Setting Up a Proxy in Safari on macOS via System Settings

How to configure a proxy server in Safari on macOS using system settings. This step-by-step guide uses macOS 15.5 as an example. It is also relevant for macOS 13+, since the interface for system settings, including the proxy section, changed starting from version 13.

Open Safari Settings

Go to Safari settings from the top bar.

Dropdown menu with settings in Safari on macOS when clicked

Go to the “Advanced” section and select “Change Settings.”

Wi-Fi settings menu with a list of available networks in macOS

This will open the system proxy settings menu.

Enter Proxy Server Connection Settings

Go to the proxy setup subsection and choose the type of proxy: HTTP, HTTPS, or SOCKS.

Subsection for manual proxy server setup in macOS

Fill in the proxy server parameters:

  • IP address or server hostname (for example, proxy.example.com or 192.168.1.1);
  • Port (usually 4 or 5 digits);
  • If your proxy requires a username and password, check this option and enter them;
  • Exclude simple hostnames — you can specify which sites should bypass the proxy.

Click “OK” to save the settings. The proxy setup on macOS is now complete.

Proxy server settings in macOS

Check Your Internet Connection and IP Address Change

Open Safari and try to access any site that shows your IP address. In my case, Safari additionally prompted for the proxy username and password.

Proxy server authorization prompt in Safari on macOS

If everything is done correctly, you will see that your IP address has changed.

Your current IP address in Safari will change after setting up a proxy in macOS

Keychain Issue

I encountered a problem: after enabling the proxy server in macOS settings, endless Keychain prompts started popping up: “%appname% wants to use your confidential information stored in ‘proxy IP address’ in your keychain. To allow this, enter the ’login’ keychain password.” After googling, I found solutions related to resetting keys in Keychain, but I didn’t test them in practice since it wasn’t my MacBook 🙁.

%appname% wants to use your confidential information prompt in macOS

Frequently Asked Questions

What proxy types does macOS support?

macOS supports HTTP, HTTPS, and SOCKS proxies (IPv4). As for proxy types, any type is supported (server, mobile, residential).

Where can I get a proxy for Safari?

  • Find free proxy lists on Google. Some sites publish free proxies and profit from traffic. I do not recommend this option, as attackers can access the data you send through your device.
  • Buy one. This way you can choose the country, proxy type, rental period, traffic amount, and be confident in the security of your connection.
  • Set up your own proxy server. This is suitable if you have your own server (at home or work) and want to route your traffic through it.

Which macOS versions support proxies?

All modern macOS versions support proxies. Since version 13, the settings interface changed, so this guide is relevant for version 13 and above.

How do I check which proxy server is set in Safari?

You can see this in the proxy settings: “System Settings” – “Wi-Fi or Networks” – “Details” next to the connected network – “Proxies.”

Why do you need a proxy in Safari?

  • To access websites and services that are restricted in your region;
  • Anonymity and data protection — hiding your real IP address;
  • Changing your geolocation — access to content unavailable in your area;
  • In some cases, proxies are used for ad blocking and saving traffic.

What’s the difference between HTTP, HTTPS, and SOCKS proxies?

  • HTTP proxy: If the connection is unencrypted (plain HTTP, not HTTPS), your ISP can see all your traffic — which sites you visit, what data you send, and what content you load. If you use an HTTP proxy for HTTPS sites (via the CONNECT method), the ISP sees only the site name (SNI) and the fact of connection but not the page contents (unless the proxy intercepts and decrypts the traffic). The proxy server owner sees all HTTP traffic, including addresses, requests, and responses. For HTTPS over HTTP proxy — they see only the site address, not the content (unless MITM).
  • HTTPS proxy: Same as HTTP proxy, but the connection between client and proxy is protected by TLS/SSL. The ISP sees you’re connecting to the proxy (IP and port) but can’t see any content even between you and the proxy (traffic is encrypted). After the proxy — if you visit an HTTP site, the proxy owner sees everything; your ISP does not.
  • SOCKS proxy (most often SOCKS5): Works as a universal tunneling protocol at the transport level. Simply relays “raw” data between you and the remote server. The ISP sees that you’re connected to the proxy but doesn’t see where the traffic goes if your app uses an encrypted protocol (for example, HTTPS over SOCKS). If the data is NOT encrypted (e.g., plain HTTP over SOCKS), then traffic may be visible to the proxy server owner, but not to your ISP. The proxy server owner sees everything passing through if it’s unencrypted. If you use HTTPS — only the site name, as in other cases.
    • SOCKS is not always a “VPN”: SOCKS does not encrypt traffic by itself, it’s just a tunnel.
    • HTTPS proxy ≠ VPN: This is just encryption between you and the proxy, not between you and the end site.
    • The ISP always sees the fact of connection to the proxy (IP address and port), but not necessarily what’s inside if encryption is used.

What’s the difference between a proxy and a VPN?

VPNs operate at the OS level and redirect all traffic through the VPN, while proxies operate at the application level and redirect only specific app or browser traffic.

Possible Issues

  • After entering proxy data, nothing loads — check the accuracy of your proxy settings and the Keychain prompt
  • Incorrect proxy username or password — check your proxy settings

Sources