Home Tutorials

Clash Setup Guide

Step-by-step visual guides from installation to browsing. Covering Windows, macOS, Android, iOS, and Linux platforms. Learn how to import subscriptions and enable proxy in 5 minutes.

5 Platform Tutorials
3 Steps
5min Done

Quick Start Clash in 3 Steps

Regardless of the platform, starting Clash only takes three steps and less than 5 minutes.

01

Choose Platform & Install

Choose the recommended client for your OS and complete the installation:

  • Windows Clash Verge Rev（EXE）
  • macOS Clash Verge Rev（DMG）
  • Android FlClash（APK）
  • iOS Shadowrocket（App Store）
  • Linux Clash Verge Rev（DEB/RPM）
Go to Downloads
02

Paste Subscription & Import Nodes

Open the client, go to the "Profiles" page, and paste the subscription link provided by your service provider:

Subscription Link Example https://your-airport.com/api/subscribe?token=xxx

Click "Import" and wait for the node list to download automatically. No need to manually enter any server parameters.

03

Select Node & Start Proxy

Select a node with low latency on the "Proxy" page and enable proxy mode:

  • System Proxy Preferred for general users
  • TUN Mode Intersects all traffic, recommended for developers

Visit ip.sb to verify that your IP has changed, indicating the proxy is active.

Recommended Clients at a Glance

Windows
Clash Verge Rev
Recommended
macOS
Clash Verge Rev
Recommended
Android
FlClash
Recommended
iOS
Shadowrocket
For Beginners
Linux
Clash Verge Rev
Recommended

Windows Setup Guide

Recommended Client: Clash Verge Rev (Tauri-based, built-in Mihomo core, supports TUN mode and system proxy)

1

Download and Install Clash Verge Rev

Go to the download page and download the Clash Verge Rev Windows x64 EXE installer in the Windows section (most Win 10/11 PCs are x64). For ARM devices like Surface Pro X, download the ARM64 version.

Go to Windows Download
If blocked by SmartScreen: Click "More info" → "Run anyway". This is a standard Windows prompt for unsigned software. Clash Verge Rev is open-source and auditable.
2

Import Subscription Link

Open Clash Verge Rev, click "Profiles" on the left, paste the subscription link in the top input box, and click "Import".

① Click "Profiles" on the left
② Paste link (https://…) in the box
③ Click "Import" and wait for the list to download
④ Click the profile card to activate it
Once imported, a profile card will appear on the "Profiles" page showing the number of nodes.
3

Select Node & Enable System Proxy

Go to "Proxy", select a node with low latency (click "Speed Test" in the top right), then toggle the "System Proxy" switch in the top right. It turns blue when active.

Verification: Open https://ip.sb in your browser. If it shows the IP of your node's region, the proxy is working.
4

Advanced: Enable TUN Mode (Recommended for Developers)

To route traffic for git, npm, pip, curl, etc., through the proxy, enable TUN Mode in Settings.

Note: Enabling TUN mode requires admin privileges. Click "Yes" when the Windows UAC prompt appears.
PowerShell — Verifying TUN Mode
PS> # Check current exit IP (should show node IP)
PS> curl -s https://ip.sb
104.xxx.xxx.xxx # Node IP, TUN mode active
PS> # Test if git clone uses proxy
PS> git clone https://clashofficialcn.com/your-project
Cloning into 'clash-verge-rev'... done.
5

Update Subscription

In "Profiles", click the refresh icon on the profile card to update manually. For auto-update, click "Edit" on the card and set an interval (e.g., 24h).

macOS Setup Guide

Recommended Client: Clash Verge Rev (Native support for Apple Silicon M-series and Intel)

1

Download Correct DMG Package

macOS version is split into two architectures. Choose based on your Mac's chip:

Apple Silicon（M1 / M2 / M3 / M4） Download ARM64: clash-verge-rev-mac-arm64.dmg For Macs released after late 2020 with "M1/M2/M3" chips
Intel Processors Download x64: clash-verge-rev-mac-x64.dmg For Macs released before 2020 with Intel chips
Go to macOS Download
2

Install DMG and Bypass Gatekeeper

Double-click the .dmg file and drag the icon into the Applications folder.

① Double-click DMG, drag icon to Applications
② If "Developer cannot be verified" appears on first launch, click "OK" to close the window.
③ Go to "System Settings → Privacy & Security", find the prompt, and click "Open Anyway".
④ Double-click to open again; it will work normally from now on.
Why this happens: Apple requires a fee for notarization. As an open-source project, Clash Verge Rev bypasses this. The source code is public and secure.
3

Import Subscription Link

Open Clash Verge Rev, click "Profiles", paste your subscription link, and click "Import". The steps are identical to the Windows version.

Once imported, click the profile card to activate the configuration.
4

Enable System Proxy

Select a node in "Proxy" and toggle "System Proxy". macOS will route traffic for Safari, Chrome, Terminal, etc., through the proxy.

Menu Bar Shortcuts: Use the icon in the macOS menu bar to quickly switch nodes or toggle the proxy without opening the full interface.
5

Advanced: Enable TUN Mode

Enable TUN Mode in Settings to intercept all terminal traffic (brew, npm, git). Enter your password when prompted by the system.

Android Setup Guide

Recommended Client: FlClash (Material You design, simple interface, beginner-friendly)

1

Download APK Package

Go to the download page and get FlClash APK. Download ARM64-v8a for phones released after 2016; ARMv7 is only for older devices.

Go to Android Download
Unsure of architecture? Try ARM64 first. If it says "App not installed", try the ARMv7 version.
2

Allow Unknown Source Installation

Since the APK is not from Google Play, you may need to grant temporary permission:

① Tap APK, if prompted with "For your security, this source is blocked"
② Click "Settings" → "Allow from this source"
③ Go back and click "Install anyway" (it's recommended to disable this permission after install)
Paths may vary by brand (e.g., MIUI in "Security", Huawei in "AppGallery Settings"), but the logic is the same.
3

Import Subscription Link

Open FlClash, tap "Config" at the bottom, tap "+" → "Import from URL", paste your link, and save.

① Open FlClash, tap "Config"
② Tap "+" → "Import from URL"
③ Paste link, enter name, and tap "Save"
④ Wait for download, then tap the profile card to activate
Once activated, you will see the node list in the "Proxy" page.
4

Enable VPN & Select Node

Select a node (or "Auto Select") in "Proxy", then tap the start button in the bottom right. Grant the "VPN Connection Request" when prompted.

Android VPN Mode is equivalent to TUN mode on desktops. It intercepts all phone traffic by default, using the rule engine to automatically split traffic between domestic and international. Domestic apps remain unaffected by direct connection.
Advanced Alternative: ClashMeta for Android

For users with Clash experience who need more advanced configurations, ClashMeta for Android (by MetaCubeX) is a great choice. It integrates the Mihomo core and supports all advanced features. It's also available on our Android Download Page.

iOS Setup Guide

Recommended Clients: Shadowrocket (Best for beginners, ~$2.99) · Stash (Feature-rich, Mihomo compatible)

iOS Special Note

Due to Apple's policies, Clash-compatible clients are not available on the Mainland China App Store and are paid apps. You must prepare a US (or HK/TW) Apple ID to purchase and download from the App Store. Please follow the "Register US Apple ID" steps below first.

1

Register US Apple ID (Approx. 10 mins, no credit card required)

① Go to appleid.apple.com in your browser and click "Create Your Apple ID".
② Enter your name, date of birth, and an email address not previously used for an Apple ID.
③ Select United States as the "Country or Region".
④ Set a password, verify your email, and your Apple ID is ready.
⑤ iPhone App Store → Top-right icon → Sign Out → Sign in with your US ID.
No US Credit Card? You can purchase US App Store Gift Cards (iTunes Gift Cards) from online retailers and redeem them to buy apps.
2

Purchase Shadowrocket in App Store

After signing into the App Store with your US ID, search for "Shadowrocket" (approx. $2.99) and complete the purchase. Once bought, it's yours forever; you can switch back to your local ID, and the app will still work and update.

Shadowrocket Shadowrocket · ~$2.99 · Beginner's Choice
Stash Feature Rich · Mihomo Compatible · Advanced Choice
3

Import Subscription in Shadowrocket

Open Shadowrocket, tap "+" in the top right, select Type: Subscribe, paste your subscription link in the URL field, add a label, and tap "Done".

① Open Shadowrocket, tap "+" in top right
② Set Type to "Subscribe", paste URL
③ Add label, tap "Done", subscription downloads automatically
④ Go back home, toggle the "Not Connected" switch, and authorize VPN.
When the Shadowrocket home switch shows "Connected" and the VPN icon appears in the status bar, the proxy is active.
4

Advanced: Using Stash (Full Mihomo Support)

For Stash, importing is similar: tap "Config" → "Add from URL" and paste your link. Stash fully supports Mihomo formats, including Rule Providers and proxy group strategies.

Linux Setup Guide

Recommended Clients: Clash Verge Rev (GUI Version) or Mihomo CLI (Command Line / Server Version)

1

Download and Install Clash Verge Rev

Choose the installation package format for your Linux distribution:

Ubuntu / Debian Series Download .deb → Double-click to install or use terminal Compatible with Ubuntu 20.04+ · Debian 11+
Fedora / RHEL / openSUSE Series Download .rpm → Double-click to install or use terminal Compatible with Fedora 36+ · RHEL 8+
Go to Linux Download
bash — Install on Ubuntu/Debian
$ # Install .deb package
$ sudo dpkg -i clash-verge-rev-linux-amd64.deb
$ # Fedora/RHEL install .rpm package
$ sudo rpm -i clash-verge-rev-linux-x86_64.rpm
$ # Start App
$ clash-verge-rev
Clash Verge Rev started successfully
2

Import & Enable Proxy

The Linux GUI version works just like Windows/macOS: paste the link in "Profiles", select a node in "Proxy", and enable "System Proxy" or TUN mode.

