SwanDesk
A native macOS menu-bar VPN client for strongSwan IPsec — IKEv2 and IKEv1, every authentication method, with your secrets kept in the Keychain.
Download for macOSRequires macOS 14 (Sonoma) or later · Apple Silicon · Signed & notarized
A native macOS menu-bar VPN client for strongSwan IPsec — IKEv2 and IKEv1, every authentication method, with your secrets kept in the Keychain.
Download for macOSSwanDesk puts a strongSwan IPsec tunnel behind a simple menu-bar icon: a glance tells you the connection state, one click connects or disconnects, and a configuration window exposes every VPN parameter across as many named profiles as you need. It bundles its own strongSwan and OpenSSL, so there is nothing to install from Homebrew — and nothing at runtime to keep up to date.
Connect to strongSwan and other IPsec gateways over either IKE version, chosen per profile, with full control over proposals, traffic selectors, virtual IP, routes, DNS and search domains.
Certificate + XAuth, pure certificate, the IKEv2 EAP methods EAP-MSCHAPv2 and EAP-TLS, and pre-shared key — including PSK with the gateway verified by certificate, or fully mutual PSK.
A green / red / amber status dot, one-click connect and disconnect, and multiple named profiles. Credentials live in the Keychain; the tunnel survives the menu closing and is torn down cleanly on quit.
Export a profile to an encrypted .swandesk file — the full config plus
secrets sealed with PBKDF2-HMAC-SHA256 and AES-256-GCM — and import it on another Mac
without exposing a thing.
SwanDesk bundles and links strongSwan, licensed under the GNU General Public License version 2, together with OpenSSL under the Apache License 2.0. In accordance with the GPL, the complete corresponding source for SwanDesk is available below.
strongSwan and OpenSSL are bundled as unmodified upstream releases. For at least three years from the date you received this software, Juvex Oy will provide a complete machine-readable copy of their corresponding source on request — .