Clash Official Site FAQ
Check here first for problems; Most common issues are covered below.
What if the browser still can't open web pages after connecting?
Most common cause: System proxy is not active
Please troubleshoot in the following order:
Confirm that the "System Proxy" switch on the main interface is turned on (usually highlighted in blue).
Select "Rule" or "Global" as the proxy mode, not "Direct".
Select a node with low latency on the "Proxies" page, or click "Speed Test" to find the fastest node.
Visit google.com to test. If it opens, the proxy is working.
Firefox uses independent proxy settings. You need to select "Use System Proxy Settings" in the browser's "Network Settings".
What is the difference between Rule, Global, and Direct modes? Which one should I use?
Rule Mode
RecommendedSmart split routing: Direct for local sites, proxy for restricted or remote sites. Fastest speed, lowest traffic usage — best for daily use.
Global Mode
All traffic goes through the proxy, including domestic sites. Suitable for temporary troubleshooting, not recommended for long-term use.
Direct Mode
All traffic connects directly, equivalent to turning off the proxy. Blocked sites will be inaccessible.
What is the difference between TUN mode and System Proxy? When should I use TUN?
System Proxy
Only intercepts traffic that supports proxy protocols (HTTP/HTTPS). Browser access is covered, but games, command-line tools, etc., may not use the proxy.
TUN Mode
Takes over all traffic at the network card level. Traffic from games, client software, and command-line tools can all go through the proxy for more comprehensive coverage.
You need to enable TUN mode in the following cases:
Online gaming or downloading games that require a proxy
Command-line tools like git / npm / pip require a proxy
Apps like Telegram Desktop that do not follow system proxy
UDP traffic (Video conferencing, VoIP) requires a proxy
TUN mode requires administrator privileges. Windows also needs to install a virtual network card driver (the client will prompt automatically). If the network is abnormal after enabling, disable TUN mode first to troubleshoot.
The proxy is still on after closing the client, and I can't access domestic sites in the browser?
This is caused by the client failing to clear the system proxy settings during an abnormal exit. Manual recovery methods:
Easiest: Reopen the client, manually turn off the "System Proxy" switch, and then exit normally.
Windows: Settings → Network & Internet → Proxy → Manual Proxy Setup, turn off the proxy switch.
macOS: System Settings → Network → Select Current Network → Proxies, uncheck all options.
Some domestic apps or sites won't open after turning on the proxy?
When using "Rule Mode", domestic traffic should connect directly. If problems still occur:
Check if you are accidentally using "Global Mode", and switch back to "Rule Mode".
Some local apps restrict access from proxy server IPs. Add a DIRECT rule for the domain on the "Rules" page to ensure it always connects directly.
Update your subscription to get the latest rule sets. The new rules have fixed many split tunneling issues for domestic domains.
Subscription link failed to update, showing "Network Error" or Timeout?
Subscription updates require network connectivity
If no proxy is currently available, the subscription server may be inaccessible, causing the update to fail.
First select a node that is still working (even with high latency), turn on the proxy, and then click "Update Subscription".
Some clients support the "Download via Proxy" option for subscriptions. Enabling this increases the success rate of updates.
Go to the provider's official site to download the latest configuration file (.yaml) and manually import it into the client.
All nodes are red (timeout), what's going on?
Node IP is blocked
Update your subscription to get new nodes, or contact your provider to change the IP.
Subscription has expired
Log in to the provider's site to check your account status. Renew and update your subscription.
Local network issue
Switch to a mobile hotspot and test the speed again to rule out carrier interference.
Configuration version is too old
Click "Update Subscription" to refresh the node list. Nodes in old configurations may have become invalid.
How to choose a proxy node? Which one is the fastest?
Daily Use: Prioritize nodes with latency below 100ms. Asia-Pacific regions (Hong Kong, Singapore, Japan, Taiwan) are usually the fastest.
Streaming Unlock (Netflix, Disney+): Select dedicated nodes labeled with "Unlock" or "Streaming".
Gaming: Prioritize nodes with the lowest latency and least packet loss. You can use the "Auto Select" strategy group.
Save Traffic: Use "Rule Mode". Domestic traffic will not be counted toward your proxy usage, avoiding data waste.
What should I do if my subscription link is leaked?
The subscription link is like an account key; if leaked, others can consume your traffic.
Immediately log in to the provider's site and Reset / Regenerate Subscription Link in "Subscription Management".
Update the new subscription link to all device clients; the old link will become invalid immediately.
Do not share your subscription link in public groups, screenshots, or paste it into any online subscription conversion tools (risk of leakage).
Windows installation blocked by antivirus or showing "Unknown Publisher"?
The clients collected on this site are original installation packages and have not been modified. Antivirus false positives are caused by Tauri / Electron framework signatures triggering heuristic detection, not a real threat.
Windows Defender prompts "Protected your PC": Click "More info" → "Run anyway".
Third-party antivirus prompts a threat: Find the file in quarantine/white-list, select "Trust" or "Exclude", and then reinstall.
No nodes after importing subscription, node count is 0?
Wrong Subscription Format: Confirm that the provider offers "Clash" format subscriptions, not SS / V2Ray format.
Subscription Download Failed: A red "Update Failed" prompt appears; see "Subscription cannot update" troubleshooting.
