How to Set Up a Proxy Server on Windows and Mac

Do not guessWhat You Need Before Configuring a Proxy

A proxy endpoint is not discovered from a generic “free proxy” search. Obtain its details from your network administrator or a provider you have vetted. The correct information depends on whether the network uses manual settings, automatic discovery, or a proxy auto-configuration file.

The key limitationWhat System Proxy Settings Actually Cover

A forward proxy accepts traffic from software configured to use it. Windows and macOS expose system settings that many browsers and applications follow, but applications can use their own networking stack, ignore the system proxy, ship an internal proxy option, or open protocols the configured proxy does not support.

Windows 11Set Up a Proxy in Windows Settings

Microsoft’s current Windows proxy setup documentation supports automatic detection, a setup script, or manual configuration for Windows 11 and Windows 10. These settings apply to compatible traffic over Wi-Fi and Ethernet. A VPN connection’s proxy is configured separately.

Manual proxy setup on Windows 11

1. Open Settings.Press Windows + I, or open Start and select Settings.
2. Open the Proxy page.Select Network & internet → Proxy.
3. Open Manual proxy setup.Next to Use a proxy server, select Set up.
4. Enable the proxy.Turn on Use a proxy server.
5. Enter the endpoint.Put the supplied proxy hostname or IP in Proxy IP address and its numeric value in Port.
6. Review exceptions.If authorized, enter suffixes or hosts that must connect directly. Separate multiple entries with semicolons. A pattern such as *.example.com; intranet.example creates direct routes for those matches.
7. Choose local-address behavior.“Don’t use the proxy server for local (intranet) addresses” bypasses short/internal destinations. Follow organizational policy—bypasses are direct connections.
8. Save and test.Select Save, then test a proxy-aware browser. If authentication is required, the app or Windows may prompt on first use.

Manual exceptions are direct connections

Windows accepts multiple exception entries separated by semicolons and supports wildcard suffix patterns. Add only destinations that genuinely must avoid the proxy. A broad pattern can leak traffic or bypass organizational inspection, while a missing internal exception can make intranet resources fail.

Windows automationUse Automatic Detection or a PAC Script

Automatic proxy detection

1. Open Settings → Network & internet → Proxy.
2. Under Automatic proxy setup, enable “Automatically detect settings.”
3. Reconnect to the intended trusted network if required.Discovery is network-dependent; it is not proof that a proxy was found.
4. Test expected internal and external destinations.If settings are organization-managed, contact IT rather than adding a competing manual configuration.

PAC/setup script

1. On the Proxy page, select Set up next to “Use setup script.”
2. Enable “Use setup script.”
3. Enter the full approved script address.Do not paste a proxy server address into the PAC URL field.
4. Select Save.Close and reopen affected apps if they retain the previous PAC decision.

Proxy for a Windows VPN connection

If an organization requires a proxy only while a specific built-in VPN profile is active, open Settings → Network & internet → VPN, select the VPN connection, open its advanced options, and edit the proxy settings for that connection. Do not assume the general Wi-Fi/Ethernet proxy automatically supplies the VPN-specific requirement.

Administrators and developersWindows Proxy Scopes, WinHTTP and App Overrides

Windows has more than one proxy control plane. The Settings/Internet Options proxy is primarily a per-user web proxy used through Windows internet APIs and by applications that honor it. WinHTTP is a separate Windows HTTP Services configuration used by some services and applications. Changing one does not guarantee the other changes.

Environment variables such as HTTP_PROXY, HTTPS_PROXY and NO_PROXY are conventions used by many developer tools, not universal Windows settings. Their case sensitivity, URL syntax, credential handling and precedence differ by tool. Consult that application’s documentation and never store reusable secrets in shared shell history or scripts.

Current macOSSet Up a Proxy on Mac

Apple’s current macOS proxy instructions configure proxies per network service. That means Wi-Fi and Ethernet can have different settings. Make changes on the active service and repeat only if another service genuinely needs the same proxy.

Manual proxy setup on macOS

1. Open System Settings.Choose Apple menu → System Settings.
2. Select Network.Choose the active service—usually Wi-Fi or Ethernet—then click Details.
3. Open Proxies.Select Proxies in the service details.
4. Enable the supplied type.Options can include Web Proxy (HTTP), Secure Web Proxy (HTTPS), and SOCKS Proxy. Enable only what your provider or administrator specified.
5. Enter address and port.Use the exact server hostname/IP and port for each enabled type.
6. Add authentication if required.Enable Proxy server requires password, then enter the supplied username and password. On managed networks, prefer approved credential storage and rotation.
7. Review bypass rules.Add hosts or domains that should connect directly. “Exclude simple hostnames” bypasses names without dots, commonly used for intranet hosts.
8. Save.Click OK, then test the intended application and route.

macOS automationConfigure PAC or Auto Proxy Discovery on Mac

PAC file

1. Open System Settings → Network.Select the relevant service and choose Details → Proxies.
2. Enable Automatic Proxy Configuration.
3. Enter the approved PAC URL.Keep other manual proxy types off unless the administrator explicitly requires both.
4. Click OK and test.Check a destination expected to use the proxy and one expected to return DIRECT.

