Introduction: How Do I Get Rid of This “Fortinet” Garbage Without Losing My Data or Open Tabs?
Let’s kill the biggest worry upfront: uninstalling FortiClient will not delete your personal files, browser tabs, photos, contacts, or any other data. FortiClient is a VPN and endpoint security agent. It manages network traffic and security policies, nothing else. Your documents, downloads, browser sessions, open tabs, and personal data are completely untouched by this process.
Quick Tips to Save Your Tabs First: Before doing anything, spend 10 seconds protecting your browser session. In Chrome/Edge: Settings → On startup → Continue where you left off. In Firefox, it saves automatically. In Safari, windows restore on relaunch. On iOS/Android: your browser tabs sync to the cloud automatically if signed in. Once that’s set, you can reboot as many times as needed without losing a single tab.
What is FortiClient, exactly?
It’s Fortinet’s unified endpoint agent — a security and VPN tool widely deployed in enterprises. Depending on configuration, it combines SSL VPN connectivity, malware protection, web content filtering, application firewall, and vulnerability scanning. In a corporate environment managed via Fortinet’s EMS (Endpoint Management Server), it serves as a tightly controlled security agent that answers to your IT department — not to you. That’s exactly what makes it hard to remove.
Why is it so hard to uninstall?
- On Windows, it installs kernel-level drivers (FortiFilter, FortiScan, fctap), multiple auto-start services, virtual network adapters, and deep registry entries.
- On macOS, it deploys system extensions, LaunchDaemons, and kernel extensions that survive standard app deletion.
- On mobile (iOS/Android), it may be installed as part of an MDM (Mobile Device Management) profile that locks it in place at the OS level.
- EMS-managed versions across all platforms can be locked with an uninstall password and blocked from removal without IT authorization.
- Its self-protection feature actively resists modification by local administrators.
⚠️ Critical Warning — Corporate / Managed Devices: If FortiClient was installed by your employer’s IT team and you are still under their policies, contact your IT department before attempting removal. On a managed device, uninstalling FortiClient may violate your company’s security policy, disconnect you from corporate resources, trigger a security alert, or result in disciplinary action. Every method in this guide is intended for devices you own outright or for which IT has explicitly approved the removal.
How to Completely Uninstall FortiClient
The right removal method depends entirely on your operating system and — on Windows especially — whether your installation is Standalone or EMS-Managed. Each platform section below is complete and self-contained. Jump directly to yours.
Uninstalling FortiClient on Windows

Standalone (VPN-Only) FortiClient
The standalone — often called “VPN-only” — edition is the free version you downloaded and installed yourself without corporate IT involvement. It has no EMS lock and no remote management. This is the easiest version to remove.
💡 Tip — How to confirm you have a standalone: Open FortiClient. If you see no “Managed by [Organization]” banner, no padlock in the title area, and no EMS registration notice, it’s standalone. You can proceed with any of the methods below without worrying about locks or passwords.
The simplest path for standalone users:
- Press Win + I → Apps → Apps & features (Windows 10) or Installed apps (Windows 11).
- Search for FortiClient.
- Click the three-dot menu or the entry itself → Uninstall.
- Follow the wizard. Click Yes / Uninstall when prompted.
- Restart your computer.
For most standalone users, that’s it. If it fails or the button is missing, proceed to the methods below.
EMS-Managed FortiClient
EMS-Managed FortiClient was pushed to your device by your organization’s Endpoint Management Server. It may have an uninstall password, and the standard uninstall option may be locked, greyed out, or entirely hidden.
💡 Tip — How to confirm EMS management: Open FortiClient and look for a “Managed by [Company Name]” notice, a padlock icon near the top of the window, grayed-out settings, or a message that your device is registered to an EMS server. Any of these confirms EMS management.
| Feature | Standalone | EMS-Managed |
|---|---|---|
| Standard uninstall works | Usually | Often blocked |
| Uninstall password required | No | Possibly |
| FCRemove.exe needed | Rarely | Frequently |
| Can reinstall automatically | No | Yes (via GPO/EMS) |
| Contact IT first | Not required | Strongly recommended |
If you’re still employed / on a company device: Do not attempt to bypass EMS management. Contact your IT helpdesk and request de-enrollment.
If you’re on a personal device, no longer connected to EMS:
- Option A — If you know the uninstall password: Open FortiClient → Settings → look for the Uninstall password field, enter it, then use Apps & Features to uninstall normally.
- Option B — No password, EMS unreachable: Use FCRemove.exe (see dedicated section below). This is the correct tool for this exact scenario.
⚠️ Warning: If your EMS server is still reachable (i.e., you’re on your former employer’s network or VPN), forcibly removing FortiClient may trigger a security alert on their end. Do this only on your own network.
Method 1: Uninstall FortiClient with a Third-Party Uninstaller
Third-party uninstallers monitor the removal process in real time, capturing every file, folder, registry entry, and service touched — then offer to delete any traces left behind. This gives you a cleaner result than the Windows built-in method in a single pass.
Recommended tools:
- Revo Uninstaller (revouninstaller.com) — Most widely trusted; free version handles FortiClient well.
- Geek Uninstaller — Lightweight, portable (no installation needed), completely free.
- IObit Uninstaller — Good deep-scan capability with a clear interface.
How to use Revo Uninstaller Free:

- Download from revouninstaller.com (official site only).
- Install and launch Revo Uninstaller.
- Find FortiClient in the program list.
- Select it and click Uninstall in the toolbar.
- Revo runs FortiClient’s own uninstaller first. Let it complete.
- When Revo offers a scan mode, select Advanced for the most thorough sweep.
- Review the leftover registry entries and files it finds. Select all and click Delete.
- Restart your computer.
💡 Pro Tip: Revo’s “Advanced” scan catches registry entries and files that FortiClient’s own uninstaller silently skips. This is especially useful if you’re planning to install a different VPN client immediately after — it prevents driver conflicts caused by FortiClient remnants.
Important: Third-party uninstallers work well for standalone installations. They cannot bypass EMS management locks. For EMS-managed devices, you still need FCRemove.exe.
Method 2: Uninstall via Apps and Features / Programs and Features
The standard Windows-native removal method. Always try this first.
Windows 10 / 11:
- Press Win + I → Apps → Apps & features (Windows 10) or Installed apps (Windows 11).
- Search for FortiClient in the search box.
- Click the entry → Uninstall → confirm the prompt.
- Follow the uninstall wizard to completion.
- Restart your computer.

Windows 7 / 8 (legacy):
- Open Control Panel → Programs → Programs and Features.
- Find FortiClient, right-click → Uninstall/Change.
- Complete the wizard and restart.
💡 Tip: If the Uninstall button appears greyed out but the entry is visible, try right-clicking the FortiClient entry directly — the context menu sometimes shows a working Uninstall option even when the button is disabled.
Method 3: Uninstall FortiClient with its uninstaller.exe
Fortinet bundles a dedicated uninstaller executable that sometimes succeeds when the Apps & Features method fails, because it handles FortiClient’s own service dependencies directly rather than going through the generic Windows Installer.
Open File Explorer and go to:
C:\Program Files\Fortinet\FortiClient\
- Find uninstaller.exe or FortiClientUninstaller.exe.
- Right-click → Run as administrator.
- Follow the wizard to completion.
- Restart your computer.
💡 Tip: If the folder doesn’t exist at the path above, check C:\Program Files (x86)\Fortinet\FortiClient\ — older 32-bit installations sometimes land there. Also, check your Windows Temp folder and the original installer package location if you still have it.
💡 Pro Tip: If you’re prompted for an uninstall password (EMS-managed installs), don’t guess repeatedly — three failed attempts can lock the uninstall function entirely on some versions. Use FCRemove.exe instead.
Method 4: Uninstall String with Run
Every MSI-based application records its own uninstall command in the Windows registry. You can extract and run FortiClient’s uninstall string directly — useful when the Apps & Features list is broken, entries are missing, or you need to script the removal.
Step 1 — Find the uninstall string:
- Press Win + R → type regedit → Enter.
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall- Browse the subkeys and find the one where DisplayName = FortiClient.
Look at the UninstallString value — it will look like:
MsiExec.exe /X{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}💡 Tip: Also check
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ for 32-bit installations on a 64-bit system.Step 2 — Run it:
- Press Win + R, paste the full uninstall string, and press Enter.
- Follow the wizard.
Alternative — Silent command-line uninstall:
msiexec /x {YOUR-PRODUCT-GUID-HERE} /qnRemove /qn to use the graphical wizard instead of silent mode.
💡 Pro Tip for IT Admins: Add /l*v C:\Logs\forticlient_uninstall.log to generate a verbose log file. If the uninstall fails silently, the log tells you exactly why:
msiexec /x {GUID} /qn /l*v C:\Logs\forticlient_uninstall.logCommand-Line Uninstall (WMIC)
For IT admins or anyone comfortable with the command line, WMIC can find and remove FortiClient without touching the registry or GUI — ideal for remote administration or scripted deployments.
Open Command Prompt as Administrator and run:
wmic product where “name like ‘%FortiClient%'” get name, version, identifyingNumber
Sample output:
| Name | Version | IdentifyingNumber |
| FortiClient | 7.2.4.0 | {A1B2C3D4-XXXX-XXXX-XXXX-XXXXXXXXXXXX} |
Uninstall using that GUID:
wmic product where "IdentifyingNumber='{A1B2C3D4-XXXX-XXXX-XXXX-XXXXXXXXXXXX}'" call uninstallType Y to confirm, press Enter, and wait. Restart when complete.
💡 Tip: WMIC is deprecated in Windows 11 but is still functional. If your environment has disabled it, fall back to msiexec /x {GUID} from Method 4.
💡 Pro Tip for Admins: Need to uninstall FortiClient from multiple machines remotely? Combine WMIC with psexec from Sysinternals for remote execution, or use your RMM tool with the msiexec /x {GUID} /qn command as a script payload.
Force-Uninstall Utility (FCRemove.exe)
FCRemove.exe is Fortinet’s own official cleanup utility. It operates below the Windows Installer layer, forcibly removing FortiClient kernel drivers, services, virtual adapters, and registry entries that the standard uninstaller cannot touch. This is the tool to use when:
- All other methods have failed.
- The installation is corrupted and won’t respond to normal removal.
- You’re on a personal device where EMS is no longer reachable, and there’s no uninstall password available.
- You need a guaranteed clean slate before installing a different VPN client.
- You’ve run the standard uninstaller, but FortiClient services or drivers keep running.
Where to get FCRemove.exe:
Download only from support.fortinet.com (Fortinet’s official support portal — free account required). Search the knowledge base for “FCRemove.” Do not download it from third-party sites.
How to use FCRemove.exe:
- Save all open work and close every application.
- Open Task Manager (Ctrl+Shift+Esc) → Services tab.
- Find and stop any services named FortiClient Service Framework, FortiESNAC, FortiSSLVPNdaemon, or anything starting with Forti.
- Copy FCRemove.exe to your Desktop.
- Right-click FCRemove.exe → Run as administrator.
- Accept all prompts. Let it run to completion.
- Restart your computer.
- After reboot, run FCRemove.exe a second time as administrator.
- Restart your computer.

💡 Pro Tip — Why run it twice? On the first pass, some FortiClient driver files are locked by running processes and cannot be deleted. After a reboot, those processes don’t start, so the second pass can access and remove them. Skipping the second run leaves orphaned drivers behind that can still cause conflicts with other VPN software.
⚠️ Warning: FCRemove.exe is aggressive. It removes every FortiClient component, including kernel-level drivers. Don’t use it if you need to keep any Fortinet component on the system.
Uninstalling FortiClient the Fun and Easy Way
For most people on a standalone installation, all you actually need is this:
- Save your work and check your browser session settings (10 seconds — worth it).
- Win + I → Apps → Find FortiClient → Uninstall → click through.
- Restart your PC.
- Done.
Seriously, if that works, don’t read the rest of the Windows section. If the button was greyed out, the process errored, or FortiClient is still showing after the reboot, then come back and use FCRemove.exe. That resolves 99% of the remaining cases.
Uninstalling FortiClient on macOS
Using the Built-In Uninstaller
Fortinet provides a dedicated uninstaller for macOS that handles the system extension, LaunchDaemons, and application support files in a single step. Always start here.
Where to find it:
- /Applications/FortiClientUninstaller.app — check here first
- Inside the app bundle: right-click FortiClient.app → Show Package Contents → Contents/Resources/
- Inside the original .dmg installer package if you still have it
Steps:
- Open Finder → Applications.
- Launch FortiClientUninstaller.app.
- Enter your macOS administrator password when prompted.
- Click Uninstall and wait for completion.
- Restart your Mac.

💡 Tip — macOS 13 Ventura and later: You’ll likely be prompted to approve removal of a system extension in System Settings → Privacy & Security. Scroll to the Security section, click Allow, authenticate with Touch ID or your password, and then re-run the uninstaller. This approval step is required before macOS allows any app to remove a system extension — it’s an OS-level security gate, not a FortiClient quirk.
💡 Pro Tip: If you originally installed FortiClient from the Mac App Store, it won’t have a bundled uninstaller. In that case, delete it via Launchpad (long-press until it jiggles → click X) or drag it to Trash from Applications, then use the Terminal cleanup commands below to remove the support files the standard delete leaves behind.
Technical Tip: How to Uninstall FortiClient on macOS
When the built-in uninstaller isn’t available, fails partway through, or leaves residual components causing startup errors, use Terminal for a complete manual removal. This is also the method used by IT administrators for scripted or remote uninstallation.
Open Terminal (Applications → Utilities → Terminal). You’ll need your administrator password for sudo commands.
Step 1 — Stop all FortiClient processes:
sudo pkill -f FortiClient
sudo pkill -f fctservctl
sudo pkill -f fctagt
sudo pkill -f fctsched

💡 Tip: If any pkill command returns “No matching processes found,” that’s fine — it just means that particular component wasn’t running. Continue with the next step.
Step 2 — Unload and remove LaunchDaemons and LaunchAgents:
sudo launchctl unload /Library/LaunchDaemons/com.fortinet.fct.*.plist 2>/dev/null
sudo rm -f /Library/LaunchDaemons/com.fortinet.fct.*.plist
sudo rm -f /Library/LaunchAgents/com.fortinet.fct.*.plist
💡 Tip: This step is critical. Leftover LaunchDaemons are the most common reason people still see FortiClient-related error messages at startup even after the app itself is gone. If you’ve already deleted the app and are just cleaning up errors, this is usually the only step you need.
Step 3 — Remove the application and all support files:
sudo rm -rf /Applications/FortiClient.app
sudo rm -rf /Library/Application\ Support/Fortinet
sudo rm -rf /Library/Fortinet
sudo rm -rf ~/Library/Application\ Support/FortiClient
sudo rm -rf ~/Library/Preferences/com.fortinet.forticlient*.plist
sudo rm -rf ~/Library/Logs/FortiClient
sudo rm -rf ~/Library/Caches/com.fortinet.forticlient*
Step 4 — Remove the system extension (macOS 12 Monterey and later):
sudo systemextensionsctl uninstall com.fortinet.fct.macos.forticlient-extension
If that returns an error about the identifier, check what’s actually installed:
systemextensionsctl list
Find the FortiClient entry, copy its bundle ID, and substitute it in the uninstall command.
💡 Tip: On macOS 13+, you may need to reboot into Recovery Mode to remove a stubborn system extension if the normal command fails. In Recovery Mode, run systemextensionsctl reset — but be aware this resets all third-party system extensions, not just FortiClient’s.
Step 5 — Remove kernel extensions (macOS 11 Big Sur and earlier):
sudo kextunload -b com.fortinet.fct.kext.fctap 2>/dev/null
sudo rm -rf /Library/Extensions/fctap.kext
sudo rm -rf /System/Library/Extensions/fctap.kext
Step 6 — Remove VPN configuration profiles (if present):
# List any remaining VPN configs:
ls ~/Library/Preferences/com.apple.networkextension*
Also check: System Settings → VPN — if you see a FortiClient VPN entry, click the three-dot menu next to it and select Remove Configuration.
Step 7 — Restart your Mac.
Step 8 — Verify removal:
ps aux | grep -i fortinet
ls /Applications/ | grep -i forti
ls /Library/LaunchDaemons/ | grep -i fortinet
All three commands should return nothing (except the grep process itself). Clean result = complete removal.
Manual Removal If the Uninstaller Fails
If the built-in uninstaller crashes, stalls, or completes but leaves error messages behind, the Terminal steps in the Technical Tip section above are your complete manual removal path. You don’t need both — the Terminal method covers everything the GUI uninstaller does and more.
The most common post-removal symptom on macOS is a persistent startup error referencing a missing FortiClient daemon. Fix it with just these two commands and a reboot:
sudo launchctl unload /Library/LaunchDaemons/com.fortinet.fct.*.plist 2>/dev/null
sudo rm -f /Library/LaunchDaemons/com.fortinet.fct.*.plist
Uninstalling FortiClient on Linux
FortiClient on Linux is distributed as a .deb (Debian/Ubuntu) or .rpm (Red Hat/CentOS/Fedora) package. Removal is clean and straightforward via the standard package manager.
Debian / Ubuntu (APT):
sudo apt-get remove –purge forticlient
sudo apt-get autoremove
sudo apt-get clean
💡 Tip: The –purge flag removes configuration files in addition to the binaries. Without it, config files remain and can interfere if you ever reinstall. Always use –purge for a clean removal.
Red Hat / CentOS / Fedora (DNF / YUM / RPM):
# Fedora / RHEL 8+:
sudo dnf remove forticlient
# CentOS 7 / older RHEL:
sudo yum remove forticlient
# Direct RPM removal:
sudo rpm -e forticlient
Verify package removal:
# Debian/Ubuntu:
dpkg -l | grep -i fortinet
# RPM-based:
rpm -qa | grep -i fortinet
No output = successfully removed.
Manual cleanup after package removal:
# Remove application directories
sudo rm -rf /opt/forticlient
sudo rm -rf /etc/forticlient
sudo rm -f /usr/share/applications/forticlient.desktop
sudo rm -f /usr/bin/forticlient
# Remove systemd service
sudo systemctl stop forticlient 2>/dev/null
sudo systemctl disable forticlient 2>/dev/null
sudo rm -f /etc/systemd/system/forticlient.service
sudo rm -f /etc/init.d/forticlient
sudo systemctl daemon-reload
# Remove user config
rm -rf ~/.config/forticlient
rm -rf ~/.fortinet
Remove lingering VPN network interfaces:
# Check for leftover interfaces:
ip link show | grep -i -E “ssl|forti|ppp”
# Remove if found (replace ‘sslvpn0’ with actual interface name):
sudo ip link delete sslvpn0 2>/dev/null
💡 Tip: If FortiClient created custom iptables rules, they may persist after removal. Check with sudo iptables -L -n | grep -i fortinet and flush any remaining Fortinet rules manually if found.
Restart your system and re-run the verification commands above to confirm a clean state.
Uninstalling FortiClient on iOS / iPadOS
FortiClient on iOS is fundamentally different from the desktop versions — it’s a standard App Store app paired with a VPN configuration profile. Removal is simpler, but there’s an important distinction between a personal install and an MDM-managed install.
Standard Removal (Personal Install from App Store):
Delete the app:
- On your iPhone or iPad Home Screen, long-press the FortiClient icon.
- Tap Remove App → Delete App → Delete to confirm.
Or via Settings:
- Go to Settings → General → iPhone Storage (or iPad Storage).
- Scroll down and tap FortiClient.
- Tap Delete App → confirm.
Remove the VPN configuration profile:
Deleting the app alone does not remove the VPN profile FortiClient created. Left behind, it can appear in your Settings and occasionally try to connect.

- Go to Settings → General → VPN & Device Management.
- Tap VPN to see saved VPN configurations.
- Find the FortiClient or Fortinet VPN entry.
- Tap the (i) info button next to it.
- Tap Delete VPN → confirm.
💡 Tip: On iOS 16 and later, VPN configurations are under Settings → General → VPN & Device Management → VPN. On iOS 15 and earlier, they’re directly under Settings → General → VPN.
Remove any configuration profiles (MDM-linked installs):
- Go to Settings → General → VPN & Device Management.
- Under Configuration Profiles, check if there’s a Fortinet or employer-named profile.
- Tap the profile → Remove Profile → enter your device passcode → Remove.
⚠️ Warning — MDM-Managed Devices: If your iPhone was enrolled in your company’s MDM (Mobile Device Management) platform — for example, Microsoft Intune, Jamf, or Fortinet’s own EMS Mobile — the FortiClient app may have been pushed to your device via that MDM profile. In this case:
- The app may reinstall itself automatically if the MDM profile is still active.
- Removing the MDM profile (Step above) will also remove any other apps, restrictions, or configurations the MDM installed — including corporate email, Wi-Fi passwords, and app restrictions.
- If this is a company-owned device: Do not remove the MDM profile. Contact your IT department.
- If this is your personal device enrolled in a former employer’s MDM: Removing the profile is the right move — it’s your device.
💡 Pro Tip: After removing the VPN profile and app, go to Settings → Privacy & Security → VPN and confirm no Fortinet entries remain. Also restart your iPhone once — iOS sometimes holds VPN configurations in memory across sessions.
Uninstalling FortiClient on Android
FortiClient on Android is available both as a direct APK install and via the Google Play Store. On managed enterprise devices, it may be installed through an EMM (Enterprise Mobility Management) solution like Android Enterprise, Samsung Knox, or Fortinet’s EMS Mobile.

Standard Removal (Personal Install):
Via Settings:
- Go to Settings → Apps (or Apps & notifications / Application Manager depending on your Android version and manufacturer).
- Find FortiClient in the list and tap it.
- Tap Uninstall → OK to confirm.
Via Google Play Store:
- Open the Google Play Store.
- Tap your profile icon (top right) → Manage apps & device.
- Under “Manage,” find FortiClient.
- Tap it → Uninstall.
Remove the VPN profile after uninstalling:
- Go to Settings → Network & Internet (or Connections on Samsung) → VPN.
- Find the FortiClient or Fortinet VPN entry.
- Tap the gear/settings icon next to it → Delete VPN or Forget.
💡 Tip: On Android 12 and later, you may need to toggle Always-on VPN off before you can delete the VPN profile. Go to the VPN settings, tap the gear icon, and disable “Always-on VPN” first.
Removing a Work Profile (MDM-Managed):
If FortiClient was installed by your employer through Android Enterprise’s Work Profile, it lives in a separate managed container on your device — and you can remove the entire Work Profile without affecting your personal apps or data.
- Go to Settings → Accounts (or Biometrics and Security → Work Profile on Samsung).
- Find Work Profile or your employer’s MDM account.
- Tap Remove Work Profile → confirm.
⚠️ Warning: Removing the Work Profile deletes all apps, data, and accounts within that profile. Your personal apps, photos, messages, and contacts in your personal profile are completely unaffected. This is the correct and safe way to remove employer-managed apps from your personal Android device.
⚠️ Fully Managed / Company-Owned Device: If your entire Android device is managed (not just a Work Profile), you may not be able to uninstall FortiClient at all without IT authorization, as device admin privileges block removal. Contact your IT team.
💡 Pro Tip: After uninstalling, check Settings → Apps → See all apps and make sure no Fortinet-related apps remain (some enterprise deployments install companion apps alongside FortiClient). Also check Settings → Battery → Battery optimization — FortiClient sometimes adds exclusions here that remain after removal.
Uninstalling FortiClient on ChromeOS
FortiClient on ChromeOS exists in two forms: as an Android app (installed via Google Play Store on Chromebooks that support Android apps) or, more rarely, as a Linux app running inside ChromeOS’s Linux environment. The removal method depends on which form is installed.
Removing FortiClient Android App on ChromeOS:
If FortiClient was installed from the Google Play Store on your Chromebook:
- Click the Launcher (circle icon, bottom left).
- Find the FortiClient icon in the app grid.
- Right-click → Uninstall.
- Confirm the prompt.
Or via Settings:
- Open Settings → Apps → Manage your apps.
- Find FortiClient and click it.
- Click Uninstall.
Remove the VPN profile:
- Open Settings → Network → VPN.
- Find the FortiClient VPN entry.
- Click the three-dot menu next to it → Forget.
💡 Tip: ChromeOS stores VPN configurations as network profiles separate from the app. Uninstalling the app does not automatically remove the VPN profile — always check Settings → Network → VPN after removal and delete any remaining Fortinet entries.
Removing FortiClient Linux App on ChromeOS:
If FortiClient was installed inside ChromeOS’s Linux (Crostini) environment:
- Open the Terminal app in ChromeOS.
- Run the appropriate removal command for your Linux environment:
# Debian-based (default Crostini):
sudo apt-get remove –purge forticlient
sudo apt-get autoremove
# Verify removal:
dpkg -l | grep -i fortinet
💡 Tip: If you want to completely reset the Linux environment and remove everything in it (not just FortiClient), go to ChromeOS Settings → Advanced → Developers → Linux development environment → Remove. This wipes the entire Linux container. Only do this if you’re comfortable losing any other Linux apps you had installed.
Managed Chromebook (Enterprise / School):
If your Chromebook is managed by your school or employer (you’ll see “This device is managed by [Organization]” on the sign-in screen or in Settings), FortiClient was likely pushed via Chrome Enterprise policy.
- You cannot remove policy-managed apps from an enrolled Chromebook.
- Contact your IT administrator to remove the device from the management policy or unenroll it.
- If this is your personal device and it was accidentally enrolled, ChromeOS has a Powerwash (factory reset) option under Settings → Advanced → Reset settings → Powerwash — but be aware this wipes the entire device.
💡 Pro Tip: To check if your Chromebook is managed, go to Settings → scroll to the bottom → click “About ChromeOS” → look for a “Enterprise enrollment” or management notice. If it says “This Chromebook is managed by [Organization],” contact IT before attempting removal.
Possible Problems That Can Arise During the Uninstallation of FortiClient
Problem 1: Uninstall button is greyed out or missing entirely (Windows)
Cause: The EMS management lock or an uninstall password is blocking removal.
Solutions:
- Company device → contact IT.
- Personal device, no EMS access → use FCRemove.exe.
- You set an uninstall password yourself → enter it in FortiClient Settings first, then retry standard uninstall.
💡 Tip: Don’t guess the uninstall password repeatedly. Some FortiClient versions lock the uninstall function after three failed attempts. If you’re not sure of the password, go straight to FCRemove.exe.
Problem 2: Uninstall wizard hangs or errors midway
Cause: A FortiClient service is running and holding a lock on files the uninstaller needs to delete.
Solutions:
- Open Task Manager → Services tab. Stop every service named “Fortinet” or “FortiClient”.
- Try uninstalling again.
- If still hanging: reboot into Safe Mode (Windows: hold Shift + click Restart → Troubleshoot → Advanced → Startup Settings → Safe Mode). FortiClient services don’t start in Safe Mode, allowing the uninstaller to run freely.
💡 Tip: Safe Mode is underused for software removal. It’s one of the most reliable ways to get a stubborn uninstall to work because it prevents virtually all third-party services from starting.
Problem 3: “Access is denied” when deleting folders manually
Cause: Files are owned by the SYSTEM account with protected permissions, or services are still holding file handles.
Solutions:
Use an elevated Command Prompt:
rd /s /q “C:\Program Files\Fortinet\FortiClient.”
- Boot into Safe Mode and delete from there.
- Use FCRemove.exe, which natively handles permission-protected files.
Problem 4: The Internet or the network is broken after uninstall
Cause: FortiClient’s virtual network adapter or Winsock entries weren’t cleanly restored.
Solutions (Windows):
Open Command Prompt as administrator:
netsh winsock reset
netsh int ip reset
ipconfig /flushdns
Restart.
Also check Device Manager for orphaned Fortinet adapters and uninstall them.
Solutions (macOS):
# Remove any leftover VPN config:
# System Settings → VPN → remove any FortiClient entry
sudo dscacheutil -flushcache
sudo killall -HUP mDNSResponder
💡 Tip: If your network issue is specifically that DNS stopped resolving (websites won’t load but IP addresses work), the ipconfig /flushdns command above is usually the fix on Windows. FortiClient’s DNS filter component sometimes leaves stale entries behind.
Problem 5: FortiClient keeps reinstalling itself
Cause: A GPO or EMS deployment policy is configured to push FortiClient back to enrolled devices.
Solution: This requires IT involvement to permanently resolve. As a temporary measure, check Task Scheduler (Win + R → taskschd.msc) for Fortinet-related tasks and disable them. But if the EMS server is still reachable and the device is still enrolled, it will reassert management. The permanent fix is device de-enrollment.
Problem 6: VPN profile remains after app deletion (iOS/Android)
Cause: On mobile platforms, VPN profiles are stored separately from the app and are not automatically deleted when you uninstall.
Solution: Manually remove the VPN configuration as described in the iOS and Android sections above (Settings → VPN → delete the Fortinet entry).
💡 Tip: On iOS, a leftover VPN profile with “Connect On Demand” enabled can intermittently interrupt your internet connection even though FortiClient is gone — you’ll see your connection drop and reconnect randomly. Removing the profile fixes this immediately.
Problem 7: macOS shows “FortiClient wants to make changes” at startup after removal
Cause: A LaunchDaemon was not fully removed and is attempting to start a process that no longer exists.
Solution:
sudo launchctl unload /Library/LaunchDaemons/com.fortinet.fct.*.plist 2>/dev/null
sudo rm -f /Library/LaunchDaemons/com.fortinet.fct.*.plist
Restart.
The prompt will be gone.
Post-Uninstall Cleanup & Verification
The standard uninstaller — on any platform — often leaves behind residual components. Here’s how to confirm you have a genuinely clean system.
Windows: Leftover Files
Delete these if they still exist after uninstalling:
C:\Program Files\Fortinet\
C:\ProgramData\Fortinet\
C:\Users\[YourUsername]\AppData\Roaming\Fortinet\
C:\Users\[YourUsername]\AppData\Local\Fortinet\
💡 Tip: AppData is hidden by default. To see it in File Explorer: View → Show → Hidden items (Windows 11) or View → tick “Hidden items” (Windows 10).
Windows: Registry Cleanup
⚠️ Back up your registry first: In Registry Editor → File → Export → save to Desktop. This takes 30 seconds and gives you a safety net.
Delete these keys if they exist:
HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Fortinet
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FortiFilter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FortiScan
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fortissl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FortiESNAC
HKEY_CURRENT_USER\SOFTWARE\Fortinet
Windows: Verify No Services Remain
sc query type= all | findstr /i “fortinet forticlient.”
If anything returns, delete it:
sc delete [ServiceName]
Windows: Final Verification Checklist
- C:\Program Files\Fortinet\ — folder does not exist
- Task Manager → Details — no fortinet/forticlient processes
- services.msc — no Fortinet services listed
- Apps & Features — FortiClient not listed
- Device Manager → Network Adapters — no Fortinet virtual adapters
- Registry check above — keys deleted
macOS: Verify Clean State
ps aux | grep -i fortinet
ls /Applications/ | grep -i forti
ls /Library/LaunchDaemons/ | grep -i fortinet
find ~/Library -name “*fortinet*” 2>/dev/null
All commands should return nothing.
Linux: Verify Clean State
dpkg -l | grep -i fortinet # Debian/Ubuntu
rpm -qa | grep -i fortinet # RPM-based
ps aux | grep -i forticlient
systemctl list-units | grep -i fortinet
All Platforms: Final Reboot
After completing all cleanup steps, restart your device one final time. This ensures kernel drivers are fully unloaded, network stacks are fresh, and no FortiClient component survives in memory. After the reboot, run the verification steps above again to confirm a clean state.
How to Completely Uninstall FortiClient – Quick Summary
Windows
| Step | Action |
|---|---|
| 1 | Save work; protect browser tabs with session-restore |
| 2 | Try Settings → Apps → FortiClient → Uninstall |
| 3 | If blocked/fails: run FCRemove.exe as admin → restart → run again → restart |
| 4 | Delete C:\Program Files\Fortinet\ and C:\ProgramData\Fortinet\ |
| 5 | Clean registry keys under HKLM\SOFTWARE\Fortinet |
| 6 | Verify: no services, no processes, no adapters |
macOS
| Step | Action |
|---|---|
| 1 | Run FortiClientUninstaller.app as admin → restart |
| 2 | If fails: run Terminal commands from Technical Tip section |
| 3 | Remove LaunchDaemons; delete Support files |
| 4 | Reboot → verify with ps aux | grep -i fortinet |
Linux
| Step | Action |
|---|---|
| 1 | sudo apt-get remove –purge forticlient or sudo dnf remove forticlient |
| 2 | Delete /opt/forticlient, /etc/forticlient |
| 3 | Remove the systemd service and daemon-reload |
| 4 | Reboot → verify with dpkg -l | grep fortinet |
iOS / iPadOS
| Step | Action |
|---|---|
| 1 | Long-press app icon → Remove App → Delete |
| 2 | Settings → General → VPN & Device Management → VPN → delete FortiClient entry |
| 3 | If MDM-managed (personal device): remove MDM profile from the same menu |
Android
| Step | Action |
|---|---|
| 1 | Settings → Apps → FortiClient → Uninstall |
| 2 | Settings → Network → VPN → delete FortiClient profile |
| 3 | If Work Profile: Settings → Accounts → Remove Work Profile |
ChromeOS
| Step | Action |
|---|---|
| 1 | Right-click FortiClient in Launcher → Uninstall (Android app) |
| 2 | Settings → Network → VPN → Forget FortiClient entry |
| 3 | If Linux app: sudo apt-get remove –purge forticlient in Terminal |
| 4 | Managed Chromebook: contact IT or Powerwash as last resort |

Conclusion
FortiClient is designed to be persistent — that’s a security feature in enterprise deployments and a headache for everyone else. But it is fully removable from every platform when you use the right method for your specific situation.
