VPN for macOS: the Veyl app
Install it, sign in, press one button. Veyl picks the node for you, and if the connection drops, it keeps your traffic from slipping out around the tunnel.
For Apple Silicon Macs, M1 and later. One account works on five devices.
The fastest node, picked for you
The app pings nodes straight from your Mac and connects to whichever answers first. If one goes quiet, it moves to the next or tries another protocol. You can still pick a country yourself.
A kill switch for when things drop
If the tunnel falls over, Veyl shuts the network until it is back up. Without that you would never notice: pages keep loading as usual, just from your real address.
Not everything has to go through the VPN
Choose which apps go through the tunnel and which go direct. Games are better left outside for the ping, and Russian services like Yandex Music so they do not trip over a foreign address.
Fewer ads and trackers
A built-in filter blocks banners and trackers. It will not remove ads inside YouTube: those come from the same address as the video itself.
DNS goes through the tunnel too
DNS lookups do not go to your ISP — they travel inside the tunnel. Want your own resolver? Enter its address; DNS over TLS and DNS over HTTPS work too.
Russian services go direct
Banks, government services and marketplaces dislike foreign addresses. Tick their groups in your account on the website, and they go direct, with no captchas or refused logins, on all your devices at once.
Lives in the menu bar
Close the window and the tunnel stays up. Connect, disconnect and check your speed from the menu bar. Veyl tells you when the connection drops and installs updates on its own.
Common questions
- Does it run on Intel Macs?
- Not yet: the app is built for Apple Silicon only — M1 and everything since.
- Can I keep Safari outside the VPN?
- Not on its own: Safari and Apple’s built-in apps go online through system services, so they cannot be split one by one. You can send Russian sites direct in groups instead — banks, government services, marketplaces — in your account.
- Why does the app need my administrator password?
- On macOS, only a process with administrator rights can create a network interface and shut the network with the kill switch. Veyl installs that helper once, on your first connection, and the app itself then runs as your ordinary user. You may be asked again after an update if the helper was updated too.
- What happens if my Wi-Fi drops?
- Veyl notices and reconnects on its own as soon as the network is back, and you get a notification. While the tunnel is down, the kill switch keeps the network shut, so nothing goes around it. If the tunnel stays down for long, Veyl offers to open the network — your call.
- I already have another VPN. Will they get along?
- Two VPNs cannot run at once — only one can hold the network. Veyl notices and asks you to turn the other VPN off; then connect again.
- How many devices does one account cover?
- Five at a time, in any mix: your Mac, your phone, a work laptop. You can unlink a device right in the app, under Account → Devices.
- Which protocols are inside?
- Hysteria2, VLESS Reality and NaiveProxy. You do not need to know them — the app picks for you. If you are curious: Hysteria2 is faster on a shaky network, and Reality gets through better where VPNs are blocked.