary focus is on offering a traditional linear broadcast TV experience with a fixed schedule and regular ad breaks. Launched in 2013 to target the emerging cord-cutting trend among US consumers, its simple cable-like experience (complete with a grid guide that allows you to easily browse and select live channels) is a major part of its appeal.

In addition to the US, Pluto TV is now available in many European and most Latin American countries and can be accessed through your web browser or via apps for smartphones and a wide selection of smart TVs and streaming devices.

The catalog of titles available in your country will vary due to licensing restrictions and the availability of regional channels and shows.

Is Pluto TV safe?

Yes, Pluto TV is a safe and legitimate service insofar as you don’t need to worry about hidden charges, credit card requests, or sneaky subscriptions. When your device connects to Pluto TV, the connection is automatically secured using HTTPS so only you and Pluto TV (and its parent company, Paramount) can see what you watch.

You can download its apps from the Apple App Store, Google Play, Amazon, and Roku, confident that they don’t contain malware (still, you should never download its apps from unofficial sources).

However, there are a couple of things you should be aware of:

Tracking

Like most ad-supported platforms, Pluto TV collects personal data that it uses to target you with personalized ads. According to its privacy policy, Pluto TV tracks your IP address, location data, device identifiers, browsing activity, and viewing habits.

However, this is quite strongly mitigated by the fact that Pluto TV doesn’t require an account or personal information to use the service, limiting how much data it can tie directly to you. And if you use a VPN to hide your real IP address (see below for guidance on how to do just that), you can further reduce the data it has access to.

Content moderation

Pluto TV doesn’t host “adult” content, but R-rated movies are shown throughout the day. In the UK (for example), shows like South Park are only available after the 9 PM watershed.

If you do opt to register for the service and sign in, Pluto TV provides parental control options to restrict access to certain channels or content to ensure that younger viewers are only exposed to age-appropriate material. However, with no requirement to register or sign in with an account, such restrictions are easy to bypass.

Other Pluto TV downsides

Other factors that may negatively affect your viewing pleasure include:

Pluto TV is an almost completely ad-supported service, so you’re going to see quite a lot of ads.

Catalog quality

There are no “Pluto TV originals”, and you can expect most content to be older and/or of a lower standard than is available on most premium channels.

Video and audio quality

Most content is shown at lower resolutions — typically 720p or 1080p, depending on the channel and region. Don’t expect the kind of “4K with Dolby Atmos” quality available on paid services like Netflix or Disney+.

Can you stream Pluto TV with Proton VPN?

With a paid Proton VPN plan, you can easily watch Pluto TV from anywhere in the world. Simply connect to one of our 11,000+ Plus servers in countries where Pluto TV is available.

Using Proton VPN to stream Pluto TV offers other benefits:

Privacy — With no sign-in requirement, your IP address is the main datapoint that Paramount Global uses to tie the other personal data it collects to your real-world identity. When you use Proton VPN, all Paramount can see is the IP address of our VPN server, not your real IP address.
Fewer ads — Our NetShield Ad-blocker DNS filtering feature won’t currently block in-stream ad breaks on Pluto TV (although it can on other services). However, it is effective at blocking static ads in the Pluto TV apps and on its website and preventing annoying pop-ups and other distractions.

Get Proton VPN Plus

Pluto TV alternatives

Although unusual, Pluto TV is not the only US-based free ad-supported streaming service. Other options include:

Tubi (like Pluto TV, Tubi is 100% ad-supported free)
Philo (this service is primarily ad-supported free, although a premium option is available)

You can stream both these services while connected to Proton VPN. We also support numerous free streaming services around the world. Visit our streaming services guide to find one in your area.

Pluto TV: There isn’t really a catch

If you’re not looking for the latest premium streaming content and don’t mind ads, Pluto TV is a great free service. And with Proton VPN, you can watch it even more privately, wherever you are.

Frequently asked questions

Is Pluto TV free?

Yes. Pluto TV is a 100% free service that derives most of its income from ads.

Where can I download the Pluto TV app for my device?

Pluto TV has apps for almost every major platform. These include:

Android
iOS and iPadOS
Roku
Apple TV
Android TV
Amazon Fire TV
Windows (via the Microsoft Store)

You can also watch Pluto TV on almost any internet-capable device by visiting its website.

How many Pluto TV channels are there?

In the US, Pluto now offers over 250 live streaming channels (plus on-demand content). This may vary in other regions.

Who owns Pluto TV?

Pluto TV is owned by Paramount Global. It was acquired by Viacom (now part of Paramount Global) in January 2019. One of Pluto TV’s co-founders, Tom Ryan, is now the CEO of Paramount Streaming and remains heavily involved with the service.

Kanopy: A free streaming app for library members

Douglas Crawford — Fri, 18 Jul 2025 18:04:43 GMT

Kanopy is a free streaming platform that offers hundreds of critically acclaimed movies, documentaries, foreign films, and more. The catch? You need to be a member of a participating public library or university to access its content. This article will dive into everything you need to know about this excellent free service.

What is Kanopy streaming?
Is Kanopy free?
How to watch content on Kanopy
How does Kanopy make money?
Can I use a VPN to access Kanopy?
Is Kanopy safe?
A great free service if you can get it

What is Kanopy streaming?

Kanopy is a streaming service that partners with public libraries and universities to bring free and ad-free movies, documentaries, foreign films, classic cinema, independent films, and educational videos to their members. Each participating library or university has its own portal where it can curate the content available, and otherwise customize the experience.

Kanopy started as an Australian company, but is now headquartered in San Francisco. It currently partners with institutions in Australia, United States, United Kingdom, New Zealand, Hong Kong, and Singapore.

Is Kanopy free?

If you are a member of a participating library or university, Kanopy is 100% free to use.

How does Kanopy make money?

