sing-box for macOS (SFM)

sing-box for macOS, abbreviated SFM, is the Apple-platform graphical client for sing-box. Manage local or remote configuration profiles and run supported proxy, DNS and tunneling configurations. The Mac client implements platform-specific networking through Apple's NetworkExtension framework; it is not a hosted VPN subscription or a source of automatically trusted proxy servers.

Profiles and network behavior

Import or create a configuration that matches the sing-box version and your intended network. Routing, DNS, proxy protocols and credentials depend on the profile and its endpoints. A remote profile can change when its provider updates it, so inspect the source and understand its routing before enabling it. A configuration can affect how applications reach local networks and the internet. Stop the service or return to a known configuration when troubleshooting connectivity.

The publisher documents an unprivileged TUN implementation through NetworkExtension and differences from the core's platform-independent options. Process-name/path and user matching are supported in the standalone Mac client, while some Linux, Android and iOS-specific options are not implemented on Mac. Do not copy a configuration from another platform without checking supported fields. Allow the required network-extension or VPN setup only for a profile you trust.

Mac installation and migration

The official Apple-client documentation requires macOS 13.0 or later. The current 1.14.2 standalone Universal PKG is 102990775 bytes in the official release asset record. The publisher distributes this Universal package for Mac; binary CPU slices have not been independently inspected. The 1.14 release notes say SFM is no longer offered in the Mac App Store because of entitlement restrictions. Use the standalone distribution; profiles and settings are not automatically inherited from the previous app, and the official migration guide applies.

The documentation's Apple-account-region and TestFlight requirements concern Apple-store or beta distribution. The standalone Mac download is available through official GitHub releases and its Homebrew cask. An external proxy/VPN service, server or organization connection can require separate credentials and costs. Installing SFM does not provide such a service.

License and privacy

The Apple-client source is licensed under GNU GPL version 3 or later. Review the published license before reuse or redistribution; this is not a claim of MIT licensing. Network traffic and DNS data can be visible to the configured service operators, and remote profile fetching makes network requests. Protect configuration credentials and review logs before sharing diagnostics. Free software does not make an untrusted server private or guarantee that every route uses encryption.

The publisher's exact 1.14.2 and 1.14.1 notes say only fixes and improvements, without identifying individual changes. Those patch details remain unknown. Version 1.14.0 has a concrete upstream change list, with Mac migration, editor and updater changes distinguished from platform-specific core additions.

Official Apple client and requirements · Platform capabilities · Official releases