OS X 10.5+ PPTP Setup


PPTP/L2TP/SOCKS Security

The PPTP/L2TP/SOCKS5 protocols are provided for devices lacking compatibility with the Private Internet Access application or OpenVPN protocol. PPTP/L2TP/SOCKS5 should be used for masking one's IP address, censorship circumvention, and geolocation.

If you need encryption, please use the Private Internet Application or OpenVPN protocol with our service.

OSX El Capitan (10.12)+ no longer supports PPTP

Apple has removed PPTP from the list of supported VPN protocols from OSX El Capitan (10.12)+. If you are running OSX El Capitan (10.12) or later, we would recommend investigating an L2TP or OpenVPN-based connection instead. For more information, please see this Apple Support article.

*** This configuration uses a Generated PPTP/L2TP/Socks5 Username and password, If you have not generated this yet, please follow the steps here: Generating a Password for PPTP/L2TP/SOCKS ***
  1. From the Apple Menu, click System Preferences
    OSx10.10PPTP1
  2. Click on Network
    OSx10.10PPTP2
  3. On the Bottom left, click the +
    OSx10.10PPTP3
  4. Choose VPN from the Interface
  5. Set the VPN Type to PPTP
  6. Type Private Internet Access PPTP as the Service name
  7. Click Create
    OSx10.10PPTP4
  8. In Server address, enter us-east.privateinternetaccess.com [*]
    Or if you prefer to use a specific location, You can find the full list of locations here: https://www.privateinternetaccess.com/pages/network
  9. Enter your Generated Username
    If you have not generated this yet, please follow the steps here: Generating a Password for PPTP/L2TP/SOCKS
  10. Set Encryption to Automatic
    OSx10.10PPTP5
  11. Click on Authentication Settings
  12. Enter your Password
  13. Click OK
    OSx10.10PPTP6
  14. Click on Advanced
  15. Ensure that Send all traffic over VPN is checked
  16. Click on the TCP/IP Tab at the top
    OSx10.10PPTP7
  17. Set Configure IPv6 to Link-Local Only
    OSx10.10PPTP8
  18. Press OK
  19. Press Apply
  20. Use the VPN Status icon in the Menu bar to connect.
    OSx10.10PPTP9

EASY Setup Guides for Alternate Configurations (Advanced):

PPTP/L2TP/SOCKS Security

The PPTP/L2TP/SOCKS5 protocols are provided for devices lacking compatibility with the Private Internet Access application or OpenVPN protocol. PPTP/L2TP/SOCKS5 should be used for masking one's IP address, censorship circumvention, and geolocation.

If you need encryption, please use the Private Internet Application or OpenVPN protocol with our service.

    Although quite different from a VPN, we provide a SOCKS5 Proxy with all accounts in the event users require this feature.

    SOCKS5 Proxy Usage Guides
    proxy-nl.privateinternetaccess.com port 1080
    Enable port forwarding in the application by entering the Advanced area, enabling port forwarding and selecting one of the following gateways:

    CA Toronto
    CA Montreal
    Netherlands
    Sweden
    Switzerland
    France
    Germany
    Romania
    Israel

    After enabling port forwarding and re-connecting to one of the above gateways, please hover your mouse over the System Tray or Menu Bar icon to reveal the tooltip which will display the port number. You can then enter this port into your software.

    Port Forwarding reduces privacy. For maximum privacy, please keep port forwarding disabled.
IPv6 leak protection disables IPv6 traffic while on the VPN. This ensures that no IPv6 traffic leaks out over your normal internet connection when you are connected to the VPN. This includes 6to4 and Teredo tunneled IPv6 traffic.
    The dns leak protection feature activates VPN dns leak protection. This ensures that DNS requests are routed through the VPN. This enables the greatest level of privacy and security but may cause connectivity issues in non-standard network configurations.

    This can be enabled and disabled in the Windows application, while it is enabled by default on our macOS application.

    We use our own private DNS servers for your DNS queries while on the VPN. After connecting we set your operating system's DNS servers to 209.222.18.222 and 209.222.18.218. When using a DNS Leak testing site you should expect to see your DNS requests originate from the IP of the VPN gateway you are connected to.

    If you change your DNS servers manually or if for some other reason they are changed this does not necessarily mean your DNS is leaking. Even if you use different DNS servers the queries will still be routed through the VPN connection and will be anonymous.
    The internet kill switch activates VPN disconnect protection. If you disconnect from the VPN, your internet access will stop working. It will reactivate normal internet access when you deactivate the kill switch mode or exit the application.

    Users who may be connected to two connections simultaneously (ex.: wired and wireless) should not use this feature, as it will only stop 1 active connection type.


  • United States (US VPN)
    us-california.privateinternetaccess.com
    us-east.privateinternetaccess.com
    us-midwest.privateinternetaccess.com
    us-chicago.privateinternetaccess.com
    us-texas.privateinternetaccess.com
    us-florida.privateinternetaccess.com
    us-seattle.privateinternetaccess.com
    us-west.privateinternetaccess.com
    us-siliconvalley.privateinternetaccess.com
    us-newyorkcity.privateinternetaccess.com

  • United Kingdom (GB VPN)
    uk-london.privateinternetaccess.com
    uk-southampton.privateinternetaccess.com

  • Canada (CA VPN)
    ca-toronto.privateinternetaccess.com
    ca.privateinternetaccess.com

  • Australia (AU VPN)
    aus.privateinternetaccess.com
    aus-melbourne.privateinternetaccess.com

  • New Zealand (NZ VPN)
    nz.privateinternetaccess.com

  • Netherlands (NL VPN)
    nl.privateinternetaccess.com

  • Sweden (SE VPN)
    sweden.privateinternetaccess.com

  • Norway (NO VPN)
    no.privateinternetaccess.com

  • Denmark (DK VPN)
    denmark.privateinternetaccess.com

  • Finland (FI VPN)
    fi.privateinternetaccess.com

  • Switzerland (CH VPN)
    swiss.privateinternetaccess.com

  • France (FR VPN)
    france.privateinternetaccess.com

  • Germany (DE VPN)
    germany.privateinternetaccess.com

  • Ireland (IE VPN)
    ireland.privateinternetaccess.com

  • Italy (IT VPN)
    italy.privateinternetaccess.com

  • Romania (RO VPN)
    ro.privateinternetaccess.com

  • Turkey (TR VPN)
    turkey.privateinternetaccess.com

  • South Korea (KR VPN)
    kr.privateinternetaccess.com

  • Hong Kong (HK VPN)
    hk.privateinternetaccess.com

  • Singapore (SG VPN)
    sg.privateinternetaccess.com

  • Japan (JP VPN)
    japan.privateinternetaccess.com

  • Israel (IL VPN)
    israel.privateinternetaccess.com

  • Mexico (MX VPN)
    mexico.privateinternetaccess.com

  • Brazil (BR VPN)
    brazil.privateinternetaccess.com

  • India (IN VPN)
    in.privateinternetaccess.com