Clash Official Tutorial
1 Import a Subscription
The subscription link is your node configuration file URL. Once obtained from your service provider, import it into the client to automatically pull all nodes.
Obtain Subscription Link from Provider
Log in to the Provider's Website
Go to "My Subscriptions," "Dashboard," or "Tutorials" to find the subscription link entry.
Choose the Correct Format
Select the "Clash" or "Mihomo" format subscription link (usually starting with https://) and copy the full link.
Import into Client
Clash Verge Rev
- ① Click "Profiles" on the left side.
- ② Paste the link in the top input box.
- ③ Click "Import".
- ④ Click the checkmark/activate button on the profile card to enable it.
FlClash
- ① Click "Profiles" in the sidebar.
- ② Click the "+" at the top right to create new.
- ③ Select "URL" and paste the link.
- ④ After saving, click "Update".
Note
The subscription link contains your account information; do not share it with others. Leakage may lead to unauthorized traffic usage. It is recommended to enable "Auto Update" in the client and set the interval to 24 hours.
2 Proxy Mode Guide
Clash offers three modes. "Rule Mode" is sufficient for daily use and doesn't require manual switching.
Rule Mode
Best for Daily UseAutomatic split tunneling: Direct for local sites, proxy for everything else. Fastest speed, lowest traffic consumption, used in 99% of scenarios.
Global Mode
Forces all traffic through the proxy, including domestic sites. Suitable for troubleshooting rule issues or special scenarios; consumes more node traffic.
Direct Mode
No proxy at all; equivalent to turning off the proxy. Used for temporarily switching back to the normal network or troubleshooting local network issues.
System Proxy vs TUN Mode: What's the Difference?
System Proxy (HTTP/SOCKS)
- Only proxies applications that support proxy settings (browsers, most apps).
- Requires no administrator privileges, works out of the box.
- Game clients, command-line tools, etc., might not go through the proxy.
TUN Mode (Virtual Network Card)
- Takes over all network traffic, including games and command lines.
- Most comprehensive proxy coverage; recommended for advanced users.
- Requires Administrator / Root privileges for the first activation.
3 Platform-Specific Detailed Guides
Select your operating system to view installation and full configuration steps.
Step 1: Select and Install Client
Download PageClash Verge Rev
FeaturedMost complete features, built-in Mihomo core, TUN mode, and multi-subscription support.
FlClash
BeginnerMaterial You interface, simple and intuitive operation, consistent cross-platform.
Clash for Windows
ClassicClassic original CFW, rich plugin ecosystem, first choice for veteran users.
How to determine system architecture? Press Win + I → System → About, and check "System type". For Intel/AMD processors, choose x64; for Surface Pro X, etc., choose ARM64.
Step 2: Installation and Initial Configuration (Example: Clash Verge Rev)
Run the Installer
Double-click the downloaded .exe file. If Windows Defender SmartScreen prompts "Windows protected your PC," click "More info → Run anyway". This is normal (the program does not have a Microsoft code signing certificate).
First Launch & Subscription Import
After installation, the program starts automatically. Click "Profiles" on the left, paste the subscription link in the top input box, press Enter or click "Import." After the pull is complete, click the checkmark icon on the right side of the subscription card to activate it (the icon turns blue).
Select Proxy Node
Click "Proxies" on the left, expand "Auto Select" in the strategy group, or manually select a node with low latency. Click the ⚡ icon on the right side of a node for real-time latency testing.
Enable System Proxy
Return to the "Home" page, switch the mode to "Rule", and turn on the "System Proxy" switch. The icon turns green when activated. Now open your browser to access blocked websites.
(Advanced) Enable TUN Mode
Go to "Settings → TUN Mode". Enabling this will request administrator privileges to install the virtual network card driver. Once enabled, it can proxy traffic for all applications (including game clients and command-line tools) without individual configuration.
Windows Practical Tips
Auto-start at Boot
Settings → General → Auto Launch. Enabling this starts Clash automatically every time you boot, no manual opening required.
