Official User Guide · Regularly Updated

Clash Tutorials

Install · Subscription · Config · Advanced · FAQ

From download and installation to importing subscriptions, configuring rule splitting, and enabling TUN global proxy, master Clash on all platforms. Covers Clash Verge Rev, FlClash, and Mihomo core.

Beginner's Guide

5-Minute Clash Quick Start

Whether you're on Windows, macOS, Android, or Linux, follow these 5 steps to complete your Clash setup and start using proxy services.

1

Download Client

Go to the Download Center. Choose Clash Verge Rev for Windows/macOS, or FlClash for Android.

2

Install & Launch

Double-click the installer to install. Once launched, the Clash icon will appear in the system tray or notification bar.

3

Import Subscription

Open the "Config / Subscription" page, paste your provider's subscription URL, and click import/update.

4

Select Proxy Node

Click "Speed Test" in the proxy panel and select a node with latency below 200ms.

5

Enable System Proxy

Toggle the "System Proxy" switch. Your browser will now access blocked sites via Clash.

Need to proxy games or desktop apps? System proxy only affects apps that support proxy settings (like browsers). To proxy all system traffic, please enable TUN Mode—click "Advanced Features" above for setup steps.
Platform-Specific Guides

Clash Installation by Platform

Choose your operating system to view detailed installation steps and recommended clients.

Clash Verge Rev · Windows Installation

1

Download Installer

Download Clash Verge Rev for Windows x64 (.exe) from the Download Center. Choose ARM64 for Qualcomm Snapdragon PCs.

2

Run Installer

Double-click the .exe file. If Windows SmartScreen appears, click "More Info → Run Anyway" and follow the prompts.

3

Install Service Mode (Recommended)

After launching, go to "Settings → System Settings → Service Mode" and click "Install" (requires admin rights). This unlocks TUN global proxy features.

Service Mode is an official feature. Click "Yes" to grant admin rights; it is safe and secure.
4

Import Subscription

Click "Subscriptions" on the left → "+" button → paste URL → click "Import". Your node list will appear shortly.

5

Select Node & Enable Proxy

Switch to the "Proxies" page, click "⚡ Speed Test", and select a low-latency node. Finally, toggle "System Proxy" in the top right.

Recommended Windows Clients
Clash Verge Rev
⭐ Recommended Actively Maintained

Built with Rust + Tauri for a beautiful UI and fast startup. Features Mihomo core with full support for TUN and Service Mode.

Windows 10 / 11 x64 / ARM64 Mihomo Core Built-in
Download for Windows x64 / ARM64 Installers
GitHub Repository
Client Tutorials

Choose the client you use to view its download, installation, subscription import, node selection, proxy activation, and connection verification guide.

Subscription Setup

How to Add Subscriptions in Clash

A Subscription URL is an online config link from your proxy provider. Clash uses it to automatically fetch and update all available nodes.

1

Get Subscription URL

Log in to your provider's dashboard, find "Clash Subscription", and copy the full URL starting with https://.

2

Open Config/Subscription Page

Locate "Configs" (Clash Verge Rev) or "Subscriptions" (FlClash) in the sidebar.

3

Add New Subscription

Click "+" or "New" in the top right, paste the copied URL, and add a recognizable name.

4

Click Import & Wait for Update

Click "Import" or "Save". Clash will fetch and download the node configuration. Wait for the list to populate.

5

Select Config & Speed Test

Switch to the new config, go to "Proxies", click "Speed Test", select a low-latency node, and enable system proxy.

