Download Tunnelblick


Download Tunnelblick. Now download 'Tunnelblick' to establish OpenVPN on your Mac OS X platform. Tunnelblick is an open-source graphic user interface for OpenVPN, allowing control of OpenVPN clients and consists of all necessary binaries and drivers. Go to the official Tunnelblick website. Click on the green arrow to download the latest. Download Tunnelblick for free. A graphical user interface for OpenVPN on Mac OS X. Tunnelblick's official website is at Tunnelblick is a free, open source graphic user interface for OpenVPN on Mac OS X. For macOS 10.4 - 10.9. This is a security and stability update for an old version of Tunnelblick. It should be used only on macOS 10.4 - 10.9. On macOS 10.10 and higher, the latest stable or beta version from the Downloads page should be used. Changes from 3.8.6 to 3.8.6a (SECURITY UPDATE) Fixes a problem that caused Tunnelblick to crash. See the Release Notes for details. For verifying the disk image: MD5.

  1. Download Tunnelblick For Mac
  2. Download Tunnelblick Mac Os

On This Page
Downloading Tunnelblick and Verifying the Download
Installing Tunnelblick
Launching Tunnelblick

The Tunnelblick application contains the Tunnelblick GUI, OpenVPN, and OpenSSL, so no other installations are needed except for VPN configurations.

Updating Tunnelblick: It is usually easiest to update using Tunnelblick's built-in updater (see the 'Preferences' panel of Tunnelblick's 'VPN Details' window), but you can install a new version of Tunnelblick without uninstalling the previous version; the previous version will be upgraded without disturbing your existing configurations and settings.

Downloading Tunnelblick and Verifying the Download

First, download the latest disk image from the Downloads page. If you need help deciding between the 'stable' and 'beta' versions, see Stable vs. Beta.

Note: If you are using an older version of macOS (10.4 - 10.7.4) you should download an older version of Tunnelblick from the Deprecated Downlaods page.

Next, verify the download. This is an important step to ensure that the download was not damaged or deliberately modified en-route to your computer.

Installing Tunnelblick

Depending on your browser and its settings, you may need to double-click the downloaded disk image file to mount the disk image. A window similar to the following will appear:

To start the installation process, Control-click the Tunnelblick icon and click 'Open' and a new window will appear.

If the window is similar to the following:

then your security settings do not allow you to open files that are not from the Mac App Store by double-clicking. You should click 'OK' (the window will disappear), then Control-click the Tunnelblick icon and click 'Open' to open the file. A new window will appear.

If the window is similar to the following:

then click the 'Open' button to continue. The window will disappear and a new window will appear.

If the window is similar to the following:


then you have OpenVPN configurations that have not been converted to Tunnelblick VPN Configurations.

Tunnelblick only uses Tunnelblick VPN Configurations because OpenVPN configurations are difficult to secure properly. When a configuration is converted, all of the original files used by the OpenVPN configuration are collected into the Tunnelblick VPN Configuration and then the Tunnelblick VPN Configuration is secured.

  • Ignore will ignore any OpenVPN configurations. They will not be available for use in Tunnelblick — they will not appear in the list of configurations.
  • Quit will quit Tunnelblick.
  • Convert Configurations will attempt to convert your configurations before installing Tunnelblick. If the conversion fails, Tunnelblick will not be installed.

Click Ignore or Convert Configurations. The window will disappear and a new window will appear.

A window similar to the following window should now be displayed:

Specify whether or not you wish to have Tunnelblick check for updates each time it is launched. When an update is available, you will be given a choice of whether to install the update or not. Tunnelblick checks for updates by making a request to the website each time it is launched, and every 24 hours thereafter while it is running. As part of its normal website operation, the website keeps a log which includes information about such requests; see Privacy for details.

Specify if Tunnelblick should check that your computer's apparent public IP address changes when you connect. This checking may help insure that your configuration is correct, and may help Tunnelblick diagnose DNS problems. Tunnelblick does this checking by making a request to the website before each attempt to connect to a VPN and after a successful connection is made. As part of its normal website operation, the website keeps a log which includes information about such requests; see Privacy for details.

At any time after installation, you can check for an update by clicking the 'Check Now' button on the 'Preferences' panel of the 'VPN Details' window.

At any time after installation, you can change checking for IP address changes individually for each configuration.

Check or un-check boxes to reflect your initial setup and click 'Continue'. The window will disappear and a new window will appear.

A window similar to the following window should now be displayed:

If you are reinstalling, upgrading, or downgrading Tunnelblick, the window will show the version number of the current copy and of the new copy. The current copy of Tunnelblick will be put in the Trash before it is replaced.

The name and password of a computer administrator is needed to install Tunnelblick. Tunnelblick's imbedded OpenVPN needs root privileges because it needs to modify network settings by configuring new network devices, changing routes, and adding and removing nameservers. Because we don't want you to enter your administrator account name and password every time you start a VPN connection, Tunnelblick installs a program that allows it to start a VPN connection with super user rights. Tunnelblick uses your administrator account name and password so it can install this program. Tunnelblick also secures itself from being modified.

Click the 'OK' button to install Tunnelblick to your hard drive. Conversion of OpenVPN configurations to Tunnelblick VPN Configurations, if requested, will be done before the installation so that if they fail the installation will not take place and any existing Tunnelblick installation will not be changed.

After the conversion and installation is complete (it should take only a couple of seconds to install Tunnelblick, but if conversions are done they can take tens of seconds), a new window will appear.

If Tunnelblick is running, the window will look similar to the following:

(Note: Connections set to 'automatically start when computer starts' will not be closed and may interfere with the installation. You must close them manually.)

Click the 'Close VPN Connections and Stop Tunnelblick' to continue. After all connections are closed and Tunnelblick has quit, the installation will proceed.

When the installation has finished, a notification will be displayed.

When there are no configurations (which is usually the case for a new installation of Tunnelblick), the configuration helper will appear:

Click the appropriate button and the configuration helper will guide you through the installation of configurations.

For more details on installing configurations, see Downloading and Installing Configurations.

Launching Tunnelblick

To launch Tunnelblick after setting up configuration and other files, double-click Tunnelblick in the Applications folder. Chrome freezing mac.

If Tunnelblick is running when you log out, shut down, or restart your computer, it will be launched automatically when you log in. It will also be launched automatically if any VPNs are active when you log in. Otherwise you will have to launch it manually when you need it.

Tunnelblick requires few computer resources when no VPN is connected, so most people leave it running all the time.


Alternative Choices for You

From $6.67
From $4.13
ProPrivacy.comScore8.6 out of 10
From $2.25

Why Tunnelblick VPN?

Most commercial VPNs offer custom Mac VPN apps, so why use Tunnelblick VPN? One reason is that it is open source, so you can be fairly confident that it is not doing anything it shouldn’t.

Now… I am usually a very strong advocate for using open source software, but I have doubts about its value when it comes to VPNs, as your VPN provider has full access to your internet traffic anyway. Please see Custom vs. Open Source VPN Clients for my full thoughts on this issue.

Open source aside, Tunnelblick always stays up-to-date with the latest version of OpenVPN, and the latest security patches for it. This means that Tunnelblick is more secure than many custom clients, which can lag behind in this area. It is also bloat-free and stable, which is more than be said for many custom VPN apps.

It is also worth noting that macOS is not quite as well supported by custom VPN clients as Windows is. Small and new VPNs, in particular, often rely on Tunnelblick to provide Mac support. Given how good Tunnelblick is (especially now that it features a kill switch), I do not see this as a problem.


Tunnelblick offers the following features:

  • Full Domain Name System (DNS) leak protection – both Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). Note that Tunnelblick does not support IPv6 routing, and so prevents IPv6 DNS leaks using the simple expedient of disabling IPv6 (optional).
  • Web Real-Time Communication (WebRTC) leak protection*
  • Kill switch (latest beta version only)
  • Available in many languages – Tunnelblick is currently translated to more than 35 languages.

For more information on IP leaks when using a VPN, please check out my Complete Guide to IP Leaks. Note that DNS leak protection is not enabled by default, and must be turned on (see How to use Tunnelblick later).

*OpenVPN 4.2.x protects against Web Real-Time Communication (WebRTC) leaks, so I presume Tunnelblick does too. Certainly, I detected no WebRTC leaks when testing Tunnelblick for this article.

Additional OpenVPN features

Simple edits to the OpenVPN configuration file(s) allow for a high level of customization (if supported by your provider). This includes port selection, cipher selection, cipher bit-length selection, and the choice of running OpenVPN over User Datagram Protocol (UDP) or Transmission Control Protocol (TCP).

This last allows you to run OpenVPN over TCP port 443, which is a great way to defeat censorship blocks (although horribly inefficient from a technical standpoint).

