Clash Usage Guide

Step-by-step visual guidance from installation to setup. Covering five major platforms, learn to import subscriptions and enable proxy in 5 minutes.

5Platform Tutorials
3Quick Start
5minSetup Complete

3 Steps Quick Start with Clash

Regardless of which platform you use, getting started with Clash takes only three steps and less than 5 minutes.

01

Select Platform · Download & Install

Choose the recommended client for your operating system and complete the installation:

  • WindowsClash Verge Rev(EXE)
  • macOSClash Verge Rev(DMG)
  • AndroidFlClash(APK)
  • iOSShadowrocket(App Store)
  • LinuxClash Verge Rev(DEB/RPM)
Go to Download
02

Paste Subscription · Import Nodes

Open the client and paste the subscription link provided by your service provider into the "Subscription / Profiles" page:

Subscription Link Format Example https://your-airport.com/api/subscribe?token=xxx

Click "Import" and wait for the node list to download automatically. No need to manually fill in any server parameters.

03

Select Node · Enable Proxy

Select a node with low latency on the "Proxy" page and enable proxy mode:

  • System ProxyFirst choice for regular users
  • TUN TUN ModeIntercepts all traffic, recommended for developers

Visit ip.sb to verify your IP has changed, indicating the proxy is successfully active.

Recommended Clients Quick View

Windows
Clash Verge Rev
Main Choice
macOS
Clash Verge Rev
Main Choice
Android
FlClash
Main Choice
iOS
Shadowrocket
Main Choice
Linux
Clash Verge Rev
Main Choice

Windows Usage Tutorial

Recommended Client: Clash Verge Rev (Tauri framework, built-in Mihomo core, supports TUN mode and System Proxy)

1

Download and Install Clash Verge Rev

Go to the download page of this site and download the Clash Verge Rev Windows x64 EXE installer in the Windows section (most Windows 10/11 computers are x64 architecture). For ARM devices like Surface Pro X, please download the ARM64 version.

Encountering SmartScreen block during installation: Click "More info" -> "Run anyway". This is a routine prompt from Windows for software without a Microsoft signature. Clash Verge Rev is open-source, and the source code is publicly auditable.
2

Import Subscription Link

After installation, open Clash Verge Rev, click "Subscription (Profiles)" on the left menu, paste the subscription link provided by your service provider in the top input box, and then click "Import".

Click the "Subscription" menu on the left
Paste the subscription link (https://…) in the input box
Click "Import" and wait for the node list to finish downloading
Click the subscription card to set it as the current active configuration
After successful subscription import, a configuration card will appear on the "Subscription" page showing the number of nodes.
3

Select Node and Enable System Proxy

Click the "Proxy" menu on the left, select a node with low latency from the node list (click "Speed Test" in the top right for real-time latency), then click the "System Proxy" switch in the top right. It turns blue when successfully enabled.

Verify Activation: Open your browser and visit https://ip.sb. If it displays an IP from the node's country/region, the proxy has successfully taken effect.
4

Advanced: Enable TUN Mode (Recommended for Developers)

If you need command-line tools like git, npm, pip, and curl to also go through the proxy, please enable TUN Mode in the settings page.

Note: Enabling TUN mode requires administrator privileges. Windows will pop up a UAC authorization prompt the first time you enable it; just click "Yes".
PowerShell — Verify TUN Mode Intercepting Traffic
PS> # 查看当前出口 IP(应显示节点 IP)
PS> curl -s https://ip.sb
104.xxx.xxx.xxx # Node IP, TUN mode is active
PS> # 测试大文件下载速度
PS> curl -o nul https://speed.cloudflare.com/__down?bytes=10000000
10.0M download complete, average speed 8.5 MB/s
5

Update Subscription

On the "Subscription" page, click the Refresh Icon in the top right of the subscription card to update manually. For automatic updates, click "Edit" on the card and set the "Auto Update" interval (24 hours recommended).

macOS Usage Tutorial

Recommended Client: Clash Verge Rev (Natively supports Apple Silicon M-series and Intel dual architectures)

1

Download the Correct DMG Installer for Your Architecture

The macOS version is divided into two architectures. Please choose based on your Mac chip type:

Apple Silicon(M1 / M2 / M3 / M4) Download ARM64 version: clash-verge-rev-mac-arm64.dmg Macs released after late 2020, with "M" in "About This Mac -> Chip"
Intel 处理器 Download x64 version: clash-verge-rev-mac-x64.dmg Macs released before 2020, with Intel in "About This Mac -> Processor"
2

Install DMG and Bypass Gatekeeper

Double-click the .dmg file and drag the Clash Verge Rev icon into the Applications folder.

