Installing Burp's CA certificate in Safari
Last updated: January 11, 2022
Read time: 2 Minutes
If you previously installed a different CA certificate generated by Burp, you should remove it before installing a new one.
To install Burp's CA certificate in Safari, proceed as follows:
With Burp running, visit
http://burpsuite in Safari. You should be taken to a page that says "Welcome to Burp Suite Professional". If not, please refer to the proxy troubleshooting page. Depending on what went wrong, you may be taken there automatically.
In the top-right corner of the page, click CA Certificate to download your unique Burp CA certificate. Take note of where you save this.
Open the Keychain Access application in MacOS and go to the Certificates folder.
Drag-and-drop the downloaded certificate to copy it into the certificates list.
In Keychain Access, double-click the entry for PortSwigger CA. In the dialog that opens, expand the Trust section and select the option Always trust. Enter your password if required.
Restart Safari. With Burp still running, try and browse to any HTTPS URL. If everything has worked, you should now be able to browse to the page without any security warnings.
Removing Burp's CA certificate from Safari
To remove Burp's CA certificate from Safari:
- Open the Keychain Access application.
- In the left-hand side bar, select login.
- From the list of items, find and right-click on the entry for PortSwigger CA.
- From the context menu, select Delete PortSwigger CA and then restart Safari.