Auto proxy discovery

Enable Auto Proxy Discovery only when the network administrator uses it. Discovery can obtain settings from the local network; it should not be enabled merely as a troubleshooting guess on arbitrary public Wi-Fi. Managed Macs may receive proxy configuration through device management.

Read-only command-line inspection

Advanced users can inspect macOS proxy state without changing it:

Network service names vary. These examples query a service named “Wi-Fi”; they do not prove an individual app honors the result.

Application behaviorBrowser and App-Specific Proxy Settings

Chrome, Edge and Safari

These browsers generally direct users to the operating system’s proxy controls. Browser policies, extensions and enterprise management can still override behavior. Removing an extension does not remove an OS proxy, and disabling an OS proxy does not necessarily remove an app’s command-line or managed policy.

Firefox

Firefox exposes independent connection settings. In current versions, open Settings, find Network Settings or Proxy settings, and choose one of: no proxy, auto-detect, use system proxy, manual proxy, or automatic proxy configuration URL. If Firefox works while other apps do not—or the reverse—compare this selection first.

Developer tools

Git clients, package managers, containers, Java runtimes, Python/Node tooling and command-line downloaders may use their own settings or environment variables. Configure only the tool that requires the proxy, protect credentials, and document how to undo the change. Containers and virtual machines have their own network environment and may not inherit the host’s user proxy.

DNS and SOCKS hostname resolution

A proxy can receive a hostname and resolve it remotely, or the client can resolve the hostname locally and send an IP. The behavior depends on protocol and application. Labels such as socks5h in some tools explicitly request proxy-side hostname resolution, but they are application syntax—not a universal SOCKS setting. Test the actual app if local DNS exposure matters.

Choose correctlyHTTP, HTTPS, SOCKS5, PAC and Transparent Proxies

Proxy labels mix several dimensions. HTTP and SOCKS describe how clients communicate with the proxy; PAC describes automatic selection; datacenter, residential and mobile describe the exit network; rotating and static describe session behavior. See our comprehensive guide to types of proxy servers.

*“HTTPS proxy” may mean a proxy that tunnels HTTPS destinations or a proxy reached over TLS. Ask which hop is encrypted and whether destination TLS passes through or is inspected.

Verify every layerHow to Test Whether the Proxy Works

1. Record a direct baseline.Before enabling the proxy, note the public IP/network and confirm a known HTTPS site loads.
2. Enable the proxy and reopen the app.Some applications cache settings or PAC decisions until restarted.
3. Check the visible exit inside that app.The address should match the expected provider or organization. Testing in one browser proves only that browser’s route.
4. Verify HTTPS without warnings.The site certificate should be valid for the destination. If an organization performs approved TLS inspection, its managed trust certificate and policy should already be documented.
5. Test an authenticated destination.A 407 response means proxy authentication is required or failed; it is different from a website’s 401 login response.
6. Test bypass entries.An internal or excluded host should connect directly as intended. Remove any unnecessarily broad bypass.
7. Check DNS intent.Determine whether the app resolves hostnames locally or through the proxy. Do not assume a changed web IP means DNS also moved.
8. Compare an app expected not to use it.This reveals whether scope matches your plan and prevents false device-wide claims.

Follow the symptomProxy Troubleshooting on Windows and Mac

Fast recovery sequence

1. Save the existing settings.Take a screenshot or record the approved PAC/manual details without exposing passwords.
2. Check the exact error.Differentiate DNS, timeout, TLS, 407 and destination errors.
3. Disable only the affected proxy layer.Test direct access. Do not reset unrelated network services.
4. Restore one method.Use auto-detect, PAC or manual—not several competing settings unless required.
5. Test one known app and site.Then expand testing to bypasses and other applications.

Return to direct accessHow to Disable or Remove Proxy Settings

Windows 11 and Windows 10

1. Open Settings → Network & internet → Proxy.
2. Manual: select Set up beside “Use a proxy server,” turn it off, and save.
3. PAC: select Set up beside “Use setup script,” turn it off, and save.
4. Auto-detect: leave it as required by the network; turning it off may break a managed environment.
5. VPN-specific proxy: remove it from that VPN profile separately if no longer needed.

macOS

1. Open System Settings → Network.
2. Select the configured service → Details → Proxies.
3. Turn off each manual, PAC or discovery option you previously enabled.
4. Click OK and repeat only for another service that was separately configured.

Reduce avoidable riskProxy Security and Privacy Checklist

A proxy changes routing for configured traffic; it does not replace endpoint security. See VPN vs antivirus for the same boundary: routing and encryption tools do not scan every download or fix a compromised device.

For broader device coverage, a VPN may be a better fit. Read when to use a proxy instead of a VPN. For privacy expectations, see the reasons and limits of masking an IP address.

Common questionsWindows and Mac Proxy Setup FAQ

Disclosure: This article contains affiliate links. If you purchase through one, we may earn a commission at no extra cost to you. Affiliate relationships do not change the configuration steps, scope warnings or security criteria.