To turn on VPN on Mac, activate an already installed VPN app or an existing VPN configuration in System Settings, not install one for the first time. The exact steps depend on which type of VPN is being used: a third-party app or a connection configured through macOS itself. Both methods are covered below, along with how to confirm the connection actually turned on.
How to Turn On VPN Using a VPN App
A VPN app is turned on by opening the app and clicking its connect button or toggle, which is the most common method for a consumer VPN installed on a Mac. This process takes only a few seconds once the app is open and requires no additional configuration if the app was already set up previously.
Open the VPN App
Open the VPN app from the Applications folder, Launchpad, or the Dock, the same way any other Mac application is opened. If the app isn’t installed yet, it needs to be downloaded and installed first, since this page assumes an existing installation.
Start the VPN Connection
Most VPN apps display a single connect button, toggle switch, or power icon on their main screen. Clicking or tapping this control starts the connection, and the app typically shows a status change, such as “Connecting” followed by “Connected,” within a few seconds.
How to Turn On an Existing VPN Connection in macOS
A VPN connection configured directly through macOS is turned on from System Settings, then VPN (or System Preferences, then Network, on older macOS versions), where a previously created VPN profile can be selected and connected. This method applies only when a VPN profile already exists in macOS; it does not create one.
Open VPN Settings
On current macOS versions, open System Settings, then Network, then VPN. On macOS Monterey and earlier, open System Preferences, then Network, where VPN connections appear in the left-hand list alongside Wi-Fi and Ethernet.
Connect the Configured VPN Service
Select the configured VPN entry from the list and click Connect. The status next to the VPN name changes to “Connected” once the connection is established, and a VPN icon typically appears in the menu bar.
Tip: If no VPN entry appears in this list, no profile has been configured yet in macOS. This method only turns on a connection that already exists; setting one up for the first time is a separate process.
How to Check If the VPN Is On
Confirming a VPN is on involves checking three things: the connection status shown by the app or macOS, the server currently connected to, and whether the public IP address actually reflects the VPN connection. Checking only one of these can miss a connection that appears active but isn’t functioning correctly.
Check the Connection Status
A VPN app usually displays a clear status label such as “Connected” or “Disconnected,” often alongside a colored indicator. For a macOS-configured VPN, the status appears next to the VPN name in System Settings, then VPN, and a VPN icon typically appears in the menu bar when connected.
Confirm the Active Server
Most VPN apps display the name of the currently connected server or location on their main screen once connected. This confirms which server the connection is routed through, though it doesn’t independently verify that traffic is actually passing through it.
Verify the Public IP Address
Checking the public IP through a browser search such as “what is my IP,” or a Terminal command like curl ifconfig.me, confirms whether the address shown matches the VPN server rather than the regular ISP-assigned address. This is a reliable way to confirm the VPN is actually routing traffic, rather than just reporting a “Connected” status.
How to Turn On VPN Automatically on Mac
A VPN can be set to turn on automatically using either an auto-connect feature inside the VPN app or the Connect on Demand option available for VPN connections configured through macOS. Which option applies depends on which type of VPN is in use, and availability of auto-connect features varies by app.
Use Auto-Connect in the VPN App
Many VPN apps include a setting, often labeled “Auto-Connect,” “Connect on Launch,” or “Connect on Startup,” found in the app’s preferences or settings menu. Enabling this causes the VPN to connect automatically when the app opens or when the Mac starts up, though the exact wording and available options vary by provider.
Use Connect on Demand for a Configured VPN
For a VPN configured through macOS, the Connect on Demand option, available in the VPN’s advanced settings within System Settings, then VPN, can be enabled to automatically establish the connection when needed, such as when joining a network. This option is specific to macOS-configured VPN profiles and is not the same feature as an app’s auto-connect setting.
What to Check If the VPN Will Not Turn On
A VPN that won’t turn on is usually caused by a missing internet connection, an unapproved system permission, an authentication issue, or a temporary connection failure that resolves on a second attempt. Working through these in order resolves most cases without needing deeper troubleshooting.
