DNS Leak Checker

VPN Not Working on Mac — Step-by-Step Fix Guide

macOS handles VPN connections differently from Windows, and recent versions have introduced stricter security controls that can break VPN functionality. Whether you're dealing with network extension permissions, Keychain conflicts, or macOS firewall issues, this guide covers every Mac-specific VPN fix.

Is your connection leaking right now?Run the free DNS, IP and WebRTC leak test. It takes about 3 seconds.Run the leak test →

Not sure if your DNS is leaking? Find out in seconds.

Run a Free DNS Leak Test Now

Common Causes

Network Extension Permissions

macOS Ventura and later require explicit permission for VPN network extensions. Denying or missing this prompt prevents your VPN from creating a tunnel.

Keychain Access Conflicts

VPN credentials stored in macOS Keychain can become corrupted or locked, preventing authentication with your VPN server.

macOS Firewall Interference

The built-in macOS firewall can block incoming connections that some VPN protocols need to establish and maintain the tunnel.

Split Tunnelling Misconfiguration

Incorrectly configured split tunnelling on Mac can route DNS queries outside the VPN while other traffic goes through it.

macOS DNS Cache Issues

macOS aggressively caches DNS responses. Stale cache entries from before connecting to the VPN can cause DNS resolution to bypass your tunnel.

Step-by-Step Fix

  1. 1

    Grant Network Extension Permissions

    Go to System Settings → Privacy & Security → Network Extensions. Ensure your VPN app is listed and enabled. If it's missing, uninstall and reinstall the VPN to trigger the permission prompt again.

  2. 2

    Reset Keychain VPN Entries

    Open Keychain Access, search for your VPN provider name, and delete all related entries. Relaunch your VPN app and re-enter your credentials to create fresh, uncorrupted Keychain entries.

  3. 3

    Configure macOS Firewall

    Go to System Settings → Network → Firewall. Either add your VPN app to the allowed list or temporarily disable the firewall to test if it's the source of the problem.

  4. 4

    Flush the DNS Cache

    Open Terminal and run: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder. This clears stale DNS entries that might be bypassing your VPN's DNS servers.

  5. 5

    Set DNS Servers Manually

    Go to System Settings → Network → your active connection → Details → DNS. Remove existing entries and add your VPN provider's DNS servers, or use 1.1.1.1 and 1.0.0.1 as fallback.

  6. 6

    Try a Different VPN Protocol

    In your VPN app settings, switch from OpenVPN to IKEv2 or WireGuard. macOS handles IKEv2 natively and it often resolves connection issues caused by third-party network extensions.

  7. 7

    Test for DNS Leaks

    After applying these fixes, run a DNS leak test from our homepage. If your ISP's DNS servers appear in the results, your Mac is still leaking DNS queries outside the VPN tunnel.

While fixing your VPN, run a DNS leak test to make sure your real IP isn't exposed

Run DNS Leak Test

Not sure if your DNS is leaking? Find out in seconds.

Run a Free DNS Leak Test Now

Related Guides

VPN Not Working?Diagnose why your VPN isn't protecting youVPN Fix: WindowsFix VPN issues on Windows 10/11VPN Fix: iPhoneFix VPN on iOS step-by-stepVPN Fix: AndroidSolve Android VPN issuesNordVPN Not WorkingTroubleshoot NordVPN connection failuresWebRTC Leak TestCheck if your browser is leaking your real IPDNS Leak CheckerTest your DNS, IP & WebRTC privacy

Frequently asked questions

Why does my VPN disconnect after Mac goes to sleep?

macOS aggressively manages network interfaces during sleep. Enable your VPN's auto-reconnect feature, and in System Settings → Battery → Options, disable 'Put hard disks to sleep when possible' to reduce disconnection frequency.

How do I fix VPN network extension errors on macOS?

Go to System Settings → Privacy & Security and look for a blocked network extension notification. Click Allow, then restart your Mac. If no prompt appears, fully uninstall your VPN and reinstall it.

Does macOS have built-in VPN leak protection?

No. macOS does not natively prevent DNS leaks when using third-party VPNs. You need to manually set DNS servers or use a VPN provider like NordVPN that handles DNS leak protection automatically.

Why is my VPN slow on Mac but fast on other devices?

macOS network extensions add overhead. Try switching to WireGuard protocol, which is lighter and faster. Also check if your Mac's firewall or antivirus is inspecting VPN traffic, which adds latency.

Stop leaks for good

A VPN with private DNS on every server, a kill switch and WebRTC protection closes every leak this site tests for.

Get NordVPN →

30-day money-back guarantee · We may earn a commission