* OpenVPN 4.2.x protects against Web Real-Time Communication (WebRTC) leaks, so I presume Tunnelblick does too. Note that DNS leak protection is not enabled by default, and must be turned on (see How to use Tunnelblick later).

Available in many languages – Tunnelblick is currently translated to more than 35 languages.įor more information on IP leaks when using a VPN, please check out my Complete Guide to IP Leaks.

Web Real-Time Communication (WebRTC) leak protection*.

Note that Tunnelblick does not support IPv6 routing, and so prevents IPv6 DNS leaks using the simple expedient of disabling IPv6 (optional).

Full Domain Name System (DNS) leak protection – both Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6).

Tunnelblick offers the following features:

Given how good Tunnelblick is (especially now that it features a kill switch), I do not see this as a problem. Small and new VPNs, in particular, often rely on Tunnelblick to provide Mac support. It is also worth noting that macOS is not quite as well supported by custom VPN clients as Windows is. It is also bloat-free and stable, which is more than be said for many custom VPN apps. This means that Tunnelblick is more secure than many custom clients, which can lag behind in this area. Open source aside, Tunnelblick always stays up-to-date with the latest version of OpenVPN, and the latest security patches for it. Open Source VPN Clients for my full thoughts on this issue.

Now… I am usually a very strong advocate for using open source software, but I have doubts about its value when it comes to VPNs, as your VPN provider has full access to your internet traffic anyway. Most commercial VPNs offer custom Mac VPN apps, so why use Tunnelblick VPN? One reason is that it is open source, so you can be fairly confident that it is not doing anything it shouldn’t.

Tunnelblick download