Double-click .dmg, drag icon to Applications folder
If prompted "cannot be opened because the developer cannot be verified" on first open, click "OK" to close the popup
Go to "System Settings -> Privacy & Security", find the prompt, and click "Open Anyway"
Double-click the app again to run normally (no need to repeat this thereafter)
Reason: Apple requires developers to pay an annual fee for notarization. Clash Verge Rev bypasses this as an open-source project. The source code is public and auditable, ensuring security and trust.
3

Import Subscription Link

Open Clash Verge Rev, click "Subscription" on the left, paste your service provider's subscription link in the top input box, and click "Import". The operation is identical to the Windows version.

After successful import, the subscription card will show the number of nodes. Click the card to activate the configuration.
4

Enable System Proxy

Select a node on the "Proxy" page and click the "System Proxy" switch in the top right. macOS will automatically inject the proxy settings into system network preferences, and Safari, Chrome, Terminal, etc., will all go through the proxy.

Menu Bar Quick Access: Clash Verge Rev has a permanent icon in the macOS menu bar for quickly switching nodes and toggling proxy without opening the full interface every time.
5

Advanced: Enable TUN Mode

Enable TUN Mode in the settings page to intercept all terminal command line (brew, npm, git) traffic. A system authorization dialog will appear on the first activation; enter your password to confirm.

Android Usage Tutorial

Recommended Client: FlClash (Material You design, simple operation, first choice for beginners)

1

Download APK Installer

Go to the download page of this site and download FlClash APK in the Android section. Phones released after 2016 should directly download the ARM64-v8a version; only older models from before 2015 need the ARMv7 version.

Unsure about architecture? Just download the ARM64 version. If it says "App not installed," switch to the ARMv7 version and reinstall.
2

Allow Installation from Unknown Sources

APKs not from Google Play are blocked by default, requiring temporary authorization:

Click the APK file, the system prompts "For your security, your phone is not allowed to install unknown apps from this source"
Click "Settings" -> "Allow from this source" and toggle it on
Go back and click "Install" to complete (it's recommended to turn off this permission after installation)
Paths vary slightly by brand (Xiaomi in "Security Settings", Huawei in "App Gallery Settings"), but the logic is the same.
3

Import Subscription Link

Open FlClash, click "Config" on the bottom navigation, click "+" in the top right -> "Import from URL", paste your subscription link, enter a name, and click save.

Open FlClash, click "Config" on the bottom bar
Click "+" in the top right -> "Import from URL"
Paste subscription link, enter name, click "Save"
Wait for configuration download to complete, then click the config card to activate
Once the configuration is active, you can see the node list on the "Proxy" page, indicating successful subscription import.
4

Enable VPN and Select Node

Select a node on the "Proxy" page (or choose "Auto Select"), then click the Start Button in the bottom right to enable VPN mode. On first activation, the system will prompt a "VPN connection request"; click "OK" to authorize.

Android VPN Mode is equivalent to TUN mode on desktop, intercepting all mobile traffic by default. The rule engine automatically splits domestic and international traffic, so domestic apps remain direct and unaffected.
Alternative for Advanced Users: ClashMeta for Android

Users with some Clash experience who need more advanced configuration can choose ClashMeta for Android (by MetaCubeX), which deeply integrates the Mihomo core and supports all advanced settings. Also available on the Android download page of this site.

iOS Usage Tutorial

Recommended Clients: Shadowrocket (Best for beginners, ~$2.99) · Stash (Feature-complete, Mihomo compatible)

Special Note for iOS

Due to Apple policy restrictions, Clash-compatible clients are not available on the Mainland China App Store and are all paid apps. You need a US (or HK, TW) Apple ID to switch accounts in the App Store for purchase and download. Please complete the "Register US Apple ID" step below first.

