VPNonly how it works guides faq install github

Changelog

Everything that's changed, including the things that were broken. VPNonly updates itself from 1.5.0 onwards.

1.9.17 · 6 September 2026

Apps on the VPN can now use the microphone and camera. macOS was blaming VPNonly for those requests and killing the app on the spot — WhatsApp crashed the instant a call started, and Chrome on a video call would have too. VPNonly now launches apps so they answer for their own privacy prompts, the way Terminal does. Also: automatic reconnection after a network change, with a few attempts over a couple of minutes instead of one; quitting with the VPN down and apps still held offline now asks whether to put them back first; a plain log at ~/Library/Logs/VPNonly.

Any WireGuard provider now works, including ones that enforce strict routing like Mullvad and Proton. Import a provider's whole config zip as one entry with a country picker. The control at the bottom names the provider and place; setup moved under ⋯. The "menu bar is full" note shows once and can be dismissed.

Turning an app off no longer asks to quit it, because it never needed to be quit.

Works when another VPN already holds a tunnel interface. VPNonly used to assume one was its own, and could report a connection it didn't have.
Its firewall rules live in their own space, so they no longer disturb other tools' rules.
"Connected" only appears once the VPN server has actually answered.
Asks before closing a running app. A background check could previously quit one with no warning.
A blocked app fails immediately instead of hanging until it times out.
Tries another server when one doesn't answer.
Simpler setup, with clear instructions if a much older version is still installed.
No longer shows a problem while it's still working.

Check. Compares a routed app's exit IP with your Mac's own, and re-checks in the background.
Switching an app out is instant. It used to keep using the tunnel for up to a minute.
Safari removed from the list. No per-app VPN on macOS can route it.
Release This Mac, to move a licence to another machine.
Open it in a window instead of the menu bar panel, and it remembers which you prefer.
Updates arrive within the hour.
Fixes for launching after a reinstall, and for apps appearing closed after an update.

Every country your provider offers, 149 rather than a hardcoded ten, with search and recents.
Apps stay in the VPN after you quit them. The switch is a lasting choice.
Automatic updates, without macOS asking you to approve the app again.
Opens in a window with a Dock icon when the menu bar is full.
Multi-monitor and licence field fixes.

Any WireGuard provider: import a config from Mullvad, Proton, IVPN, AirVPN or your own server, alongside NordVPN token setup.
Instant switching. Each app gets its own group, so moving one in or out is a firewall change rather than a restart.
The menu bar app: every app on your Mac, searchable, with a switch each.
One password prompt ever, instead of one per action.
Licence activation, and an uninstaller that removes the root engine and its permissions.