Modern libraries don’t just purchase books that you can borrow. They offer digital resources (such as films) that you can access for free as a library member. The library or university covers the costs for this. If the library uses Kanopy as its digital services provider, it pays Kanopy a fee on a pay-per-view basis.

How to watch content on Kanopy

The Kanopy streaming service has apps for all major platforms and can be accessed via its website. Crucially, it’s only available to members of participating libraries and academic institutions.

Online and in-app search tools make it easy to find out if your library or university is a Kanopy partner.

If it is, you can sign in with your library card number and PIN or password, or using your student or faculty ID.

Can I use a VPN to access Kanopy?

If you search “Kanopy,” you will see a number of “best VPN for Kanopy” results. However, Kanopy does not block users based on their geographic location — if you’re a member of a participating institution and enter your correct membership details, you can access Kanopy from anywhere, with no need for a VPN.

If you aren’t a member of a participating library or university, using a VPN won’t help you to access the service.

Is Kanopy safe?

Yes. Kanopy is a reputable service that partners with public libraries and education institutions worldwide. With most services that are billed as being “free”, its right to be cautious. Nobody offers this kind of service without a viable business model, so what you don’t pay for in money, you pay for with your privacy and by watching ads.

However, while Kanopy is a commercial company in the business of making a profit, it’s business model if different. It gets paid by your library or university, which will have its own funding model (and it which also uses to purchase and lend out books, free of charge to you as a member).

In 2019, three of the largest public libraries in the United States (New York Public Library, Brooklyn Public Library, and Queens Public Library) stopped using Kanopy because they found it too expensive. A purely financial decision by the libraries, this was never about concern over their users’ safety.

Final thoughts: A great free service if you can get it

Because its catalog is curated for public libraries and universities, hundreds of excellent titles are available through this free streaming service. And if you’re lucky enough to belong to a library or university that has partnered with Kanopy, you can watch them for free.

However, Kanopy is not the only platform used by libraries and universities to provide digital content to their members, and many purchase their own resources for this purpose. So if you want to access free high-quality films and documentaries, it is well worth contacting your local library to find out what it offers.

At Proton, we’re committed to providing you with unbiased information about staying safe online. This includes providing letting you about any security and privacy concerns with streaming apps. It’s always sensible to cautious about “free” apps, but in the case on Kanopy, it offers a solid service with a reputable business that lets you “borrow” films from your library in a similar to to how you borrow a book.

Brazil innovates on digital self-determination

Douglas Crawford — Wed, 16 Jul 2025 13:32:52 GMT

Data is power. This is why Big Tech companies such as Google and Facebook can offer “free” products and still generate more revenue than all the combined economic output of entire countries. Google’s parent company Alphabet’s annual revenue in 2024, for example, was $350 billion, while Greece’s 2025 GDP is projected to be $267 billion.

There is an emerging concept, however, that can give control of personal data back to the users. It’s known as digital self-determination, and the concept emphasizes your right as an individual to control your personal data and gives you the autonomy to decide how your information is collected, used, and shared.

Brazil has long been at the forefront of creating legal frameworks and digital public infrastructure that prioritize transparency, inclusion, and user control (such as its open banking initiative and the Pix instant payment system). It has now taken a step toward giving individuals direct control over their personal data, not just to protect it, but to monetize it.

A new initiative from a state-owned data firm allows Brazilians to manage and even sell their personal data, turning what was once a resource hoarded by tech companies into an asset owned by the people themselves.

While this is not the first such initiative (as we’ll discuss below), the fact that it combines state support with strong industry backing has led many observers to think it may be the first of its kind to be widely adopted. This traction demonstrates that there are different ways to think about digital privacy — ways that empower the individual while also providing companies with the data they feel necessary for their commercial success.

What is digital self-determination?
Why digital self-determination matters
How Brazil is working towards digital self-determination
Other digital self-determination projects
How to exercise digital self-determination
A provocation, a prototype, and perhaps the future

What is digital self-determination?

Digital self-determination is the right and ability of individuals (and communities) to control how their personal data and digital identity are used, shared, and represented in the digital world.

It’s a concept rooted in the broader philosophical idea of self-determination, which emphasizes the autonomy and agency of individuals in making choices that affect their lives (and which is itself rooted in the notion of human rights). The key aspects of digital self-determination are:

Control over your personal data

You should be able to decide what personal data you share, with whom, and for what purpose. This includes the right to consent to data collection and withdraw consent at any time.

Transparency and informed consent

Organizations must provide clear and transparent information about how they collect, store, and process your personal data to ensure you understand how it’s being used and the potential consequences of sharing it.

Data ownership and portability

You should be able to access your personal data and transfer it between different services or platforms easily. This ensures you aren’t locked into specific services and retain control over your data.

Right to be forgotten

You should have the right to request that organizations delete your data from their systems. This is particularly important when your data is no longer necessary or after you’ve withdrawn your consent.

Privacy by design

Digital services and products should be designed with protecting users’ privacy and data in mind from the outset. This means incorporating privacy features and safeguards into the development process to minimize data collection and maximize users’ control over any data that is collected.

Why digital self-determination matters

Currently, monopolistic tech giants are making money hand over fist by harvesting and exploiting our most intimate data. Once these companies collect our data, we have almost no control over it. It can be used to target us with ads, violate our privacy, and even discriminate against us. But there’s an even better argument in favor of digital self-determination.

Digital self-determination allows people to remain autonomous in a world where digital systems often act on our behalf without any transparency or accountability. Ensuring that we have the autonomy to make informed choices about our digital lives is essential if we are to live in a world where technology serves the interests and values of all individuals. It is therefore an essential safeguard to privacy, democracy, and human rights.

