Fix VPN Disconnections on macOS

A VPN that stays connected for ten minutes and then silently falls off is more irritating than one that never connects at all. You get used to it working, you stop looking, and then you notice a drop only after you have loaded a page, sent a message or logged in on an unprotected connection. If you searched for Mac VPN keeps disconnecting, the good news is that drops are rarely random. They follow patterns, and each pattern points to a different fix.

This article is organised around finding the pattern rather than trying every setting at once. You will time the drops, collect evidence with tools already on your Mac, match the evidence to one of four patterns, and apply the targeted fix. For a broader, step-by-step flow, the Mac troubleshooting guide is the companion piece.

Step one: write down when it drops

Before you change anything, spend one working day noting what happens. Keep a text file open and add a line each time the VPN drops: the time, what you were doing, what network you were on and whether the Mac had just woken. Even five or six entries usually reveal a shape.

Use this table to translate what you see into a first suspicion.

What you notice	First suspicion	Jump to
Drops soon after opening the lid	Sleep and wake handling	Pattern A
Drops when you walk, or in a large building	Wi-Fi roaming or weak signal	Pattern B
Drops at about the same interval, such as every 10 or 30 minutes	A timer: idle limit, lease renewal or power setting	Pattern C
Drops after you start a particular program	Software clash	Pattern D
Drops only on one network, never on another	That network	Pattern B or C
One sudden stop on a certain date	Pass expired	See the final section

Also record whether the drops are complete (no internet at all) or partial (internet works, but the VPN shows disconnected). Complete loss points at the network; partial loss points at the tunnel.

Collect evidence with tools already on your Mac

You do not need to install anything to get useful data. Three built-in tools answer most questions.

Wi-Fi details. Hold the Option key and click the Wi-Fi icon in the menu bar. You will see signal strength (RSSI), noise, channel, band and the transmit rate. A signal weaker than about minus 70 is marginal for steady use. For more depth, hold Option, click the icon again and choose Open Wireless Diagnostics, which can monitor your connection for a while and flag interruptions.

A ping to your router. With the VPN switched off, open Terminal and run ping followed by your router's address (shown under System Settings, Network, your connection, Details) for a few minutes. Press Control and C to stop. Count the lost packets. A router that drops even a few percent of pings will make any VPN drop. This test separates a local network problem from a VPN problem. If you are unsure what the numbers mean, the Cloudflare page on latency explains the vocabulary.

The sleep and wake log. Run pmset -g log in Terminal, or filter it with pmset -g log | grep -E "Sleep|Wake", and compare the times of sleeps and wakes with the times you wrote down. If drops line up with wakes, you have found Pattern A without guessing.

Keep what you collected. It is exactly what support will ask for if you end up contacting them.

Pattern A: it drops after sleep or when the lid closes

A sleeping Mac pauses most network activity so that the battery lasts. The VPN tunnel is a live conversation, and when the Mac stays quiet for long enough, the VPN server can consider the session dead. On wake, the app must notice and rebuild the tunnel. Sometimes it does so quickly, sometimes it hangs.

What helps:

1. Check the status on every wake. Make it a reflex before you open mail or banking.
2. Disconnect before closing the lid for a long time, then reconnect after. This avoids a half-dead tunnel.
3. Review the power settings. In System Settings, Battery (or Energy Saver on a desktop), look at Low Power Mode and the option to wake for network access. Low Power Mode reduces background activity, and a Mac that wakes only briefly may not rebuild the tunnel. Try turning Low Power Mode off for a day and compare.
4. Plug in for long sessions. Some Macs behave differently on power than on battery.
5. Restart the app after a deep sleep if it stays stuck on connecting. Quitting from the menu and reopening is gentler than restarting the Mac.

If you depend on the VPN for sensitive work, look at what a kill switch does and check whether your app offers one, so that a failed wake does not leave your traffic unprotected.

Pattern B: it drops while you move or on weak Wi-Fi

Wi-Fi roaming is a classic cause. In a big office, hotel or campus, your Mac may jump from one access point to another. Each jump briefly changes the path your traffic takes, and a VPN tunnel that was built on the old path can stall.

Signs: drops when you stand up, move between rooms or leave a desk for a meeting. Remedies:

• Stay near one access point when you can, particularly during calls.
• Prefer the 5 GHz band where it is available. It is faster and less crowded, though its range is shorter than 2.4 GHz.
• Forget and rejoin the network if it was joined a long time ago, since stale settings sometimes linger.
• Look at the private Wi-Fi address option. Newer macOS versions can use a private, sometimes rotating, address for each network. In the network's details, setting it to a fixed value can stop address changes that confuse a tunnel. Change only one thing at a time.
• Use Ethernet or a phone hotspot as a test. If the drops vanish, the Wi-Fi was the issue and the fix is on the router side or in your position.
• Report hotel and cafe networks if they push you off every few minutes. You cannot repair a shared network, so a different connection may be your only fix.

Pattern C: it drops on a timer

Regular intervals are good news, because a repeating number is a strong clue.

• Idle timeouts. Some networks and routers close connections that carry no data for a while. If the VPN drops after quiet periods, the cause may be a timeout in the middle, not in your Mac.
• Address lease renewal. A router hands out your local address for a set time, often minutes to hours, and renews it. A poorly behaved router can interrupt traffic at renewal. If drops happen at a steady interval on a home router, restart the router, check for firmware updates and, as a test, try another network.
• Scheduled tasks. Backups, cloud syncing and software updates that start on a schedule can saturate a slow link. The tunnel then times out under load. Pause the heavy task and watch.
• Captive portals. Some public networks log you out after a fixed time and demand a new sign-in. The VPN drops with them. You will usually see a sign-in page when you open a browser.
• MTU problems. If a certain action, such as loading a large page, kills the tunnel, the cause may be packets that are too big for the network path. The idea is explained in RFC 1191, and fixing it usually means changing the app's connection method or asking support, not typing numbers at random.

Compare the interval with the times in your notes. A neat number like exactly thirty minutes is almost never a coincidence.

Pattern D: it drops after another program starts

Other software on the Mac can touch network traffic. The usual suspects:

• A second VPN or proxy. Two tunnels fighting over the same traffic is the most common clash. Quit or remove the extra one.
• Security suites and content filters. Some install network filters that may interrupt or inspect a tunnel. Temporarily switching one off for a test, on a network you trust, tells you whether it is involved; then adjust its settings rather than leaving protection off.
• Network utilities and firewall tools that rewrite traffic.
• Local-network features. Sharing or discovery services sometimes interact oddly with a tunnel.

To test, restart in a clean state: quit everything non-essential, connect the VPN and add programs one by one. When the drop returns, the last program you opened is your suspect.

When the clean fixes do not work

If your pattern analysis does not explain the drops, try these in order.

1. Quit the app fully, reopen and reconnect. Do not just press disconnect.
2. Choose a different location in the app. Sometimes one route is poor at one hour. If the new route is stable, you have your answer without changing anything else.
3. Keep the default connection settings unless support recommends another. Changing protocols or options at random usually makes diagnosis harder.
4. Update macOS and the app. Both fix network bugs regularly.
5. Reinstall the app and approve the macOS permission prompts again, if updates change nothing.
6. Check your pass. A prepaid pass counts days from delivery, so a sudden end of connectivity on a particular date may simply be expiry. How a pass expires explains the dates.

When you contact support, give them your macOS version, the app version, the network type, the pattern and the times you recorded. The reconnect guide and the page on improving connection stability cover more ideas.

A worked example

Hannah, a designer, finds her VPN drops several times a day. She starts a log. After three days, the entries show that every drop is within two minutes of her Mac waking from the lid-closed state, but never while she works. She checks the sleep log in Terminal and confirms that the timestamps agree. That is Pattern A.

She turns off Low Power Mode, plugs in during long sessions and builds a habit of glancing at the VPN status when the screen wakes. For one particularly long meeting break, she disconnects first and reconnects after. Drops fall from several a day to almost none, and the one that remains is on a hotel network she cannot change. Her whole fix cost nothing except a day of note-taking.

Limits and what to watch for

• Not every drop is the Mac's fault. Shared Wi-Fi, travel networks and busy times can interrupt any VPN.
• Do not leave protections off to stop the drops. Test in a controlled way and turn things back on.
• Avoid downloading "network repair" utilities. They tend to do more harm than the problem.
• A drop can expose normal traffic. While the tunnel is down, your connection may carry traffic outside it, so pause sensitive tasks until you reconnect.
• Results vary by network. What fixes one Mac on one network may not fix another.

Summary

A Mac VPN that keeps disconnecting usually follows one of four patterns: sleep and wake, Wi-Fi movement or weakness, a timer, or a software clash. Log the drops, gather evidence with the Wi-Fi details, a router ping and the sleep log, and apply the fix that matches the pattern. If nothing explains it, work down the clean-fix list and send support a clear timeline.

When you are ready to pair a stable setup with a pass, the pricing page shows what is available.