In this article, you’ll learn how to grant the required macOS system permissions to the Surfshark app so the WireGuard® protocol can work properly.
On macOS, WireGuard requires explicit permission to add VPN configurations. Without allowing these permissions, Surfshark may fail to connect when WireGuard is selected.
Before you begin
Make sure that:
- The Surfshark application is installed in the Applications folder (not Downloads or any other directory).
- You have an active Surfshark subscription, which you can get on our pricing page.
Grant VPN configuration access on macOS Sonoma or newer
To set up WireGuard® on your macOS Sonoma or newer device, follow the steps below:
-
When you attempt to connect for the first time, a system pop‑up will appear. Click Open System Settings:
-
You’ll see a message indicating that Surfshark was blocked from loading. Click Allow to proceed:
-
Authenticate using your Mac password or Touch ID:
-
When prompted, click Add VPN Configuration:
-
Confirm the action by clicking Allow to add VPN configurations for Surfshark:
Set up WireGuard® on your macOS Monterey device
Follow the steps below to set up WireGuard® on your macOS Monterey device:
-
When you attempt to connect for the first time, a system pop‑up will appear. Click Open Security Preferences:
-
In the Security & Privacy window, click the lock icon in the bottom-left corner of the screen:
-
Enter your Mac user account password and click Unlock. Alternatively, you can authenticate using Touch ID:
-
Click the Allow:
-
When prompted, approve adding Surfshark to your VPN configurations by clicking Allow: