If you have never used a network proxy tool before, Clash can feel intimidating at first glance. You may see terms like subscription, rule mode, and TUN scattered across forums and wonder where to even begin. The good news is that your first successful connection does not require deep technical knowledge. This guide is written specifically for complete beginners: we explain what Clash actually does, which client to download for your device, how to import a subscription link, and how to confirm everything is working — step by step, in plain English.

By the end of this tutorial, you will have a running Clash setup that routes traffic through a proxy server when needed, while keeping everyday local browsing fast and direct. Whether you are on Windows, macOS, or Android, the core workflow is the same: download, subscribe, import, connect, verify.

What Is Clash?

Clash is an open-source, rule-based network proxy client written in Go. Unlike a traditional VPN that tunnels all of your traffic through a single encrypted pipe, Clash uses a rule-based splitting approach. It reads a configuration file (usually in YAML format) and decides, for each network request, whether to send it directly to the destination or route it through a proxy server. This design gives you finer control and often better performance than a one-size-fits-all VPN tunnel.

Think of Clash as a smart traffic controller for your network. When you visit a site that needs a proxy, Clash forwards the request through one of your configured nodes. When you access a local service or a site that works fine without a proxy, Clash lets the connection go direct. The result is a faster, more efficient browsing experience — especially in regions where only some services require special routing.

It is important to understand that Clash itself is a core engine, not a single app you download from one store listing. What you actually install is a GUI client built on top of the Clash or Clash Meta (Mihomo) core. These clients provide buttons, menus, and visual panels so you do not have to edit raw configuration files by hand — though advanced users can still do that when needed.

Clash supports multiple proxy protocols commonly found in modern subscriptions, including Shadowsocks, VMess, VLESS, Trojan, and others. Your subscription provider bundles these server details into a single URL that the client can fetch and parse automatically.

Which Client Should You Download?

Because Clash is open source, several community-maintained clients exist for different platforms. Choosing the right one saves you frustration later. Here are the most popular options as of 2026:

  • Clash Verge Rev (Windows / macOS / Linux) — Actively maintained fork with a clean interface, built-in subscription management, and TUN mode support. This is the top recommendation for desktop beginners.
  • FlClash (Android / Windows / macOS) — Modern Material Design UI, straightforward subscription import, good for users who prefer a mobile-first experience on Android.
  • Clash for Android (Android) — A long-standing option; still widely used, though some users migrate to FlClash or newer Meta-based clients for ongoing updates.
  • Stash / Shadowrocket (iOS / iPadOS) — Paid App Store apps; the standard choice for iPhone and iPad users since Apple restricts sideloading of proxy clients.

For this guide, we use Clash Verge Rev as the reference client on desktop because its menu layout is intuitive and its documentation is well aligned with beginner workflows. The steps for importing a subscription and toggling the proxy are nearly identical across other Clash-based clients — only the exact button labels may differ slightly.

Step 1: Download and Install the Client

The first step is to get the correct installer for your operating system and CPU architecture. Downloading the wrong build — for example, an Intel build on an Apple Silicon Mac — will either fail to install or run with poor performance.

Windows

  1. Open the Clash download page and select Windows.
  2. Choose the x64 installer for most modern PCs. If you are on an older 32-bit system, look for an x86 build if available.
  3. Run the .exe installer and follow the on-screen prompts. Allow the app through Windows Defender SmartScreen if prompted — the file comes from the official release channel.
  4. After installation, launch Clash Verge Rev from the Start menu. You may see a tray icon appear in the system notification area.

macOS

  1. On the download page, select macOS.
  2. For M-series Macs (M1, M2, M3, M4), download the aarch64 or arm64 build. For Intel Macs, download the x64 or amd64 build.
  3. Open the .dmg file and drag the application into your Applications folder.
  4. On first launch, macOS may block the app because it is not from the App Store. Go to System Settings → Privacy & Security and click Open Anyway, or right-click the app and choose Open.