How Brazil is working towards digital self-determination

Dataprev (Empresa de Tecnologia e Informações da Previdência Social) is a Brazilian state-owned company that (mainly) provides technology and information services for the country’s social security system. In May 2025, it announced a “pioneering data property management initiative” in partnership with DrumWave, a Silicon Valley–based technology company that specializes in valuing and monetizing data.

Named dWallet, the project aims to give Brazilian citizens a high degree of digital self-determination, including the right and means to sell their data. Starting as a pilot scheme, dWallet is a digital “data savings account” that allows Brazilians to deposit, manage, and monetize their personal data (starting with information tied to payroll loans).

How dWallet works

When dWallet users interact with the internet, the personal data they generate is placed in a secure digital wallet. Companies can then submit paid offers to access this data, which users can accept on an opt-in and per-offer basis.

The higher the quality of the data — as assessed by DrumWave’s proprietary DIM (Data Information Meaning) index — the more companies are likely to offer. In a country where the average monthly salary is $530, early adopters are already earning about $50 a month for granting access to data that they previously didn’t even know they were generating.

DrumWave does not have any direct access to users’ data.

Reception

It remains to be seen whether the pilot will succeed. Critics point to the sharp digital divide in Brazil, where some 25.6 million people live in rural areas with little or no internet infrastructure and very low basic literacy rates (let alone the kind of digital literacy required to properly benefit from such a scheme). dWallet could exacerbate this divide, benefiting the relatively wealthy and tech-literate urban populations while leaving the poorest and most vulnerable sections of society behind.

There is also concern that large, successful companies will be able to outbid smaller businesses, start-ups, and government departments with small budgets, effectively excluding them from access to the kind of data necessary for organizations to succeed in today’s digital world.

On a more philosophical level, even though it gives individuals autonomy and choice over their data, this data is still being exploited for profit by Big Tech (which is why companies are willing to pay handsomely for it). And when people from often the most vulnerable sections of society can substantially boost their monthly incomes by selling their data, real choice is a luxury that only the already well off will be able to afford.

But for good or ill, the fact that dWallet is the first scheme to institutionalize digital self-determination at a national level gives it the best odds of being widely adopted.

Other digital self-determination projects

Brazil is not working in a vacuum. Government-backed initiatives such as the EU’s GDPR (and Brazil’s own implementation of it, the LGPO) have made substantial progress in terms of protecting people’s personal data. But many want to go further, shifting the conversation away from protecting people to empowering them. Notable other initiatives in this area include:

Digital Self-Determination Network

Launched by the Swiss Federal Department of Foreign Affairs (FDFA) and Federal Office of Communications (OFCOM), this government-backed initiative is founded on the notion that citizens should retain control over their data — especially in cross-border contexts. In pursuit of this, the network promotes trustworthy digital ecosystems that respect personal autonomy, data sovereignty, and democratic values.

DECODE

Funded under the EU’s Horizon 2020 program, the DECODE (DEcentralised Citizen-Owned Data Ecosystem) project is a pioneering experiment in digital self-sovereignty, offering a privacy-first, citizen-controlled architecture for data ownership, use, and identity.

Using a blockchain and distributed ledger technology (DLT) to create a tamper-proof, transparent system for data sharing, real-life pilots in Amsterdam and Barcelona have already demonstrated its technical viability and value in protecting people’s privacy.

Solid

Led by Tim Berners-Lee (inventor of the World Wide Web and Proton advisory board member), Solid (Social Linked Data) is an open-source, W3C-standardized framework that aims to give individuals full control over their personal data online by allowing them to store it in decentralized “pods”, which they host themselves (on personal servers, cloud services, or via providers). When apps or services request access, users can explicitly grant or revoke it at any time.

How to exercise digital self-determination

Most digital self-determination projects are still at the planning and limited-pilot stage, and focus on protecting your personal data from abuse. dWallet is currently quite unique in that it gives you the ability to monetize your personal data, but it’s restricted to people in Brazil.

However, there are many steps you can personally take to restrict third-party access to your data and achieve at least a measure of digital self-determination:

The Solid project is available to everyone, and you can get a pod now.
Use end-to-end encryption whenever possible so that only you can access your data.
Use a zero–access encryption email service and a secure messaging app (such as Signal) to communicate with others.
Use a browser that respects your privacy.
Use a VPN to hide your IP address from websites you visit and your browsing history from your ISP.
Use a DNS blocker such as Proton VPN’s NetShield Ad-blocker or uBlock Origin to stop websites tracking you across the web.
Access online services via their websites, not their apps.
For the apps you can’t live without, regularly check their permissions.

Final thoughts: A provocation, a prototype, and perhaps the future

As the world grapples with the ethical implications of data ownership, Brazil’s dWallet initiative may signal a new way for governments to approach data, identity, and individual empowerment. By enabling citizens to own and monetize their personal data, Brazil isn’t just experimenting with a new technology — it’s potentially redefining how we think about the ownership and control of our digital assets.

Unlike traditional systems, where data is extracted and monetized by platforms behind closed doors, dWallet shifts power to the people — placing consent, transparency, and economic value in their hands. For its advocates, this model doesn’t just benefit individual users; it sets a blueprint for ethical data economies globally. For its critics, it still encourages Big Tech to exploit people’s data.

To succeed on a global scale, this model faces many challenges, such as fostering widespread adoption in the face of what’s likely to be extremely robust opposition from some of the wealthiest and most powerful organizations this planet has ever seen. There is also an urgent need to bridge the digital divide, so that everyone can benefit from it.

Brazil’s dWallet nevertheless sets an interesting precedent for other nations seeking to balance technological advancement with individual rights.

How to find spyware and other hidden apps on your iPhone

Douglas Crawford — Tue, 15 Jul 2025 17:06:06 GMT

In recent years, journalists have emerged as one of the top targets of surveillance by governments around the world. If you’re a reporter working on sensitive topics, no country is safe for privacy in the context of an international market for spyware apps that can secretly monitor all the data transmitted and stored on your iPhone.

