VPNGeek
Purchase
Guides › VPN APPS

macOS & iOS: install the VPNGeek profile and connect

macOS 13+iOS 16+VPNGeek app v3+ 6 min · Updated Jul 2026

Install the VPNGeek configuration profile on your Apple device, allow the VPN, and connect automatically on demand.

On Apple platforms the VPN is delivered as a system configuration profile. When you first connect, the VPNGeek app asks macOS or iOS to add a VPN configuration; you approve it once, and from then on the tunnel is a native part of the operating system. This guide covers signing in, approving the profile, connecting, and turning on connect-on-demand so protection resumes on its own.

Before you start

  • An active VPNGeek subscription and your account email and password.
  • macOS 13 (Ventura) or newer, or iOS/iPadOS 16 or newer.
  • The VPNGeek app installed — from the Mac App Store or the iOS App Store, or the notarized .dmg from your dashboard on macOS.
  • Your device passcode or Mac administrator password, which the OS requires to add a VPN configuration.

1. Sign in to the app

Open the VPNGeek app and sign in with your account email and password. If you have two-factor authentication enabled, enter the code from your authenticator. Once signed in you will see the location list and a large connect button.

2. Allow the VPN configuration

Tap or click Connect for the first time. The app hands a configuration profile to the operating system, which then prompts you:

  • iOS / iPadOS: a dialog reads "VPNGeek Would Like to Add VPN Configurations". Tap Allow, then confirm with Face ID, Touch ID, or your passcode.
  • macOS: a sheet asks you to allow the VPN configuration. Click Allow and enter your administrator password.

This approval happens only once per install. It grants VPNGeek permission to manage a VPN configuration, not access to your data.

Note. If you downloaded a standalone profile from the dashboard instead of the app, open Settings > General > VPN & Device Management on iOS (or System Settings > General > Device Management on macOS) and tap Install, then Trust, to activate it.

3. Connect

After you allow the configuration, the tunnel establishes within a few seconds. The button turns to Connected and the system status bar shows the VPN indicator — a small VPN badge on iOS or the VPN icon in the macOS menu bar. Pick a different location from the list at any time and the app switches the tunnel for you.

4. Enable connect-on-demand

Connect-on-demand tells the operating system to bring the tunnel up automatically whenever your device sends traffic, so you are protected without opening the app. In the VPNGeek app open Settings > Auto-connect (or Connect on demand) and turn it on. You can usually scope it to trigger on any network, or only on untrusted Wi-Fi while trusting your home network.

Warning. Connect-on-demand is enforced by the OS, so it will keep re-establishing the tunnel even if you tap Disconnect. To go offline temporarily, turn off Auto-connect first, then disconnect — otherwise the device reconnects immediately.

Troubleshooting

The Allow dialog never appears

The OS suppresses the prompt if a VPNGeek configuration already exists from a previous install. Remove the old one under VPN settings, then connect again to trigger a fresh prompt.

Connected but no internet

Switch to a different location and reconnect. If it persists, delete the VPN configuration in system settings and let the app re-add it, which rebuilds the profile cleanly.

It keeps reconnecting after I disconnect

That is connect-on-demand working as designed. Disable Auto-connect in the app before disconnecting.

Did this guide get you connected?
← PREVIOUS Tunnel up but no traffic? A checklist NEXT → AWS Site-to-Site VPN: connect a VPC to a VPNGeek gateway