Tunnelblick on macOS

This guide will help you connect to Mullvad VPN servers using the OpenVPN client Tunnelblick on your macOS.

Set-up instructions

This guide was verified with macOS 13.2 and Tunnelblick 3.8.7a (build 5770).

1. Download Mullvad configuration file

1. Visit our configuration file generator page to download a configuration file.
2. Enter your account number and choose your configuration options.
3. Download and extract the zipped files.

2. Install Tunnelblick

1. Download the latest TunnelBlick release.
2. Open the folder where the file was downloaded and double-click the .dmg file.
3. Follow the on-screen installation instructions.

3. Import configuration file

1. Open the folder containing your extracted configuration files.
2. Double-click on the Mullvad.tblk file to open it with Tunnelblick or drag it to the Tunnelblick icon in the macOS menu bar.
3. Follow the on-screen instructions to install the configuration file.

4. Verify the OpenVPN version

1. Click on the Tunnelblick icon in the macOS menu bar
2. Click on VPN Details...
3. Click on the Mullvad server configuration in the left column of the app
4. Click on the Settings tab.
5. Make sure that OpenVPN version is set to Latest and that it's not version 2.3.x.

5. Connect to Mullvad

1. Click on the Tunnelblick icon in the menu bar and choose the Mullvad server that you imported.
2. Follow any on-screen instructions until you are connected.

How to add firewall rules (optional)

The following instructions will block everything in and out except via the IP address specified.

1. Open the file /etc/pf.conf and edit it so that it contains the following rules (the ordering is important!), replacing xxx.xxx.xxx.xxx with the IP address of the Mullvad server you wish to use.
   block drop all
pass on lo0
pass on utun0
pass out proto udp from any  to xxx.xxx.xxx.xxx port 1300
2. Once completed, open a terminal window and run sudo pfctl -f /etc/pf.conf to import the rules.
3. Reboot your computer to activate these changes.
4. The firewall is turned off by default. Turn it on by running sudo pfctl -e.

Is your browser putting your privacy at risk?

Even while you're connected to Mullvad, your browser could still be leaking information and therefore jeopardizing your privacy. Visit our Connection check to get a quick overview of your connection status.