Tunl

Tunl is a clean, native macOS client for the WireGuard® VPN protocol.

Import a standard WireGuard .conf file and connect from the menu bar or the main window. Tunl is built on Apple's Network Extension framework and the audited WireGuardKit library, so it is fully sandboxed — no root access, no background daemons, no command-line setup.

It reconnects automatically across Wi-Fi and Ethernet changes, sleep and wake, and dropped links, and shows live handshake and transfer status so you always know the tunnel is healthy. There are no accounts, no analytics, and no telemetry — Tunl collects nothing and talks only to the VPN server you configure.

Bring your own WireGuard server, or any provider that gives you a .conf file.

See the privacy policy or visit the support page for help.