As these apps proliferate, it has become critical to understand how to find hidden apps on iPhone and remove them.

The spyware targeting journalists
How hackers hide apps on iPhone
How to check your iPhone for Pegasus spyware
How to check your iPhone for Graphite spyware
How to find hidden apps on an iPhone
What to do with spyware on your device

The spyware targeting journalists

In June 2025, researchers at Citizen Lab reported new evidence that the Italian government is targeting journalists and activists with Graphite spyware developed by the Israeli firm Paragon Solutions.

Citizen Lab has previously found evidence of Graphite use in Australia, Canada, Denmark, Singapore, Israel, and Cyprus, with potential links to police in Canada. Graphite is responsible for a hacking attack in January 2025 that targeted almost 100 journalists and other members of civil society using WhatsApp on their iPhones. Notably, given current events in the United States, the US Immigration and Customs Enforcement (ICE) signed a $2 million contract with Paragon in 2024.

Graphite works in a very similar way to the infamous Pegasus spyware from NSO Group. Paragon Solutions’ competitor in the world of mercenary spyware, this company is known for its close relationship with the Israeli state, and its spyware is classified as a military export by Israel. NSO Group sells its software to governments around the world, including Saudi Arabia, Dubai, India, Mexico, Morocco, Rwanda, and Hungary, and its Pegasus software is linked to the brutal assassination of Saudi human rights activist Jamal Khashoggi.

How hackers hide apps on iPhone

Both Graphite and Pegasus are suites of exploits that target iPhones. Graphite is newer and much less documented than Pegasus, and it’s telling that the Israeli government sought to replace Pegasus with Graphite in the Saudi armory.

Apple released a patch to mitigate against Pegasus back in 2023, and following the WhatsApp attack it released a patch for iOS 18.3.1 to address the vulnerability exploited by Graphite. But there are no guarantees these patches will be effective against updated versions of the spywares.

Both apps exploit zero-day vulnerabilities in iOS using a variety of attack vectors. The most worrying of these are zero-click attacks that exploit vulnerabilities in apps like iMessage, WhatsApp, or FaceTime to silently infect a device without any need for the victim to click links or otherwise interact with their phone.

Once an iPhone has been infected, the spyware uses a modular architecture to enable or disable components remotely based on the client’s surveillance goals. Capabilities include:

Keylogging
Microphone and camera access (for live audio and video eavesdropping)
Call log, SMS, contact, and email access
Encrypted messaging app data (Signal, WhatsApp, Telegram) access using accessibility services or by capturing data before encryption
GPS tracking
Screenshot capture

The spyware is very hard to detect on an iPhone, and can self-destruct to erase evidence if it doesn’t phone home for a set period of time, or on command. NSO Group has created a version of Pegasus that also targets Android devices. This has similar functionality to the iOS version, but uses a different mode of attack.

It is very difficult to estimate how many devices are affected by either spywares, but back in 2021 NSO Group leaked 50,000 phone numbers of potential Pegasus targets.

How to check your iPhone for Pegasus spyware

Apple does not permit true anti-malware apps on the App Store (strictly speaking, “anti-malware” apps are available on the App Store, but limits on their access to system resources severely restrict their usefulness). And in any case, traditional anti-malware software is ineffective against Pegasus on other platforms.

Mobile device security firm iVerify offers a Threat Hunting tool that it clams has already discovered seven Pegasus infections (as of December 2024). Available for less than a dollar on the App Store (somehow skirting Apple’s malware scanning restrictions), iVerify Basic is very easy to use. But as closed-source proprietary software, there’s no way to independently asses how effective it is.

Another option is to use Mobile Verification Toolkit (MVT), a free, open-source tool from the human rights group Amnesty International’s Security Lab. This extracts various types of data from an iPhone backup to find evidence of a Pegasus attack, including

SMS messages
Call logs
Data from installed apps
System logs

It then analyzes this data to detect “Indicators of Compromise” (IOCs), such as specific processes and file names that are known to be associated with Pegasus. It should be noted, though, that to use the tool you’ll need a Linux PC or Mac and familiarity with the command line. Some deeper understanding of malware forensics is also required to get the most from the results.

A more user-friendly option (with a GUI) is the iMazing tool, which uses methodology that “closely mirrors” that of open source MVT. It’s paid software, but a free trial includes the Pegasus detection tool. You’ll still need access to a Linux PC or Mac, though.

How to check your iPhone for Graphite spyware

There are no tools available yet that can specifically detect a Graphite infection.

The tools for detecting Pegasus discussed above might have some chance of detecting the newer spyware, but they cannot be relied on for this. The general tips discussed below may also be useful for detecting suspicious behavior.

How to find hidden apps on an iPhone

In general (outside of the kind of state-sponsored spyware discussed above), iPhones don’t allow third-party apps to truly “hide” in the background like they can on Android. However, some can be deliberately hard to find.

Despite Apple’s fairly robust sandboxing, code-signing, and App Store review process, iPhones are not immune to viruses or malware. People with direct access to your phone (such as domestic abusers) may also install less sophisticated forms of spyware when your back is turned.

This means everyone can benefit from periodically checking that nothing is running on your iPhone that shouldn’t be. Here are some tips for finding hidden apps:

1. Check your App Library: Swipe all the way to the rightmost home screen. Here you’ll see all apps installed on your iPhone, even if you don’t see them on your regular home screens. Look for any apps that are unfamiliar to you, especially those with foreign names. Research online whether these represent legitimate software or are common malware disguises. If you have any doubt, uninstall the apps.

2. Check for malicious configuration profiles: These are designed for businesses and schools to remote-manage your iPhone, but can be an important vector for malware attacks. Open the Settings app and go to General → VPN & Device Management. Delete any profiles you don’t recognize.

3. Check your storage: Open the Settings app and go to General → iPhone Storage. Review the list of installed applications displayed here. Any discrepancies between visible apps on your home versus those shown here warrant further investigation.

4. Be aware of suspicious behavior: Unusual battery drain or data usage, or a hot phone when not in use, may indicate malware. If you have the technical skills, you can use package capture tools such as Wireshark to analyze where your iPhone’s data is going.

What to do about spyware on your device

One piece of encouraging news from Citizen Lab’s research is that spyware such Graphite and Pegasus is highly targeted — mainly at journalists, but activists, dissidents, political figures, and those work in sensitive sectors may also be targets.

If you’re concerned that you might be a target for this kind of surveillance, you should activate Lockdown Mode. This is a special feature designed by Apple to harden iPhones against just the kind of targeted cyberattacks used by Pegasus and Graphite. To turn Lockdown Mode on, open the Settings app and go to Privacy & Security → Security → Lockdown Mode.

It’s worth noting that using Lockdown Mode comes some downsides, such limited functionality, reduced convenience, potential compatibility issues, and fewer customization options. It’s therefore not a great option for most people. But if you’re a journalist, or otherwise think you may be a target for spyware, its security benefits are likely to outweigh any relatively minor inconveniences.

Other things you can do include:

Update iOS: The best defense against malware is to keep iOS up-to-date, as Apple routinely patches its mobile operating system to address new vulnerabilities as it becomes aware of them.
Don’t jailbreak your phone: This removes many of the security features that are normally built in to iOS, and potentially allows third parties to bypass the App Store and sideload apps onto your phone without your knowledge.
Factory reset your phone: If you’re suspicious about an app on your phone, you should factory reset your phone. This will get rid of almost all “consumer-level” malware. But it may not be sufficient to dislodge state-sponsored spyware such as Graphite and Pegasus. If you suspect this level of surveillance, its probably best to either call in a professional malware expert or simply replace your iPhone.
Use NetShield Ad-blocker: Proton VPN’s DNS filtering solution can block DNS calls to known malware and phishing domains. The means even if your iPhone becomes infected with malware, it may not be able to “phone home”.

If you are at all concerned about being targeted with state-sponsored malware, Lockdown Mode is specially designed to counter such threats. For everyone else, Apple largely does a good job at keeping iPhones secure, but be sure to keep yours up-to-date with the latest iOS version and to stay vigilant.

Proton VPN spring recap and summer check-in

Antonio Cesarano — Tue, 08 Jul 2025 15:28:22 GMT

People all over the world use Proton VPN to reach the content they want without anyone following them — it’s their front door to the internet. And we rely on your feedback to make sure Proton VPN has the features and performance you need.

Now that warm weather and longer days are upon (most of) us, we want to revisit our spring and summer roadmap and highlight the improvements and features you might have missed and what we’ll be working on over summer.

What we launched in spring

You’ve told us what matters most — so this spring, that’s where our focus went. The features you rely on got smarter, faster, and easier to use, with updates inspired by your feedback.

Greater protection from phishing with NetShield Ad-blocker

Have you ever clicked on a link that takes you to a suspicious website or downloads files you never asked for? Our NetShield Ad-blocker DNS filtering feature has always protected you from a wide range of malware and unwanted trackers, but now you can rely on it for even more protection from malicious actors.

Recent improvements to NetShield ensure that it now blocks almost all known phishing domains (while minimizing “false positives”), making the internet safer and more enjoyable for you to explore.

Longer lasting batteries

Lab tested on a Xiaomi 13T with 5000mAh battery; no apps running

Now you can browse the internet safely, wherever you have reception, without worrying about your smartphone dying. Recent improvements to our Android and iOS apps minimize their background usage when the phone is asleep, conserving battery life when you’re out in the world and using a mobile (cellular) connection.

High-speed browsing for everyone

No one enjoys buffering. Unfortunately, a combination of network conditions and configurations used to prevent some of our community members from gaining the full benefit of Proton VPN’s high-speed VPN network.

With a major improvement to our unique VPN Accelerator technology that can improve speeds by up to 400% compared to other VPN services, Proton VPN now detects these conditions and configurations occurring. It will then automatically reconfigure the connection to ensure you can stream your favorite HD content without buffering issues, enjoy blazing fast page load times, and fully benefit from the bandwidth you pay for.

And lots more

Choose from 3,000+ additional servers, five new countries (Panama, Armenia, Mongolia, Laos, and Brunei), and two new US cities (Memphis, Tennessee, and McAllen, Texas) for your VPN connection. This means our network now has over 13,000 servers in more than 120 countries, making us not just one of the largest and most popular VPN services in the world, but also one of the fastest growing.
Stream more of your favorite content no matter where you are. You can now watch Netflix, Amazon Prime Video, and Disney+ in most countries worldwide.
A ccess other devices on your local network, like smart devices, printers, washing machines, without disconnecting Proton VPN in our Windows and Android apps.
Following the recent redesign of our Windows app, you can now effortlessly connect to your favorite location at any time without opening the main Proton VPN app. Simply use our new system tray widget to connect without interrupting your flow.
Customize our app’s appearance with our new light theme for Android.

What’s coming this summer

Behind-the-scenes upgrades are critical to providing a great VPN experience, but we know you want all our great features on all the devices you love to use every day. So coming soon:

Custom DNS for macOS, iOS, and iPadOS

Normally, when you connect to Proton VPN, we encrypt and resolve your DNS queries. Custom DNS lets you choose one or more third-party DNS resolvers instead, allowing you to access their advanced DNS filtering features, such as parental controls and customized blocklists.

Custom DNS is coming to your Apple devices very soon, so be sure to look out for more updates.