1

Register US Apple ID (~10 minutes, no credit card required)

Open appleid.apple.com in your browser and click "Create Your Apple ID"
Fill in name, date of birth, and use an email not previously registered with an Apple ID
Select United States as "Country or Region"
Complete password setup, verify email, and your Apple ID registration is complete
iPhone App Store -> Top right avatar -> Sign Out -> Sign in with your US ID
No US credit card needed: You can buy US App Store Gift Cards (iTunes Gift Cards) from local e-commerce platforms and top up to buy apps directly.
2

Purchase Clients on the App Store

After signing into the App Store with your US Apple ID, search for and purchase the following clients (Shadowrocket is recommended for beginners):

3

Import Subscription in Shadowrocket

Open Shadowrocket, click "+" in the top right, select "Type" as Subscribe, paste the subscription link in the URL field, enter a remark name, and click "Done" in the top right.

Open Shadowrocket, click "+" in the top right
Select "Subscribe" for Type, paste the subscription link in URL
Enter remark, click "Done", and the subscription will download automatically
Return to the home page, toggle the "Not Connected" switch, and authorize the VPN to use
When the Shadowrocket home screen switch shows "Connected" and the VPN icon appears in the status bar, the proxy is successfully active.
4

Advanced: Use Stash (Complete Mihomo Features)

When using Stash, the import method is the same: click "Config" -> "Add from URL" on the home page and paste the subscription link. Stash fully supports the Mihomo configuration format, including Rule Providers, proxy group policies, and other advanced features.

Linux Usage Tutorial

Recommended Clients: Clash Verge Rev (GUI version) or Mihomo CLI (Command line / Server version)

1

Download and Install Clash Verge Rev

Choose the installation package format based on your Linux distribution:

Ubuntu / Debian Series Download .deb package -> double-click to install or use command line Applicable to Ubuntu 20.04+ · Debian 11+
Fedora / RHEL / openSUSE Series Download .rpm package -> double-click to install or use command line Applicable to Fedora 36+ · RHEL 8+
bash — Install on Ubuntu/Debian
$ # 安装 .deb 包
$ sudo dpkg -i clash-verge-rev-linux-amd64.deb
$ # Fedora/RHEL 安装 .rpm 包
$ sudo rpm -i clash-verge-rev-linux-x86_64.rpm
$ # 启动应用
$ clash-verge-rev
Clash Verge Rev started successfully
2

Import Subscription and Enable Proxy

The operation of the Linux GUI version is identical to Windows/macOS: paste link to import in "Subscription", select nodes in "Proxy", and enable "System Proxy" or TUN mode.

Linux TUN Mode: Enabling requires root privileges; Clash Verge Rev will automatically request sudo authorization.
3

Server / Headless Environment: Use Mihomo CLI

On servers without a graphical interface, you can use the Mihomo Core CLI and pair it with systemd for auto-start on boot.

bash — Deploy Mihomo CLI on Linux Server
$ # 下载并解压 Mihomo 核心二进制
$ wget assets/clients/core/mihomo-linux-amd64.gz
$ gunzip mihomo-linux-amd64.gz
$ chmod +x mihomo-linux-amd64 && sudo mv mihomo-linux-amd64 /usr/local/bin/mihomo
$ # 创建配置目录,放入 config.yaml
$ mkdir -p ~/.config/mihomo && cp config.yaml ~/.config/mihomo/
$ mihomo -d ~/.config/mihomo
INFO[2026-05-17] Mihomo started successfully

Common FAQ

Covering common high-frequency issues encountered by beginners, such as proxy configuration, subscription import, and connection failures.

How to tell if the proxy has successfully taken effect?

After enabling the proxy, visit https://ip.sb or https://whatismyip.com in your browser. If the displayed IP address is from the node's country/region (USA, Japan, Hong Kong, etc.), the proxy is active.

