TunnelBear not working or won't connect: settings, network and account checks

When TunnelBear spins on connecting, the reason is usually local: a stale session, a mis-set clock, another VPN or security suite interfering, filtered ports, or a free-plan cap that has run out. Work through the checks in order and enable GhostBear only once you know the network is filtering traffic.

Account, clock and network: the checks before any setting

Sign out, sign in again, and verify the date, time and time zone on the device, because a wrong clock can stop sign-in and connecting. If the app still refuses, reinstall from the official source and try mobile data; if it works there, your router or provider is the suspect. Error 403 in the app (1006 on the website) means Cloudflare has flagged the network's IP as risky, common on shared campus or public networks; switching connections for a while is the practical fix, and support is next if it persists.

Choosing WireGuard, OpenVPN or IKEv2 instead of Auto

Auto picks a protocol for you and so hides the answer to the one question that matters: which one the network kills. Set one by hand under Settings > Connections on desktop, or in mobile Settings.

A firewall that closes those ports kills that protocol outright. OpenVPN on 443 shares a port with ordinary HTTPS, so try it next. TCP Override on Windows and macOS trades speed for stability on choppy lines; if it is on and things are bad, turn it off and compare. The iPhone help also describes changing the tunnelling protocol in the iOS Settings app.

GhostBear on blocked networks, and where it stops helping

GhostBear disguises VPN traffic so a filtering network struggles to recognise it. The official GhostBear article lists it for Windows, Android and macOS v4; iPhone and macOS v5 lack the switch entirely, and it greys out while the tunnel is up or a custom proxy has been set. Enable it only on censored networks like work, school or public Wi-Fi; elsewhere it slows things down and can break a working connection. It is the sole stealth option available: no VLESS Reality, Shadowsocks or Trojan appear in its specs, which is why VPNRadarLab gives censorship bypass 1.9 of 10. If GhostBear still loses, the stealth VPN list is the next stop.

TunnelBear says connected but nothing loads

VigilantBear, the kill switch, holds traffic back during reconnecting, which feels like "no internet". On hotel or cafe Wi-Fi it can bury the captive portal sign-in page: open a browser, load any address, accept the terms, then let it reconnect. On Android 10 or newer, Private DNS overrides TunnelBear's resolver and is known to break loading, so set it to Automatic. TunnelBear does not publish DNS leak protection. A phone hotspot does not carry the tunnel to a laptop; tethering leaves the laptop outside it.

Antivirus, firewalls, other VPNs and the browser extension

Security suites can stop both the install and the tunnel; pause them briefly for a test and re-enable afterwards. Never run a second VPN at once, and keep the TunnelBear browser extension away from the desktop app; it also needs cookies allowed. On macOS, the helper tool wants the computer's administrator password, and on Sequoia the app must be permitted under Login Items & Extensions > Network Extensions. On Android, rooted firmware and battery savers are known troublemakers.

Free plan out of data

Free users get 2GB a month, and tunnelling stops once it is spent. The allowance renews on the monthly anniversary of account creation, and leftovers expire. City selection and SplitBear are paid-only, though performance is the same as paid. Unlimited removes the cap for $10.99 a month, $69.99 a year or $120 for three years.

Streaming sites and services that reject TunnelBear

No streaming support is published, and the help centre says outright it cannot guarantee access to every site. When a platform blocks you, pick a different tunnel location, then switch back to the original one to obtain a fresh IP address.

Writing to TunnelBear support

Support runs on email tickets through the help centre; no live chat or public status page is published. Name your device, protocol and exact error, and disable GhostBear first so it is not a variable.

TunnelBear connection FAQ

Why is TunnelBear stuck on connecting on a Mac?

The helper tool needs the computer's administrator password, and on Sequoia the app must be enabled under Network Extensions. After that, a manual protocol choice such as OpenVPN on port 443 is the next test.

Why does TunnelBear fail on iPhone when GhostBear is not there?

The iOS app does not include GhostBear, nor does macOS v5. Try changing the protocol through the iOS Settings app instead.

Does TunnelBear cover a laptop on my phone's hotspot?

No. The laptop needs its own TunnelBear session running.

Short fix list for TunnelBear

Re-login, correct the clock, check the data counter, test another network, pick a protocol manually, enable GhostBear only on filtered networks, and take error 403 to support.