Return to protonvpn.com Facebook   Twitter   Reddit   ProtonMail
Support Center / ProtonVPN macOS manual IKEv2 VPN setup

ProtonVPN macOS manual IKEv2 VPN setup

Note: We have released a ProtonVPN app for macOS! If your device uses macOS version 10.12 and above, you can download our app here. The tutorial for our macOS app is hereWith our ProtonVPN Mac app, you can connect to ProtonVPN directly without any additional setups.

You can also connect to the ProtonVPN servers by either using TunnelBlick (it uses OpenVPN), or connect manually via IKEv2 protocol.

The manual connection won’t have additional features and this connection method is only available on Mac OS X 10.11 (El Capitan) or newer macOS versions.

MacOS IKEv2 VPN setup for ProtonVPN

1. Download ProtonVPN IKEv2 certificate and open it from your Downloads folder: https://protonvpn.com/download/ProtonVPN_ike_root.der

2. If you are using macOS 10.13.x, the certificate will be added automatically. Otherwise, click on Add in order to add it to the keychain.


3. Right click on ProtonVPN Root CA certificate and then click on Get Info.


4. At this step, it’s enough to select Use Custom Settings and Always Trust only the IP Security (IPsec) for the ProtonVPN connection. Enter your Mac password when prompted and close the keychain window.


5. Open System Preferences and then open Network.


6. In the Network window, click on the Plus icon at the bottom-left corner.

7. A new network setup window will appear. Select VPN in the Interface field, IKEv2 in the VPN Type field, name Service however you like and click Create.

8. You will be prompted to enter server information. In the Server Address and Remote ID fields, type in the hostname of the server you wish to connect to (for example us-nj-01.protonvpn.com). Server hostnames can be found in the Downloads category in your account, under Server Configs section. Each server is named according to its server number and first two letters: https://account.protonvpn.com/downloads

9. Click on the Authentication Settings… and enter your OpenVPN/IKEv2 credentials, you can check them in the Account section: https://account.protonvpn.com/settings. Afterward, click OK.


10. Click Connect and Apply once this screen is prompted.


11. You should get connected now. You can disconnect from the Network screen or VPN status bar at the top right of your screen.


Related articles:
ProtonVPN macOS OpenVPN setup
ProtonVPN iOS IKEv2 manual setup

Post Comment

7 comments

  1. Jos

    Would it be possible to generate a .mobileconfig file for macOS / iOS users?
    Or publish the exact VPN configuration details (like IKEv2 & Child Security Association Parameters, Certificate details, Connection details such as Perfect Forward Secrecy etc.)?

  2. ProtonVPN Team

    Hello Jos, we will send out the config to your email you provided here. 🙂

  3. PacketPusher

    Just wanted to post this because it was not found in any documentation anywhere on the site. Due to the setup with PFsense and using strict firewall configurations; egress traffic is filtered (i,e,. outbound traffic), you must open the outbound ports below for Proton App which uses IKEv2:

    IP Protocol Type= UDP,
    UDP Port Number= 500 <- Used by IKEv2

    IP Protocol Type= UDP,
    UDP Port Number= 4500 <- Used by IKEv2

  4. aras

    i need to connect with ip address instead of hostname on ikev2. can you change your config server to provide this option?

  5. ProtonVPN Team

    Hey Aras, shoot us an e-mail via https://protonvpn.com/support-form if you need server IP addresses. Also, you can ping the server hostname, which is listed in the OpenVPN Config file, though it might not be the most convenient way to get IPs. We are planning to list hostnames on our website in the near future as well.

  6. Bob

    It would be nice if you said it only works for paid servers.

  7. ProtonVPN Team

    Hey Bob, this method for free servers requires a server IP address. For example ping us-free-01.protonvpn.com and use the IP address you will get instead of the hostname.

Leave a Reply

Your email address will not be published. Required fields are marked *

Don't find your answer? We're happy to help you!     Contact Our Support Team

Secure Your Internet Today

Get ProtonVPN