LanGuard for MAC
Free, open-source menu bar app that turns Wi-Fi off when a wired LAN link comes up and back on when you unplug, with no admin rights needed.
LanGuard Overview
LanGuard is a free, open-source menu bar app that turns Wi-Fi off the moment a wired network link goes up and switches it back on when you unplug. By default macOS keeps Wi-Fi running even when your Mac is docked over Ethernet, which leaves a second network route active and can send traffic out the wrong connection. LanGuard handles the switch for you. It acts only on plug and unplug moments, so if you turn Wi-Fi back on by hand while docked, it stays on until you next unplug the cable.
The core feature needs no admin rights: Wi-Fi power and link state go through standard macOS networking frameworks, and the app makes no network calls of its own, with no ads, analytics or tracking. An optional Connection Protection mode, off by default, installs a small root helper with one admin prompt and keeps a stable address that moves between LAN and Wi-Fi, so open connections can survive plugging and unplugging; it works on IPv4 networks where LAN and Wi-Fi share a router. LanGuard is made by Roy Padina under the MIT license, needs macOS 14 or later and runs natively on Apple Silicon and Intel Macs. It is ad-hoc signed and not notarized by Apple, so the first launch has to be allowed with Open Anyway in System Settings › Privacy & Security.
Key Features
LanGuard keeps your Mac on one network connection at a time without any manual switching.
- Edge-based switching: acts only when a cable is plugged in or pulled out.
- Wake-aware: a change that happened during sleep is corrected on wake.
- Per-interface choice: pick which wired adapters trigger and which Wi-Fi adapters are controlled.
- Ignores virtual adapters: VPN, bridge and virtual machine adapters are off by default.
- No-drop hand-over: Wi-Fi stays on until the wired link reaches the internet.
- Switch to Wi-Fi: a menu item or global shortcut moves traffic before you unplug.
- Menu bar indicator: shows LAN, Wi-Fi or Off as an icon, a label or both.
- Master switch: pause all automatic switching from the menu.
What’s New in Version 1.2.1
LanGuard 1.2.1 fixes a Connection Protection problem after brief cable drops.
- After a short wired-link drop, LanGuard now re-applies the stable address and its routes once the link is back, so apps no longer time out on hosts they were using
- The same happens after a link change on another adapter on the same router, and once at launch when protection is already on
LanGuard FAQ
Is LanGuard free?
Yes. LanGuard is free and open source under the MIT license.
What does LanGuard do?
It turns Wi-Fi off as soon as a wired LAN link becomes active and turns it back on when the cable is unplugged, so your Mac does not keep two network connections running while docked.
Will LanGuard override Wi-Fi when I turn it on myself?
No. LanGuard acts only at the moment a cable is plugged in or pulled out. If you turn Wi-Fi on by hand while wired, it stays on until your next unplug.
Does LanGuard need admin rights?
Not for its main feature. Wi-Fi power and link state are handled as your normal user. Only the optional Connection Protection installs a root helper, which asks for an admin password once.
What is Connection Protection?
An optional mode, off by default, that keeps a stable address moving between LAN and Wi-Fi so open connections survive plugging and unplugging. It works only on IPv4 networks where LAN and Wi-Fi share a router, needs DHCP on both, and should not be combined with a full-tunnel VPN.
Does it work with docks and USB Ethernet adapters?
Yes. Any adapter that macOS reports as an Ethernet interface works, including USB-C and Thunderbolt docks, and you choose which ones count as triggers.
Why does macOS warn me when I open LanGuard?
LanGuard is ad-hoc signed and not notarized by Apple. On first launch, open System Settings › Privacy & Security and click Open Anyway. Each release also lists a SHA-256 checksum so you can verify the download.
Which macOS version does LanGuard need?
LanGuard needs macOS 14 Sonoma or later and is a universal app for Apple Silicon and Intel Macs.
Does LanGuard collect any data?
No. According to the developer it makes no network calls of its own and has no ads, analytics or tracking.
Where does the LanGuard download on languard.FULLMAC.app come from?
The download button leads to the official LanGuard release page on GitHub at https://github.com/roypadina/LanGuard/releases/latest. languard.FULLMAC.app does not change or repackage the app.
Similar Apps
WhatRouteWhatRoute is a network diagnostic utility for the Mac. Its main job is traceroute: it shows each router your data passes through on its way to another computer. It can also ping, run Domain Name Service queries and Whois lookups, and monitor the traffic to and from your Mac. A geolocation service places the routers on a world map, so you can see the geographical path your packets take across the Internet, and a selected area can be opened in Apple Maps or Google Maps for a closer view.Internet Utilities
SSH Tunnel ManagerSSH Tunnel Manager is a lightweight menu bar app for managing SSH port forwards on the Mac. Instead of typing ssh -N -L commands in Terminal and forgetting which tunnels are running, you set each tunnel up once in Settings and switch it on or off from the menu bar. It is written in native Swift and AppKit and uses the SSH that comes with macOS, with no bundled binaries.Internet Utilities
HoleberryHoleberry is a native menu bar app for people who run Pi-hole, the network-wide ad blocker. It puts your Pi-hole on the Mac menu bar, so you can check blocking status and query stats, pause blocking, and handle blocked domains without opening the Pi-hole web interface. The menu bar icon shows your Pi-hole's health at all times, and the menu shows total queries and blocked domains. When a page fails to load because Pi-hole blocked it, Holeberry detects the current tab in Safari, Orion, Chrome and Chromium browsers, Firefox, Zen and others, and unblocks that exact domain with one click, so the rest of your network stays protected.Internet Utilities
WiFi LensWiFi Lens is a native Mac app for understanding the Wi-Fi around you. It scans nearby networks across the 2.4, 5 and 6 GHz bands, charts channel occupancy, scores congestion and recommends channels for your region. For each network you can inspect the PHY generation, channel width, 802.11k/r/v support and WPA3, and for your own connection the IP, gateway, DNS, MAC, transmit rate and security summary. A roaming test monitors handoffs between access points, a heatmap compares occupancy per band, and AP Radar helps you track a selected access point by signal strength, with optional audio feedback.Internet Utilities
VPN BypassVPN Bypass is a menu bar app for macOS that decides which traffic goes through your VPN. You pick the services and domains that should skip the VPN, or the few that must use it, and the app keeps the routes right as the VPN reconnects and addresses change. It is meant for full-tunnel VPN clients that send everything through the tunnel, which can stall streaming and break AirPlay or Chromecast.Internet Utilities
TunnelblickTunnelblick is a free graphical interface for OpenVPN on macOS. It gives you easy control of OpenVPN connections from an icon in the menu bar: install the configuration file your VPN provider, school or company gives you, then connect and disconnect with a click. You can keep several configurations, see the status of each connection, and use the options for network monitoring and IPv6 that Tunnelblick offers to keep your connection behaving as expected.Internet Utilities
FULLMAC.app does not host this app. Download buttons lead to the developer’s own pages.