MacOS - Installing OpenVPN (Tunnelblick)

Tunnelblick is a free, open-source OpenVPN client for macOS. This guide explains how to install it and connect to Private Internet Access (PIA) using PIA's OpenVPN configuration files.

Jump To… 

Download the Configuration Files

Get Pre-Made Configuration Files

Create Your Own Configuration Files

Extract the Configuration Files

Download and Install Tunnelblick

Add the PIA Configuration

Connect to the VPN

How to Connect to a Different Server Location

Other OpenVPN Clients for macOS

Download the Configuration Files

There are two ways to get OpenVPN configuration files from PIA.  Choose one of the following options:

Get Pre-Made Configuration Files

PIA provides several ready-to-use OpenVPN configuration file sets. These differ in connection method (TCP or UDP), port usage, and encryption strength. Visit the link and click on the set you’d like to download.

Create Your Own Configuration Files

You can generate a custom configuration file for a specific server location, encryption level, and port with PIA’s OpenVPN Configuration Generator. This is useful if you only need to connect to one location or want more control over your settings. To access the generator:

  1. Go to Downloads in your Client Control Panel.

PIA's client control panel with OpenVPN Configuration Generator highlighted.

  1. In the OpenVPN Configuration Generator, select an OpenVPN version and macOS as a platform.

PIA's OpenVPN Configuration Generator, showing the available OpenVPN versions and platforms.

  1. Then, select a location.

A portion of the available location for the OpenVPN configuration on PIA's OpenVPN Configuration Generator page.

  1. Select a port and click Generate.

The available ports for the OpenVPN configuration on PIA's OpenVPN Configuration Generator page, with a highlighted "Generate" button at the bottom.
 

Extract the Configuration Files

Once downloaded, extract the .zip file if needed. Keep the .ovpn files somewhere easy to find, such as your Downloads folder.

Download and Install Tunnelblick

  1. Go to the Tunnelblick website and download the latest version.
  2. Open the downloaded .dmg file, then double-click the Tunnelblick icon. 

Tunnelblick installer window with the Tunnelblick app icon displayed.
 

3. If prompted, enter your macOS password to proceed.

Add the PIA Configuration

  1. When Tunnelblick asks about configuration files, select I have configuration files.

Tunnelblick's welcome screen, with a highlighted "I have configuration files" button.

  1. Locate the .ovpn file you downloaded or extracted, then double-click the one for the server you want to use.
  2. You will be asked if you would like to install for all users. If the VPN is intended for all accounts on your Mac, select All Users. If the VPN will only be used by your current account, select Only Me.
Tunnelblick prompt asking whether to install the VPN configuration for all users.

4. Enter your device password if prompted.

Connect to the VPN

  1. Click the Tunnelblick icon in the menu bar, then select Connect, followed by the configuration you added.
Tunnelblick menu bar menu with the Connect ca_montreal option displayed.
  1. Enter your PIA username and password. To save them for next time, select the Save in Keychain options.

Tunnelblick login window prompting user for the VPN username and password.

  1. The status window turns green once you are connected. 
Tunnelblick connected to the PIA's ca_montreal VPN server on macOS.

How to Connect to a Different Server Location

To connect through a different server location, repeat steps 1–3 to import the corresponding .ovpn file, then select it from the Tunnelblick menu bar.

Other OpenVPN Clients for macOS

If you prefer a different OpenVPN client, we also have guides for the following:

Related articles