Using WireGuard on macOS
آخر تحديث:
This guide for macOS users explains how to connect to Mullvad’s WireGuard® servers.
Option 1: use the Mullvad app
The Mullvad VPN app for macOS uses the WireGuard protocol by default, so all you need to do is connect.
Option 2: use the WireGuard app
Currently, the WireGuard app requires macOS version 12.0 (Monterey) or newer.
Download WireGuard app
- Open the macOS App Store and find the WireGuard app.
- Click Get/Install to download and install the app.
- Start the WireGuard app from your computer's Launchpad or Application folder. The WireGuard icon will display in your desktop's top menu bar (no window will automatically open).
Generate a configuration file
- In a browser window, navigate to our WireGuard configuration generator.
- Enter your Mullvad account number in the Account number field.
- Under Platform, choose macOS.
- Click on Generate key. (Generate a separate key pair for each device that you use.)
- Select a country / city / server.
- (Optional) Select the DNS content blockers that you want to use.
- Click on Download file and wait for the file to download.
Import the configuration file
- Click on the WireGuard icon in your macOS top menu bar.
- In the drop-down menu, select Import tunnel(s) from file...
- Navigate to your Downloads folder and select the configuration file that you downloaded from our website.
- Click Import.
- Click Allow if you get a pop-up saying "WireGuard would like to Add VPN Configurations."
Connect
- Click on the WireGuard icon located in your desktop's top menu bar.
- In the drop-down menu, select the Mullvad VPN server that you want to connect to, for example "mullvad-se2".
- A checkmark will appear next to it. That's it!
- You can visit our Connection check to check that you're connected.
You can view more detailed information about connection status as well as manage your connection under "Manage Tunnels" in the drop down menu.
Disconnect
- Click on the WireGuard icon located in your desktop's top menu bar.
- In the drop-down menu, click on the server that you're connected to (the one with a checkmark next to it).
- The checkmark will disappear, signaling that you are disconnected.
Local network sharing
- Clcik on Manage Tunnels in the drop down menu after clicking the WireGuard icon in the top menu bar.
- Click on the server profile
- Click on the edit
- Check the Exclude private IPs checkbox in the bottom left corner
- Under Allowed IPs add ,10.64.0.0/10 to the end of AllowedIPs
- Click on the Save icon
- Deactivate and then Activate the server profile that you edited
Is it working?
While on your device, visit our Connection check to get a quick overview of your Mullvad-WireGuard connection status. In addition, it's a good time to check if your browser is leaking information and therefore jeopardizing your privacy.
FAQ
Q: I get a pop-up, "WireGuard' is trying to view tunnel private keys" when trying to edit a tunnel. Is this normal?
A. Yes. Click on Use Password if you want to continue.
External resources
- WireGuard homepage
- WireGuard whitepaper (PDF)
- WireGuard installation instructions
- WireGuard quickstart instructions
- Donate to WireGuard development
- Formal verification of WireGuard protocol
- wg(8) homepage
- wg-quick(8) homepage
"WireGuard" is a registered trademark of Jason A. Donenfeld.