macOS says the app "cannot be opened because Apple cannot check it for malicious software".

The app is not distributed through the App Store, so Gatekeeper is cautious the first time. Right-click the app, choose Open, and confirm once; macOS remembers the choice. Check the SHA-256 on the Downloads page if you want to be sure of the file.

Does the Mac app need Homebrew or a separate OpenVPN?

It needs an OpenVPN binary present, which is one command away: brew install openvpn. The app tells you if it is missing and where it looked.

Which is better on a Mac, Tunnelblick or OpenVPN Connect?

Both connect to our network identically. Tunnelblick is open source and shows more detail; OpenVPN Connect is simpler and updates through the App Store. Pick the one you find easier.

Does it run natively on Apple Silicon?

Yes. Our app has an arm64 build, and both Tunnelblick and OpenVPN Connect are universal binaries, so nothing runs under Rosetta.

Setup guides › macOS

Set up a VPN on macOS

On a Mac you have three good options. Our app ships as separate Apple Silicon and Intel builds and runs the same interface as the Windows and Linux clients. Tunnelblick is the classic free OpenVPN client for macOS, and OpenVPN Connect is the official one from the App Store; both import the .ovpn profile from your dashboard in one double-click.

macOS

Easiest: the Privasee VPN app v2.4.9

Same app as Windows. Unzip, drag to Applications, sign in. Needs OpenVPN present (brew install openvpn); the app says so if it is missing.

Download for Apple Silicon Download for Intel All downloads

Or use any OpenVPN client

You do not have to install our app. The network is standard OpenVPN, so any client connects with a .ovpn profile — useful on a machine you would rather not install software on, or if you already run OpenVPN.

Install Tunnelblick (tunnelblick.net) or OpenVPN Connect from the App Store.
Download a profile from the config generator.
Double-click the .ovpn file - Tunnelblick offers to install it.
Pick "Only Me" when asked who may use the configuration.
Click the Tunnelblick icon in the menu bar and choose Connect.

Profiles come from the config generator (sign in first). Generate one per device — that way losing a device means revoking just that profile.

On Apple silicon both clients run natively; no Rosetta needed.

Troubleshooting

AUTH_FAILED right after connecting

The certificate is fine but the account was rejected: an expired subscription, a revoked device, or too many simultaneous connections. Check your dashboard.

TLS handshake keeps timing out

UDP is probably blocked on that network. Use the TCP profile - it runs on port 443 and looks like ordinary HTTPS traffic to most filters.

Connected but no internet

Usually a DNS problem. Confirm the client applied the pushed DNS server, and on Windows keep block-outside-dns on.

Speeds are poor

Try a closer location and prefer UDP. TCP-over-TCP is slow by design and should only be a fallback.

Other platforms

Windows • app Linux • app Android • app iPhone / iPad Router

Plans and prices are on the Pricing page; every location is listed on the Server network page with live load.