Before removing a VPN
Identify the exact product, version and installer. A personal subscription VPN, an organization’s access client and a remote-workspace app are different products. Citrix Workspace is included below because readers often group it with their work VPN; its removal is a separate workflow.
Save work using the connection, and keep an approved alternative if you need to reach work resources or obtain the uninstaller. Removing a client can interrupt remote access, filtering and security policy. A local administrator password is not permission to dismantle an organization’s managed installation.
Back up any personal configuration you will need again, keeping credentials private. If you do not control the account or do not know why the client is installed, ask its administrator. Do not remove profiles to get around a disabled uninstall button or protected service.
Uninstall GlobalProtect on macOS
Palo Alto Networks documents using the GlobalProtect installer itself to uninstall. Obtain the matching approved package from the organization’s portal or administrator, rather than an unrelated download site.
- After IT authorizes removal, open the GlobalProtect Installer.
- Continue through the introduction and destination screen.
- On Installation Type, select Uninstall GlobalProtect, then Continue.
- Choose Install to carry out the removal, authenticating when asked.
- If the documented system-extension removal prompt appears, complete it under the administrator’s instructions and verify the uninstall confirmation.
The installer’s use of the word Install is counterintuitive, but the selected package is Uninstall GlobalProtect. Do not remove the app first and assume its network components are gone. The vendor also documents a command-line removal method for administrators; it is unnecessary to reproduce that script when the approved GUI package is available.
Other VPN and remote-access clients
| Product | Maker’s documented route | What to check |
|---|---|---|
| NordVPN | Quit, then use Apple’s Finder removal method; NordVPN’s support page links to it. | There may be both direct-download and App Store editions. Match any data cleanup to that edition. |
| ExpressVPN | In the current app, Profile › Actions › Uninstall ExpressVPN; confirm and authenticate for its helper. | Its maker says Finder-only removal can leave helpers and settings. |
| Cisco Secure Client / AnyConnect | Cisco’s deployment guide provides an Uninstall app under Applications › Cisco and module-specific administrator procedures. | VPN, Umbrella, DART and other modules differ. Let IT select the correct removal scope. |
| FortiClient | Fortinet’s current macOS notes direct managed removal to the EMS administrator. | Do not apply an old edition’s uninstaller path to a current managed endpoint or bypass a lock. |
| Citrix Workspace | Quit fully, then use its current documented Trash flow and confirmation, or Uninstall Citrix Workspace App in the original DMG. | End remote sessions and save their work first. Use the administrator’s package for a managed installation. |
These routes were checked on the makers’ sites on 23 October 2026. They are not a claim that every historical version uses the same screen. We did not uninstall or reconfigure a VPN for this guide. Follow the source for the edition on your Mac if its interface differs.
Remove an unwanted VPN configuration afterward
A VPN configuration is a saved connection, not the app’s full installation. On macOS 15 Sequoia, macOS 26 Tahoe and macOS 27, Apple documents the same basic route: System Settings › VPN, the information button beside the service, then Remove Configuration and confirmation.
Use that only for the personal connection you intentionally retired, after its app removal. Record the setup information if you may need it again. Deleting a configuration can remove the saved settings required to reconnect; it does not cancel a subscription or prove a network extension was uninstalled.
If the entry is controlled by a profile or cannot be removed, stop and ask IT. Do not delete every connection, reset all network services or remove a management profile as a shortcut. Apple notes that some profiles can only be removed by a system administrator.
Network extensions and background items
On macOS 15 and later, inspect System Settings › General › Login Items & Extensions. Apple identifies Network Extensions as components that can implement a VPN or content filter. An extension’s name needs to match the product you removed before you treat it as a leftover.
Inspection is different from uninstalling the component. Use the vendor’s removal tool to handle privileged helpers and network extensions. Older installations may include legacy components that need administrator-led cleanup. Do not delete files from system Library folders, force-unload extensions or lower macOS security protections.
If internet access fails afterward, note the exact error and contact the vendor or IT. Repeatedly disabling filters from several security products can make the original cause harder to identify. The firewall guide explains why firewall settings are separate from VPN routing and filtering.
Cancel the account separately
A personal VPN subscription remains a billing relationship after local app removal. Use the provider’s account or the App Store that billed you, and keep the cancellation confirmation. For an organization’s service, its administrator manages seats and access.
If you only want the app to stop opening at login, use its setting or the startup items guide. Disabling startup does not remove a VPN, and removing a VPN may be unnecessary for that narrower goal.
Where Tend fits
Tend’s free Startup Items view can help identify supported entries. Its Pro Uninstaller moves an app and reviewed support files in your own Library to the Trash; it does not replace VPN uninstallers, remove managed profiles or detach systemwide network extensions.
Begin with the vendor’s method and use the app-removal guide for ordinary app files. Tend does not cancel subscriptions or repair an organization’s access policy.
Questions
Is deleting a VPN app enough?
Not always. The maker’s uninstaller may need to remove background services or network extensions; a saved VPN configuration is a separate item.
Can I remove a work VPN myself?
Ask your IT team and stop before changing it. Managed clients, profiles and security modules can require administrator-led removal.
Does removing a VPN configuration uninstall its app?
No. It removes saved connection settings. Use the vendor’s app-removal procedure and cancel a personal subscription separately.
Related guides
Firewall and network permissions
Separate the protections and their controls.
How to delete or uninstall apps on a Mac completely
Understand privileged components and app files.
Sources
- Palo Alto Networks, GlobalProtect macOS removal.
- NordVPN, uninstall instructions; ExpressVPN, current Mac removal.
- Cisco, Secure Client deployment and removal; Fortinet, managed macOS removal.
- Citrix, Workspace app for Mac removal.
- Apple, remove a VPN configuration, Login Items & Extensions and managed profiles.
See what is taking space on your Mac
Tend is free to download. Pro is $1.99 a month, $12.99 a year with a 7-day free trial, or $29.99 once.