Clash for Android: How to Add a Subscription Step by Step

Before You Begin

Clash for Android is a mobile client that lets you manage proxy subscriptions, switch between nodes, and apply rules to different types of traffic. Installing the application is only the first step. To make it useful, you still need to import a subscription provided by your proxy service, download its profile, choose a suitable node, and enable the correct proxy mode.

This guide explains the complete setup process for beginners in 2026. The interface may look slightly different depending on the application version, Android release, or whether the client is based on the original Clash core or a Mihomo-compatible core. Nevertheless, the workflow remains broadly similar: add the subscription link, update the profile, select a proxy group, and start the service.

Before opening the app, make sure you already have a valid subscription URL from a service provider. Clash for Android does not provide proxy servers or subscription links by itself. A subscription is normally a long web address containing configuration information, node details, policy groups, and sometimes an expiration date or traffic limit. Treat this URL as private account information and avoid posting it in screenshots, public forums, or support chats.

1Check the Subscription Link

A subscription link is different from an ordinary website address. When Clash opens it, the server returns a configuration file or a provider-compatible profile instead of a normal web page. The link may begin with https://, and some providers offer a dedicated button such as Copy Subscription, Clash Link, or Copy URL.

Confirm the following details before importing it:

• The link is complete: Copy the entire URL, including any characters after a question mark. Missing parameters can make the profile empty or cause an authorization error.
• The subscription is still active: Expired plans may return a profile with no usable nodes, even though the URL itself opens successfully.
• The format is supported: Look for a Clash, Clash Meta, Mihomo, or YAML-compatible option when the provider offers several formats.
• The URL is private: Anyone who obtains it may be able to use your traffic allowance or access your profile information.
• The network can reach the provider: If the subscription domain is blocked or temporarily unavailable, the import may fail before the proxy is even running.

Copy the URL on Android

Open your provider's customer page in Chrome or another trusted browser. Sign in if required, locate the subscription section, and tap the copy icon beside the Clash-compatible link. If the provider displays a QR code instead, use the import or scan option inside Clash for Android only when you trust the source. Avoid copying a link from an unknown message, advertisement, or unofficial mirror.

Keep the copied link temporarily in a password manager or a private note rather than a public clipboard history. Some Android keyboards and clipboard managers synchronize copied text between devices. If your device supports clipboard expiration, use it for sensitive subscription links.

2Add the Subscription in Clash for Android

Now open Clash for Android. Depending on the build, the main screen may show a profile list, a configuration page, or an empty-state message asking you to add a profile. The names can vary, but the relevant action is usually labelled Profiles, Profile, Add, or a plus icon.

After saving the URL, Clash may download the profile immediately. If it does not, tap the refresh or download icon next to the new profile. Wait until the process finishes; switching away from the app too quickly can interrupt a slow download on mobile networks.

When the profile appears in the list, tap it to make it active. A selected profile usually has a check mark, highlighted background, or an active label. Adding a profile and activating it are separate actions in many versions of the app. If you only add the profile but do not select it, the client may continue using an old configuration.

When the Import Fails

An error such as Download failed, HTTP 403, timeout, or invalid profile usually points to one of four causes: an incomplete URL, an expired subscription, a provider-side restriction, or an unsupported configuration format. First, copy the link again and compare its beginning and ending characters. Then try opening the URL in a browser. A browser may display unreadable text or download a file; that can still indicate that the link is reachable.

If the browser also reports an authorization or server error, contact the provider rather than repeatedly changing Clash settings. If the browser downloads a profile but Clash rejects it, request a Clash or Mihomo-specific link. Do not manually edit a provider profile unless you understand its YAML structure, because indentation errors can invalidate the entire configuration.

3Update the Profile and Select a Node

Once the subscription has been added, the next practical step is to update it and inspect the available proxy groups. Providers frequently change node addresses, ports, certificates, and routing rules. A profile that worked last week may contain outdated nodes today, so updating should be part of normal maintenance.

Proxy groups may use names such as Proxy, 🚀 Proxy, Auto, Fallback, Streaming, or Final. The exact names depend on the subscription provider. A group is not necessarily a server. It is often a collection of nodes controlled by a selection strategy.

In Select mode, you manually choose a node. This is useful when you want predictable routing or need to compare locations. In URL-Test or Auto mode, Clash tests several nodes and chooses one according to latency or availability. In Fallback mode, it normally uses the first available node in a defined order. Automatic modes are convenient, but they may occasionally select a node that has low ping yet performs poorly with real websites.