Account Abnormality: Log in to the provider's site to check your account status, whether you have purchased a plan and it is within the validity period.
How to set auto-start at boot?
Clash Verge Rev (Windows / macOS): Settings (gear icon) → "General" → Enable "Start with Windows/macOS".
FlClash / ClashMeta (Android): Allow "Auto-start" in phone "Settings → Apps → Auto-start", and set Battery Optimization to "Don't optimize" or "Unrestricted".
Mihomo CLI (Linux): sudo systemctl enable --now mihomo
Is there a problem using the same subscription on multiple devices?
Usually not a problem, but it depends on the device limit of your proxy provider:
Most providers limit the number of simultaneous online devices (e.g., 3 devices). Exceeding this will cause new devices to be refused connection.
Subscription links can be imported on any number of devices; the limit only applies to simultaneous connections.
If you exceed the limit, log in to the provider's dashboard to "kick out" old devices.
How to get Shadowrocket or Stash on iOS?
Shadowrocket and Stash are available on the App Store in most regions. Open the App Store, search for the app name, and purchase directly with your Apple ID.
Shadowrocket — $2.99 · Stash — $3.99 · Quantumult X — $7.99
Once purchased, it's valid forever. Purchased apps can still be used and updated after switching back to your original ID.
Android: APK installation prompt "Unknown Sources" or "Problem Parsing Package"?
"Unknown Sources": Go to "Settings → Security" (or "Settings → App Management → Install External Apps") and allow the browser/file manager to install apps from unknown sources.
"Problem Parsing Package": The APK file download is incomplete; please redownload. Ensure you choose the version matching your device architecture: ARM64 (modern phones), ARMv7 (older devices), or Universal (compatible with all).
Android: Proxy disconnects when the app is in the background?
Android battery optimization may kill background apps, causing the proxy to disconnect. Solution:
Go to "Settings → Apps → FlClash (or ClashMeta) → Battery" and change it to "Unrestricted".
MIUI / HyperOS: Select "No restrictions" in battery saver; EMUI / HarmonyOS: Select "Manual management" and turn off power saving.
In the multi-tasking interface, long-press the app card and "Lock" it to prevent it from being cleared by the system.
macOS: Prompt "File is damaged and cannot be opened"?
This is macOS Gatekeeper blocking apps not signed by the App Store; the file is not actually damaged. Run the following command in the terminal and then reopen the app:
Replace Clash Verge.app with your actual installed app name. You may need to enter your macOS password.
Linux: Command-line tools like git / curl / npm not using the proxy?
Linux command-line tools do not read system proxy settings by default. You need to manually configure environment variables:
Port 7890 is the default Clash mixed port; check the actual port number in your client settings. Alternatively, enable TUN mode for global transparent proxy without manual variables.
Slow internet speed and high latency after enabling proxy?
Change Node: Run a batch speed test and select nodes with the lowest latency. Avoid using nodes with latency over 300ms.
Change Protocol: If the provider offers multiple protocols, try VLESS / Trojan / Hysteria2, which are usually faster than Shadowsocks.
Time Period: Nodes may be crowded during peak hours (18:00–24:00). Try less popular nodes or wait until peak hours pass.
Rule Out Local Issues: Test with a mobile hotspot to rule out ISP QoS throttling.
DNS Pollution: Enable "DNS Leak Protection" in your client settings or use encrypted DNS (DoH / DoT).
Proxy disconnects frequently, requiring manual reconnection?
Use the "Auto Select" strategy group. The client will periodically test speeds and automatically switch to the best node.
Connections may interrupt when switching between Wi-Fi and mobile data; simply wait for the client to reconnect automatically.
Contact your provider's customer service to ask about IP speed limits or blocks and request a node change.
How to confirm the proxy is working and the IP has changed?
Visit ipinfo.io to see your current IP address and location (it should show the region of your proxy node).
Visit google.com; if it opens, the proxy is active.
In the Clash client "Logs" page, you can see real-time traffic passing through nodes and strategies.
Is using a proxy safe? Can the provider see my data?
The proxy provider can see your target domain and IP, but cannot decrypt HTTPS-encrypted content (such as passwords or bank info). The proxy protocol only encrypts the transmission tunnel.
Choose reputable large providers; free nodes often carry security risks.
As long as the website uses HTTPS, your sensitive data like passwords and content is already encrypted via TLS and cannot be decrypted by the provider.
Is the Clash client itself safe? Does it collect data?
All client installation packages collected on this site (Clash Verge Rev, FlClash, ClashMeta, etc.) are original and unmodified, containing no ads or data collection modules.
Do not download "cracked" or "optimized" versions from unknown sources like forums; they may contain malicious code.
How to prevent DNS leaks and ensure privacy?
A DNS leak occurs when DNS queries bypass the proxy and are sent directly to your ISP. To prevent this:
Enable "DNS Leak Protection" in your client's DNS settings (in the "General" page for Clash Verge Rev).
Change your DNS to encrypted DNS: https://1.1.1.1/dns-query (Cloudflare DoH).
With TUN mode enabled, DNS queries are handled by the proxy, fundamentally eliminating leak risks.
Use dnsleaktest.com to check for DNS leaks.