Mac · macOS
XPASS VPN for Mac (macOS)
A VPN on a Mac encrypts the traffic between your MacBook, iMac or Mac mini and the VPN server, which matters most when you work from hotels, airports and cafés. XPASS sells prepaid passes with a fixed number of days, paid once by card, with no automatic renewal.
macOS asks for your approval at a few specific moments, and it handles sleep and network changes in its own way. This page covers what you will see and what to check. The step-by-step version is in the macOS setup guide.
XPASS has not yet tested this setup. The setup shown in My Pass after purchase is the source of truth.
One-time prepaid payment, no automatic renewal
macOS setup shown on your My Pass page
Covers approval prompts, sleep behaviour and network switching
What a VPN does on a Mac
When the VPN is on, your Mac sends its traffic through an encrypted tunnel to the VPN server. Websites see the server's address, and the Wi-Fi network you are sitting on sees encrypted data instead of the pages you open. That is the practical value when you use public Wi-Fi.
It does not replace macOS updates, a strong login password or HTTPS, and it does not make you anonymous. It also does not hide what you do once you sign in to a service. Read what a VPN does and does not protect first.
What to prepare
- An active pass and the My Pass page open, because login details are shown only there and never emailed.
- A Mac user account that can approve system changes. A standard user may be asked for an administrator name and password.
- A recent macOS version and a stable network for the first download and sign-in.
- The app or connection method named on My Pass. Only download from that name and source. If My Pass points to the Mac App Store, you need an Apple ID.
The pass starts counting down when the account is created, so you can read the setup steps well before you travel.
The macOS prompts you will see
When a VPN app or profile connects for the first time, macOS shows "Would like to add VPN configurations" and asks you to confirm with Touch ID or your password. Choose Allow only for the app named on My Pass.
Some clients also use a system or network extension, and macOS may block it until you approve it in System Settings > Privacy & Security. A message such as "System software from an app was blocked" appears there with an Allow button; on Apple silicon Macs a restart can be requested. Older macOS versions use System Preferences, and labels differ between versions.
If you set up the connection manually, open System Settings > VPN (or Network on older versions), add a configuration, and enter the details exactly as My Pass shows them. A connected VPN shows a status in System Settings and often a menu bar item.
Everyday use on a Mac
Lid close and sleep
When you close the lid or the Mac sleeps, the tunnel normally drops. After waking, Wi-Fi comes back first and the VPN follows; some clients reconnect themselves and some need a click. Check the status before you sign in to something important.
Switching Wi-Fi networks and Ethernet
Moving between networks interrupts the connection briefly. If pages stop loading right after a switch, wait a few seconds and look at the VPN status before you troubleshoot anything else.
Auto-connect habits
Whether a client can connect on login or on demand depends on the app or profile in My Pass, so verify rather than assume. A simple routine works anywhere: connect the VPN before you join a new network and confirm it before you open email or banking.
Menu bar and battery
A VPN client running in the background uses a small amount of battery, as any network software does. If you see high energy use, quit the client, reconnect and check for updates to it.
Troubleshooting on macOS
- No approval prompt: quit the app fully, reopen it and connect again. If a system extension was blocked, open Privacy & Security and look for the Allow button.
- Connected but no internet: disconnect, wait a few seconds, reconnect, then try another Wi-Fi network.
- Drops after sleep: reconnect manually and see how to improve connection stability.
- Firewall or security software interferes: check that the app is allowed under Network settings if you use the macOS firewall or a third-party security tool.
- Login fails: paste the details from My Pass instead of typing them.
To confirm it works, compare your public IP address with the VPN off and on, as explained in how to check if your VPN is working.
Login items, Low Power Mode and moving between networks
These macOS settings explain most of the differences between "it connects" and "it stays connected".
Login items
A VPN client that is not running cannot reconnect after you restart. To have it start with your Mac, open System Settings > General > Login Items (System Preferences > Users & Groups on older versions) and add the app, or enable it in the app's own preferences if it offers that. Newer macOS versions also list background items there, and a switched-off item is a common reason a client never starts. Whether a client can then connect by itself depends on the setup shown on My Pass.
Low Power Mode and sleep
Low Power Mode, in the Battery section of System Settings, reduces background activity. Some laptops also apply it automatically at low charge. If a tunnel drops while the lid is open and the Mac is idle, try turning Low Power Mode off. With the lid closed, the Mac normally sleeps and the tunnel closes, so check the status after waking. Power Nap, where available, can briefly wake the network while asleep, and a client may or may not rebuild its tunnel at that moment.
Switching between Wi-Fi networks
The Mac rejoins known networks on its own, which can happen mid-session when signal drops. Each join briefly breaks the tunnel. If you work somewhere with several access points, such as a hotel or a campus, you may see repeated short drops. Disable "Ask to join networks" only if you do not want prompts, and consider forgetting networks you no longer use under System Settings > Wi-Fi > Advanced. Captive-portal sign-in pages must be completed before the VPN can connect, so open a normal web page first.
After changes, reconnect and compare your public IP address with the VPN off and on.
Compatibility status for Mac
XPASS lists the current supported setup for macOS in My Pass, and that page is the source of truth for the app or connection method to use. Live verification of this platform with our supplier is in progress, so this page is marked as not yet verified, and results may differ between macOS versions and between Intel and Apple silicon Macs.
A 30-day pass suits a month of travel and work; if you also carry an iPhone, see XPASS VPN for iPhone and iPad.
Devices covered
- macOS
How to set it up
Choose a pass
Pick the number of days you need. There is no automatic renewal.
Pay once
Pay by card through Stripe. Your account is created automatically after payment is confirmed.
Open My Pass
Find your login details and the macOS setup shown for your pass.
Follow the macOS setup shown
Install the app or add the connection listed on My Pass, and approve the macOS prompts that appear.
Connect and check
Confirm the status shows connected, then compare your public IP address with the VPN off and on.
Limitations to know first
- XPASS has not yet verified macOS with the live supplier, so the supported setup can change; My Pass is the source of truth.
- System extension approval and menu names vary between macOS versions.
- Auto-connect and kill-switch behaviour depend on the app or profile and may not be available.
- A VPN does not make you anonymous, and some services may restrict VPN connections.
Choose your pass
Prepaid passes. Pay once, no automatic renewal.
Frequently asked questions
Where are the VPN settings on a Mac?
On recent macOS versions they are under System Settings > VPN. Older versions use System Preferences > Network. The labels vary by version.
Why does macOS say a system extension was blocked?
Some VPN clients use a network or system extension, and macOS needs your approval in System Settings > Privacy & Security. Approve it only for the app named on My Pass.
Will the VPN stay on when my Mac sleeps?
The tunnel usually drops during sleep and the client reconnects when the Mac wakes. Some clients need a click, so check the status afterwards.
Does it work on both Intel and Apple silicon Macs?
That depends on the app or profile listed on My Pass. XPASS has not yet verified this platform, so follow what My Pass shows for your Mac.
Do I need administrator rights?
Often yes, for the first approval prompt. A standard account can be asked for an administrator name and password.
Ready when you are
Pick a pass, pay once and follow the setup shown in My Pass for your device.
See passes and pricing