If the IP still shows as domestic, please check: ① if the proxy switch is on; ② if the selected node is available; ③ try switching to other nodes.

Browser can access Google, but git / npm / pip and other command-line tools cannot connect?

This is a known limitation of System Proxy mode: System Proxy only intercepts applications that support HTTP/SOCKS protocols, and command-line tools do not read system proxy settings by default.

Recommended Solution: Enable TUN Mode in Clash Verge Rev settings to intercept all system traffic, allowing command-line tools to automatically go through the proxy. You can also temporarily set environment variables in the terminal:

export https_proxy=http://127.0.0.1:7890 http_proxy=http://127.0.0.1:7890
Subscription import failed, showing "Fetch Failed" or "Network Error"?

Expired Link: Log in to your service provider's user center and get the latest subscription link.

Network cannot access subscription address: The subscription server might be blocked. Try importing after connecting via another proxy, or contact your provider to change the subscription domain.

Incomplete Link: Ensure the link starts with https:// and contains no extra spaces or line breaks.

Antivirus Interference: Temporarily disable Windows Defender or third-party antivirus software and try again.

What is the difference between TUN Mode and System Proxy? Which one should I use?

System Proxy: Only proxies applications that support HTTP/HTTPS/SOCKS (browsers, most GUI software). Command-line tools do not go through the proxy by default. Simple to configure, suitable for daily use by regular users.

TUN Mode: Intercepts all TCP/UDP traffic via a virtual network card, and all applications and command-line tools pass through the Clash rule engine. Suitable for developers and users who need all tools to go through the proxy.

Recommendation: Use System Proxy for daily use; enable TUN mode when you need development debugging or want terminal tools to go through the proxy.

How to manually or automatically update the subscription node list?

Clash Verge Rev: On the "Subscription" page, click the "Refresh" icon on the card to update manually; or click "Edit" on the card, check "Auto Update", and set the interval (24 hours recommended).

FlClash (Android): Long-press the config card on the "Config" page and select "Update"; you can also enable auto-update in the edit settings.

Shadowrocket (iOS): Click the corresponding subscription on the "Home" page and pull down to refresh, or enter edit mode and click "Update".

What to do if node latency is very high or it disconnects frequently?

Test and Switch: Click "Speed Test" on the "Proxy" page, check real-time latency, and choose a node with latency below 100ms.

Use Auto-Select: Choose the "URLTest (Auto Select)" policy in the proxy group. Clash will periodically test speed and automatically switch to the lowest latency node.

Change Region: Try nodes in nearby regions like Hong Kong, Japan, or Singapore.

Hysteria 2 Nodes: Based on the QUIC protocol, these are far superior to traditional TCP nodes in high packet loss environments.

What is the difference between Clash Verge Rev and FlClash? Which should I choose?

Clash Verge Rev: Based on the Tauri framework, feature-complete, supports all Mihomo advanced features (TUN mode, scripts, Rule Provider, etc.), suitable for users with some technical background.

FlClash: Built with Flutter, Material You design, cleaner interface, lower barrier to entry, suitable for beginners seeking ease of use.

Recommendation: Both are fine for beginners, but FlClash is easier to start with. Advanced users should choose Clash Verge Rev. Both support the same subscription format, so switching only requires re-importing the link.

What are "Rule Mode" and "Global Mode"? What's the difference?

Rule Mode: The default and recommended mode for Clash. It intelligently splits traffic based on a rule list: domestic sites are direct for speed, international traffic goes through the proxy, and ad domains are rejected. Best experience, does not affect domestic use.

Global Mode: All traffic (including domestic) goes through the proxy without分流 judgment. This increases unnecessary latency and may affect domestic payment and banking services. Not recommended for daily use.

Direct Mode: All traffic connects directly without going through the proxy, useful for temporarily disabling the proxy.

Problem still not solved? Welcome to submit an issue on GitHub or check community discussions

Haven't downloaded the client yet?

Go to the download page, choose your OS, and complete the installation and setup in 5 minutes to start experiencing intelligent split-proxy.

Download Now for Free Learn about Features
Windows macOS Android iOS Linux