diff --git a/client/lib/state/auth_provider.dart b/client/lib/state/auth_provider.dart
index 3ca341d..4ddb1d0 100644
--- a/client/lib/state/auth_provider.dart
+++ b/client/lib/state/auth_provider.dart
@@ -53,13 +53,6 @@ class AuthNotifier extends StateNotifier<AuthState> {
     await _store.clear();
     state = const AuthState();
   }
-
-  /// Dev-only：仅设置内存登录态，不写 keychain。
-  /// 用于 debug 测试账户旁路，规避 flutter_secure_storage 在未签名
-  /// macOS app 上的 keychain entitlement 问题（-34018）。
-  void devLogin(String token) {
-    state = AuthState(accessToken: token);
-  }
 }
 
 // ── Providers ────────────────────────────────────────────────────────
diff --git a/client/macos/Runner/DebugProfile.entitlements b/client/macos/Runner/DebugProfile.entitlements
index 96f4abc..1adf003 100644
--- a/client/macos/Runner/DebugProfile.entitlements
+++ b/client/macos/Runner/DebugProfile.entitlements
@@ -10,5 +10,10 @@
 	<true/>
 	<key>com.apple.security.network.server</key>
 	<true/>
+	<!-- flutter_secure_storage: Data Protection Keychain 需要此 entitlement，否则返回 -34018 -->
+	<key>keychain-access-groups</key>
+	<array>
+		<string>$(AppIdentifierPrefix)com.pangolin.pangolinVpn</string>
+	</array>
 </dict>
 </plist>
diff --git a/client/macos/Runner/Release.entitlements b/client/macos/Runner/Release.entitlements
index 08ba3a3..52b588d 100644
--- a/client/macos/Runner/Release.entitlements
+++ b/client/macos/Runner/Release.entitlements
@@ -6,5 +6,10 @@
 	<false/>
 	<key>com.apple.security.network.client</key>
 	<true/>
+	<!-- flutter_secure_storage: Data Protection Keychain 需要此 entitlement，否则返回 -34018 -->
+	<key>keychain-access-groups</key>
+	<array>
+		<string>$(AppIdentifierPrefix)com.pangolin.pangolinVpn</string>
+	</array>
 </dict>
 </plist>