<!doctypehtml><html lang=en><meta content="HTML Tidy for HTML5 for Apple macOS version 5.8.0"name=generator><meta charset=utf-8 lang=en><meta content=width=device-width,initial-scale=1 name=viewport><meta content="Downloads - Tunnelblick | Free open source OpenVPN VPN client server software for macOS. Includes OpenVPN, OpenSSL, easy-rsa, and drivers."name=description><meta content=never name=referrer><title>
   Downloads - Tunnelblick | Free open source OpenVPN VPN client server software for macOS
  </title><link href=/common/style.v8.css rel=stylesheet><link href=/common/favicon.v1.png rel=icon type=image/png><body><header><div class=heading><table><tbody><tr><td><a href=/> <img alt="tunnelblick icon"height=64 src=/common/tb-icon-64x64.v1.png width=64> </a><td class=heading1>Tunnelblick<td class=heading2>free software for OpenVPN on macOS<td class=heading3><a href=/cLocalizeTranslate.html> We need translators for several languages… </a></table></div></header><nav><div class=topnav><table class=topnav><tbody><tr><td class=topnav-normal><a class=topnav href=/index.html> Home </a><td class=topnav-highlight><a class=topnav href=/downloads.html> Downloads </a><td class=topnav-normal><a class=topnav href=/support.html> Support </a><td class=topnav-normal><a class=topnav href=/documents.html> Documents </a><td class=topnav-normal><a class=topnav href=/issues.html> Issues </a><td class=topnav-normal><a class=topnav href=/source.html> Source </a><td class=topnav-normal><a class=topnav href=/contribute.html> Contribute </a><td class=topnav-normal><a class=topnav href=/reachus.html> Contact </a><td class=topnav-padding></table></div></nav><main><div class=content><div class=content-downloads><table class=downloads><tbody><tr><td class=downloads-left><p class=toc>On This Page <br>      <a href=#releases> Release Downloads </a> <br>      <a href=#verifying-downloads> Verifying Downloads </a> <br>      <a href=#user-contributions> User Contributions </a> <br>      <a href=#sourceforge> Download Integrity </a> <br>      <a href=#mojave> Downloading and Installing on macOS Mojave and Higher </a> <br></p><td class=downloads-right><h2 id=releases>Release Downloads</h2> <p>To be notified of new releases, use Tunnelblick's built-in update mechanism or subscribe to the <a href=https://groups.google.com/forum/#!forum/tunnelblick-announce> Tunnelblick Announce Mailing List </a> .</p> <p><span class=red> Beta versions are suitable for many users. </span> See <a href=cStableBeta.html> Stable vs. Beta </a> for details.</p> <p>As a <a href=https://www.fsf.org/about/what-is-free-software> Free Software </a> project, Tunnelblick puts its users first. There are no ads, no affiliate marketers, no tracking — we don't even keep logs of your IP address or other information. We just supply open technology for fast, easy, private, and secure control of VPNs.</p> <table><tbody><tr><td class="pad-right-1em valign-top"><strong> Beta </strong><td><strong> <a href=/release/Tunnelblick_3.8.7beta03_build_5740.dmg> Tunnelblick 3.8.7beta03 </a> </strong> <span class=small> (build 5740, macOS 10.10+, Universal, notarized) </span> released 2021-10-30 <a href=cRlsNotes.html> Release Notes </a> <br> <span class=small> SHA1: 3b3bbf3a4b90d6294552546b0cf5bc835cffad07 MD5: 8dd48ab6861453aa09641a45412560f3 </span> <br> <span class=small> SHA256: 30f7ad636830148e75548db3516bcde00494e7c5a4f21a28e89e618e56a40586 </span> <br> <span class=small> <a href=/signatures/Tunnelblick_3.8.7beta03_build_5740.dmg.asc> GnuPG v2 signature </a> </span><tr><td colspan=2> <tr><td class="pad-right-1em valign-top"><strong> Stable </strong><td><strong> <a href=/release/Tunnelblick_3.8.6a_build_5711.dmg> Tunnelblick 3.8.6a </a> </strong> <span class=small> (build 5711, macOS 10.10+, Universal, notarized) </span> released 2021-09-01 <a href=cRlsNotes.html> Release Notes </a> <br> <span class=small> SHA1: a5ac61e13d312ae22723b47b57fc4c394d35d3ec MD5: d2eaf7966bf6910e473e233059188cf8 </span> <br> <span class=small> SHA256: 636c52eaba89a0fc7549160892fabb62f4d11bb34d959872f2c0ab93765e0835 </span> <br> <span class=small> <a href=/signatures/Tunnelblick_3.8.6a_build_5711.dmg.asc> GnuPG v2 signature </a> </span><tr><td colspan=2> <tr><td class="pad-right-1em valign-top"><strong> Older </strong><td>See the <a href=downloadsDeprecated.html> Deprecated Downloads page </a> . <em> Includes versions for earlier versions of macOS and OS X. </em><tr><td colspan=2> <tr><td class="pad-right-1em valign-top"><strong> Uninstaller </strong><td><span class=red> The Tunnelblick Uninstaller has been replaced by an "Uninstall" button on the "Utilities" panel of Tunnelblick's "VPN Details" window as of Tunnelblick 3.8.5beta02. </span><tr><td class="pad-right-1em valign-top"> <td><span class=red> Please read <a href=cUninstall.html> Uninstalling Tunnelblick </a> before using Tunnelblick Uninstaller. </span><tr><td> <td><strong> <a href=/release/Tunnelblick_Uninstaller_1.12_build_5090.dmg> Tunnelblick Uninstaller 1.12 </a> </strong> <span class=small> (build 5090, macOS and OS X 10.7.5+, Intel-64 only, works on M1 using Rosetta) </span> released 2018-06-26 <a href=cRlsNotes.html> Release Notes </a> <br> <span class=small> SHA1: c4503360e032877e1ab0c2742872250c646ba983 MD5: 0b8c3f0898ca88f4bbe90fe61271d7ab </span> <br> <span class=small> SHA256: 62b528da3212fd78146c6bcf03d88f4f8653845068b61f4f62029a3af791ef42 </span> <br> <span class=small> <a href=/signatures/Tunnelblick_Uninstaller_1.12_build_5090.dmg.asc> GnuPG v2 signature </a> </span></table> <hr> <h2 id=verifying-downloads>Verifying Downloads</h2> <p>You should verify all downloads. Even though https:, the .dmg format, and the application's macOS digital signature provide some protection, they can be circumvented.</p> <p><strong> Verifying Hashes </strong></p> <p>Comparing the SHA256, SHA1, and MD5 hashes of your downloaded file with the official published ones will provide additional assurance that the download is legitimate and has not been modified. You can compare the hashes with programs included with macOS without the need to install additional software.</p> <p>To compute the hashes of a file you've downloaded, type the following into /Applications/Utilities/Terminal:</p> <p>           <span class=monospaced> shasum -a 256 </span> <em> path-to-the-file </em> <br>            <span class=monospaced> openssl sha1 </span> <em> path-to-the-file </em> <br>            <span class=monospaced> openssl md5 </span> <em> path-to-the-file </em></p> <p>Then compare the computed hashes with the values shown near the link for the downloaded file.</p> <p>(Don't type ' <em> path-to-the-file </em> ' — type the path to the file, that is, the sequence of folders that contain the file plus the file name (e.g. /Users/janedoe/Desktop/Tunnelblick_3.7.2a_build_4851.dmg). An easy way to get it into Terminal is to drag/drop the file anywhere in the Terminal window. The pointer will turn into a green and white plus sign ("+") to indicate the path will be dropped. So you would type ' <span class=monospaced> shasum -a 256 </span> ' — with a space after the "256" — and then drag/drop the disk image file anywhere in the Terminal window.)</p> <p>For additional assurance that the hashes displayed on this site have not been compromised, the hashes are also available in the description of each "Release" on <a href=https://github.com/Tunnelblick/Tunnelblick/releases> Tunnelblick's GitHub site </a> , which is hosted and administered separately from this site.