Android

  1. Select Android on the download page.
  2. Most phones from the last several years use arm64-v8a. Download that APK unless you know your device requires a different architecture.
  3. Enable installation from unknown sources in your device settings, then open the downloaded .apk file to install.
  4. Grant any requested VPN or network permissions when the app first launches — these are required for the proxy to function.

Once installed, open the client. You should see an empty profiles list and a proxy toggle that is currently off. That is normal — you have not added a subscription yet.

Step 2: Get a Subscription URL

Clash does not ship with any proxy servers. To connect, you need a subscription URL from a proxy service provider (sometimes called an "airport" in community slang). These providers operate servers in various countries and give you a link — typically starting with https:// — that points to a YAML configuration file containing your node list, credentials, and routing rules.

After you purchase or register with a provider, look for a section labeled Subscription, Clash subscription, or One-click import link in their dashboard. Copy the full URL. It often looks something like:

https://example-provider.com/api/v1/client/subscribe?token=YOUR_TOKEN

Keep this URL private. Anyone with access to it can use your account bandwidth. Most providers let you reset the link from their dashboard if it is ever exposed.

Important disclaimer: This website provides Clash client downloads and tutorials only. We do not provide, recommend, or endorse any specific proxy service provider. Always use services that comply with the laws and regulations applicable in your region.

Step 3: Import the Subscription and Connect

With the client installed and your subscription URL copied, you are ready for the core setup. Follow these steps in Clash Verge Rev (adjust menu names slightly if you use a different client):

Import the subscription

  1. Launch Clash Verge Rev.
  2. Navigate to the Profiles tab (sometimes labeled Subscriptions in other clients).
  3. Click New, Import, or the + button.
  4. Paste your subscription URL into the input field and confirm.
  5. Wait a few seconds while the client fetches and parses the configuration. You should see a new profile appear in the list with a name set by your provider.

Activate the profile

Click the profile you just imported to select it as the active configuration. In Clash Verge Rev, the active profile is highlighted. Only one profile runs at a time.

Enable the proxy

Go to the main dashboard and toggle System Proxy on. This tells your operating system to route compatible application traffic through Clash. For a first connection, System Proxy is the simplest option.

If you later need to capture traffic from apps that ignore system proxy settings — games, terminal tools, or certain desktop apps — you can enable TUN Mode instead. TUN creates a virtual network interface that intercepts all traffic at a lower level. It requires administrator privileges on desktop systems. For now, System Proxy is enough to verify your setup works.

Select a proxy mode

Clash offers three common routing modes:

  • Rule — Routes traffic based on rules in your configuration. Local and direct traffic stays fast; only matching requests go through the proxy. Recommended for daily use.
  • Global — Sends all traffic through the proxy. Useful for testing but often slower for local services.
  • Direct — Disables proxy routing entirely. Use this only when troubleshooting.

Set the mode to Rule before your first test. This avoids the common beginner mistake of routing every request — including local CDN nodes — through a distant server.

Pick a node

  1. Open the Proxies panel.
  2. You will see groups such as Proxy, Auto, or region-based selectors created by your provider.
  3. Click Test Latency (or the speed-test icon) to measure response times for each server.
  4. Select a node with low latency — usually one geographically close to you or to your target service.

If all nodes show red or timeout, your subscription may be expired, the provider may be down, or your network may be blocking the initial fetch. See the troubleshooting section below before giving up.

Step 4: Verify Your Connection Works

With System Proxy enabled, a profile active, and a node selected, it is time to confirm everything works.

  1. Open a web browser (Chrome, Firefox, Edge, or Safari).
  2. Visit a site that normally requires proxy access in your network environment — for example, an international search engine or a video platform that is restricted in your region.
  3. If the page loads normally within a few seconds, congratulations: your first Clash connection is successful.
  4. Optionally, search for "what is my IP" in the browser. The IP address shown should match your selected proxy node's location, not your real ISP address.

You can also check the client's Logs or Connections panel. When you browse, you should see live entries showing which domains are being matched and which proxy group handled them. This is a useful way to confirm that Rule mode is splitting traffic correctly.

