Clash Logo Tutorial Center

Setup Clash in 5 Minutes – Visual Guide for All Platforms

From installation to intelligent split tunneling, we\'ll walk you through all Clash configurations. Supports Windows, macOS, Android, iOS, and Linux. Easy for even absolute beginners.

Configure in 5 Minutes · 5 Platforms Covered · Beginner Friendly · Continuously Updated
Quick Start

Complete Clash Setup in Three Steps

The core process is the same regardless of your platform. Platform-specific tutorials below provide more detailed visual instructions.

01

Download & Install Client

Choose the Clash GUI client for your operating system. For Windows / macOS / Linux, we recommend Clash Verge Rev; for Android, Clash for Android (CFA); and for iOS, Stash or Shadowrocket.

Go to Download Page
02

Import Provider Subscription

Obtain a Clash-format subscription URL from your provider. Copy and paste it into the "Config" or "Subscription" page of the client, then click Update. The client will automatically parse nodes and split-tunneling rules—no manual YAML editing required.

03

Select Node & Enable Proxy

Choose a low-latency proxy node from the list and enable "System Proxy" (lightweight) or "TUN Mode" (global transparent proxy). Clash will automatically split traffic—high-speed local connections and proxied international access with seamless switching.

Windows Setup Guide

Using Clash Verge Rev as an Example (For Windows 10 / 11)

Step 1

Download & Install Clash Verge Rev

Go to the GitHub Releases page and download the latest .exe installer:

  • Most users choose ClashVergeRev_x.x.x_x64-setup.exe (x64, for most Windows desktops/laptops)
  • For ARM devices like Surface Pro X, choose ClashVergeRev_x.x.x_arm64-setup.exe
After downloading, double-click the installer and follow the prompts. Clash Verge Rev will be added to the Start menu; the first launch will show a welcome screen.
If Windows Defender displays a security warning, click "More info" → "Run anyway." This is normal for open-source software without Microsoft code signing.
Step 2

Import Provider Subscription

Open Clash Verge Rev. Click "Profiles" in the left navigation bar, then:

  1. Click "New" or the input box in the top right
  2. Paste the Clash subscription URL provided by your service
  3. Click "Import" or press Enter
  4. Wait for the download to complete; the configuration will appear in the list
  5. Click "Use this profile" on the right side of the configuration to activate it
We recommend enabling "Auto Update" (e.g., every 24 hours) to ensure your node list stays current and nodes don\'t expire.
Subscription URL Example 
https://your-airport.com/api/v1/client/subscribe?token=xxxxxxxx&flag=clash
Step 3

View & Select Proxy Nodes

Click "Proxies" in the left navigation to see all available nodes and policy groups:

  • Click any policy group (e.g., "Proxy") and choose a low-latency node from the list
  • Click the lightning bolt icon on the right for a manual speed test to see real-time latency
  • The "Auto Select" policy will automatically switch to the best node based on latency—ideal for users who prefer zero manual management
Latency below 100ms indicates a high-quality node; 100–200ms is acceptable. If over 300ms, consider switching. "Timeout" means the node is unreachable.
Step 4

Enable System Proxy

Find the "System Proxy" switch in the top right of Clash Verge Rev and click to turn it on (it will turn blue).

  • System Proxy mode automatically configures Windows settings, taking effect immediately for browsers and other apps that support system proxies
  • By default, Clash listens on 127.0.0.1:7890 (HTTP) and 127.0.0.1:7891 (SOCKS5)
  • Verify: Visit google.com in your browser; if it opens, you\'re all set
Step 5

Enable TUN Mode (Global Transparent Proxy)

TUN mode proxies all traffic, including games and CLI tools that don\'t support system proxies. Recommended for advanced users:

  1. In the Clash Verge Rev Settings page, find and enable the "TUN Mode" switch
  2. A Windows UAC prompt will appear; click "Yes" to grant administrator privileges (required for the virtual network interface)
  3. Once TUN Mode is active, you can turn off the System Proxy switch; TUN will handle all traffic
TUN mode requires admin rights; for general browsing, System Proxy is sufficient. Remember to turn off TUN before exiting to avoid affecting other network applications.
FAQ

Windows Usage FAQ

Still can\'t access Google after enabling System Proxy?
Check: ① Profile is active; ② Node latency is normal (not timeout); ③ Proxy mode is set to "Rule," not "Direct." If the issue persists, try switching nodes or restarting Clash Verge Rev.
How do I make a specific app connect directly, bypassing the proxy?
Add a PROCESS-NAME,xxx.exe,DIRECT rule to the `rules` section of your YAML configuration, or manually add a direct rule in the client\'s proxy rules page.
How do I set Clash Verge Rev to start on boot?
In the Clash Verge Rev Settings page, enable "Start with Windows" and consider enabling "Start Minimized" to avoid pop-up interruptions.

macOS Setup Guide

Using Clash Verge Rev as an Example (For macOS 11 Big Sur & above, Intel / Apple Silicon)

Step 1

Download & Install Clash Verge Rev

Go to the GitHub Releases page and download the .dmg installer for your architecture:

  • For M1 / M2 / M3 / M4 Macs: Download ClashVergeRev_x.x.x_aarch64.dmg
  • For Intel Macs (Pre-2020): Download ClashVergeRev_x.x.x_x64.dmg
Unsure about your chip? Click the Apple menu in the top left → "About This Mac." "Apple M..." indicates Apple Silicon, while "Intel" indicates an Intel chip.

