macOS 10.13 High Sierra or later. WireGuard and AmneziaWG are statically linked and run in-process — no Homebrew, no kernel extensions. OpenVPN and IPSec/IKEv2 included, with a pf-backed kill switch.
Move Privycs VPN to Applications and launch it.
macOS asks you to authorise the privileged helper (LaunchDaemon) the first time you connect.
Open a .conf / .ovpn / .sswan / .mobileconfig, scan a QR or paste a token — any provider or your own server.
WireGuard, AmneziaWG, OpenVPN and IPSec/IKEv2 — plus multiple configs per connection.
Group endpoints into a pool with round-robin rotation, pre-warm and per-pool split tunnel.
Per-SSID / BSSID and network-type triggers pick the right tunnel automatically.
A DPI-blocked or unhealthy protocol falls over to the next one with no action from you.
All traffic is blocked the instant the tunnel drops — no silent leaks.
No accounts, no telemetry, no ads. Configs and keys stay in on-device storage.
▍ Pro is currently free for everyone — the paywall ships dormant and activates in a later release, once the storefronts are live. One-time purchase, never a subscription, no account.
.conf, .ovpn, .sswan or .mobileconfig from any commercial provider or your own box. Privycs adds pools, rules and failover on top.github.com/hoep/privycs-vpn.Free to start · Pro unlocks pools & automation · one-time, no subscription, no account.
no account · no tracking · no ads · open source