Support Center / General information / For macOS users: What is neagent?

For macOS users: What is neagent?

Neagent stands for the Network Extension Agent and it facilitates the connection from your Mac to our VPN servers. Since our VPN app for Mac uses the IKEv2/IPSec VPN protocol, allowing the neagent to access Keychain is a necessary step to create a secure VPN connection. 

Before you can connect, the neagent must receive VPN authentication data stored in your Mac’s Keychain password management system. If you click Deny, the neagent will not connect to Keychain, and you will not be able to establish a VPN connection. 

If you click Allow, this permission will only apply to your current session. You will need to give the neagent permission again the next time you try to connect to a VPN server. 

If you click Always Allow, the Proton VPN app will automatically access Keychain each time you log in, and you will not need to give the neagent permission upon each connection. (However, if you change your password, you will need to update the permission in the neagent popup window.)

Related articles:

Proton VPN macOS application

your internet

Get Proton VPN
Get Proton VPN

Contact us

Support form

Tell us about the problem and we'll get back to you as soon as we can.

Open support form

Live chat

Get help from a support agent in real time. Available with a paid VPN subscription.

Chat with us

Secure email

Send us an encrypted message at It may take us longer to respond.

Email us