Your VPN spins on “Connecting…” and never turns on — or it connects but nothing loads. On a Mac this is almost always one of five things: a stale VPN profile, wrong credentials or server, a firewall/DNS conflict, an app that needs a Network Extension permission, or a Wi‑Fi that hands out a self‑assigned IP. Work through these in order and you’ll fix it in a few minutes.
1. Restart the VPN the right way (and your Mac)
Toggle the VPN off, quit the provider app completely (Cmd‑Q, not just the menu‑bar icon), reopen it, then connect. If it still hangs, restart the Mac — a stuck ne_session in macOS won’t clear until you do. This alone fixes most “connecting forever” cases.
2. Try a different server, then a different protocol
A single overloaded or offline server looks exactly like a broken app. Pick a different city in your provider’s list. If several servers all fail, switch the protocol (WireGuard → OpenVPN, or IKEv2 → L2TP) in the app’s settings — some networks (hotel, campus, office) block one protocol’s port but allow another.
3. “Connected” but no internet? Fix DNS
If the VPN says connected yet pages won’t load, it’s a DNS handoff problem. Turn the VPN off, go to System Settings > Network > your connection > Details > DNS, and remove any leftover DNS servers a dead VPN left behind (or add 1.1.1.1). Then reconnect. Also toggle Wi‑Fi off/on so macOS renews the lease.
4. Delete the stale VPN profile and re‑add it
For a manually‑configured VPN, a corrupt profile is the usual culprit. Go to System Settings > Network, select the VPN, click the minus (−) to remove it, then re‑add it with a fresh server address, account name, and shared secret from your provider. One wrong character in the shared secret shows up as “authentication failed.”
5. Grant the Network Extension permission
Modern VPN apps install a system extension. If macOS blocked it, the app can never build a tunnel. Open System Settings > General > Login Items & Extensions (or Privacy & Security on older macOS) and make sure your VPN’s extension is allowed. Reinstalling the app re‑triggers the approval prompt.
6. Rule out the firewall and a self‑assigned IP
The macOS firewall or a third‑party security app can silently drop VPN traffic — disable it briefly to test. And if Network shows a yellow dot with “self‑assigned IP address,” your Mac never got a real address from the router; the VPN can’t connect over a dead link. Renew the DHCP lease (Details > TCP/IP > Renew DHCP Lease) or reboot the router first.
Still stuck?
If nothing above works, the issue is usually on the provider’s side (expired subscription, account limit reached, or a server outage) — check their status page and re‑download the latest app. Setting up from scratch? See our step‑by‑step guide to setting up a VPN on a Mac.
FAQ
Why does my Mac VPN say connecting forever? A stuck macOS VPN session. Quit the app fully and restart the Mac; if it persists, delete and re‑add the profile (step 4).
VPN connects but I have no internet — why? A DNS conflict. Clear leftover DNS servers under Network > DNS and renew your Wi‑Fi lease (step 3).
What does “authentication failed” mean? Wrong username, password, or shared secret for a manual VPN — re‑enter them exactly from your provider (step 4).
Need a reliable Mac?
A flaky old Mac makes every network problem worse. A certified‑refurbished Apple Silicon Mac from LuxuriousComputers handles VPNs, video calls, and everything else without the beach‑ball — the M1 MacBook Air starts at $450 and the M2 at $549. Browse current Apple clearance deals, each backed by our 1‑year warranty and free shipping.