After downloading, double-click the .dmg file and drag the Clash Verge Rev icon into the Applications folder to complete installation.

Step 2

Bypass macOS Gatekeeper Restrictions

When first opening Clash Verge Rev, macOS may say "Cannot be opened because the developer cannot be verified." This is normal. There are two ways to resolve this:

Recommended Method

Allow via System Settings

  1. Open "System Settings" → "Privacy & Security"
  2. Scroll down to find the Clash Verge prompt
  3. Click "Open Anyway" and enter your password to confirm

Terminal Command Method

Open the Terminal app, paste and run the following command:

Terminal
sudo xattr -r -d com.apple.quarantine /Applications/ClashVergeRev.app
Step 3

Import Provider Subscription

Open Clash Verge Rev. Click "Profiles" in the left navigation bar:

  1. Click the "New" button
  2. Paste your provider\'s subscription URL into the input box
  3. (Optional) Enter a name to help distinguish multiple subscriptions
  4. Click "Import" and wait for the file to download
  5. Click the profile to set it as active
Step 4

Select Node & Enable System Proxy

After selecting a node on the "Proxies" page, turn on the "System Proxy" switch in the top right:

  • macOS will prompt for network permissions; click "OK" to authorize
  • Clash Verge Rev will automatically configure macOS proxy settings, taking effect immediately for Safari, Chrome, and other browsers
  • A Clash status icon will appear in the menu bar for quick node switching
Verify: Visit google.com in your browser. If it loads, you\'re all set.
Step 5

Enable Enhanced Mode (TUN)

To proxy all traffic (including CLI tools and games that don\'t support system proxies), enable Enhanced Mode:

  1. Find "TUN Mode" or "Enhanced Mode" in Settings
  2. Enable it; you may be asked to install a system extension (confirm with your password)
  3. Allow the system extension in "Privacy & Security"
  4. Restart Clash Verge Rev for TUN mode to take effect
FAQ

macOS Usage FAQ

Why aren\'t Terminal commands using the proxy?
System proxies do not affect CLI tools. Solutions: ① Enable TUN mode; or ② Manually set environment variables in Terminal: export https_proxy=http://127.0.0.1:7890 http_proxy=http://127.0.0.1:7890
What if the internet stops working after quitting Clash?
If the system proxy wasn\'t turned off before quitting, go to "System Settings → Network → Proxies" and manually disable HTTP and SOCKS5 proxies. Alternatively, restart Clash Verge Rev and exit normally.
How do I use ClashX instead of Clash Verge Rev?
ClashX is a lightweight, macOS-exclusive client that lives in the menu bar. Get ClashX Pro from our download page. Setup is similar: Import subscription → Select node → Enable "Set as System Proxy."

Android Setup Guide

Using Clash for Android (CFA) as an Example (For Android 5.0 & above)

Step 1

Download & Install Clash for Android APK

Go to the Download Page or GitHub Releases for the latest APK:

  • For modern phones (Post-2016): Choose cfa-x.x.x-arm64-v8a-release.apk
  • For older devices: Choose cfa-x.x.x-armeabi-v7a-release.apk
  • Unsure of architecture: Choose cfa-x.x.x-universal-release.apk (Larger, but compatible with all devices)
Before installing, you must allow "Install unknown apps" in "Settings → Security" (or "Settings → Apps"). The menu location varies by phone brand.
Step 2

Import Subscription Configuration

Open CFA and click "Profiles" in the bottom navigation:

  1. Click the "+" button in the top right and select "URL"
  2. Enter a name in the label field and paste your provider\'s link into the URL field
  3. Click the save icon in the top right, then click "Update" to download
  4. Once downloaded, click the dot next to the profile name to set it as active
Long-press a profile to set "Auto Update" (e.g., every 24 hours) to keep node info current.
Step 3

Select Node & Start Proxy

  1. Click "Proxies" in the bottom navigation to view and select nodes in the policy groups
  2. Click the speed test icon next to a node to check latency; choose a low-latency node
  3. Return to the home screen and click the large "Stopped" button (Play icon)
  4. A VPN connection authorization prompt will appear; click "OK"
  5. The status will change to "Running," and a VPN icon will appear in the notification bar
Step 4