</p> <p><strong> Verifying GnuPG Signatures </strong></p> <p>Recent Tunnelblick disk images are also signed with <a href=https://www.gnupg.org/> GnuPG version 2 </a> .</p> <p>To <strong> <em> prepare </em> </strong> for verifying signatures, you should download and install GnuPG 2.2.3 or higher, and then add the <a href=https://tunnelblick.net/TunnelblickSecurityPublicKey.asc> Tunnelblick Security GnuPG public key </a> (key ID 6BB9367E, fingerprint 76DF 975A 1C56 4277 4FB0 9868 FF5F D80E 6BB9 367E) to your trusted GnuPG keyring by typing the following into /Applications/Utilities/Terminal:</p> <p>           <span class=monospaced> gpg --import TunnelblickSecurityPublicKey.asc </span> .</p> <p>To verify the signature of a file, download the corresponding signature file and then type the following into /Applications/Utilities/Terminal:</p> <p>           <span class=monospaced> gpg --verify <em> path-to-the-signature-file </em> <em> path-to-the-disk-image-file </em> </span></p> <p>The result should be similar to the following:</p> <p>           <span class=monospaced> gpg: Signature made Sat Dec 16 19:17:03 2017 EST </span> <br>            <span class=monospaced> gpg: using RSA key B4D96F0D6A58E335A0F4923A2FF3A2B2DC6FD12C </span> <br>            <span class=monospaced> gpg: Good signature from "Tunnelblick Security &LTtunnelblicksecurity@protonmail.com>" [ultimate] </span></p> <hr> <h2 id=user-contributions>User Contributions</h2> <p>These downloads have been contributed by users and usually help deal with special circumstances. They are not endorsed or checked by the Tunnelblick project, and you use them at your own risk. To contribute a download, <a href=reachus.html> send it to the developers </a> or post it on the <a href=https://groups.google.com/forum/#!forum/tunnelblick-discuss> Tunnelblick Discussion Group </a> .</p> <p>Before using these scripts, please read <a href=cPrivacy.html#tunnelblick-and-vpns-privacy-and-security> Tunnelblick and VPNs: Privacy and Security </a> . (Actually, <strong> everyone </strong> using a VPN should read that!)</p> <p><span class=red> Note: these scripts are executed as root. </span> <a href=cUsingScripts.html> Instructions for using scripts </a> .</p> <table><tbody><tr><td class=pad-right-1em> <td><strong> Scripts to Unload Cisco Tun Kext </strong> : <a href=/release/user-contributed-001-pre-post.zip> user-contributed-001-pre-post.zip </a><tr><td> <td><span class=small> SHA1: d3b09a2284de2862be7d55059581a85698930b28 MD5: f6f484864697607ee5c7206a5b056b12 </span><tr><td> <td>Contributed by "petiepooo". <br> These scripts unload the Cisco AnyConnect tun kext before a Tunnelblick connection is started, and reload the Cisco tun kext after a Tunnelblick connection is stopped. (The Cisco kext interferes with Tunnelblick's operation of tun connections.)<tr><td colspan=2> <tr><td> <td><strong> Scripts to Mount/Unmount a Volume </strong> : <a href=/release/user-contributed-002-mount-unmount-volume.zip> user-contributed-002-mount-unmount-volume.zip </a><tr><td> <td><span class=small> SHA1: eb69727620fa8c46633d9ccf9f86c4b258fea7e6 MD5: 5b3b04bea43403b2a709aaa4c92d7473 </span><tr><td> <td>Contributed by John Griffis. <br> These scripts mount a volume after a configuration is connected and unmount it when the configuration is disconnected. Scripts must be edited before use (in any plain-text editor) to specify details of the volume to be connected. For a note about connecting to a CIFS account, see <a href=https://groups.google.com/d/topic/tunnelblick-discuss/b2jboQHeqAs/discussion> this discussion </a> .<tr><td colspan=2> <tr><td> <td><strong> Scripts to Monitor Connection Time and Bandwidth Use </strong> : <a href=/release/user-contributed-003-monitor-uptime-and-bandwidth.zip> user-contributed-003-monitor-uptime-and-bandwidth.zip </a><tr><td> <td><span class=small> SHA1: 384b370967e722eacb2f3a782e8c326d87174003 MD5: 2c23ed5c31a1238843fb5ea36fd5dd74 </span><tr><td> <td>Contributed by "vkapovit".<tr><td> <td>These scripts provide a mechanism for the user to be alerted when the VPN has been up for more than 20 minutes or when bandwidth has exceeded 100MB. See <a href=https://groups.google.com/d/msg/tunnelblick-discuss/7lGWKR1-rC4/OGHhCfmrXfg> this discussion </a> for details. Requires Growl. <br> <span class=red> <strong> Includes compiled binaries; use at your own risk. </strong> </span><tr><td colspan=2> <tr><td> <td><strong> Scripts to Launch and Kill a Program </strong> : <a href=/release/user-contributed-004-launch-kill-program.zip> user-contributed-004-launch-kill-program.zip </a><tr><td> <td><span class=small> SHA1: 977aa7cc55f3e191b50057fe766c426af01808eb MD5: beccc55286b398fe0a8bcb798e25a883 </span><tr><td> <td>Contributed by "anonymous".<tr><td> <td>These scripts cause a program to be launched when a VPN is connected and then killed when the VPN is disconnected. It can be used with a torrent program, for example, so that the program is only active when the VPN is connected. <br> <span class=red> Note that there may be a short time after the VPN has been disconnected before the program is killed. </span><tr><td colspan=2> </table> <hr> <h2 id=sourceforge>Download Integrity</h2> <p>In June 2015 there was much discussion (and outrage) about SourceForge providing downloads that contain unwanted or malicious software; SourceForge has changed their policies to help avoid this. Tunnelblick binaries were hosted on SourceForge from the fall of 2013, when Google Code stopped hosting new binaries, until 2015-07-17, when they were moved from SourceForge to GitHub.</p> <p>Tunnelblick protects against unwanted software insertions by publishing the SHA1 and MD5 hashes for each of our downloads. You should verify the hashes of all Tunnelblick downloads by following the instructions above.</p> <p>Additional safeguards automatically protect updates performed by Tunnelblick's built-in update mechanism:</p> <ul><li>Updates are controlled by tunnelblick.net and all update data is transported via https:<li>Update downloads contain digital signatures to verify they have not been modified. (This is in addition to the macOS digital signature of the Tunnelblick application itself.) See <a href=cDigitalSignatures.html> Digital Signatures </a> .</ul> <hr> <h2 id=mojave>Downloading and Installing on macOS Mojave and Higher</h2> <p>When you <em> install </em> any application, including Tunnelblick, after it has been downloaded normally, <a href=https://lapcatsoftware.com/articles/notarization-privacy.html> macOS Mojave and higher send information to Apple </a> (they "phone home"). macOS Catalina and higher also "phone home" each time you <em> launch </em> any application, including Tunnelblick.</p> <p>These behaviors are considered by some to be a violation of privacy.</p> <p><strong> You can avoid these behaviors, but you will be disabling security checks which macOS would normally do on a downloaded program, including checks that the program is correctly notarized and has been found to not contain malware. </strong></p> <p><strong> To avoid having macOS Mojave and higher "phone home" when you install Tunnelblick </strong> , you can do the following to download Tunnelblick to your Desktop:</p> <ol><li>Open the Terminal application located in /Applications/Utilities.<li>Type (or copy/paste) " <code>
            curl --output ~/Desktop/Tunnelblick.dmg --location
           </code> " into Terminal without the quotation marks <em> (the space after " <code>
             --location
            </code> " is important). </em><li>In your browser, instead of clicking on the link to download Tunnelblick, Control-click the link and select "Copy Link" (Safari), "Copy Link Location" (Firefox), or "Copy Link Address" (Chrome).<li>Click in the Terminal window to select it for input, then Paste (Command-V). A URL starting with <code>
            https://tunnelblick.net/release/
           </code> should appear after the " <code>
            .dmg
           </code> ".<li>Press the enter/return key on the keyboard.<li>You will see two or more progress bars showing the timing of downloads [1].<li><a href=https://tunnelblick.net/downloads.html#verifying-downloads> Verify the download </a> .<li>Double-click the downloaded Tunnelblick disk image file on your Desktop to open the Tunnelblick disk image, then double-click the Tunnelblick icon in the window that appears to install Tunnelblick.</ol> <p>This will download the file to your Desktop without the flag that indicates the file was downloaded from the Internet. When that flag is present, macOS Mojave and higher "phone home" when the downloaded file is double-clicked to install it; when the flag is not present, macOS Mojave doesn't.</p> <p><strong> To avoid having macOS Catalina and higher "phone home" when you launch Tunnelblick (or other applications) </strong> , see <a href=https://eclecticlight.co/2021/02/23/how-to-run-apps-in-private/> How to run apps in private </a> .</p> <p>[1] Tunnelblick downloads are redirected from the tunnelblick.net website to GitHub, which may redirect them further. Typically one or more tiny downloads (a few hundred bytes each) provide information about the redirection, and the final larger download is the desired file.</p></table></div></div></main><footer><div class=bottom-translation><span title="view in German or another language using Google Translate"> <a class=bottom-translation href=/translate?hl=de&sl=en&tl=de&u=https%3A%2F%2Ftunnelblick.net%2Fdownloads.html&sandbox=1 lang=de>   Deutsch   </a> </span><span title="view in French or another language using Google Translate"> <a class=bottom-translation href=/translate?hl=fr&sl=en&tl=fr&u=https%3A%2F%2Ftunnelblick.net%2Fdownloads.html&sandbox=1 lang=fr>   Français   </a> </span><span title="view in Chinese (simplified) or another language using Google Translate"> <a class=bottom-translation href=/translate?hl=zh-CN&sl=en&tl=zh-CN&u=https%3A%2F%2Ftunnelblick.net%2Fdownloads.html&sandbox=1 lang=zh-Hans>   中文(简体)   </a> </span><span title="view in Russian or another language using Google Translate"> <a class=bottom-translation href=/translate?hl=ru&sl=en&tl=ru&u=https%3A%2F%2Ftunnelblick.net%2Fdownloads.html&sandbox=1 lang=ru>   Русский   </a> </span><span title="view in Spanish or another language using Google Translate"> <a class=bottom-translation href=/translate?hl=es&sl=en&tl=es&u=https%3A%2F%2Ftunnelblick.net%2Fdownloads.html&sandbox=1 lang=es>   Español   </a> </span><span title="view in Japanese or another language using Google Translate"> <a class=bottom-translation href=/translate?hl=ja&sl=en&tl=ja&u=https%3A%2F%2Ftunnelblick.net%2Fdownloads.html&sandbox=1 lang=ja>   日本語   </a> </span><span title="view in Italian or another language using Google Translate"> <a class=bottom-translation href=/translate?hl=it&sl=en&tl=it&u=https%3A%2F%2Ftunnelblick.net%2Fdownloads.html&sandbox=1>   …   </a> </span></div><div class=bottom-copyright>Last updated 2021-10-30.  Copyright © 2015-2021 by The Tunnelblick Project.   <a href=/cGDPR.html> GDPR Info </a>   </div></footer>