Split Tunneling for Linux and macOS

Split tunneling lets you route some connections through the VPN tunnel while excluding others. For example, you can bypass censorship using a VPN connection for your browser while allowing your banking, streaming, and government services apps to access the local internet. Or use a VPN only for specific purposes, like protecting your torrenting sessions or changing your location when gaming.

Soon, you’ll be able to use split tunneling on Linux and macOS.

Port Forwarding for macOS

You’ll soon see faster transfer speeds when you download and share files using P2P protocols such as BitTorrent on your Mac. You may also see speed improvements as an online gamer. This is thanks to port forwarding, which routes connections through the Proton VPN firewall. Already available on our Windows and Linux apps, this is a feature many of you Mac users have been asking for.

And lots more

Also coming over the summer are:

More improvements to our anti-censorship capabilities: Censorship is becoming more and more prevalent online, which is why we’re expanding methods to help you connect securely and access our service in countries with robust censorship capabilities.
Even better VPN connection profiles on Windows and Android: You’ll be able to make even more customized profiles, as we build upon recent improvements to VPN connection profiles.
Guest mode for iOS and iPadOS: Get instantly connected without a Proton account.
IPv6 support for more platforms: This will ensure full compatibility with the growing number of internet providers using IPv6-only connections.
More ways to pay: Due to popular demand and to make Proton VPN accessible to more people, we’re adding new ways to buy our service. This includes additional cryptocurrency payment options.
More features for Android TV: Some of the community’s most popular requests, these features will give you more control over how you watch your favorite content on your big-screen TV.
Improved support for F1 TV. You’ll soon be able to watch your favorite Formula 1 racing channel safely and securely in more countries worldwide.

An end-of-year sneak peek

We’re also actively working on the following improvements and hope (but can’t promise) to release them later this year:

A command-line interface (CLI) on Linux. We’ll also be exploring GUI improvements.
Optimizations and customizations for gamers for a faster and more responsive gaming experience.
More new features to combat emerging privacy threats online.

We exist because of you

As always, we are deeply indebted to the passionate and highly engaged Proton community for your ideas and your enthusiasm. We couldn’t do this without you, and we’re always looking for ways to improve our products.

So please share your thoughts with us on Reddit or X, or join our community at protonmail.uservoice.com. Together, we’ll build a privacy-first internet that works for everyone

How to set up a Pi-hole

Douglas Crawford — Thu, 26 Jun 2025 17:33:58 GMT

Pi-hole is a free, open-source ad blocker designed for home networks. Originally designed for Raspberry Pi, it now runs on most Debian-based Linux systems. Like Proton VPN’s NetShield Ad-blocker feature, Pi-hole blocks ads by preventing DNS requests to domains known for serving ads.

When people talk about a “Pi-hole”, they’re usually referring to a device dedicated to running the Pi-hole software and filtering the DNS traffic for the other devices on your network. Raspberry Pis are ideal for this job thanks to their low price and low power consumption, making them cost-effective to leave running at all times.

Please note that using a Pi-hole is not compatible with Proton VPN. However, you can install Proton VPN on your router and block ads, trackers, and malware by turning on NetShield Ad-blocker.

How to create your own Pi-hole

This guide assumes you are running a Debian-based system on a suitable device (such as Raspberry Pi OS on a Raspberry Pi). The Pi-hole software is very lightweight and will run happily on very low-end hardware (including Raspberry Pi Zeros).

There are two ways to set up a Pi-hole:

Install the Pi-hole software directly on your device
Run Pi-hole inside a Docker container

For this simple guide, we’ll show you how to install Pi-hole directly onto your device. This is easy, thanks to a simple script.

Before you start, it’s a good idea to ensure your system and packages are up-to-date with the following command:

sudo apt-get update && sudo apt-get upgrade -y

You’ll also need curl installed on your system (it’s pre-installed on many Linux distros, including Raspberry OS). If you don’t have it on your system, you can install it with the following command:

sudo apt install curl -y

Now:

1. In your terminal (in the example below, the Terminal app on Raspberry OS), run:

curl -sSL https://install.pi-hole.net | sudo bash

2. Click OK.

3. Your Pi-hole device will need a static IP address to function properly. Here are instructions for configuring a static IP on Raspberry OS. Click Continue.

4. Select a DNS provider to resolve your DNS queries after Pi-hole has filtered out the ad domains. Click OK to continue.

5. Unless you strongly prefer to use another third-party blocklist, we recommend using Pi-hole’s suggested list. Click Yes to continue. You can always edit it or add more blocklists later.

6. Decide whether you’d like to log DNS queries made through your Pi-hole.

7. If you clicked Yes in the previous step, select a privacy level for your logs. These details will only be available to people with access to your Pi-hole admin console. Click Continue when you’re ready.

8. Your Pi-hole is now set up and running! Make a note of the IP addresses. You’ll need them to configure the DNS settings of any devices you wish to use the Pi-hole with. Also make sure you save the URL and password needed to access the admin webpage.

How to manage your Pi-hole

1. On any device connected to the same local network as the Pi-hole, open a browser window and enter pi.hole/admin:80 or the IP address listed above into the URL bar. Enter your Pi-hole password (also see above).

2. You can now explore Pi-hole’s features, monitor which DNS queries it blocks, and configure advanced settings using the web interface.

How to use your Pi-hole

You can configure the DNS settings of each device on your local network to filter their DNS queries through your Pi-hole. However, a simpler solution is to change the DNS settings of your router so that all devices that connect to the router use the Pi-hole.

Final thoughts

A Pi-hole is more than just an ad blocker — it’s a powerful, network-wide tool that gives you greater control over what enters your digital space. It filters traffic at the DNS level, stopping unwanted content before it reaches your devices.