Configure TUN Mode (Global Proxy)

CFA uses the Android VPN API by default, achieving global proxy effects similar to TUN without extra config. For finer control:

  • Customize proxy mode (Rule/Global/Direct) in "Settings → Override"
  • We recommend enabling "Bypass private networks" to keep local traffic off the proxy
  • Set which apps use the proxy in "Settings → Access Control" (per-app filtering)
FAQ

Android Usage FAQ

Error: "App not installed" or parsing error?
Possible causes: ① The APK architecture doesn\'t match your device (try the universal version); ② The file is incomplete; ③ Your Android version is below 5.0.
Certain apps still can\'t connect after starting the proxy?
Check "Access Control" to ensure the app isn\'t set to direct connection. Also, verify that your subscription rules include the relevant domains; if necessary, test in "Global" mode.
How do I save battery while keeping the proxy running?
Set CFA to "No restrictions" in your phone\'s battery optimization settings. Alternatively, turn off the VPN connection when not in use.
iOS

iOS Setup Guide

Using Stash as an Example (Requires non-mainland China Apple ID)

iOS proxy clients require a non-mainland China Apple ID (US, HK, etc.) for purchase. We recommend Stash (most comprehensive) or Shadowrocket (classic choice).
Step 1

Switch to a non-CN Apple ID & Purchase

  1. Open the App Store, click your avatar in the top right, scroll to the bottom, and click "Sign Out"
  2. Sign in with a US or HK Apple ID (you can borrow one or register your own)
  3. Search for "Stash" or "Shadowrocket," purchase, and download
  4. After downloading, you can switch back to your original Apple ID; the purchased app will remain
Do not trust third parties selling "US accounts"; you risk having your device locked. We recommend registering your own US Apple ID (select US as the region; no credit card required).
Step 2

Import Subscription in Stash

  1. Open Stash and click "Home" at the bottom
  2. Click "Add Configuration File" → "Download from URL"
  3. Paste your Clash subscription URL and click "Download"
  4. The profile will automatically become active once downloaded
  5. Select a node on the "Policy Groups" page or use Auto Select
Step 3

Import Subscription in Shadowrocket

  1. Open Shadowrocket and click the "+" icon in the top right
  2. For "Type," select "Subscribe"
  3. Paste your provider\'s subscription URL and add a label
  4. Click "Done" in the top right and wait for the nodes to load
  5. Choose a low-latency node from the list
Step 4

Start Proxy

After importing and selecting a node, toggle the switch next to "Not Connected" on the home screen:

  • iOS will prompt "Shadowrocket Would Like to Add VPN Configurations"; click "Allow" and confirm with Face ID or your passcode
  • The status will change to "Connected," and a VPN icon will appear in the status bar
  • Verify: Visit google.com in Safari to ensure it\'s working correctly
FAQ

iOS Usage FAQ

App Store still shows "Unsupported" after switching Apple IDs?
Ensure the account has fully switched: Sign out, sign in with the non-CN Apple ID, then check the avatar in the top right of the App Store home page to confirm before searching again.
Node count is 0 after importing the subscription?
The link might not be in Clash format. Contact your provider for a Clash or Surge compatible link, or try adding ?flag=clash to the end of the URL.
Google works, but YouTube won\'t load after connecting?
The node speed or connection quality may be poor. Try: ① Switching to a lower-latency node; ② Using manual speed tests to find the best node; ③ Testing in "Global" mode to see if it\'s a rule-related issue.
Linux

Linux Setup Guide

Using Clash Verge Rev as an Example (For Ubuntu / Debian / Fedora / Arch Linux)

Step 1

Download & Install Clash Verge Rev

Go to GitHub Releases and choose the installer for your distribution:

  • AppImage (Recommended): ClashVergeRev_x.x.x_amd64.AppImage – Universal for all distros, run without installation
  • Ubuntu / Debian: ClashVergeRev_x.x.x_amd64.deb
  • Fedora / RHEL / openSUSE: ClashVergeRev_x.x.x_x86_64.rpm
  • Arch Linux / Manjaro: Install via AUR (see command below)
Ubuntu / Debian Installation
sudo dpkg -i ClashVergeRev_x.x.x_amd64.deb
Fedora / RHEL Installation
sudo rpm -i ClashVergeRev_x.x.x_x86_64.rpm
Arch Linux / Manjaro (AUR)
paru -S clash-verge-rev
# Or use yay
yay -S clash-verge-rev
Step 2

Running with AppImage

AppImage files require execution permission before the first run:

