Control your Mac from your iPad while away – securely over the internet

At home it’s easy: iPad and Mac are on the same Wi-Fi and the app finds the Mac on its own. While away – in a café, on a train, at the office – your Mac sits behind your home router. This guide shows three secure ways to get there. If you haven’t prepared the Mac yet, read Set up your Mac for remote access first.

Option 1: your remote app’s relay service

Many remote apps broker the connection through their own encrypted service. You sign in with the same account on the Mac and the iPad, and the app finds the Mac anywhere.

• Chrome Remote Desktop: free, with a Google account and PIN.
• Jump Desktop: Jump Desktop Connect on the Mac, signed in with your Jump account.
• RealVNC: RealVNC Server on the Mac, signed in with your RealVNC account.
• Screens 5: Screens Connect on the Mac, or its built-in Tailscale integration.

Pro: no networking knowledge needed. Con: you depend on the vendor’s service. Be sure to turn on two-factor authentication for the vendor account.

Option 2: Tailscale (or another mesh VPN)

Tailscale connects your devices into a private, encrypted network – wherever they are. It works with any remote app, including built-in Screen Sharing.

1. Install Tailscale on the Mac and the iPad and sign in with the same account.
2. Look up the Mac’s address in the Tailscale app (a 100.x.y.z address or the device name).
3. Create a connection to that address in your remote app. For Screen Sharing that’s VNC port 5900.

Pro: secure, independent of the remote app, no open ports. Con: one more account and one more app.

Option 3: your own router’s VPN

Many routers have a built-in VPN, for example WireGuard. You set it up once on the router, install the VPN profile on the iPad, and you’re in your home network with one tap while away. Then you connect to the Mac’s local address just like at home.

Pro: no third party, everything stays with you. Con: your router has to support it, and setup is a bit more technical.

What to avoid

• No port forwarding for VNC (port 5900). It puts your Mac openly on the internet, where anyone can try passwords. VNC also isn’t meant for unprotected connections across the internet.
• No weak or reused passwords for your Mac user, VNC password or vendor account.
• Don’t let the Mac restart unnoticed. With FileVault it’s only reachable again after someone unlocks it in person.

Tips for smooth work on the go

• Lower the image quality when the connection stutters. Text stays readable.
• Use your personal hotspot instead of public Wi-Fi if the café network is slow or untrusted.
• Hide the Mac’s screen: some apps offer a curtain mode. Otherwise lock the Mac after the session.
• Desktop at iPad size: especially on small screens and with limited bandwidth, a desktop that fits the iPad exactly helps. With PadTailor you turn it on in the menu bar before the session.