Home > iOS, Mac administration, Mac OS X, macOS > PPTP VPNs no longer supported by Apple’s built-in VPN client on macOS Sierra and iOS 10

PPTP VPNs no longer supported by Apple’s built-in VPN client on macOS Sierra and iOS 10

Starting in OS X El Capitan and iOS 9, people trying to set up a PPTP VPN connection on their iOS device or on their Mac would get a warning that looked like this:


Ios9 using pptp warning


Elcapitan using pptp warning

The reason for these warnings is that a number of security vulnerabilities have been found in this VPN communications protocol. These warnings have been Apple’s way of encouraging their customers to stop using PPTP for their VPN connections and move on to other more secure VPN protocols.

As part of preparing for the release of macOS Sierra and iOS 10, Apple has publicly announced they’re moving from warning folks about PPTP to removing PPTP support altogether from Apple’s built-in VPN client. In place of PPTP, Apple is again recommending the use of other VPN communications protocols that are more secure.

For those who will still need to access PPTP VPNs, you may be able to use a third-party client to do so on macOS Sierra. A couple of third-party VPN clients I’m aware of which currently support PPTP on OS X El Capitan are Shimo and VPN Tracker.

  1. cashxx
    June 27, 2016 at 2:27 pm

    I wish they would add native support for SSTP then! Been asking for a few years now! I found a client, but not open source and not sure whether to trust it or not. The open source version I never could get working. https://www.axot.org/2015/03/03/isstp-a-sstp-client-for-mac-osx/

  2. July 31, 2016 at 7:45 pm

    Hi.. There is this great alternative – Tunnelblick ( http://www.tunnelblick.net ) – It is a VPN-client supporting PPTP on macOS Sierra.. Working great.. And it is free..🙂

    • Mordac
      August 31, 2016 at 4:02 pm

      Do you have an example config for using Tunnelblick for a PPTP VPN?
      I thought Tunnelblick was “just” an OpenVPN client…

  3. July 31, 2016 at 7:48 pm

    You could go for the app Tunnelblick ( .net ) – it has worked for me on Sierra for PPTP connection.

    • Augusto Silva
      September 21, 2016 at 5:15 pm

      Hello Jesper, Do you have an example?

      • Augusto Silva
        September 21, 2016 at 6:08 pm

        I think a need a configuration file

    • Tom
      October 12, 2016 at 5:10 am

      Tunnelblk does not support PPTP

  4. July 31, 2016 at 7:49 pm

    Sorry for the double post.. The first was not shown on my screen so I didn’t think it was posted. (Feel free to delete)

  5. Tobias
    August 15, 2016 at 10:06 am

    You can also use Shimo (https://www.shimovpn.com/)

  6. September 10, 2016 at 5:59 pm

    What IS the vpn setting for? Who needs to use it and how?

  7. dcohn99
    September 12, 2016 at 1:02 am

    Jeez guys. Just have your Admins fix the VPN servers and add L2TP support which the MACs support. PPTP should not be used by anyone. Windows users use SSTP and it requires a certificate as well. SO just configure L2TP to use a shared secret and you are done. Not a lot of work at all.

  8. dcohn99
    September 12, 2016 at 1:02 am

    Sorry and women

  9. Larry Rovak
    September 14, 2016 at 12:06 am

    I have a brand new linksys business router that supports IPSec, pptp, and OpenVPN. The IPSec is not Cisco and I use pptp only to connect back to my network through my voip firewall. I really don’t care that it is not as secure as the rest of the von services but it works! I am now stuck with no connection back to my voip servers. Why do you care if we don’t have as much security it’s our choice not yours……..

  10. Craig Reilly
    October 5, 2016 at 9:32 pm

    dcohn99 – I actually setup a L2TP Server on our Router and BAM! Guess what – they have an issue with the implementation where only 1 user per remote public ip can log in at the same time. doesn’t work so well when a team is working at a hotel.

    • Tom
      October 12, 2016 at 5:08 am

      PPTP has the same issue. It is the dreaded NAT traversal problem. OpenVPN uses TCP (typically) so it’s NAT traversal is the most solid.

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: