1
Download & Install Client
Go to the download page to get the right installer for your OS. We recommend Clash Verge Rev for Windows, Verge or FlClash for macOS, FlClash for Android, and purchasing Stash or Shadowrocket from the App Store for iOS.
2
Get Subscription Link
Clash itself does not provide proxy nodes. You need to obtain a Subscription URL from a service provider. These links typically start with
https:// and contain all node configurations, which update automatically.
The subscription link is your personal configuration address; keep it safe and do not share it with others.
3
Import Subscription into Client
Open the Clash client, go to the "Profiles" or "Subscriptions" page, paste your link, and click "Update" or "Import." The client will automatically download and parse the nodes.
4
Enable Proxy & Select Node
Select an available node on the proxy page, click "Connect," or toggle the system proxy switch. We recommend starting with Rule Mode, which automatically splits local and international traffic.
Setup complete! Your browser and applications will now use the proxy automatically.
1
Download Installer
Go to the Windows section of the download page and download the
.exe installer for Clash Verge Rev (x64 version recommended).2
Install & Launch
Double-click the
.exe and follow the prompts. If a Windows SmartScreen warning appears, click "Run anyway." Launch the app from the Start menu or desktop shortcut. Windows Defender may flag it because the client needs to set system proxy settings. You can add the installation directory to the whitelist.
3
Import Subscription
Go to the "Profiles" tab in the client, click "New," paste your subscription URL, and click "Save and Update." Your nodes will load automatically.
4
Enable System Proxy
Switch to the "Proxies" page and select a node. Go back to the home page and enable the "System Proxy" switch. We also recommend enabling "Start on Boot" for convenience.
1
Download DMG Installer
Go to the macOS section of the download page to download Clash Verge Rev. Choose
aarch64 for Apple Silicon (M-series chips), x64 for Intel Macs, or the universal version for either.2
Bypass Gatekeeper Restrictions
When opening for the first time, macOS will say it is from an "unidentified developer." Do not double-click it. Instead, right-click the app icon → select "Open" → click the "Open" button again.
Alternatively, go to "System Settings → Privacy & Security" and click "Open Anyway."
3
Grant Network Permissions
Clash Verge Rev requires "Add Network Filters" permission to enable TUN mode. When the system authorization dialog appears, enter your password to allow it.
4
Import Subscription & Start
Paste your link on the "Profiles" page and update it. Enable "System Proxy" or use TUN mode to take over all system traffic. You can quickly switch nodes from the menu bar icon at any time.
1
Download & Install APK
Go to the Android section of the download page to download the
arm64-v8a APK for FlClash (suitable for most modern phones). You must allow "Install apps from unknown sources" in your system settings during installation.2
Import Subscription
Open FlClash, go to the "Profiles" page, click the "+" icon in the top-right corner → "Import from URL," paste your subscription link, and save. The app will automatically pull and parse the nodes.
3
Enable VPN Connection
Go back to the home page and click the "Start" button. Android will prompt with a VPN connection request; click "OK." After choosing your proxy mode and node, you're ready to go.
To save battery, enable "Persistent Notification" in settings and disable background restrictions to prevent the app from being killed by the system.
1
Install from App Store
Common iOS clients (Stash, Shadowrocket, Quantumult X) are paid apps and require a non-Mainland China Apple ID to search and purchase. We recommend using a US Apple ID. Go to the iOS section of the download page for direct App Store links.
These apps cannot be found in the Mainland China App Store; you must switch to a US or other regional account to buy them.
2
Import Subscription (Shadowrocket Example)
Open the app, click the "+" in the top-right corner, select "Subscribe" as the type, paste your subscription URL, and click Done. The subscription will automatically download and list all nodes.
3
Enable VPN Configuration
Toggle the connection switch on the home page. iOS will request to add a VPN configuration; confirm with Face ID or your password. Once connected, a VPN icon will appear at the top of the status bar.
1
Install Clash Verge Rev (GUI)
Debian/Ubuntu users should download the
.deb package. Other distributions can use .rpm or AppImage.sudo dpkg -i clash-verge-rev_*.deb2
Or use Mihomo Core (CLI)
If you prefer the command line, you can download and run the Mihomo binary directly:
wget https://github.com/MetaCubeX/mihomo/releases/latest/download/mihomo-linux-amd64.gz
gunzip mihomo-linux-amd64.gz && chmod +x mihomo-linux-amd64
sudo mv mihomo-linux-amd64 /usr/local/bin/mihomo
mihomo -d ~/.config/mihomo3
Configure Subscription & System Proxy
GUI client operations are the same as on Windows/macOS. For CLI mode, add the subscription URL to the
proxy-providers field in ~/.config/mihomo/config.yaml, or manually place a downloaded config file in that directory. CLI mode can be managed visually using Yacd or Metacubexd via the API address
http://127.0.0.1:9090.
Subscription Format
Clash YAML (
.yaml); some clients also support Base64-encoded legacy formats, which will be automatically identified and converted.
Update Methods
Manually click "Update" or enable "Auto Update" in the client settings (recommended every 6–24 hours).
Multi-Subscription
You can save multiple subscriptions and switch between them by clicking on the desired profile, or use "profile merge" to combine multiple configurations.
Local Config
Supports importing local
.yaml files or writing your own rules directly in the built-in editor.
Your subscription link contains your account credentials. Do not share it with others, as they will be able to use your data. If it is leaked, reset it immediately in your service provider's dashboard.
Rule Mode
Automatically decides whether to proxy or go direct based on preset rules. Local sites are direct, and international sites are proxied, balancing speed and privacy.
✦ Recommended for BeginnersGlobal Mode
All traffic is forwarded through proxy nodes, regardless of the destination. Use this for complete anonymity or to test node connectivity.
