diff --git a/client/lib/state/auth_provider.dart b/client/lib/state/auth_provider.dart
index 3ca341d..4ddb1d0 100644
--- a/client/lib/state/auth_provider.dart
+++ b/client/lib/state/auth_provider.dart
@@ -53,13 +53,6 @@ class AuthNotifier extends StateNotifier<AuthState> {
     await _store.clear();
     state = const AuthState();
   }
-
-  /// Dev-only：仅设置内存登录态，不写 keychain。
-  /// 用于 debug 测试账户旁路，规避 flutter_secure_storage 在未签名
-  /// macOS app 上的 keychain entitlement 问题（-34018）。
-  void devLogin(String token) {
-    state = AuthState(accessToken: token);
-  }
 }
 
 // ── Providers ────────────────────────────────────────────────────────
diff --git a/client/lib/widgets/auth_screen.dart b/client/lib/widgets/auth_screen.dart
index 357dad3..07ce6d5 100644
--- a/client/lib/widgets/auth_screen.dart
+++ b/client/lib/widgets/auth_screen.dart
@@ -1,5 +1,4 @@
 // auth_screen.dart — 登录 / 注册页(邮箱 + 验证码流程)
-import 'package:flutter/foundation.dart';
 import 'package:flutter/material.dart';
 import 'package:flutter_riverpod/flutter_riverpod.dart';
 
@@ -41,20 +40,9 @@ class _AuthScreenState extends ConsumerState<AuthScreen> {
 
   late final AuthApi _api = AuthApi(baseUrl: _kApiUrl);
 
-  // ── Dev-only 测试账户旁路（仅 debug build）─────────────────────
-  // 后端 /v1/auth 未就绪时，用此账户直接进入主界面浏览 UI。
-  // 登录后节点列表回退 kDemoNodes，连接键走 mock 动画。
-  static const _devEmail = 'test@pangolin.dev';
-  static const _devPassword = 'test1234';
-
   @override
   void initState() {
     super.initState();
-    // debug 下预填测试账户，方便直接点登录。
-    if (kDebugMode) {
-      _email.text = _devEmail;
-      _pw.text = _devPassword;
-    }
   }
 
   bool get _emailValid => RegExp(r'\S+@\S+\.\S+').hasMatch(_email.text);
@@ -97,13 +85,6 @@ class _AuthScreenState extends ConsumerState<AuthScreen> {
 
   Future<void> _doLogin() async {
     setState(() { _loading = true; _errorZh = null; });
-    // Dev 旁路：debug build 下用测试账户跳过后端直接登录。
-    // 用 devLogin 只设内存态，不写 keychain（规避 -34018 entitlement 问题）。
-    if (kDebugMode && _email.text.trim() == _devEmail && _pw.text == _devPassword) {
-      ref.read(authProvider.notifier).devLogin('dev-access-token');
-      if (mounted) widget.onDone();
-      return;
-    }
     try {
       final tokens = await _api.login(
         email: _email.text.trim(),
diff --git a/client/macos/Runner/DebugProfile.entitlements b/client/macos/Runner/DebugProfile.entitlements
index 96f4abc..1adf003 100644
--- a/client/macos/Runner/DebugProfile.entitlements
+++ b/client/macos/Runner/DebugProfile.entitlements
@@ -10,5 +10,10 @@
 	<true/>
 	<key>com.apple.security.network.server</key>
 	<true/>
+	<!-- flutter_secure_storage: Data Protection Keychain 需要此 entitlement，否则返回 -34018 -->
+	<key>keychain-access-groups</key>
+	<array>
+		<string>$(AppIdentifierPrefix)com.pangolin.pangolinVpn</string>
+	</array>
 </dict>
 </plist>
diff --git a/client/macos/Runner/Release.entitlements b/client/macos/Runner/Release.entitlements
index 08ba3a3..52b588d 100644
--- a/client/macos/Runner/Release.entitlements
+++ b/client/macos/Runner/Release.entitlements
@@ -6,5 +6,10 @@
 	<false/>
 	<key>com.apple.security.network.client</key>
 	<true/>
+	<!-- flutter_secure_storage: Data Protection Keychain 需要此 entitlement，否则返回 -34018 -->
+	<key>keychain-access-groups</key>
+	<array>
+		<string>$(AppIdentifierPrefix)com.pangolin.pangolinVpn</string>
+	</array>
 </dict>
 </plist>