However, a Pi-hole doesn’t provide privacy. It doesn’t hide your real IP address from the websites you visit, and third-party DNS providers can track your browsing history like your ISP can (it is possible to run your own DNS server, but that’s taking things to the next level).

If you want to block ads and protect your privacy, a trustworthy, no-logs VPN service like Proton VPN is a much better solution. And as noted earlier, our NetShield feature (which also works on routers) affords similar protections

Find your default gateway on any device

Douglas Crawford — Mon, 23 Jun 2025 11:53:17 GMT

A default gateway is a device in a computer network that acts as an access point to other networks. By far the most common type of default gateway is a home or office router that connects devices on the local network such as laptops, smartphones using WiFi, printers, smart TVs, and Internet of Things (IoT) devices to the internet. These devices typically connect to the access point via WiFi or wired Ethernet cable.

In this article, we’ll look at:

What is a default gateway?
What is a default gateway address?
How to find your default gateway on Windows
How to find your default gateway on macOS
How to find your default gateway on Linux
How to find your default gateway on Android
How to find your default gateway on iOS and iPadOS
How to find your default gateway on a Chromebook
Why find your default gateway?
Why the default gateway matters

What is a default gateway?

Default gateways usually mediate data transfer between devices connected to a local area network (LAN) and the internet. If your computer wants to send data to a device outside your local network, it sends it to the default gateway, which then routes it appropriately.

Corporate networks may use multiple layers of firewalls and routers to create subnets. In this case, there will be a default gateway for each local subnet, without which devices are unable to communicate beyond their subnet. In all likelihood, the subnet routers themselves connect to a default gateway that provides access to the internet.

What is a default gateway address?

A default gateway is identified by its IP address. This is a purely local IP address used by devices on your local network that connect to it. If the default gateway connects to the internet, it is not the external IP address that is visible from the internet.

Learn more about how IP addresses work

Most routers have the default IP address 196.168.0.1 or 196.168.1.1, so these are also the most common default gateway addresses. Default gateways may also use IPv6 addresses on systems that are configured for the new system.

How to find your default gateway on Windows

On Windows 11, go to Settings → Network & internet → Advanced network settings → More settings → Hardware and connection properties.

An alternative method that works on all versions of Windows is to use the Command Prompt (cmd). Open cmd and run:

ipconfig

How to find your default gateway on macOS

Open the Settings app and go to Network tab → [Your network] → Details → TCP/IP tab → Router.

How to find your default gateway on Linux

Open a terminal window and enter:

ip route | grep default

How to find your default gateway on Android

This guide was created using a Samsung OneUI phone, but the instructions should be similar for most Android devices.

Open the Settings app and go to Connections → Wi-Fi → [Your network] → ⚙ → View more → IP settings.

Select Static. You can now see a new Gateway field showing your default gateway address. Tap Cancel to revert to your device’s default settings.

How to find your default gateway on iOS and iPadOS

Open the Settings app and go to Wi-Fi → [Your network] → Router.

How to find your default gateway on a Chromebook

Click or tap on the Status area (where the clock is) and go to ⚙ (Settings) → Network → Wi-Fi or Ethernet → Known networks → [Your network] → Network → Gateway.

Why find your default gateway?

Knowing your default gateway address is useful for several reasons:

Network troubleshooting

If you’re having issues connecting to the internet, you can ping the default gateway to see if your device is reaching your router. If the ping fails, the issue is likely within your local network. To ping your default gateway, open a terminal (for example, cmd on Windows or the Terminal app on macOS) and enter:

ping [your default gateway address]

For example:

ping 192.168.1.1

If you see a reply and response time, your device can reach its default gateway.

Router configuration

Typing the default gateway address into a web browser allows you to sign in to your router’s web interface, allowing you to change your WiFi settings, update your router’s firmware, configure port forwarding, view connected devices, and more.

Monitoring network security

Knowing the default gateway address helps you check if you’re connected to the correct network, especially on public or shared networks.

You can also use it to verify whether an unauthorized device is impersonating your network’s router (known as an evil twin attack) by comparing your device’s current default gateway address with the address you know it should be connecting to.

Advanced network management

Knowing your default gateway address is vital for advanced network management, which includes configuring static IPs, subnets, or access control rules (all of which are beyond the scope of this article).

Final thoughts: Why the default gateway matters

Your default gateway is the bridge between your device and the wider internet, quietly handling traffic every time you send an email, browse a website, or stream a video.

At Proton VPN, we want to empower our community take charge of your connectivity. Whether you’re troubleshooting a connection issue, setting up a secure network, or just learning how your devices talk to the web, understanding what a default gateway is and how to find it gives you more control over your network.

Does Instagram’s vanish mode protect your private conversations?

Douglas Crawford — Fri, 13 Jun 2025 16:41:26 GMT

Vanish mode on Instagram is a feature that allows you to have ephemeral conversations. When you turn vanish mode on, your chat messages will disappear as soon as your recipient sees them. Because no permanent record is kept, vanish mode aims to provide an extra layer of privacy and security for your private conversations.

This feature is designed to provide an extra layer of privacy and security for anyone who wants to ensure their messages don’t leave a permanent record. However, as we’ll discuss, you shouldn’t rely on vanish mode to protect sensitive or important conversations. In this article we’ll look at:

What is vanish mode on Instagram?
How to use vanish mode
Benefits of vanish mode
Limitations of vanish mode
Is vanish mode worth using?
For fun only
FAQ

What is vanish mode on Instagram?

Vanish mode is a messaging feature on Instagram designed for fleeting, private conversations. Messages sent in vanish mode automatically disappear after they’ve been seen and the chat is closed, which is great for when sharing something temporarily without leaving a digital footprint. Vanish mode is like Snapchat’s signature feature and similar to Proton Mail’s expiring emails option.