Direct Mode
No traffic passes through the proxy, equivalent to having Clash turned off. Use this to temporarily disable the proxy, troubleshoot network issues, or access proxy-restricted services.
We recommend Rule Mode for daily use as it's faster and uses less data. Switch to Global only when necessary and remember to switch back to Rule Mode afterward.
In Rule Mode, Clash matches every network request against the ruleset sequentially from top to bottom. Once it hits the first matching rule, it executes the corresponding action (PROXY / DIRECT / REJECT) and stops. The list usually ends with a fallback
MATCH,PROXY rule for any unmatched traffic.
DOMAIN
Exact domain match, e.g.,
DOMAIN,google.com,PROXY
DOMAIN-SUFFIX
Matches a domain and all its subdomains, e.g.,
DOMAIN-SUFFIX,google.com,PROXY matches maps.google.com
DOMAIN-KEYWORD
Matches if the domain contains a keyword, e.g.,
DOMAIN-KEYWORD,youtube,PROXY
IP-CIDR
Matches a target IP range, e.g.,
IP-CIDR,8.8.8.0/24,PROXY
GEOIP
Matches by target IP country, e.g.,
GEOIP,US,DIRECT to send US traffic directly
MATCH
Matches all traffic that hasn't hit any other rule (fallback); usually placed at the very end.
Most subscriptions come with optimized rulesets. If you need custom rules, we recommend adding them via the "Override" feature to avoid being overwritten during subscription updates.
T
TUN Mode (Take over all traffic via virtual network card)
The system proxy only handles HTTP/HTTPS traffic, but TUN Mode uses a virtual network card to take over all TCP/UDP traffic (including games and CLI tools). Enable it in the client settings; it requires administrator privileges to install the driver the first time.
If you need to proxy non-browser programs like Steam or terminal commands, TUN Mode is the easiest solution.
D
DNS Leak Protection
Even with a proxy, DNS queries may still use your local ISP, leaking your privacy. Setting
dns.enable to true in your Clash config and using encrypted DNS (DoH/DoT) can completely prevent this. Most subscriptions already have recommended DNS settings built-in.P
Node Latency Testing (Ping)
On the Proxies page, you can batch-test latency and choose the fastest node. You can also use an "Auto Select" policy group to let Clash automatically switch to the fastest node for you.
Common reasons: The link has expired or has extra spaces. Recopy the link from your provider (ensure no newlines), clear the input box, and paste it again. If you get an SSL error, temporarily disable "Proxy Verification" in the client. You can also try visiting the link in a browser to see if it downloads a YAML file.
System proxy mode only works for apps that support it (mainly browsers). To proxy games, Steam, or terminal tools, enable TUN Mode (virtual network card), which takes over all system traffic without requiring app-specific support.
Troubleshoot as follows:
1. Check if your local internet connection is working.
2. Click "Update Subscription" for the latest node list; old ones may be invalid.
3. Click "Test Latency" on the node page and wait for results.
4. If still red, contact your provider to check account status and node availability.
5. Check if your firewall or antivirus is blocking Clash.
1. Check if your local internet connection is working.
2. Click "Update Subscription" for the latest node list; old ones may be invalid.
3. Click "Test Latency" on the node page and wait for results.
4. If still red, contact your provider to check account status and node availability.
5. Check if your firewall or antivirus is blocking Clash.
Both are GUI clients based on the Mihomo (Meta) core with similar features. Key differences:
· Clash Verge Rev: More refined interface with more advanced features (Override rules, scripts, etc.), ideal for advanced users.
· FlClash: Simpler interface, faster to set up, and a consistent experience across Windows/macOS/Android/Linux, perfect for beginners or those who prefer simplicity.
Beginners should start with FlClash, while advanced users may prefer Verge Rev.
· Clash Verge Rev: More refined interface with more advanced features (Override rules, scripts, etc.), ideal for advanced users.
· FlClash: Simpler interface, faster to set up, and a consistent experience across Windows/macOS/Android/Linux, perfect for beginners or those who prefer simplicity.
Beginners should start with FlClash, while advanced users may prefer Verge Rev.
This happens when the system proxy settings aren't restored correctly. To fix:
· Windows: Go to "Settings → Network & Internet → Proxy" and turn off "Use a proxy server."
· macOS: Go to "System Settings → Network → Proxies," uncheck all options, and apply.
· Always use the "Quit" button in the client to ensure settings are restored properly, rather than force-closing it via Task Manager.
· Windows: Go to "Settings → Network & Internet → Proxy" and turn off "Use a proxy server."
· macOS: Go to "System Settings → Network → Proxies," uncheck all options, and apply.
· Always use the "Quit" button in the client to ensure settings are restored properly, rather than force-closing it via Task Manager.
You can verify this in several ways:
1. Visit google.com; if it loads, the proxy is working.
2. Visit
3. Check the "Connections" page in the client to see real-time traffic passing through the proxy.
1. Visit google.com; if it loads, the proxy is working.
2. Visit
http://ip.sb or https://ipinfo.io to see if the displayed IP matches your node's location instead of your actual IP.3. Check the "Connections" page in the client to see real-time traffic passing through the proxy.
Clash is an open-source local program that does not collect or upload user data. However, please note:
· Your traffic passes through a proxy node, and the provider technically can log connections.
· Choose a reputable provider and read their privacy policy.
· Clash logs are only stored locally on your device and can be viewed or disabled in settings.
· Your traffic passes through a proxy node, and the provider technically can log connections.
· Choose a reputable provider and read their privacy policy.
· Clash logs are only stored locally on your device and can be viewed or disabled in settings.