Connect to a VPN

Use a Virtual Private Network

A VPN (Virtual Private Network) is an internet connection intended to provide increased privacy and security for users and data. In practice, a VPN client establishes an encrypted tunnel to a public VPN server, which then handles requests to web services on the client’s behalf.

This guide shows how to install and use an OpenVPN client on a Kubuntu Focus system, specifically connecting it to a Proton VPN server. These instructions should broadly apply to other VPN connections as well.

• Decide If You Need a VPN
• Install OpenVPN Client
• Connect to Proton VPN Server
• Related Guided Solutions
• Revisions
• Disclaimer

Use a VPN to route your Internet connection through a remote server.

Please read the disclaimer before proceeding. We review and update guided solutions regularly. If you have suggestions or requests, please write support@kfocus.org.

Decide If You Need a VPN

Businesses and organizations often require a VPN to secure their data. If your work requires you to use a VPN, we suggest you skip to the next section to get started. If, however, you are considering purchasing a VPN for personal use, there are benefits and drawbacks to consider.

A primary benefit of a VPN is that it prevents website servers from seeing your IP address and personal location. Instead, they see the VPN server IP and location. This allows you to bypass geographical restrictions—for example, you can use a US-based VPN server to access US-only content while connecting from the UK. Conversely, this behavior can be annoying when visiting sites like maps, weather, or shopping that benefit from accurate location sensing.

While a VPN offers an additional layer of encryption, it is less beneficial than it once was because most modern internet connections already use robust encryption protocols like TLS or SSH.

The primary drawbacks of a VPN include slower connections, cost, and increased complexity. Mis-configured VPN network routing can break network-related features like network printing. When you see an issue like this, the first trouble-shooting step you should take is to disable the VPN. If that fixes the issue, you can adjust the VPN configuration accordingly.

When you use a VPN, your Internet Service Provider (ISP) can only see the connection you make to the VPN and none of the encrypted content. Instead, the company that provides the VPN server can see what your ISP formerly could: the websites you are visiting, and any unencrypted data transfers. You are therefore trusting the VPN service instead of your ISP. Only trustworthy VPN providers should be used for this reason.

Finally, remember that there are limits to what a VPN can do. It does not make your connection “unhackable:” you can still download and use malicious content. It does not prevent a third-party from logging your connections: the VPN provider can do that. It also does not prevent data theft: you will need to use only encrypted web services to help minimize this possibility.

Install OpenVPN Client

OpenVPN is a popular utility for connecting to VPN services. In our experience, OpenVPN is widely supported and very reliable. If given a choice, we suggest you select OpenVPN over other solutions. To install OpenVPN and its NetworkManager integration packages, run:

Once these are installed, you should be able to connect to most OpenVPN providers.

Use OpenVPN to connect to VPN services.

Connect to Proton VPN Server

Many VPN service providers are available. One of the most common that we see with Kubuntu users is Proton VPN. While we do not favor or endorse any particular VPN, we show how to connect to a Proton server here because of the service's popularity. These instructions should also be useful for connecting to other OpenVPN providers.

We strongly recommend you follow these consolidated instructions instead of those provided by Proton, since theirs are spread over many pages and can be hard to follow. In addition, some directions are incorrect or suboptimal for Kubuntu. For example, they advocate installing GNOME services and tools that can conflict with the KDE desktop, and their Proton GUI client has features like "kill-switch" that can break all networking without warning.

Here are the steps to get you set up in just a few minutes:

1. Ensure OpenVPN is installed as described in the preceding section.

2. Sign into Proton VPN if you haven't already. Log in at https://account.protonvpn.com.

3. Download a suitable OpenVPN configuration file from Proton VPN:

• Get your Linux OpenVPN configuration file here:https://account.protonvpn.com/downloads#openvpn-configuration-files.
• Under "Select platform", click [x] GNU/Linux.
• Under "Select protocol", click [x] UDP (recommended); or [x] TCP if you experience slow VPN speeds.
• Under "Select config file and download", click [x] Free server configs if using a free Proton VPN account. If you are using a paid account, you may choose one of the other options here.

Choose to download a GNU/Linux, UDP, free server OpenVPN file.

• Select a country or server and click the [ Download ] button next to it. Example: us-free-85.protonvpn.udp.ovpn.

Select a VPN server and download the VPN config file for it.

4. While still signed into account.protonvpn.com, go to Account > OpenVPN / IKEv2 username (https://account.protonvpn.com/account-password#openvpn) to view your OpenVPN username and password. IMPORTANT: these are not your regular Proton Account username and password.

Find your OpenVPN credentials in the Proton VPN dashboard.

5. Open KDE System Settings > Connections and create a new network connection.

Create a new network connection in KDE System Settings.

6. Scroll to the bottom of the connection creation window, choose Import VPN connection... and select the OpenVPN configuration file you downloaded from Proton.

Choose "Import VPN connection..."

7. In the configuration window, use the "OpenVPN / IKEv2 username" and password you retrieved earlier in step 4.

Configure the VPN connection's username and password.

8. Use the KDE network widget to enable and disable the VPN as desired.

Toggle the VPN using the KDE network widget.

9. To verify that the VPN is working, visit https://www.whatismyip.com to ensure it shows the locale of the selected VPN server. For example, if it shows Seattle instead of your home city, the VPN is likely working.

Disclaimer

We try hard to provide a useful solution validated by professionals. However, we cannot anticipate every situation, and therefore cannot guarantee this procedure will work for your needs. Always backup your data and test the solution to determine the correct procedure for you.

THIS SOLUTION IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOLUTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.