How to Set Up a VPN on Mac (macOS) — 2026 Guide
Setting up a VPN on Mac is fastest using your VPN provider's native macOS app. macOS also supports IKEv2 and L2TP/IPSec natively via System Settings, and WireGuard can be installed from the App Store as a standalone client.
Method 1: Install the VPN app (recommended)
All major VPN providers have dedicated macOS apps. This takes about 3 minutes.
Enable the kill switch in your VPN app settings. On Mac, this prevents traffic from leaking if the VPN connection drops unexpectedly.
- 1. Download the macOS app from your VPN provider's website (not the Mac App Store — the direct download usually has more features)
- 2. Open the .dmg installer, drag to Applications, and launch
- 3. Log in with your credentials
- 4. Click 'Quick Connect' — macOS will request permission to add a VPN configuration; allow it
- 5. The VPN icon appears in the menu bar when connected
Method 2: Native IKEv2 in System Settings
Works without any app. Requires server credentials from your VPN provider.
- 1. Open System Settings → Network → click '+' to add a new interface
- 2. Set Interface to VPN, VPN Type to IKEv2, and give it a name
- 3. Enter: Server Address (from your provider), Remote ID (usually same as server), Local ID (leave blank)
- 4. Click Authentication Settings → enter username and password
- 5. Click Connect — the VPN appears in the Network sidebar
Method 3: WireGuard for macOS
WireGuard's official macOS client is in the Mac App Store.
- 1. Install WireGuard from the Mac App Store (free)
- 2. Open it → Import tunnel(s) from file → select your .conf file
- 3. Toggle the tunnel on — macOS requests VPN permission; allow it
- 4. The WireGuard icon in the menu bar shows connection status
Split tunneling on Mac
Split tunneling lets specific apps bypass the VPN while others use it. NordVPN, ExpressVPN, and Surfshark support split tunneling on Mac. Find it in app settings → split tunneling. You can route only specific apps through the VPN (app-based) or route by IP range.
Troubleshooting
- App blocked by Gatekeeper: System Settings → Privacy & Security → allow the VPN app
- Slow connection: Switch to WireGuard protocol — it's significantly faster than OpenVPN on macOS
- DNS leaks: Enable 'Custom DNS' in app settings — see our DNS leak guide (/learn/how-to-fix-dns-leak) to verify your setup
- VPN not connecting after sleep: Set the app to reconnect on network change in settings
Frequently asked questions
What is the best VPN for Mac?
ExpressVPN has the most polished native macOS app with Lightspeed protocol (faster than WireGuard on their infrastructure). NordVPN's Mac app supports split tunneling and Meshnet. Mullvad is best for privacy-focused Mac users.
Does a VPN slow down Mac internet speed?
Modern VPNs using WireGuard add minimal overhead — typically 5–15% speed reduction on fast connections. Older protocols (OpenVPN) can cut speeds by 20–40%. Switch to WireGuard or Lightspeed (ExpressVPN) in app settings.
Is there a free VPN for Mac?
ProtonVPN's free tier works on macOS with no data cap and a proper macOS app. Windscribe's free tier offers 10GB/month. Avoid most other free VPNs on Mac — the macOS ecosystem has attracted particularly deceptive VPN apps.