Clash FAQ
What Clash is, which download to pick, common setup pitfalls, and how to troubleshoot connection issues — everything's on this one page, no more digging around.
Basics
What Clash actually is, whether it costs anything, and what it can do.
What is Clash, and how is it different from a regular VPN?
Clash is an open-source proxy client built around rule-based traffic routing. Unlike a traditional VPN's "all-or-nothing" tunnel, Clash lets you control exactly where each connection goes — by domain, IP, or region — so mainland China traffic goes direct, everything else goes through a proxy, and ads get blocked, all at once without interfering with each other. That usually means better speed than a full VPN tunnel.
Is Clash free? Does it have ads or bundled software?
Completely free. The Clash core and every major client are open source, with code hosted on GitHub for anyone to review. There are no ads, no bundled installs, and no paid unlock features. Just make sure to download from this site or the official GitHub repo to avoid modified third-party builds.
Which proxy protocols does Clash support?
It supports mainstream protocols including Shadowsocks, ShadowsocksR, VMess, Trojan, Snell, SOCKS5, and HTTP(S). Nodes on different protocols can be mixed in the same proxy group, with Clash handling scheduling, latency testing, and switching.
Can I use the same subscription on my phone and computer?
Yes. Subscription links are platform-independent — the same subscription can be imported into clients on Windows, macOS, Android, iOS, and Linux, keeping nodes and rules consistent everywhere. Some providers do limit the number of simultaneous connections, so check with your provider.
Download & Install
Picked the wrong version, can't download, or not sure what to do after installing — find the answers here.
Should I choose the installer or portable version on Windows?
Most users should go with the Standard Installer — just double-click and it creates a Start Menu shortcut automatically. The Portable version needs no installation and runs straight from the extracted folder, which is handy for USB drives or computers without admin rights. Both are functionally identical.
What if the download is slow or won't load?
Installers are hosted on GitHub Releases, so slower access in some regions is normal — just retry or switch networks. Always download from this site or the official GitHub repo, and avoid unofficial third-party mirrors.
What do I need to configure after installing?
Installing is just the first step — you'll also need to import a subscription link and turn on the system proxy to get online. See the full walkthrough in the setup guide; it only takes about five minutes.
Why isn't there an official native client for iOS/Android?
Due to app store review policies, there's no official native Clash app for iOS — most people use a third-party client compatible with Clash's rule format (like Stash or Shadowrocket). The Android version isn't on Google Play for the same reason; head to the download page to get the APK directly and allow "install from unknown sources."
Setup & Usage
How subscriptions, modes, and TUN actually work in practice. For full definitions, see the glossary.
How do I import a Clash subscription link, and how often does it update?
Paste the subscription URL into the client's "Profiles" page and click download — nodes and rules import automatically. Clients usually support an auto-update interval (e.g., every 24 hours), or you can hit "Update" anytime to refresh manually without re-pasting the link. See the full walkthrough in the setup guide.
Can I use multiple subscription links at once? Will they conflict?
Yes, and they won't conflict. You can add multiple subscriptions on the "Profiles" page — the client keeps each subscription's nodes organized separately. You can mix nodes from different subscriptions in your proxy group settings, or simply switch which profile is active.
How do I choose between Rule, Global, and Direct mode?
Rule mode auto-routes traffic — mainland China direct, everything else via proxy, ads blocked — and is the best choice for everyday use; Global mode forces all traffic through one node, mainly useful for briefly testing whether a specific node works; Direct mode turns the proxy off entirely. Beginners should just stick with Rule mode — see the setup guide for details.
What is TUN mode, and when do I need it?
The system proxy only works for apps that respect system proxy settings (browsers, most regular software) — but some command-line tools, games, and background services ignore it. TUN mode creates a virtual network adapter that intercepts all traffic at the network layer, which is more thorough but requires extra system permissions. Beginners should stick with the system proxy first and only enable TUN if a specific app just won't route through the proxy. See the setup guide for how to grant permissions on each platform.
Troubleshooting
Already using Clash but running into an issue? Work through these steps to track it down.
Some sites still won't load even with the system proxy on?
This is the most common case that looks broken but usually isn't — the domain is just being matched to DIRECT by a rule (common with newer or niche domains not yet covered by a rule set). Open the client's "Connections" panel to check which rule matched. If it's a misclassification, add a DOMAIN-SUFFIX rule to force it through the proxy. If it already matched a proxy rule but still won't load, the node itself is probably down or too slow — switch to Global mode and test other nodes to rule that out.
TUN mode won't turn on, or shows an error?
TUN mode needs extra system permissions on every platform, and the most common failure is a missing grant: on Windows, run the client as administrator once to register the virtual adapter driver; on macOS, go to System Settings → Privacy & Security → VPN & Network Extensions and manually allow the extension, then restart the client; on Linux, enabling TUN from the command line typically needs root privileges or the CAP_NET_ADMIN capability. If permissions are already granted and it still won't work, try rebooting.
Why doesn't a page update after I switch nodes or change a rule?
That's because an existing TCP connection — like an open browser tab or an in-progress download — doesn't automatically re-route when you switch nodes or change rules. It keeps using whatever rule and node it matched when the connection was first made, for the life of that connection. If you want a change to take effect immediately, just refresh the page or restart the app — this isn't a sign that your config failed, it's just how network connections normally work.
Antivirus flags the client, or Windows says "unknown publisher" during install — is it safe?
Most Clash clients don't have a purchased code-signing certificate, which is why Windows may show "unknown publisher" during install, and why some antivirus software may flag it due to the low-level networking it does (virtual adapters, system proxy, etc.). As long as you're downloading from this site or the official GitHub repo — where the source is fully public and auditable — it's safe to choose "Run anyway" or "Allow."