Perseus Sepahi

SoftwaremacOS

Onionskin

Send the Mac apps you choose through the Tor network, and only through Tor.

Download for MacmacOS 26 or later, Apple silicon · signed and notarized
Releases and issue tracker on GitHub

Onionskin screenshotOnionskin screenshotOnionskin screenshotOnionskin screenshot
Status
Beta
Platforms
macOS
Year
2026
Built with
Swift, SwiftUI, Network Extension, Tor, obfs4, Snowflake
Topics
Tor, privacy, anti-censorship, network extension

Pick apps (a browser, a messenger, Terminal) and turn Onionskin on. A macOS network extension catches every connection those apps make, including their helper processes and Safari's WebKit networking, and sends it through Tor, with a separate circuit for each app. DNS lookups go through Tor too, UDP that Tor can't carry is blocked, and if Tor stops the apps are cut off rather than falling back to your real connection.

Apps you don't pick are not affected. Built-in obfs4 and Snowflake bridges help where Tor is blocked. Onionskin is free, has no accounts and no tracking, and is signed and notarized by Apple. It is not affiliated with or endorsed by The Tor Project.

Features

  • Per-app Tor routing: only the apps you choose, including their helpers and anything they launch
  • DNS through Tor: your network never sees the names protected apps look up
  • One circuit per app, so your apps can't be linked by exit address
  • Kill switch: if Tor stops, protected apps are blocked, even after a restart
  • QUIC and WebRTC leaks blocked; local network off unless you allow it
  • Built-in obfs4 and Snowflake bridges; live circuits and a per-connection activity log