diff --git a/README.md b/README.md
index 2e3aeb47..5fbd4353 100644
--- a/README.md
+++ b/README.md
@@ -110,6 +110,7 @@ For the VPN to work properly, the app requires:
 
 - _App Groups_ and _Keychain Sharing_ capabilities
 - App IDs with _Packet Tunnel_ entitlements
+- Enabling "App Sandbox > Outgoing Connections (Client)" (macOS only)
 
 both in the main app and the tunnel extension target.