If the test site does not load, work through these quick checks before diving into advanced settings:

  • Is System Proxy actually toggled on? The switch should be highlighted.
  • Is the correct profile selected and active?
  • Did you pick a node with a reasonable latency, not one that timed out?
  • Are you in Direct mode by accident?
  • Does your subscription URL still work when opened in a browser (it may download a YAML file or show an error if expired)?

Understanding Proxy Modes and When to Use Them

Now that you have a working connection, a brief overview of modes will help you avoid common performance pitfalls.

Rule mode is the default choice for most users. Your subscription includes predefined rules — often using GeoIP or domain lists — that send domestic traffic direct and foreign or blocked services through the proxy. This keeps local banking sites, government portals, and domestic streaming fast while still unlocking the content you need through the proxy.

Global mode forces every connection through the selected node. Beginners sometimes enable this thinking it is "safer," but it often makes local websites slower and can cause captcha loops on services that expect a local IP. Use Global mode only when you specifically need all traffic tunneled — for example, during a short connectivity test.

Direct mode bypasses the proxy entirely while keeping the client running. It is helpful when you want to temporarily disable routing without uninstalling or re-importing your subscription.

As you grow more comfortable, explore TUN mode for full-device coverage and read the documentation on DNS settings if you notice slow page loads or resolution failures. Those topics are beyond first-connection basics but are natural next steps once your foundation is solid.

Common Beginner Mistakes to Avoid

  • Installing the wrong architecture — An Intel build on ARM or vice versa causes crashes or refusal to open. Always match your CPU type on the download page.
  • Forgetting to activate the profile — Importing a subscription is not enough; you must click the profile to make it the active configuration.
  • Leaving the proxy toggle off — The client can have a valid config loaded but do nothing if System Proxy or TUN is disabled.
  • Using Global mode permanently — This slows local sites and wastes bandwidth. Switch to Rule mode for everyday browsing.
  • Sharing your subscription URL — Treat it like a password. Reset it immediately if you suspect it leaked.
  • Ignoring subscription expiry — Paid plans expire. If every node goes red overnight, check your provider dashboard first.
  • Expecting Clash to include free servers — The client is free and open source; servers always come from your provider.

Frequently Asked Questions

Does Clash work on iPhone?

Yes, but not through Clash Verge Rev. iOS users typically install Stash or Shadowrocket from the App Store (both are paid apps). The subscription import process is similar: paste your URL, select a node, and enable the VPN profile when prompted by iOS.

Some websites are slow even with the proxy on — why?

You are likely in Global mode, which routes all traffic through the proxy including local services. Switch to Rule mode so only the traffic that needs a proxy is tunneled. Also try a different node closer to the service you are accessing.

Certain apps are not going through the proxy — why?

System Proxy mode only affects applications that respect the operating system's proxy settings. Many games, command-line tools, and native apps ignore it. Enable TUN Mode to capture all traffic at the network layer. See the documentation for platform-specific TUN setup instructions.

My subscription import failed or will not update — what should I do?

First, verify the URL has not expired and that you can reach the provider's domain. If you are importing for the first time without any working proxy, you may need a network path to the provider — some users update subscriptions from a different network. Try clicking Update or Refresh on the profile. If the problem persists, contact your provider's support with the error message from the client logs.

Is Clash the same as a VPN?

Not exactly. A traditional VPN typically encrypts and tunnels all traffic to one server. Clash is a flexible proxy client that supports multiple protocols, multiple servers, and granular rule-based routing. Many users find it more adaptable for mixed local and international browsing, though it requires a subscription and more initial setup than a one-click VPN app.

Many beginner-oriented tools promise a one-click experience but hide critical details — opaque server lists, limited protocol support, or clients that have not kept pace with modern standards like VLESS and REALITY. Browser extensions only proxy web pages and leave apps, games, and terminal tools untouched. Traditional VPN apps tunnel everything indiscriminately, which often slows local services you still rely on every day. Clash takes a different approach: open-source and actively maintained, with rule-based splitting that keeps local traffic direct, broad protocol support through a single subscription, and GUI clients like Clash Verge Rev that make the entire download-to-connect workflow manageable even if you have never edited a config file before.

Download Clash for free and get connected smoothly →