How to Choose a Reliable Node

• Start with a nearby region: A geographically closer node often provides lower latency and better responsiveness.
• Compare more than ping: A low latency number does not guarantee fast downloads, stable video, or reliable access to every service.
• Avoid overloaded nodes: If pages load slowly during busy hours, try another node even when its displayed delay looks similar.
• Use the provider's labels carefully: Labels such as Premium, Streaming, or Game may describe intended use, but they are not universal guarantees.
• Test several services: Check a normal webpage, a video thumbnail, and the application you actually need to use.

If every node shows a timeout, update the subscription first and verify that the Android device has a working internet connection. If only one or two nodes fail, the problem is probably limited to those servers. If all nodes connect but applications still fail, continue with proxy mode and DNS checks instead of repeatedly downloading the same profile.

4Choose a Proxy Mode and Start the Service

After selecting a profile and node, return to the main screen and enable the Clash service. Android will display a system VPN permission dialog because Clash uses the local VPN interface to capture and route traffic. Approve the request only if you are using the trusted application installed from a reliable source.

Before connecting, choose the mode that matches your needs. Most Clash for Android builds provide three common options:

• Rule mode: Traffic follows the rules in the profile. Matching domains can use the proxy, while local services and permitted websites use DIRECT. This is usually the best starting point for everyday browsing.
• Global mode: Nearly all captured traffic is sent through the selected proxy group. It is useful for troubleshooting or when you intentionally want a broad proxy route, but it may increase latency and affect local apps.
• Direct mode: Traffic bypasses the proxy. Use it to confirm whether a connection problem is caused by Clash or by the underlying network.

For a new installation, select Rule mode, choose the desired proxy group, and tap the main switch. Android will show a VPN key icon or a related status indicator when the service is active. Open a few ordinary websites and check whether the connection behaves normally.

Check Traffic and DNS Behavior

Use the app's connection, log, or traffic screen to confirm that requests are being captured. A request list that remains empty may indicate that the service is not running, the selected mode is Direct, or the application is excluded from the VPN route. When a website fails, inspect the log for clues such as DNS failure, connection refused, handshake timeout, or rule mismatch.

Do not change advanced DNS options immediately unless there is a clear reason. Provider profiles may already include DNS settings designed for their rules. If you do need to adjust DNS, make one change at a time and test after each change. Mixing several DNS modes, custom private DNS settings, and third-party VPN applications can make troubleshooting much harder.

5Maintain the Setup and Fix Common Problems

A working Clash setup needs occasional maintenance. Subscription profiles are dynamic, and mobile networks can change between Wi-Fi and cellular data. The following routine prevents many avoidable failures:

1. Refresh the subscription periodically: Update it when nodes disappear, credentials change, or the provider publishes new routing rules.
2. Keep one known-good node: Remember a stable node so you have a baseline for comparison after an update.
3. Review the active profile: Make sure Clash did not silently switch to an old or empty configuration.
4. Check Android permissions: Confirm VPN permission, background activity, and notification permission where required.
5. Disable conflicting tunnel apps: Two VPN-based applications generally cannot control the same traffic path at the same time.

Quick Troubleshooting Checklist

• Clash connects but websites do not open: Switch from Rule to Global mode for a short test. If Global works, inspect the profile's rules or proxy group.
• Only one application fails: Check whether that app uses its own DNS, certificate pinning, or a bypass setting. Some applications do not respect ordinary system proxy behavior.
• Connection stops after locking the phone: Adjust battery optimization and allow Clash to run in the background.
• Nodes disappear after an update: Check the subscription quota, expiration date, and provider status. The profile may have been refreshed successfully but now contains no active servers.
• Everything becomes slow: Test another node, disable Global mode, and compare Wi-Fi with mobile data. Overloaded nodes and weak cellular signals are common causes.
• The VPN icon is visible but traffic is direct: Review the current mode and the profile rules. A VPN indicator confirms that the tunnel interface exists; it does not prove that every request is using a proxy.

If the app becomes difficult to diagnose, export or record the profile name, active mode, selected group, and the exact error message before resetting anything. Removing the profile may erase useful clues, and reinstalling the client rarely fixes an expired subscription or unavailable node.

Finally, use Clash responsibly. Follow local laws, the terms of the websites you access, and your provider's acceptable-use policy. Keep the client updated from a trustworthy source, protect your subscription URL, and turn off the service when you do not need it if battery life or local network access is a priority.

Download Clash for Free – Get Started Now →