Vanish mode is built into Instagram Direct Messages (DMs) and is available only for one-on-one conversations. This means you can’t use vanish mode in group chats or with people you haven’t messaged before.

As with end-to-end encryption, vanish mode is not available on Instagram in all regions (notably, it isn’t available in the European Union or the United Kingdom).

How to use vanish mode

To use Instagram vanish mode:

1. Start or open a DM with an existing contact

2. Swipe up from the bottom of the screen

Your screen will turn darker, and you’ll see a notification saying Disappearing message that lets you and the other participant know Vanish mode is active.

You can now chat as normal, except your messages vanish once they’re seen and the chat is exited. There’s no saved history, and once messages vanish, there’s no way to retrieve them.

You can exit vanish mode at any time to resume a regular chat. To do this, simply swipe down on the screen.

Screenshot Notifications

If the other person takes a screenshot while you’re in vanish mode, Instagram will notify you. Please note, nothing can stop someone from using sneaker methods, such as taking a photo of the screen using another device.

Benefits of vanish mode

Vanish mode can be a fun way to introduce a little more privacy into your one-to-one chats. No chat history means fewer digital traces and screenshot alerts can provide some peace of mind that intimate conversations and photos will remain private.

It can also be useful when you want things off the record, but not necessarily top-secret. It also helps you save storage space since photos and videos aren’t stored.

However, given the quite extensive limitations of vanish mode (discussed below), a considerable amount of trust is required to use it safely. Vanish mode’s most practical use is to ensure that third parties who gain physical access to your phone aren’t able to access your private conversations after the fact.

Limitations of vanish mode

Assuming it’s even available in your region, you can only use vanish mode for one-to-one chats (not group chats). But the biggest issue is that it’s quite easy for a bad actor to get around the screenshot warning and record conversations without your knowledge. There’s also nothing to stop them from taking a screenshot if they don’t care that you know about it.

As with Instagram’s optional end-to-end encryption for one-to-one chats, another problem is metadata. The content of your chats will disappear, but Instagram and its Facebook-owning parent company, Meta, will continue to know who you talked to, when, how often, and for how long. Meta can use these details to infer personal interests to target you with ads, and it could potentially hand them over to third parties.

Is vanish mode worth using?

Given these limitations, you should be careful using vanish mode. It’s great for jokes, memes, one-off messages, or for sharing quick updates that don’t need to be saved. But if you require real privacy, you should avoid Instagram entirely, even with vanish mode.

If you need to send anything sensitive or important, you should use a secure privacy-focused messenger app instead (such as Signal, which also features disappearing messages). Even using a secure app, you need to trust the recipient to not take photos of their screen.

Final thoughts: For fun only

Vanish mode on Instagram is a fun feature that adds a layer of casual privacy that’s useful for quick, forgettable exchanges. It’s not a secure communication tool.

Frequently asked questions

How to turn off vanish mode on Instagram?

Once Vanish mode is activated, simply swipe down at any time to revert to standard messaging.

Why have my Instagram messages disappeared?

One plausible explanation for messages disappearing is that you or the person you chatted with enabled vanish mode. This is quite easy to do by accident (just swipe up from the bottom of the screen during a conversation), although it’s also quite easy to see this has happened (the screen goes dark, and there is a clear notification).

How to remove vanish mode on Instagram

To remove vanish mode on Instagram, open the chat where it’s enabled and swipe down. The chat background will change back to normal, indicating that Vanish mode is now disabled.

The Proton VPN Blog

Plex: What to know about this media streamer

What is Plex?

1. A (mainly free) media server

2. A commercial streaming service

Is Plex free?

Local streaming

Remote streaming

Is Plex safe?

Is Plex legal?

How does Plex work for streaming?

Open-source Plex alternatives

Jellyfin

Kodi

Plex and Proton VPN

Final thoughts

Omegle is gone, but Omegle alternatives are just as unsafe for kids

What is Omegle and how does it work?

What risks does your child face on apps like Omegle?

Lack of meaningful moderation and safety controls

Exposure to inappropriate content and online predators

Involuntary sharing and recordings

Manipulation and scams

Data collection and privacy risks

What can parents do to protect their kids online?

Talk about online risks and keep the conversation open

Set clear rules and stay involved

Teach kids how to spot red flags

Set up a VPN for your family

Pluto TV: What’s the catch?

What is Pluto TV?

Is Pluto TV safe?

Tracking

Content moderation

Other Pluto TV downsides

Ads

Catalog quality

Video and audio quality

Can you stream Pluto TV with Proton VPN?

Pluto TV alternatives

Pluto TV: There isn’t really a catch

Frequently asked questions

Kanopy: A free streaming app for library members

What is Kanopy streaming?

Is Kanopy free?

How does Kanopy make money?

How to watch content on Kanopy

Can I use a VPN to access Kanopy?

Is Kanopy safe?

Final thoughts: A great free service if you can get it

Brazil innovates on digital self-determination

What is digital self-determination?

Control over your personal data

Transparency and informed consent

Data ownership and portability

Right to be forgotten

Privacy by design

Why digital self-determination matters

How Brazil is working towards digital self-determination

How dWallet works

Reception

Other digital self-determination projects

Digital Self-Determination Network

DECODE

Solid

How to exercise digital self-determination

Final thoughts: A provocation, a prototype, and perhaps the future

How to find spyware and other hidden apps on your iPhone

The spyware targeting journalists

How hackers hide apps on iPhone

How to check your iPhone for Pegasus spyware

How to check your iPhone for Graphite spyware

How to find hidden apps on an iPhone

What to do about spyware on your device

Proton VPN spring recap and summer check-in

What we launched in spring

Greater protection from phishing with NetShield Ad-blocker

Longer lasting batteries

High-speed browsing for everyone

And lots more