Auto Subscription Update
Enable "Auto Update" in the subscription card settings. It's recommended to set the interval to 24h to automatically pull the latest configuration if nodes fail.
Node Latency Speed Test
On the Proxies page, click the lightning icon in the top right to perform batch speed testing for all nodes, automatically sorted by latency.
System Tray Quick Operations
Right-click the tray icon on the taskbar to quickly switch proxy modes or view traffic statistics without opening the main interface.
Step 1: Select and Install Client
Download PageClash Verge Rev
FeaturedMost complete features, native dual-architecture package, and TUN mode support.
FlClash
BeginnerMaterial You interface, simple and intuitive operation.
ClashX Meta
LightweightNative menu bar application with extremely low resource usage.
How to confirm chip type? Click the Apple menu in the upper left corner → About This Mac. If "Chip" shows Apple M1/M2/M3/M4, select Apple Silicon; if it shows Intel Core, select Intel x86_64.
Step 2: Installation and Configuration (Example: Clash Verge Rev)
Install Application
Open the downloaded .dmg, drag the app icon into the "Applications" folder, and eject the DMG to complete installation.
Handling "Cannot verify developer" Prompt
A security prompt may appear on the first launch. There are two solutions:
Method 1 (Recommended): System Settings
Go to "System Settings → Privacy & Security → Security," find the "Open Anyway" button at the bottom, and click it.
Method 2: Terminal Command
sudo xattr -rd com.apple.quarantine /Applications/ClashVerge.app
Import Subscription and Activate
Same as Windows: Profiles → Paste link → Import → Click to activate subscription.
Enable System Proxy
Switch to "Rule Mode" on the Home page and enable "System Proxy." A Clash icon will appear in the menu bar; right-click it to quickly switch nodes and modes.
macOS Practical Tips
Proxy for Terminal
export http_proxy=http://127.0.0.1:7890
Proxy for Homebrew
export ALL_PROXY=http://127.0.0.1:7890
Menu Bar Quick Switch
Right-click the Clash icon in the menu bar to directly switch proxy modes, view node lists, or pause the proxy without opening the main window.
Use ClashX Meta for a Lighter Experience
Users who don't need complex features can choose ClashX Meta. It stays in the menu bar, uses only 30MB of resources, and is simpler to operate.
Step 1: Download and Install APK
Download PageFlClash
Best for BeginnersMaterial You design, no root required, beautiful interface, and app-level split tunneling.
ClashMeta
AdvancedMihomo core, full rules, and TUN global proxy support.
Clash Nyanpasu
PersonalizationCute style, supports multiple cores, and highly customizable.
Which APK version to choose? Phones after 2019 can choose ARM64 APK; older devices choose ARMv7. If unsure, choose the "Universal" version, which is compatible with all architectures but has a larger file size.
Step 2: Installation and Configuration (Example: FlClash)
Allow Installation from Unknown Sources
Click the APK file. If prompted with "For security, your phone is not allowed to install apps from this source," click "Settings," allow the file manager or browser to install apps, and return to click install again.
Import a Subscription
Open FlClash, click "Profiles" in the bottom navigation → "+" at the top right → select "Import from URL," paste the subscription link, enter a name, and click "Save and Update." After the pull is complete, click the profile to activate it (a green checkmark appears).
Select Node
Go to the "Proxies" page, select a fast node from the list, or click the lightning icon for batch speed testing. It's recommended to choose a node with latency under 100ms.
Start VPN
Return to the home page, click the central "Start" button, and click "OK" in the system's "Connection Request" dialog to authorize VPN permissions. A VPN key icon in the status bar indicates you are connected.
(Recommended) Set Up App Split Tunneling
In "Settings → App Split Tunneling," you can individually set whether each app uses the proxy. It's recommended to set local apps (banking apps, local streaming services) to "Direct" to avoid routing through the proxy.
Proxy Disconnects in the Background?
Go to "System Settings → App Management → FlClash → Battery," turn off "Battery Saver Restrictions," or add it to the "Battery Optimization Whitelist" to prevent the system from killing the proxy process.
iOS Special Note
The following apps are available on the App Store as paid downloads. Search by name and purchase directly with your Apple ID.