Linux TUN Mode: Requires root privileges. Clash Verge Rev will automatically request sudo authorization. Some distros may require extra sysctl config; see GitHub Wiki for details.
3

Server / No Desktop: Use Mihomo CLI

On servers without a GUI, use the Mihomo Core CLI with systemd for auto-start at boot.

bash — Deploy Mihomo CLI on Linux Server
$ # Download and extract Mihomo core binary
$ wget assets/clients/core/mihomo-linux-amd64.gz
$ gunzip mihomo-linux-amd64.gz
$ chmod +x mihomo-linux-amd64 && sudo mv mihomo-linux-amd64 /usr/local/bin/mihomo
$ # Create config dir and add config.yaml
$ mkdir -p ~/.config/mihomo && cp config.yaml ~/.config/mihomo/
$ # Start Mihomo
$ mihomo -d ~/.config/mihomo
INFO[2026-05-16] Mihomo started successfully
For more CLI parameters (ports, external API, DNS, etc.), refer to the official MetaCubeX/mihomo documentation.

Frequently Asked Questions

Answers to common issues regarding proxy config, subscription import, and connection failures.

How do I know if the proxy is working?

After enabling the proxy, visit https://ip.sb or https://whatismyip.com. If the IP address shown is in the region of your node (US, Japan, HK, etc.), the proxy is active.

If the IP still shows your local region: ① Check if the proxy switch is ON; ② Verify if the node is working (Speed Test in "Proxy"); ③ Try a different node.

Browser works, but git / npm / pip CLI tools can't connect. What should I do?

This is a limitation of System Proxy mode: it only routes apps that support HTTP/SOCKS. Command-line tools often connect directly and ignore system proxy settings.

Solution: Enable TUN Mode in Clash Verge Rev settings to intercept all system traffic, allowing terminal tools to use the proxy automatically.

Alternatively, you can manually set proxies in the terminal (Clash default port 7890):

export https_proxy=http://127.0.0.1:7890 http_proxy=http://127.0.0.1:7890
Subscription import failed with "Fetch Error" or "Network Error".

① Expired Link: Log into your provider dashboard and get a fresh link.

② Server Blocked: The subscription server may be blocked. Try importing while using another proxy, or ask your provider for a different domain.

③ Incomplete Link: Ensure the link starts with https:// and has no trailing spaces or line breaks.

④ Antivirus Interference: Temporarily disable Windows Defender or third-party antivirus and try again.

What is the difference between TUN Mode and System Proxy?

System Proxy: Only handles apps supporting HTTP/HTTPS/SOCKS (browsers, most GUI apps). CLI tools will not be proxied. Easy to set up for general use.

TUN Mode: Uses a virtual network card to intercept all TCP/UDP traffic. All apps and terminal tools go through Clash rules. Ideal for developers and system-wide proxy needs.

Recommendation: Use System Proxy for daily use; enable TUN Mode for development or terminal tools.

How do I update the node list manually or automatically?

Clash Verge Rev: In "Profiles", tap the "Refresh" icon on the card to update manually; or go to "Edit" to enable "Auto-Update" (24h recommended).

FlClash (Android): Long-press the card in "Config" and select "Update"; or enable auto-update in edit mode.

Shadowrocket (iOS): Tap the subscription on the Home screen and pull down to refresh, or tap "Update" in edit mode.

What if latency is high or it disconnects frequently?

① Speed Test: Run a speed test in "Proxy" and pick a node with latency below 100ms.

② Auto-Selection: Use the "URLTest" policy in proxy groups; Clash will automatically switch to the lowest latency node.

③ Change Region: Try nodes in nearby regions like HK, Japan, or Singapore.

④ Hysteria 2: Based on QUIC, it performs much better than TCP protocols in high packet loss environments.

What's the difference between Clash Verge Rev and FlClash?

Clash Verge Rev: A Tauri-based desktop client. Full-featured, supporting all Mihomo advanced features (TUN, scripts, Rule Providers). Ideal for experienced users.

FlClash: A Flutter-based cross-platform client with Material You design. Simpler interface and easier to use, perfect for beginners.

Recommendation: Beginners can use either; FlClash is easier to start with. Both support the same subscription format, making switching easy.

What are "Rule" and "Global" modes?

Rule Mode: Default and recommended. Smartly splits traffic: local sites are direct, international traffic uses proxy, and ads are blocked. Best experience for daily use.

Global Mode: All traffic (including local) goes through the proxy. Adds unnecessary latency and may affect local payments or banking. Not recommended for daily use.

Direct Mode: All traffic connects directly without a proxy. Useful for keeping the client running while bypassing the proxy.

Still have issues? Submit an Issue on GitHub or join community discussions.

Haven't downloaded the client yet?

Go to the download page, pick your OS, and finish setup in 5 minutes to enjoy smart proxy routing.

Download Free Now Explore Features
Windows macOS Android iOS Linux