macOS proxy settings live inside each network service. To configure or turn off a proxy on Mac, open Apple menu > System Settings > Network, select the active service, choose Details, then open Proxies. Record every enabled mode and value before changing anything. Configure only addresses, ports, scripts, credentials, and bypass rules supplied by a trusted administrator or service owner; turn a proxy off only as a temporary test on an unmanaged device you control, then restore it if the test does not help.

Key Takeaways

Automatic discovery, PAC, HTTP, HTTPS, and SOCKS are separate proxy modes.

A proxy is not the same as a VPN, even when both change how traffic reaches a destination.

Record enabled modes, server names, ports, PAC URLs, bypass entries, and ownership before editing.

Never remove a work, school, or security proxy merely to make an error disappear.

Test one reversible change, compare the same destinations, and restore the original configuration.

Start with the device and app troubleshooting guide if you do not yet know whether the proxy is involved.

Which mode do you need to configure or turn off a proxy on Mac?

Apple exposes several proxy choices for each network service.［1］

Mode	Required information	Typical purpose
Auto proxy discovery	Nothing to type; macOS configures proxy settings automatically from the network	Managed or compatible local network
Automatic proxy configuration	Trusted PAC file URL	Rules choose a proxy or direct route per destination
Web proxy (HTTP)	Server and port, sometimes credentials	HTTP traffic
Secure web proxy (HTTPS)	Server and port, sometimes credentials	HTTPS connection handling
SOCKS proxy	Server and port	Applications that support SOCKS routing
Exclude simple hostnames	Nothing to type	Single-label names such as an intranet server connect directly
Bypass list	Hosts or domains that should connect directly	Local or approved exceptions

Select only the mode named by the administrator or provider. Checking every box is not a compatibility strategy and can create conflicting routes.

Before changing Mac proxy settings

Identify the active service: Wi-Fi, Ethernet, a USB adapter, or another connection.
Open Network > [service] > Details > Proxies.
Record every selected mode and its exact values.
Record the bypass list and whether authentication is enabled, without storing passwords in an unsafe note.
Check for a configuration profile, management notice, security product, or organization owner.

Stop on a work or school Mac, or on a network whose policy you do not own. A locked field, a value that returns, or an unfamiliar PAC URL is a reason to contact IT. Do not delete profiles, certificates, keychain items, or system extensions to override it.

Keep a change log with the active service, test time, original modes, one change, and the same proxied and direct destinations. Do not copy passwords into that log. A controlled comparison shows whether the proxy changed the result and gives you a precise recovery record if another network layer changes at the same time.

1. Configure automatic discovery

Auto Proxy Discovery means macOS takes its proxy configuration from the current network instead of from a server or PAC URL you type. Use it only when the trusted network is designed to advertise proxy settings.

Select the active service in System Settings > Network.
Open Details > Proxies.
Select Auto Proxy Discovery.
Leave unrelated proxy modes unchanged unless the administrator says otherwise.
Save, reopen the affected app, and test an approved destination.

Automatic discovery does not search the public internet for a free proxy. It relies on the current network's configuration and therefore should be used only on a network whose operator you trust.

2. Configure a PAC file

A proxy auto-configuration file, or PAC file, contains rules that decide whether a request uses a particular proxy or goes directly.

Select Automatic Proxy Configuration.
Enter the exact trusted PAC URL supplied by the owner.
Do not edit the URL, add credentials to it, or substitute a file from an unknown website.
Save and reopen the apps being tested.
If the script cannot be reached or parsed, record the error and ask its owner to verify availability and policy.

A PAC failure can affect only certain destinations because its rules may route them differently. Compare both a destination that should be proxied and one that should not.

3. Configure HTTP, HTTPS, or SOCKS

Choose the protocol named in the trusted instructions.

Select Web Proxy (HTTP), Secure Web Proxy (HTTPS), or SOCKS Proxy.
Enter the exact server name or IP address and port.
Enable authentication only if the owner requires it.
Enter credentials through the system field; do not paste them into screenshots, shared notes, or support tickets.
Save and test the same browser and non-browser app used for the baseline.

The label “secure web proxy” does not by itself certify that the operator is trustworthy or that every app uses the setting. Confirm ownership, certificate requirements, and intended traffic scope with the provider or administrator.

For background, read what a proxy server does.

4. Add proxy bypass entries carefully

The bypass list sends matching destinations directly instead of through the selected proxy.

Add only the exact host, domain pattern, or local destination approved by the owner.
Preserve existing entries and their spelling.
Avoid broad wildcards unless the policy explicitly requires them.
Test both a bypassed destination and one that must still use the proxy.

The separate Exclude simple hostnames checkbox sends single-label names, such as an internal server name without a domain, directly. Turn it on only when the owner's instructions include it.

An overly broad exception can silently route more traffic directly than intended. If internal names depend on organization DNS or the proxy, coordinate the bypass and DNS design rather than guessing. The Mac DNS guide explains the separate resolver layer.

5. Turn off an owned proxy for a temporary test

Only do this on a personal, unmanaged Mac when you can restore the original settings.

Save the complete proxy record.
Disable one enabled proxy mode—not every network control at once.
Save, quit and reopen the affected app, then repeat the exact baseline tests.
Note whether all destinations, only one app, or nothing changes.
Re-enable the original mode and values unless you intentionally no longer use that trusted proxy.

If the Mac is connected to Wi-Fi but remains offline with the proxy restored or disabled, return to the Mac no-internet decision tree. Do not globally disable the firewall or uninstall security software as a proxy test.

Apple notes that VPN, firewall, antivirus, parental-control, and content-filter software can affect connectivity.［2］ Update and troubleshoot the identified owner rather than deleting protection broadly.

Proxy, VPN, and recovery

Proxy versus VPN: keep the layers separate

A proxy forwards traffic supported by its protocol or the applications using it. A VPN generally creates a network tunnel and may also supply DNS, routes, or filters. One product can install both, but the settings remain distinct.

Turning off a proxy does not necessarily disconnect a VPN. Disconnecting a VPN does not necessarily clear a PAC file or system proxy. Record which layer produced the change. See web proxy versus VPN for a fuller comparison.

How to restore the original proxy configuration

Return to System Settings > Network > [active service] > Details > Proxies.
Re-select the original modes.
Restore the exact servers, ports, PAC URL, bypass entries, and authentication choice.
Save, reopen apps, and verify both previously working and failing destinations.
Remove passwords from temporary notes after confirming recovery.

If settings reappear or remain locked, stop: a profile, network service, VPN, or security product may own them. If a trusted proxy still fails, give its owner the time, network service, affected destinations, selected modes, and exact error—never the password.

Summary

Mac proxy settings belong to the active network service and can use discovery, a PAC file, HTTP, HTTPS, SOCKS, and explicit bypass rules. Use only trusted configuration, distinguish the proxy from VPN and DNS layers, and preserve a complete recovery record. Turning a proxy off is a narrow diagnostic test for an unmanaged Mac, not a reason to erase managed controls or disable security globally.

FAQ

Where are proxy settings on a Mac?

Open System Settings > Network, select the active service, choose Details, then open Proxies.

What is a PAC file?

It is a proxy auto-configuration script whose rules choose a proxy or direct connection for each matching destination.

What does Auto Proxy Discovery mean on a Mac?

It tells macOS to configure the proxy automatically from settings the current network provides. It is not a PAC URL you enter and not a search for public proxies, so enable it only on a network whose operator you trust.

Is a Mac proxy the same as a VPN?

No. They are separate traffic layers with different scope and settings, although one product may configure both.

Can I select HTTP, HTTPS, and SOCKS at the same time?

Only when trusted instructions explicitly require all of them. Selecting modes without a defined configuration can break or misroute traffic.

What belongs in the bypass list?

Only approved hosts, domains, or local destinations that should connect directly. Broad exceptions can bypass more traffic than intended.

Why does a proxy setting come back after I turn it off?

A configuration profile, administrator, network service, VPN, or security product may own it. Contact that owner instead of repeatedly overriding the value.

Should I disable the firewall when a proxy fails?

No. Scope the problem to the proxy mode or its owner and avoid globally disabling unrelated protection. AethoVPN cannot repair a Mac's incorrect proxy host, PAC URL, or managed configuration profile; restore the authorized proxy settings first.

Sources

Apple Support - Change proxy settings on Mac — https://support.apple.com/en-gb/guide/mac-help/mchlp2591/mac
Apple Support - If third-party security software causes network connectivity problems — https://support.apple.com/en-la/102281

Sources checked 4 October 2026.

How to Configure or Turn Off a Proxy on Mac