Private Internet Access for Mac

What's new in this version:

Private Internet Access 3.6.1
- MacOS: Unprivileged users can no longer prevent the PIA client from installing
- Fixed a potential bug that could cause the client to crash when opening deep links
- Killswitch will now stay on after subscription expiry


Private Internet Access 3.5.7
- Fix client notifications


Private Internet Access 3.5.6
- macOS: Fix Wifi SSID detection for Automation (again!)
- Linux: Implement Workaround for bleeding-edge Wayland issues
- All: Improve diagnostics


Private Internet Access 3.5.5
- MacOS: New Split Tunnel system has arrived!
- MacOS: Improve PIA's behavior during sleep to fix crashes after long sleeps
- Linux: Fix Split Tunnel and Wireguard issues when using the latest version of iproute2
- Linux: Fix OpenVPN on Suse variants


Private Internet Access 3.5.3
- UI: Increase contrast of graph in performance tile
- UI: Add two extra decimal places to data usage values
- UI: Add changelog link to update notification


Private Internet Access 3.5.2
- macOS: Fix Wifi SSID detection for Automation
- Remove local port option for OpenVPN connections
- Fix a bug that would sometimes cause a crash when trying to connect while disconnecting


Private Internet Access 3.5.1
Fixed:
- a variety of firewall and split tunnel issues on Windows
- local DNS resolver on Linux


Private Internet Access 3.5.0
- Builds for macOS are now universal for x86_64 and arm64
- Improved robustness in firewall backends
- Improved reliability of split tunnel rules for Opera and other applications with "launcher" executables on Windows
- Install logs are now included in debug reports when available
- Login and dedicated IP pages indicate when to retry when rate-limited by API
- Detect absence of iptables on some Linux systems and install if possible
- Improved security on Windows preventing privilege escalation attacks
- Disabled Split Tunnel on macOS 12 or greater (we are working on it!)
- Custom DNS settings are no longer forgotten when switching to another Settings tab with a setting other than Custom DNS selected

Fixed:
- opening combo boxes when another combo box was open, the second combo box no longer closes immediately
- permissions on piavpn.service to eliminate warning from systemd on some Linux distributions
- a rare GUI crash that could occur on the Split Tunnel or Automation pages if a setting change occurred while a combo box was open
- the subscription page link that was redirecting to the home page
- an issue with the latest release of iproute2 on Linux systems


Private Internet Access 3.3.1
- Request product feedback by linking to our survey


Private Internet Access 3.3.0
- Support Handshake domain name resolution (Using HDNS nameservers)
- Public IP is displayed even when not connected
- "Time to Connect" stats can be sent to PIA on an opt-in basis to help improve our service
- Fixed default folder when browsing for applications in Split Tunnel application selection


Private Internet Access 3.2.0
- Added "Auto" MTU setting to measure actual MTU after connecting
- Added automatic tray icon theme on Windows
- Improved handling of expired accounts
- Fixed connecting to favorite regions after a connection was refused by the server
- Fix issue causing multiple dialogs on driver install on Windows
- Fix issue where deleting a Dedicated IP breaks tooltips


Private Internet Access 3.1.2
- Fixed a crash on Windows when enabling split tunnel


Private Internet Access 3.1.1
- Added a notice about split tunnel issues on macOS Monterey


Private Internet Access 3.1.0
- Added support for Wayland display server on Linux
- Improved OpenVPN TCP timeouts when the server isn't reachable
- Improved macOS Split Tunnel to protect against looping packets
- Fixed an issue where client might not automatically start on macOS Big Sur


Private Internet Access 3.0.1
- Fixed an issue migrating proxy settings from 2.10 or earlier


Private Internet Access 3.0.0
- Redesigned the Settings window to improve categorization and allow for future growth
- Separated the three "Kill Switch" setting choices into two separate settings - "VPN Kill Switch" and "Advanced Kill Switch"
- Automation rule triggers on the dashboard are now removed if the rule is deleted
- The "Usage" tile now adjusts units based on the amount of data transferred
- Fixed navigation order issues with VoiceOver on macOS in some Settings pages
- Fixed navigation order of overlay dialogs in Settings window for Windows screen readers
- Fixed an issue causing overlay tips to stop working after removing an Automation rule


