macOS · Network & Internet

Configure VPN and Network Profiles on Mac

VPN settings let you connect to a private network over an encrypted tunnel — common for remote work — while Network preferences let you manage multiple connection profiles, proxies, and advanced TCP/IP settings for different locations or services.

How to open VPN & Network Profiles

  1. Open System Settings → VPN (or Network → VPN).
  2. Click Add VPN Configuration and choose the protocol your organization uses.
  3. Enter the server address, account, and authentication details provided by your IT team or VPN provider.
  4. Turn on 'Show VPN status in menu bar' for one-click connect and disconnect.

What you should know

  • Add a VPN configuration manually with server address, account, and protocol (like IKEv2), or install one via a configuration profile from your organization.
  • A VPN status icon can be shown in the menu bar for quick connect/disconnect without opening System Settings.
  • Network locations let you save different sets of network settings (like office vs. home) and switch between them.
  • Advanced network settings per connection include DNS servers, proxies, and hardware (MAC address) options.

Corporate VPN profiles often route all your internet traffic through your company's network while connected, which can affect access to personal sites or slow down unrelated browsing — check with your IT team about split-tunneling if that's a concern.

Why it matters

VPN access is often the only way to reach internal company resources like file servers or internal tools while working remotely, so a broken VPN configuration can block an entire day of work. Network profiles matter for anyone who regularly moves between different environments (home, office, client sites) with different proxy or DNS requirements, since manually reconfiguring network settings every time is tedious and error-prone. Getting DNS and proxy settings right in Network preferences also affects browsing speed and whether certain internal sites resolve correctly at all. Because VPN traffic is encrypted, it's also a meaningful privacy and security tool on untrusted networks like public Wi-Fi.

Best practices

  • Get exact server address, account, and protocol details from your IT department rather than guessing, since VPN configurations rarely work with partial information.
  • Turn on the VPN status menu bar icon so you can confirm connection state at a glance before accessing internal resources.
  • Save separate network locations if you regularly switch between environments (like home and office) with different proxy or DNS needs.
  • Use your organization's official configuration profile when one is provided instead of manual entry, since profiles often include additional required certificates.
  • Disconnect from VPN when you don't need internal access, since some VPNs route all traffic through the company network and can slow down unrelated browsing.

Common problems and fixes

VPN connects but internal company resources (like file shares) still aren't reachable.
Confirm DNS settings are being pushed correctly by the VPN profile under Network → VPN → Advanced, and check with IT whether split-tunneling is expected to include the resource you need.
VPN fails to connect with an authentication error.
Double check your username and password (and any required certificate or two-factor code), since VPN authentication failures are most often simple credential mismatches or an expired certificate.
Internet feels much slower after connecting to VPN.
This is expected if the VPN routes all traffic through the company network rather than split-tunneling; ask your IT team whether split-tunneling is available for non-work traffic.
A saved network location doesn't apply its expected proxy or DNS settings.
Re-open Network settings, select the correct location from the location switcher, and re-verify each service's (Wi-Fi, Ethernet) individual advanced settings, since a location only overrides what's explicitly configured within it.

Tips and tricks

  • Command-click the VPN status menu bar icon area or open Network settings directly from Control Center for faster connect/disconnect without digging through System Settings.
  • Create a dedicated 'Travel' network location with conservative proxy and DNS settings if you frequently connect from hotels or airports with captive portals.

Frequently asked questions

Do I need special software to connect to my company's VPN?

Not always — macOS has built-in support for common protocols like IKEv2 and L2TP over IPSec, though some organizations require a dedicated VPN client app for their specific service.

What's the difference between a network location and a VPN configuration?

A VPN configuration is one specific encrypted connection you turn on or off, while a network location is a saved bundle of settings across all your network interfaces (Wi-Fi, Ethernet, proxies) that you switch between as a whole.

Is it safe to use VPN on public Wi-Fi?

Yes, connecting to a trusted VPN is one of the more effective ways to protect your traffic on public or unsecured Wi-Fi, since it encrypts data between your Mac and the VPN server.

More Network & Internet guides for macOS

See every macOS guide