Vylos 1.4.0 Comes to Mac and Apple Vision Pro

Bring your Vylos tunnels to Mac and Apple Vision Pro, keep On-Demand traffic from bypassing the VPN, and give managed deployments more control.

Vylos 1.4.0 expands the bring-your-own-server WireGuard experience already available on iPhone and iPad to the Mac desktop and the spatial interface of Apple Vision Pro.

Vylos on Mac and Apple Vision Pro

Vylos is now available on Mac and Apple Vision Pro, with desktop workflows built for macOS and a spatial interface designed for visionOS.

On Mac, manage tunnels from the menu bar, drag configurations in from Finder, and use keyboard shortcuts for common actions. A dedicated Settings window, desktop-sized bandwidth charts, and independent editor windows make it easier to compare or update multiple tunnels.

On Apple Vision Pro, your tunnel library, active connections, Settings, and editing tools live in separate spatial surfaces. Import or export files, review bandwidth, and keep an editor beside the main Vylos window without losing your place.

See the Mac guide and Apple Vision Pro guide for the platform-specific details.

Keep Traffic Inside the Tunnel

The new Block Connections Without VPN setting uses Apple's system-level all-network routing to keep most ordinary app traffic from bypassing an armed On-Demand tunnel.

Vylos also examines the tunnel's AllowedIPs and explains what can remain reachable:

• Full-Tunnel Protection — The tunnel routes supported IPv4 and IPv6 traffic.
• Restricted Network Access — Only the networks listed in the tunnel remain reachable through it.
• No Outgoing Routes — The configuration does not provide a route for ordinary IP traffic.
• DNS coverage warnings — Vylos identifies DNS servers that fall outside the tunnel's routed networks.

The setting travels with a .vylos export. Organization-managed tunnels continue to use Apple's standard IncludeAllNetworks profile value, which Vylos displays as read-only.

See On-Demand Rules for the full behavior and Apple's documented system-traffic exceptions.

More Control for Managed Deployments

Vylos 1.4.0 adds managed per-app WireGuard VPN support, allowing an organization to route selected applications through a tunnel instead of changing traffic for the entire device. The new App Routing section shows whether a tunnel is device-wide or per-app and, when Apple reports the information, which applications are assigned to it.

Managed App Configuration can now set notifications, appearance, and the app icon in addition to the existing Manual Tunnels, Settings, and Jailbreak Detection restrictions. Users can review the effective policy, organization contact details, and read-only managed preferences in one place.

On iPhone and iPad, managed jailbreak enforcement now fails closed by disconnecting Vylos tunnels, disarming On-Demand, and rejecting reconnect attempts while the device remains blocked. Saved tunnel data stays intact for recovery.

Administrators also gain Base64 configuration fields for reliable single-line delivery of WireGuard and Vylos settings through MDM systems that do not preserve multiline values.

See Per-App VPN and Managed App Configuration for deployment examples and supported keys.

Preview, Search, and Automate

Routine tunnel tasks now fit more naturally into the system:

• Quick Look previews .conf, .vylos, and .zip exports in Files on iPhone and iPad or Finder on Mac without importing them first. Mixed archives show every supported tunnel inside.
• Spotlight finds user-created tunnels by name and opens the selected tunnel directly in Vylos.
• Shortcuts can connect, disconnect, toggle, or open a user-created tunnel for editing on iPhone, iPad, Mac, and Apple Vision Pro.
• Interface-only configurations with no peers can now be imported for workflows that add peers later.

The Quick Look guide and Automation guide cover these workflows in more detail.

Connection Signals You Can Trust

Connection status in 1.4.0 follows what the tunnel is actually doing, not only what the network interface appears to be doing.

Reconnect notifications wait for a fresh WireGuard handshake before announcing recovery. Network-switch alerts now recognize real Wi-Fi and cellular handoffs, while previous Vylos alerts remain in Notification Center instead of being replaced by newer ones.

Tunnel details refresh live peer statistics every second for user-created and managed tunnels. Vylos now explains activation failures, retries stale configurations, waits for the previous tunnel to disconnect before starting another, and restarts a connected tunnel after you save its edited configuration.

A More Inclusive Vylos

Vylos 1.4.0 expands VoiceOver labels, Dynamic Type behavior, and right-to-left layout support across the app. Arabic now mirrors the complete Mac interface, including window controls and toolbars, and all 19 supported languages received a release-wide review.

Language selection now uses Apple's per-app language setting, keeping Vylos consistent with the rest of the system. The Language pane links to the correct system location when you want to make a change.

Before You Upgrade

If you previously selected a language inside Vylos, choose it again through your device's per-app language settings after updating. You may need to quit and reopen Vylos for the change to apply fully.

Get Vylos 1.4.0

Vylos 1.4.0 is available for iPhone, iPad, Mac, and Apple Vision Pro. Vylos remains a bring-your-own-server WireGuard client with a one-time purchase and no included VPN service.

Start with the User Guide, compare support in the platform matrix, or prepare an organization rollout with the Admin Guide.