Private Internet Access 2.10.0
- Reduced memory and CPU usage of the graphical client
- Updated icons and graphics
- Connection stats can be sent to PIA on an opt-in basis to help improve our service
- Added a CLI get/set type for the Allow LAN setting
- The split tunnel UI on Windows now displays executable paths instead of link paths for Start Menu apps
- WireGuard now works correctly on macOS and Linux when jumbo frames are enabled on the network interface
- The PIA daemon on Linux no longer writes to stderr when run as a service to avoid flooding system logs
- In-app updates on Linux now detect xfce4-terminal on systems without an x-terminal-emulator symlink

Fixed:
- a crash on Windows caused by some older OpenGL drivers
- an install issue on Linux that prevented creation of the piavpn group in some cases
- an issue causing the support tool to appear more than once on Linux in some cases
- libxcb dependencies in Linux arm64 build


Private Internet Access 2.7.1
- Fixed an issue causing WireGuard connections to fail on some systems running macOS 10.13
- Fixed an issue causing PIA to stop responding on some systems running macOS 11
- Additional diagnostics on Windows


Private Internet Access 2.7
- Split tunnel on macOS no longer uses a network kernel extension
- Split tunnel now supports macOS 11.0 (Big Sur)
- Service notifications can now be shown below the Connect button
- Added support for Linux ARM build configurations (armhf and arm64)
- Linux builds are now made on Debian Stretch
- Ubuntu 16.04 is no longer supported (libstdc++ 6.0.22 is now required)
- Added support for renewing Dedicated IPs
- "Bypass" apps on Linux now also bypass the PIA killswitch
- OpenVPN now always uses RSA-4096 for the server authentication handshake
- OpenVPN CBC ciphers now always use SHA-256 for data authentication
- Removed the Data Encrytion "None" setting for OpenVPN
- Updated to Qt 5.15.2, OpenVPN 2.4.10, OpenSSL 1.1.1i
- an issue causing bypass apps on Linux to occasionally use VPN DNS
- an issue on Linux causing OpenVPN to fail to connect when PATH exceeds 256 characters
- an issue preventing the Built-in Resolver from working reliably on some Windows systems


Private Internet Access 2.6.1
- Fixed a crash when connecting to a region with no servers available for the current protocol


Private Internet Access 2.6.0
- Removed support for the legacy PIA network
- Added support for upcoming Dedicated IP feature
- Temporarily unavailable regions are displayed in the regions list and ignored by automatic selection
- Regions now report multiple servers per region for improved connection resiliency
- Minor improvements to regions list UI and accessibility
- Improved word breaking in Thai translation
- Fixed some Shadowsocks servers not appearing with next-gen network
- Fixed an issue preventing OpenVPN from connecting on Fedora 33
- Fixed an issue occasionally allowing domains that should be blocked by MACE to remain cached on the system
- Fixed accessibility focus indications for drop-down buttons
- Fixed launching client after install, and launching downloaded updates on some Linux environments
- Fixed missing accessibility annotations on Shadowsocks proxy region list


Private Internet Access 2.5.1
- Fixed a crash that occurred when geo-located regions were disabled in Settings
- Fixed an issue preventing the crash reporter from starting for client crashes


Private Internet Access 2.5.0
- Split tunnel on Windows now also splits DNS traffic
- Added "Name Servers" setting to Split Tunnel on Windows and Linux
- Region locations and translations are now updated automatically
- Split tunnel is disabled on macOS 11.0 due to removal of network kernel extensions
- Added 'pubip' type to 'piactl get/monitor'
- Fixed executable signing on Windows