Pretty much every VPN service provides OpenVPN configuration (.ovpn and .conf) files that can be used by Tunnelblick. Tunnelblick can also use special Tunnelblick configuration files (.tblk), but regular OpenVPN configuration files no longer need to be converted into this format to work with Tunnelblick.


As with OpenVPN GUI, Tunnelblick is free in every sense of the word. In order to use it, however, you will need to connect to a VPN server. It is possible to setup your own privateOpenVPN server, but this usually means paying for a commercial VPN service.

Please check out our 5 Best VPN Services and 5 Best VPNs for macOS pages to see some recommended VPN services. Most VPNs have dedicated Tunnelblick setup pages, but you can use their OpenVPN setup files with Tunnelblick even if they don’t.

Privacy and security

Tunnelblick is community developed open source software built on top of the open source OpenVPN protocol. Being open source means that its code can be checked by anyone qualified to do so, but so far the code has not been professionally audited for vulnerabilities or backdoors.

OpenVPN itself, however, has been.

Ease of Use

Here are the steps to use Tunnelblick

Download Tunnelblick For Mac

1. Download Tunnelblick or regular OpenVPN configuration files from your chosen VPN service. You will need one file per VPN server location, although it’s often possible to download multiple configurations in a single zip file. In this case, you’ll need to unzip the files before they can be used.

2. Download, install and launch Tunnelblick. It will ask for your Admin password. On the Welcome screen, select “I have the configuration files.”

3. Drag the configuration file (or multiples files for multiple server configurations) to the Tunnelblick icon in the menu bar.

4. Hit “Install,” then choose whether to install just for yourself or all users of your Mac. It will probably ask for your Admin password.

5. And that’s setup done! To connect to a VPN server, click on the Tunnelblick icon in the menu bar and select a VPN server.

The icon will turn a darker shade to indicate that you are connected. If you hover the cursor over it, it will display additional information.


Turn on DNS leak protection

As already noted, IPv4 and IPv6 DNS leak protection are not enabled by default in Tunnelblick. To enable DNS leak protection go to Configurations -> Settings and tick the boxes next to “Route all IPv4 traffic through the VPN” and “Disable IPv6.”

For more information on leaks when using a VPN, check out our Complete Guide to IP Leaks

Turn on the kill switch

New to the latest beta version of Tunnelblick is a very welcome kill switch feature. This ensures that your real Internet Protocol (IP) address is not exposed in the event of a VPN dropout.

To enable the kill switch, go to Configurations and click on the individual VPN configuration (the kill switch must be enabled for each configuration). Click on the “On unexpected disconnect” field and select Disable Network Access from the drop-down menu.

I ran a couple of tests to ensure the kill switch works correctly. The client was running inside a Virtual Machine (VM). Disconnecting then reconnecting the host machine’s internet connection is a good way to simulate a standard VPN drop-out.

In this test the internet stopped working and I could not reconnect until I disconnected from the VPN. So all good and well. I also tested to see if it is a firewall-based kill by simulating a software crash. This is easily done by force-closing the VPN client and seeing if an internet connection is still available.

Customer Service

Despite being free community developed open source software, quite a lot of support is provided to Tunelblick users. This mainly in the form of extensive documentation, which includes a handy quick start guide and FAQ. There is also a Common Problems section, which addresses the … er… most common problems you are likely to encounter.

If all else fails, there is a Google-hosted discussion forum in which Tunnelblick developers appear to play an active part in answering queries.

Final Thoughts

I liked

  • Free and open source (FOSS)
  • IPv4 and IPv6 DNS leak protection
  • WebRTC leak protection
  • Always uses the latest version of OpenVPN
  • Firewall-based Kill switch (latest beta version only)
  • Can use any regular OpenVPN config file

I wasn’t so sure about

  • Not quite as easy use as some custom VPN clients

I hated

  • Nothing

Tunnelblick is a simple but effective open source VPN client that works with all OpenVPN configuration files. With DNS leak protection, WebRTC leak protection, and a firewall-based kill switch, it also offers all the key features that really matter in a VPN client.

0 User Reviews

Leave a Review - Step 2

Please tell us in more detail about this product

Leave a Review - Step 3

Thanks for your review!
Get 3 months free
  • Fastest VPN we test
  • Servers in 94 countries
  • Unblocks Netflix, iPlayer and more
Get ExpressVPN 30-Day Money-Back Guarantee

The fastest VPN we test, unblocks everything, with amazing service all round

Large brand with very good value, and a cheap price

Longtime top ranked VPN, with great price and speeds

Download Tunnelblick Mac Os

One of the largest VPNs, voted best VPN by Reddit