The most important decision point is whether your installation is standalone or EMS/MDM-managed. Standalone installs come off cleanly with standard uninstall tools. Managed installs require either IT involvement or the appropriate force-removal tools (FCRemove.exe on Windows, MDM profile removal on mobile).
Your personal data — files, photos, browser tabs, contacts — is completely safe throughout this process. FortiClient only touches your network stack and security configurations. Everything else is yours and stays yours.
If you’re hitting a wall on a managed corporate device, the path forward is through your IT department, not around it. For everything else, the steps above get you to a clean system.
Frequently Asked Questions
How to fully uninstall Fortinet?
Use the official FCRemove.exe tool from Fortinet’s support portal, run it as administrator, and restart your computer. For standard cases, go to Settings → Apps → Installed apps, select FortiClient, click Uninstall, then restart immediately—even if not prompted.
How do I remove Fortinet from Chrome?
Fortinet doesn’t install as a Chrome browser extension, it’s a system-level security agent (FortiClient) or a network firewall (FortiGate) that filters your traffic. You can’t “uninstall” it from Chrome because it’s not inside Chrome.
Why is my website blocked by Fortinet?
If visitors see “Web Page Blocked” with a Fortinet logo, your website is being filtered by a FortiGate firewall (the network appliance, not FortiClient on the user’s device). FortiGate is one of the world’s most deployed enterprise firewalls, and it categorizes and blocks websites based on security policies.
Common reasons your site is blocked:
- Categorized as malicious/ phishing
- Adult/ gambling/ illegal content
- New domain with no reputation
- Hosting malware (even unknowingly)
- IP reputation issues
- Geographic blocking
- Custom blocklist
Will removing FortiClient delete my files, browser tabs, photos, or contacts?
No, on any platform. FortiClient manages VPN and security functions only. Your personal data is completely unaffected. Use your browser’s session-restore before rebooting and all your tabs will return automatically.
The Uninstall button is greyed out on Windows. What do I do?
Your installation is EMS-managed or has an uninstall password. On a company device, contact IT. On a personal device where the EMS server is unreachable, use FCRemove.exe from Fortinet’s official support site — it bypasses the lock entirely.
My internet broke after uninstalling FortiClient on Windows. How do I fix it?
Run netsh winsock reset and netsh int ip reset in an administrator Command Prompt, then restart. Also check Device Manager for any leftover Fortinet virtual network adapters and uninstall them.
I deleted the FortiClient app on my iPhone but the VPN keeps connecting. Why?
The VPN configuration profile wasn’t removed when you deleted the app. Go to Settings → General → VPN & Device Management → VPN, find the FortiClient entry, and delete it. If there’s also an MDM configuration profile, remove that too.
Is FCRemove.exe from a third-party site safe to download?
Don’t use third-party sites. Download FCRemove.exe only from support.fortinet.com (Fortinet’s official portal). The tool is legitimate and official — downloading from unverified sources is a security risk.
FortiClient reinstalls itself every time I remove it. How do I stop it?
A Group Policy or EMS deployment is pushing it back. Only your IT team can permanently stop this. As a temporary measure, check Task Scheduler for Fortinet tasks and disable them — but if the EMS server is still active and the device enrolled, it will reassert control.
Can I remove the FortiClient Work Profile on Android without losing my personal photos and apps?
Yes. Removing a Work Profile only deletes apps and data within that managed profile container. Your personal photos, messages, contacts, and apps in your personal profile are completely unaffected. This is one of Android Enterprise’s core security features — personal and work data are strictly separated.
Does this guide apply to FortiClient 7.x?
Yes. All steps apply to FortiClient 6.x and 7.x (including 7.0, 7.2, and 7.4). EMS lock and self-protection features became more aggressive in the 7.x series, which is why FCRemove.exe is more frequently needed for managed enterprise installations on those versions.
Do I need to uninstall FortiClient before installing a different VPN client?
Yes, in most cases. Leftover FortiClient drivers and virtual adapters conflict with Cisco AnyConnect, OpenVPN, WireGuard, and other VPN clients — causing dropped connections, routing failures, and adapter conflicts. Always do a clean removal and reboot before installing the replacement.