Private Internet Access 2.4.0
- Windows hardware acceleration now uses Direct3D 11 instead of OpenGL
- PIA on Windows now requires Windows 8 or later
- Split tunnel app rules on Linux now also split DNS traffic
- Routed packets on Linux are now protected by the PIA killswitch (includes most containers and VMs)
- Split tunnel can now bypass routed packets on Linux
- Fixed a crash on macOS caused by changing screen layouts
- Fixed an issue causing installation to hang in some cases on macOS


Private Internet Access 2.3.1
- Fixed a possible daemon crash on macOS when split tunnel was enabled
- Fixed dependency issues on some Linux distributions
- Detect additional graphics drivers for automatic safe graphics mode on Windows


Private Internet Access 2.3.0
- Next Generation network is now the default
- Added the Connection tile
- Updated Qt to 5.15.0
- PIA on macOS now requires 10.13
- Fixed several issues relating to installation or uninstallation on Windows in Safe Mode
- Fixed an issue causing a memory leak on some Windows systems when Windows suspends pia-client to save power
- Fixed an issue preventing split tunnel from working with WireGuard on some newer Linux distributions
- Fixed DNS routing issues with split tunnel on Linux systems not using systemd-resolved
- Fixed an issue causing the WireGuard userspace method to occasionally fail to connect on some Linux systems
- Removed unneeded WireGuard kernel module logging on Linux


Private Internet Access 2.2.2
- Fixed an issue causing high CPU usage on some Linux systems
- Fixed an issue causing WireGuard to disconnect in some cases using split tunnel with All Other Apps set to Bypass


Private Internet Access 2.2.0
- Split tunnel is now supported with WireGuard
- Geo-located regions are supported
- The PIA Next Generation network is now in preview
- Added Built-in Resolver option to Name Servers setting
- Removed Handshake testnet resolver from Name Servers setting (testnet no longer exists, hnsd does not support mainnet)
- Added 'requestportforward' option to 'piactl get/set' to control port forwarding setting
- Improved DNS leak protection compatibility with macOS 10.15.4 and later
- Improved compatibility of split tunnel on Windows with other WFP callout drivers
- Fixed an issue preventing IP split tunnel rules from being disabled on Windows in some cases
- Fixed layout of the killswitch warning in some translations
- Changed title of windowed dashboard to "Private Internet Access"
- The regions list keeps its scroll position as latencies are updated
- Diagnostic improvements in debug reports


Private Internet Access 2.1.0
- Split tunnel "bypass" rules can be created for IP addresses and subnets
- WireGuard now supports network roaming on Mac in addition to Windows and Linux
- New piactl commands to log in and log out - 'piactl login', 'piactl logout'
- New piactl command to enable killswitch and/or VPN connections without using the graphical client - 'piactl background'
- Fixed an issue that prevented WireGuard from connecting on Windows if the computer had been shut off unexpectedly
- Fixed an issue on some Linux resolvconf systems that could block DNS incorrectly when using WireGuard


Private Internet Access 2.0.2
- Improved handling of several Mac applications with split tunnel, such as Mail and Calendar
- The WireGuard connectivity timeout is customizable
- Improved support for IPv6 networks when the Allow LAN setting is enabled
- Fixed an issue that prevented Use Existing DNS from working on some Mac systems
- Fixed an issue causing WireGuard to take a long time to connect on some Windows systems
- Updated Qt to 5.12.8
- Updated OpenVPN to 2.4.9
- Updated OpenSSL to 1.1.1g
- Security improvements


Private Internet Access 2.0.1
- Fixed long DNS resolution times on Windows on some systems


Private Internet Access 2.0
- WireGuard is now supported as a connection method
- WireGuard on Windows requires Windows 8 or later
- Some settings are not yet supported with WireGuard - split tunnel, port forwarding, and proxy
- Fixed the Mail app on Windows 10 with split tunnel (shares an app family with Calendar)
- Fixed terminal emulator support for Terminator and other terminals on Linux
- VPN IP and forwarded port appear more quickly than in 1.8
- Improved reliability of support tool submissions
- Security improvements