Make Sure the Mac Has an Internet Connection
A VPN requires an existing internet connection, whether Wi-Fi or Ethernet, before it can establish a tunnel; it cannot create internet access on its own. Confirming the Mac can reach the internet without the VPN first rules out this as the cause.
Approve Required VPN Permissions
macOS may prompt for permission to add a VPN configuration the first time a VPN app attempts to connect, and declining or dismissing this prompt prevents the connection from turning on. This permission can be reviewed and granted in System Settings, then Privacy & Security, or by reopening the VPN app and attempting to connect again.
Check Sign-In or Authentication
A VPN that requires an account login will not connect if the sign-in has expired or failed, which typically shows as an error message rather than a silent failure. Signing in again through the app usually resolves this.
Try Connecting Again
A single failed connection attempt is often temporary, caused by a brief network interruption rather than a persistent problem. Disconnecting fully, waiting a few seconds, and attempting to connect again resolves many one-time failures.
For issues that persist after these checks, a dedicated troubleshooting guide for common Mac VPN connection problems covers deeper diagnostic steps.
How to Reconnect VPN After Sleep or a Network Change
A VPN connection commonly disconnects when a Mac goes to sleep or switches networks, and reconnecting typically requires opening the app or VPN settings and connecting again unless auto-connect or Connect on Demand is enabled. This disconnection is expected behavior in most VPN apps rather than a fault, since the underlying network connection is interrupted during sleep or a network switch.
Tip: If reconnecting after every sleep cycle becomes repetitive, enabling auto-connect in the app, or Connect on Demand for a macOS-configured VPN, removes the need to manually reconnect each time.
How to Turn Off the VPN Connection
A VPN is turned off the same way it’s turned on: by clicking the disconnect toggle in the VPN app, or by selecting Disconnect next to the VPN entry in System Settings, then VPN. Once disconnected, the menu bar VPN icon disappears or changes, and the public IP reverts to the regular ISP-assigned address.
The table below summarizes how both actions, turning on and turning off, work across the two VPN types covered in this guide.
| VPN App | macOS-Configured VPN | |
| Turned on via | App’s connect button/toggle | System Settings, then VPN, then Connect |
| Turned off via | App’s disconnect toggle | System Settings, then VPN, then Disconnect |
| Status shown in | App interface | System Settings and menu bar |
| Auto-connect option | App-specific setting (varies by provider) | Connect on Demand |
Frequently Asked Questions
Does Mac have a built-in VPN?
macOS includes a built-in VPN client that can connect to a manually configured VPN profile through System Settings, then VPN, but it doesn’t come with a VPN service already set up. A VPN profile or a separate app still needs to be added before this built-in client can connect to anything.
Is opening a VPN app the same as turning the VPN on?
No. Opening the app only launches the interface; the VPN connection itself starts only after clicking the connect button or toggle inside the app.
Do I need Wi-Fi before turning on a VPN?
Yes, a VPN requires an active internet connection, whether Wi-Fi or Ethernet, since it creates an encrypted tunnel over an existing connection rather than providing internet access itself. Attempting to connect without any internet access will fail.
Can the VPN stay connected when the app window is closed?
In most cases, yes. Closing the app window typically leaves the VPN connection active in the background, since many VPN apps continue running as a menu bar item even when the main window is closed, though this depends on the specific app’s behavior.
Can I keep a VPN connected all the time on Mac?
Yes, using either the app’s auto-connect setting or Connect on Demand for a macOS-configured VPN, both of which are designed to maintain or restore the connection automatically. Whether the connection persists through sleep or network changes without manual reconnection still depends on the specific app or configuration.
Why does the VPN app say Connected but my public IP has not changed?
This can happen if the public IP was checked before the connection fully established, if the browser or IP-checking service is showing cached results, or if the VPN app is only reporting an app-level “Connected” status without traffic actually routing through the tunnel. Rechecking the public IP after a few seconds in a fresh browser tab usually clarifies which is occurring.