YOUR CONNECTION
Enroll your Mac or iPhone, choose a location, and connect.
Sign in with g-authPRIVATE NETWORK ACCESS
Each ticket enrolls one device and expires after 15 minutes.
On this device, download the ticket and open it in G VPN. To enroll another device, scan this QR from its screen. Keep this single-use ticket private. If it expires, create a new ticket.
Your administrator controls the locations available to your devices.
Users appear after signing in with g-auth. Enable an account and choose its permitted locations. Administrator privileges come only from g-auth and are read-only here. VPN access enablement and permitted locations are managed here.
New nodes generate their identity locally and request approval. Pending identity and node claims are untrusted until you explicitly approve its claimed configured PoP. Enrollment and approval are kept only in this controller.
These reports show whether approved nodes acknowledged their desired peer configuration. They do not verify client connections or traffic.
Revoking a device invalidates all its certificates and VPN access. Revoking an individual certificate leaves access through any other valid certificate. Certificate revocation takes effect immediately in the control service. Tunnel removal is confirmed separately by each PoP.