A VPN for Mac that never asks who you are
A native app for Apple silicon and Intel, built on our WireGuard-based LunoGuard protocol. It protects every app on the system, not just a browser — and signing up needs no name, no email address and no card.
Download for macOSBuilt for macOS specifically
Native on both architectures
A universal build that runs at full speed on M-series Macs and on Intel. No Rosetta translation, no emulation layer eating battery in the background.
Protects the whole system
Installed as a system network extension, so every app is covered — Safari, Mail, App Store updates, Messages, and anything else that opens a socket. Browser extensions only ever cover the browser.
LunoGuard protocol
Our WireGuard-based tunnel, with sub-second handshakes and enough throughput to saturate most connections. Falls back automatically when a network refuses it.
Light on battery
WireGuard’s short code path means less CPU per megabyte than OpenVPN, which on a laptop translates directly into runtime you keep.
DNS and IPv6 handled
Every lookup resolves inside the tunnel, and IPv6 is tunnelled rather than quietly ignored — the two most common ways a Mac VPN leaks while showing connected.
No account to create
The app generates a random 16-digit account number on first run. No email address, no name, no password to be breached later.
Installed in about two minutes
Download the .dmg
Roughly 16 MB from the download page. Every release is published with a SHA-256 checksum, and the client is open source — you can build it and compare hashes if you want proof the binary matches the code.
Drag to Applications and open
macOS will ask permission to add a VPN configuration the first time you connect. That prompt is the system network extension being installed; it is what allows the app to protect every application rather than one browser.
Save your account number
A random 16-digit number is generated on your device on first run. Put it in a password manager. There is no email recovery, because there is no email — that is the point, and it means losing the number means losing the account.
Choose a location and connect
Pick from the server list. If you only want certain apps tunnelled, set that up in split tunneling before you rely on it.
Verify it is actually working
Run the DNS leak test and the WebRTC leak test while connected. Connected is not the same as protected, and both take about ten seconds.
What you need
macOS 12 Monterey or newer, on either Apple silicon or Intel. The installer is about 16 MB and the app idles at negligible memory.
One subscription covers every device you own, so the same account number works on your Mac, your iPhone, your TV and anything else at the same time. There is no per-device charge and no device limit to manage.
If you are on an older macOS that we no longer support, the tunnel is standard WireGuard and can be configured manually with a config file from the download page.
A note on “free VPN for Mac”. Running server capacity costs money whether or not the user pays, and independent teardowns of free Mac VPN apps keep finding the same funding models: injected advertising, third-party analytics SDKs, resold idle bandwidth and retained connection logs. If the reason you want a VPN is privacy, a free one is usually working against the thing you wanted.
Common questions
Does macOS already have a built-in VPN?
Will a VPN slow down my Mac?
Does it work with Apple silicon?
Can I use one subscription on my Mac and iPhone?
Do I need to give an email address?
Try it for thirty days
Full product from day one, refundable for 30 days, and no email address anywhere in the process.