Connect Apple TV to Proton VPN

Before you begin

You need a Proton account on the Free or a paid plan, an Apple TV with the WaveSocket app and a phone or computer on the same network as the TV.

Proton offers its own Apple TV app for paid plans, on tvOS 17 or later. WaveSocket works differently: it connects with a standard WireGuard configuration that you create in your Proton account. Proton recommends its own apps where they are available, because some features exist only there.

Proton plan	Servers	VPN options	Devices at once
Free	Free-plan servers	VPN Accelerator only	1
Paid	More servers	Also NetShield, Moderate NAT and more	Up to 10 on VPN Plus

Create the configuration

These steps follow Proton’s WireGuard configuration guide.

1. Sign in to account.protonvpn.com and go to Downloads → WireGuard configuration.
2. Give the configuration a name, such as Apple TV, so you can find it later.
3. Select a platform, for example iOS, and the VPN options you want.
4. Choose a server from the list or accept the recommended server, then select Create.
5. Select Download immediately to save the .conf file.

Proton does not store your private key. A file downloaded later from the list has no private key, so create a new configuration if you need the file again.

The window also shows a QR code. Apple TV cannot read it, so use the downloaded file.

Import on Apple TV

1. On Apple TV, open WaveSocket and choose Profiles → Add VPN profile → Upload from your browser, then select Start upload session. If a VPN is connected, disconnect first.
2. On the phone or computer with the file, scan the QR code on the TV or open the address shown. Enter the code shown on the TV in the 4-digit code field.
3. Select Choose file, pick the .conf file and select Send to Apple TV.
4. Review the profile on Apple TV. Choose Rename to give it a clear name such as Proton Netherlands, then choose Save profile.

Use a trusted home network for this step. The import guide explains the transfer and the other import methods.

Connect and check

WaveSocket selects the saved profile and opens Connection. Choose Connect. The first time, allow Apple TV to add the VPN configuration. Look for Server verified and a recent time next to Oldest peer handshake age.

Every WaveSocket feature is free for three minutes per connection, so you can try your Proton VPN setup before choosing WaveSocket’s Lifetime access, which removes the time limit.

Locations and app features

• Each file connects to the server you chose. For another country, create another configuration and import it as a separate profile: disconnect, start a new upload session and save it. To switch later, disconnect, open the other profile in Profiles and choose Use profile.
• Kill switch, Smart protocol and Stealth are features of Proton’s apps, not of a configuration file.
• NAT-PMP port forwarding needs a client that keeps renewing the port. WaveSocket does not renew it.

If it does not connect

• On the Free plan, disconnect your other device first: only one can be connected at a time.
• Your Proton account lists your configurations with an expiry date and lets you extend or revoke them. Check that this one is still valid. Revoking a configuration disconnects every device that uses it.
• Proton’s configuration files use UDP port 51820. If the network blocks that port, try another network.

Then follow the order of checks in connection troubleshooting.

These steps are based on Proton’s published documentation as checked on 16 October 2026, not on WaveSocket’s own testing with Proton VPN. Labels in your Proton account can change; if they do, follow Proton’s current help pages. Proton and Proton VPN are trademarks of Proton AG. WaveSocket is an independent app, not affiliated with or endorsed by Proton AG.