macOS processes › Networking and wireless
What is nehelper on Mac?
nehelper is part of Apple's Network Extension system, which VPN apps, content filters and some security tools use. It helps manage their configurations and permissions.
What it does
When an app sets up a VPN, a DNS or content filter, or another network extension, macOS uses nehelper and related processes, like nesessionmanager, to store the configuration and check what the app is allowed to do. It's mostly idle unless a network extension is installed or changing state.
Why it gets busy
- A VPN app connecting, reconnecting or switching servers often.
- Content filter or security apps checking network activity.
- A VPN or filter app stuck in a reconnect loop.
Why is nehelper using so much CPU?
nehelper is busy when a VPN or network filter app keeps changing state. Update or remove the VPN or filter app responsible.
Is it safe to quit?
macOS restarts it when needed. VPNs and filters may disconnect briefly.
How to calm it down
- See which network extensions are installed in System Settings › General › Login Items & Extensions, under Network Extensions.
- Remove VPN configurations you don't use in System Settings › VPN.
- Update or uninstall VPN and filter apps you don't need.
In SystemWatch
SystemWatch's History shows whether nehelper's activity lines up with your VPN app connecting, and the website edition shows that app's network connections.