When should you enable Proton VPN Secure Core? Use it when reducing correlation between entry ISP and exit service matters; skip it for streaming, gaming, and routine calls.
Concept primer: what Secure Core is. Match threat model to delay budget. Cafe Wi‑Fi sniffing needs a normal Plus exit; joined entry/exit logging risk is why Secure Core exists.
Turn it on
Sensitive sessions on hostile networks, with Kill Switch enabled. Device malware and named logins outside the tunnel still defeat the point. Decide Tor vs Secure Core separately—see Tor over VPN and the scenario note.
Leave it off
Streaming and realtime apps. Free accounts lack Secure Core—see data exhausted. Prove workflows on a normal node before paying the hop tax.
Verify
IP tests should show the exit country. Pair with DNS checks and NetShield false positives. Hotel captive portals first. CLI: Linux CLI. Builds: download; guides; FAQ.