Step 1: Configuration (Example: Shadowrocket)
Import Subscription
Open Shadowrocket, click "+" at the top right → select Type as "Subscribe" → paste the subscription link in the URL bar → click "Done." The app will automatically pull nodes.
Select Node
In the node list on the home page, long-press a node to test speed and select a node with low latency for the current connection.
Enable Connection
Click the "Not Connected" switch at the top of the home page. On the first use, click "Allow" when the system prompts "Allow Shadowrocket to add VPN configurations?" and verify with Face ID / Password. A VPN icon in the status bar indicates a successful connection.
iOS Optional Client Comparison
Shadowrocket
Recommended for Beginners $2.99Most popular, supports Clash subscription format, simple operation, actively updated, and best value for money.
Stash
Featured $3.99Fully compatible with Mihomo rule sets, beautiful UI, supports Widgets and Shortcuts, and most comprehensive features.
Quantumult X
Advanced $7.99Strongest script rewriting and traffic analysis capabilities, highly customizable, suitable for advanced users.
Linux Guide
Linux offers GUI Desktop Clients (Clash Verge Rev, FlClash) and Command-line Cores (Mihomo CLI). Choose based on your needs.
Step 1: Install GUI Client (Recommended for Beginners)
Download Installer
Go to the Download Page and select based on your Linux distribution: Clash Verge Rev supports deb / rpm / AppImage; FlClash offers deb / AppImage formats.
Installation (Example: .deb)
RPM-based (Fedora / openSUSE): sudo rpm -i clash-verge-rev_*.rpm
Import Subscription and Start
Open app → "Profiles" on the left → Click "+" to paste subscription link and update → Switch to "Proxies" page to select node → Turn on "System Proxy" or "TUN Mode" switch for the proxy to take effect.
Advanced: Mihomo CLI (Server / No Desktop Environment)
Download and Install Core
Place Configuration Files
Start Core
Upon success, the terminal will output Mihomo started successfully. The Web Dashboard is accessible at http://127.0.0.1:9090.
Configure systemd Auto-start (Optional)
Proxy Scope
The CLI core only listens to local ports by default. You must manually configure HTTP / SOCKS5 proxy (default 127.0.0.1:7890) in system "Network Settings" or apps, or enable TUN mode for global transparent proxy.
4 FAQ
Node list is empty after importing subscription, what to do?
Please troubleshoot in order:
- Ensure the subscription link is complete and not truncated (links are usually long).
- Confirm the link is in Clash/Mihomo format, not SS or V2Ray format.
- Turn off the proxy and try updating again; some subscription links are only accessible under a direct connection.
- Check if the subscription has expired and contact your provider to confirm account status.
Some websites are still inaccessible after turning on the proxy?
- Try switching to "Global Mode." If accessible, the rules do not cover that website; you can provide feedback to your provider.
- Check if the current node is available and try again with a node with lower latency.
- Clear your browser's DNS cache and try again (
chrome://net-internals/#dns). - Confirm you are using the "System Proxy" and not just a browser extension proxy.
Domestic websites are slow or abnormal after proxy is on?
It's likely that the proxy mode is set to "Global Mode," causing domestic traffic to also route through the proxy node. Solution:
- Switch to "Rule Mode," and domestic traffic will connect directly automatically.
- If problems persist in Rule Mode, contact your provider to update the rule file.
TUN mode fails to start with an insufficient permission error?
TUN mode requires installing a virtual network card driver and must be run with administrator privileges:
- Windows: Right-click the Clash program icon → Run as administrator.
- macOS: The program will automatically prompt for a password; enter your system password to confirm.
How to make specific apps not use the proxy (Direct)?
- Desktop: Add a
DIRECTrule for the app's domain or process name on the Rules page. - Android (FlClash): "Settings → App Split Tunneling" → find the app → switch to "Direct."
- iOS (Stash): "Tools → App Routing" → specify the strategy as
DIRECTfor the app.