Terminal
# Add execute permission
chmod +x ClashVergeRev_x.x.x_amd64.AppImage

# Run
./ClashVergeRev_x.x.x_amd64.AppImage
If the AppImage won\'t run, install FUSE: For Ubuntu/Debian, run sudo apt install libfuse2; for Fedora, run sudo dnf install fuse.
Step 3

Import Subscription Configuration

Operations are identical to the Windows and macOS versions:

  1. Open Clash Verge Rev and go to the "Profiles" page
  2. Click "New" and paste your provider\'s subscription URL
  3. Click "Import" and wait for the download to complete
  4. Click the profile to set it as active
Step 4

Enable Proxy

Clash on Linux offers two proxy methods:

GUI Method

System Proxy (GNOME / KDE)

Enable "System Proxy" in Clash Verge Rev to automatically configure GNOME or KDE desktop settings.

Terminal Environment Variable Method

~/.bashrc or ~/.zshrc
export http_proxy="http://127.0.0.1:7890"
export https_proxy="http://127.0.0.1:7890"
export all_proxy="socks5://127.0.0.1:7891"

You can also enable TUN Mode for global transparent proxying (requires root). Find the TUN option in settings and toggle it on.

FAQ

Linux Usage FAQ

Browser not using the proxy after enabling System Proxy?
GNOME users should ensure gnome-settings-daemon is installed; KDE users should check proxy settings in System Settings. Some distros require manual proxy configuration in network settings: host 127.0.0.1, port 7890.
How do I set Clash Verge Rev to start on boot?
Enable "Start on boot" in Clash Verge Rev settings, or manually create a ~/.config/autostart/clash-verge-rev.desktop file pointing to your AppImage path.
UI display issues on Wayland?
Tauri apps may have display issues on Wayland. Try forcing it to run in XWayland by setting: WAYLAND_DISPLAY="" ./ClashVergeRev.AppImage
Advanced Configuration

Advanced Clash Usage Tips

Master these tips to unlock powerful features and meet personalized proxy needs.

DNS Leak Prevention

Set enhanced-mode: fake-ip in the dns field of your YAML config, and configure DoH (https://8.8.8.8/dns-query) or DoT as a fallback DNS to prevent DNS queries from leaking your real IP.

config.yaml
dns:
  enable: true
  enhanced-mode: fake-ip
  nameserver:
    - 114.114.114.114
    - 223.5.5.5
  fallback:
    - https://8.8.8.8/dns-query
    - https://1.1.1.1/dns-query

Rule Provider Subscriptions

Use Rule Provider to subscribe to remote rule sets, keeping them automatically updated. Clash Meta supports multiple formats like DOMAIN and IPCIDR.

config.yaml
rule-providers:
  reject:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    interval: 86400

Proxy Group Configuration

Implement advanced traffic scheduling with Proxy Groups: url-test for auto-selection of lowest latency nodes, fallback for auto-failover, and load-balance for multi-node load balancing.

config.yaml
proxy-groups:
  - name: "Auto"
    type: url-test
    proxies: [Node-HK, Node-US, Node-JP]
    url: http://www.gstatic.com/generate_204
    interval: 300

External Control Panel (Dashboard)

Clash Meta features a built-in RESTful API for real-time traffic monitoring and node management via a web panel. Visit d.metacubex.one and enter your controller address (default 127.0.0.1:9090) and secret.

FAQ

Usage Tutorial FAQ

A compilation of the most common configuration and usage issues to help you troubleshoot quickly.

Possible causes: ① The link isn\'t in Clash format—contact your provider for a dedicated Clash URL; ② Local network cannot reach the subscription address—try updating with another proxy active; ③ Subscription expired; ④ The link contains special characters—ensure it was copied completely.
① Use speed tests to find the lowest latency node; ② Try nodes in different regions (Hong Kong usually has the lowest latency); ③ If available, prioritize new protocols like Hysteria2 or TUIC for better performance in weak networks; ④ Set proxy mode to "Rule" instead of "Global" to avoid routing local traffic; ⑤ Check if your plan has speed limits.
Visit ipaddress.com or ifconfig.me to see if the IP matches your proxy node\'s region. You can also monitor active connections in the Clash "Connections" tab.
Set allow-lan: true in your config and ensure your firewall allows access to port 7890. Other devices can then point their HTTP/HTTPS proxy settings to your device\'s local IP (e.g., 192.168.1.100:7890).
The Clash client itself does not upload any data, and its code is fully open-source. Traffic is routed through your chosen provider\'s nodes—providers may log connection data depending on their policy. The software itself is secure; please read and trust your provider\'s privacy policy.
Not downloaded yet?

Free Clash Download – Start Configuring Now

Supports Windows, macOS, Linux, Android, and iOS. Completely free and open-source. Complete your setup in 5 minutes with our guide and experience high-speed intelligent proxying.

Free Download Client Return to Home GitHub Source