Safari proxy setup
Safari has no proxy settings of its own: it uses the proxies of the Mac's network connection. Set the two web proxies there with your login, and Safari picks them up.
- Protocols
- macOS offers web (HTTP), secure web (HTTPS) and SOCKS proxies; use the two web proxies on port 7000
- UDP
- No. An HTTP proxy carries TCP only
- Where the setting is
- System Settings → Network → your connection → Details → Proxies
- Works with
- Residential and mobile proxies
Before you start
- Your proxy login and password from the Residential or Mobile page of the dashboard, and traffic on that product.
- The setting belongs to one network service. If you use both Wi-Fi and a cable, set it on each.
- It applies to the whole Mac: Chrome, Edge and other apps that follow the system proxy use it too.
- On iPhone and iPad, Safari uses the Wi-Fi network's proxy instead: see iPhone and iPad.
- Host
gate.aeonproxy.com- Port (HTTP / HTTPS)
7000- Login
- your proxy login, with targeting keys if you need them:
LOGIN-cc-us-sid-abc123 - Password
- your proxy password
Copy the login and password from the Residential or Mobile page of the dashboard; the generator there also writes ready lines. Key syntax: targeting and sessions.
Add the proxy
- Choose Apple menu → System Settings and click Network in the sidebar. Click your connection (for example Wi-Fi), then Details, then Proxies.
- Turn on Web proxy (HTTP). Enter
gate.aeonproxy.comas the server and7000as the port. Turn on Proxy server requires password and enter your login with its keys and your password. - Turn on Secure web proxy (HTTPS) and enter the same server, port, login and password. This is the proxy for HTTPS sites: the Mac still talks to it in plain HTTP, which is what port 7000 expects.
- Leave SOCKS proxy off and click OK.
Safari can use the login saved there, so it may not ask for a password at all. If it does ask, enter the same login and password.
Check the proxy
Open the IP checker in Safari. It should show the proxy's country and an address that is not yours. Look at the WebRTC card as well. Safari's settings have no WebRTC option, and WebRTC can reach the internet over UDP from your own connection. If the card shows your real address and that matters for your task, do the task in Firefox or Brave, where WebRTC can be kept behind the proxy. Details: WebRTC leaks.
Rotating or sticky
Safari sends the login saved in Proxies, so the targeting and session keys go there. A sticky key keeps one IP for up to 60 minutes, then the same line moves to a new IP in New York State. Rotating logins change the IP with every connection, which most sites dislike during a signed-in visit.
LOGIN-cc-us-st-newyork-sid-safari01-ttl-60To change country or start a new session, edit the login in both web proxies and click OK. Close and reopen Safari if open pages keep the old address.
If it does not work
| What you see | What to check |
|---|---|
| The password prompt keeps coming back | The gateway rejected the login (407): a wrong password or a key that is not in the lists. Copy both from the dashboard into both web proxies again. |
| Only some sites use the proxy | Secure web proxy (HTTPS) is off. Nearly every site is HTTPS, so both web proxies must be on. |
| It works on Wi-Fi but not on a cable | The setting is per network service: add it to the other connection too. |
| An address that is neither yours nor in the country you asked for | If iCloud Private Relay or a VPN is on, turn it off and check again. |
| Other apps lost the internet | They follow the same system proxy and may not handle a login. Turn the proxies off when you finish. |
Questions
Our SOCKS5 port needs a login, and we have not confirmed that Safari sends the password saved for a SOCKS proxy. The two web proxies on port 7000 carry every HTTP and HTTPS page with your login, so this page uses them.