Privacy Note: Your subscription URL contains account info. Do not share it with others.
Regular Updates: Providers may change node addresses. Click "Update" regularly to prevent nodes from going offline.
Auto-Update: Clash Verge Rev supports auto-update intervals (e.g., 24 hours) in subscription settings.
Import Failed? Ensure the URL is complete and starts with https://. Try enabling an existing proxy before importing.
Configuration

Clash Config Deep Dive
YAML Format Guide

Clash uses YAML files. Understanding core fields helps you customize proxy behavior, from ports to split rules.

mixed-port

Mixed Proxy Port

Listens for both HTTP and SOCKS5. Default is 7890; can be changed in settings to avoid conflicts.

proxies

Node List

Defines all proxy nodes (SS, VMess, Trojan, VLESS, Hysteria2, TUIC, etc.). Automatically populated via subscription.

proxy-groups

Proxy Groups

Groups multiple nodes for strategies like url-test (auto-select), fallback, or load-balance.

rules

Rule-based Splitting

Directs traffic based on Domain, IP, or GeoIP. The core of "Direct for Local, Proxy for Global."

dns

DNS Configuration

Configures local and international DNS groups to prevent pollution and ensure accurate resolution. Essential for TUN mode.

config.yaml
# Clash / Mihomo configuration example mixed-port: 7890 allow-lan: false mode: rule log-level: info dns: enable: true nameserver: - 223.5.5.5 # Aliyun DNS - 8.8.8.8 # Google DNS proxies: - name: HK-01 type: trojan server: example.com port: 443 password: your-password proxy-groups: - name: PROXY type: url-test # auto select proxies: [HK-01] url: http://www.gstatic.com/generate_204 interval: 300 rules: - GEOIP,CN,DIRECT # CN IP direct - DOMAIN-SUFFIX,google.com,PROXY - DOMAIN-SUFFIX,github.com,PROXY - MATCH,DIRECT # fallback
Advanced Config

Advanced Features Guide

Master these advanced features to maximize Clash efficiency and flexibility.

TUN Mode (Global Transparent Proxy)

System proxies only work for proxy-aware apps. TUN mode uses a virtual NIC to capture all system traffic, perfect for games and non-proxy apps.

  • Clash Verge Rev: Install Service Mode first, then enable in "Settings → TUN Mode."
  • FlClash (Android): VPN mode is global by default; no extra setup needed.
  • We recommend configuring DNS alongside TUN to prevent leaks and protect privacy.
Global Traffic Gaming Proxy Admin Rights Required

Proxy Group Strategies

Group nodes into different strategies for intelligent switching.

  • url-test (Auto-select): Periodically tests speed and switches to the fastest node.
  • fallback: Automatically switches to a backup node if the primary one fails.
  • load-balance: Distributes traffic across multiple nodes to increase total bandwidth.
  • select: Manually specify a node in the proxy panel.
Auto Speed Test High Availability

Rule-based Splitting (Direct for Local, Proxy for Global)

Precisely control traffic flow via the rule engine, enabling direct connections for local sites and proxies for international services to balance speed and privacy.

  • DOMAIN-SUFFIX: Matches domain suffixes, e.g., .google.com.
  • IP-CIDR: Matches IP ranges, used for local IP direct rules.
  • GEOIP,CN,DIRECT: Automatically connects Chinese IPs directly while others use the proxy.
  • RULE-SET: References community-maintained rulesets (e.g., ACL4SSR).
Direct Connection Precise Splitting

Rule Provider (Online Rulesets)

Reference externally hosted ruleset files via rule-providers to avoid manual maintenance. One config for a constantly updated rule list.

  • Supports YAML/text rule files with customizable auto-update intervals.
  • Recommended community rulesets: Loyalsoldier/clash-rules, ACL4SSR.
  • Reference multiple rulesets simultaneously and match them in priority order.
Auto-Update Community Rules

DNS Anti-Pollution Config

Proper DNS configuration prevents pollution and leaks, ensuring accurate resolution—crucial for TUN mode.

  • Use local DNS (e.g., 223.5.5.5, 119.29.29.29) for domestic domains.
  • Use encrypted DNS (e.g., 8.8.8.8, 1.1.1.1) for international domains.
  • Enable fake-ip mode to accelerate DNS response times.
  • Use with nameserver-policy for rule-based grouped resolution.
Anti-Pollution Encrypted DNS

External Controller & Monitoring

Clash features a built-in RESTful API for real-time traffic monitoring, node switching, and connection management via Web dashboards.

  • Default controller port is 9090, configurable via external-controller.
  • Supports third-party Web dashboards like Yacd and MetaCubeX.
  • Remotely manage Clash cores deployed on routers or servers.
  • View real-time rule matching for every connection, perfect for debugging.
Web Dashboard API Control
FAQ

Clash FAQ & Troubleshooting

A curated list of common installation, configuration, and connection issues with their solutions.

Why can't I access the internet after installing Clash?

Please follow these troubleshooting steps:

  1. Confirm that "System Proxy" is toggled ON in the client.
  2. Check if node latency is normal (run a speed test in the proxy panel).
  3. Chrome users can try the SwitchyOmega extension, setting the HTTP proxy manually to 127.0.0.1:7890.
  4. If system proxy doesn't work, try enabling TUN Mode for global traffic.
Subscription import failed or zero nodes found?

Common causes and solutions:

  • Subscription expired: log in to your provider's dashboard for a new link.
  • Network error: enable an existing proxy or VPN before importing.
  • Incomplete URL: ensure it starts with https:// and has no extra spaces.
  • Incompatible format: ask your provider if they offer Clash-compatible subscriptions.
What is "Service Mode" in Clash Verge Rev? Is it safe?

Service Mode is a system component for Clash Verge Rev that enables TUN Global Transparent Proxy without requiring admin rights every time. It's an official feature and completely safe.

You'll need to enter your admin password during installation, similar to installing a driver. You can skip this if you only need the basic system proxy mode.

How to enable TUN Mode for games and desktop apps?

Clash Verge Rev (Windows / macOS):

  1. First, install Service Mode in "Settings → System Settings" (requires admin rights).
  2. Once installed, find "TUN Mode" in "Settings" and toggle it ON.
  3. All system traffic, including games and non-proxy apps, will now go through Clash.

FlClash (Android): VPN mode is global by default; no additional setup is required.

How to fix "Port 7890 is already in use"?

This usually happens because a previous Clash process didn't exit correctly or another app is using the port. Solutions:

  • Fully exit Clash and restart.
  • Go to "Settings → Ports" and change the Mixed Port to an unused one (e.g., 7891).
  • Remember to update your browser extension (like SwitchyOmega) with the new port number.
How to set Clash to autostart on boot?

Clash Verge Rev (Windows): Toggle "Start on Boot" in "Settings → System Settings".

Clash Verge Rev (macOS): Toggle "Start on Boot" in "Settings → System Settings" to add it to Login Items.

FlClash (Android): Enable "Autostart" in system settings and disable battery optimization for FlClash to prevent it from being killed in the background.

Troubleshooting high latency or frequent disconnections?
  • Run "Speed Test" and switch to a node with latency below 200ms.
  • Update your subscription—your provider may have updated node addresses.
  • Congestion during peak hours (8-11 PM) is normal; try switching regions.
  • Switch protocols—Hysteria2 and TUIC perform better in high packet-loss environments.
  • Check your local network: ensure stable Wi-Fi or test with a wired connection.
Difference between a Config File and a Subscription Link?

A Subscription Link is a remote URL hosted by your provider. Clash fetches and updates it automatically—ideal for most users.

A Local Config is a YAML file on your machine that you can manually edit for custom rules and strategies—best for advanced users.

Both use the same YAML format; a subscription link is essentially a remote YAML config.

Are there any free Clash clients for iOS?

There are currently no fully free, feature-complete Clash-compatible clients on iOS. Development and maintenance costs mean the top choices are paid:

  • Stash: ¥30 (CN Store), feature-rich and Clash-compatible.
  • Shadowrocket: $2.99 (US Store), the most popular proxy tool.

A one-time purchase provides lifetime access, making them great value.

Android security warning when installing FlClash APK?

This is a standard Android warning for apps outside Google Play, not a real security threat. Steps:

  1. Click "Install Anyway" if Google Play Protect warns you.
  2. Or enable "Install unknown apps" for your file manager/browser in system settings.

FlClash is fully open-source on GitHub; the code is public and contains no malicious content.

Haven't downloaded Clash yet?

Free and open-source. Supports Windows, macOS, Android, iOS, Linux, and core engine deployment. Download and start now.

Download Client Now