What You Need Before Starting
Clash Verge is a desktop client that can use compatible proxy subscriptions to load server profiles and route network traffic. On Windows 11, the basic workflow is straightforward: install the client, add a subscription URL, update the profile, select an available server, and choose how Windows traffic should use the connection. The exact wording and placement of controls can differ between Clash Verge releases, so use the labels in your installed version rather than relying on screenshots from an older build.
Before installing anything, make sure you have access to your account and can obtain a subscription URL from its dashboard. A subscription URL is configuration information for a compatible client; it is not an installer and is not usually intended to be opened as an ordinary webpage. If you use VPNGD, sign in to your account to find the available subscription details and client downloads. The supported format depends on the client and the subscription provided, so confirm compatibility if an import fails.
It also helps to know what you want to test. Choose one browser or application and one destination that you normally use. A clear test makes it easier to tell whether a problem comes from the client, the selected route, the local Wi-Fi, or the destination service. If you are using a work or school computer, check its network and software policies before changing proxy or adapter settings.
6
Setup stages in this guide
1
Subscription URL to protect
2
Common routing modes to understand
The numbers above describe the structure of this guide and the two common routing choices explained below; they are not performance measurements. A client showing “connected” only confirms that one part of the setup is active. You will still need to verify that the application you care about is actually using the intended route.
Install Clash Verge on Windows 11
Get the Windows installer from a source you trust, such as the project’s recognized distribution channel or a provider’s account dashboard when the provider offers the client. Avoid download mirrors, repackaged installers, and links sent by unknown accounts. Check that the file is meant for Windows and that its publisher information is consistent with the source you chose. If Windows displays a security prompt, read it before continuing instead of approving it automatically.
Run the installer and follow its prompts. If Windows asks for permission to make changes, confirm only when you are confident that you launched the expected installer. After installation, open Clash Verge from the Start menu. If Windows Security asks whether the application may communicate on a network, do not disable the firewall. Review the prompt and allow only what is appropriate for your network and the application’s function; public networks generally deserve more caution than a trusted private network.
Close other proxy or VPN clients before your first test. Two applications can compete to control the system proxy, DNS settings, or a virtual network adapter. That can make one client appear connected while another application continues to route traffic differently. You do not necessarily need to uninstall another tool, but avoid enabling both at the same time until you understand how they interact.
Once Clash Verge opens, take a moment to find its main areas: subscription or profile management, server selection, connection controls, and settings for system proxy or TUN mode. Names can vary by version. Do not change every option at once. Start with the default configuration and add only the subscription information required to load your profiles.
Add and Update a Subscription
Copy the subscription URL from your account dashboard. Treat it like a private access credential: anyone who obtains it may be able to retrieve the associated configuration. Do not post it in a public chat, include it in a screenshot, or paste it into a support request unless the provider explicitly asks for it through a secure channel. If you think the link has been exposed, check the account dashboard or contact the provider about replacing or refreshing it.
In Clash Verge, open the profile or subscription management area and choose the option for adding a remote profile or subscription. Paste the URL into the URL field, give the profile a recognizable name if the client offers that option, and save it. Then use the client’s update or refresh control to retrieve the profile. A successful update should result in a profile that can be selected in the application.
If the client reports an error, first check for simple input problems: a missing character, an extra space at the beginning or end, or a URL copied from the wrong account page. Copy it again from the dashboard instead of manually editing it. Confirm that the computer can open other websites and that the subscription has not been revoked or replaced. Do not assume that every link format is accepted by every client; a provider may offer different formats for different applications.
A profile update and a connection are separate steps. Updating retrieves configuration data; it does not necessarily select a server or route traffic. After a successful refresh, open the profile or server list and confirm that entries appear. If the profile is empty, try a single refresh after checking the URL and network. Repeatedly refreshing an unchanged, invalid link is unlikely to help.
| What you see | What it usually means | What to check next |
|---|---|---|
| The profile updates and server entries appear | The client can retrieve and parse the supplied configuration | Select a server and choose a routing mode for your test |
| The update fails immediately | The URL, network, format, or account access may be the issue | Copy the URL again, test ordinary connectivity, and confirm format support |
| The update succeeds but no entries appear | The profile may be empty, incompatible, or not the one intended | Check the account dashboard and client compatibility before changing other settings |
| Entries appear but traffic does not work | The profile is loaded, but selection or routing may not be active | Choose a server, confirm the mode, and test one application |
Choose a Server and Routing Mode
After importing the profile, select an available server or a group that chooses among servers, if your profile provides one. The list and group names come from the subscription, so their exact contents can change. Start with a suitable location for the service you want to reach, then test that service directly. A server name alone does not guarantee that a particular website or application will work; availability can depend on the destination, account region, local network, and current route conditions.
Clash Verge commonly offers ways to route traffic through the Windows system proxy or through TUN mode. System proxy mode tells applications that respect Windows proxy settings to use the configured proxy. It can be a practical starting point for a browser test, but some desktop applications, games, command-line tools, or background services may ignore those settings and connect directly.
TUN mode uses a virtual network interface to capture a broader range of device traffic. Depending on the client version and setup, it may require elevated permission or installation of a supporting service. Because it changes how traffic is captured, it can affect more applications than system proxy mode. Use it only when you need broader routing and understand the permission prompt. If it fails to start, check the client’s own status and Windows permissions rather than turning off security software.
Routing rules determine which traffic uses a proxy and which connects directly. A rule-based configuration may send different destinations through different routes, while a global mode can send a broader set of traffic through the selected server. A direct mode may bypass the proxy. The mode names and rule behavior depend on the profile and client version, so verify the current selection in the interface before diagnosing a connection.
When comparing connection options or learning what a provider offers, consult the Best VPN for China overview alongside the client’s own settings. Keep the test focused: use one server, one routing mode, and one target application at a time. Changing the server, mode, DNS behavior, and browser settings simultaneously makes it difficult to identify which change mattered.
- ✅ Start with system proxy mode for an application that follows Windows proxy settings.
- ✅ Consider TUN mode when applications that ignore the system proxy need routing.
- ✅ Check the active server and mode before each test.
- ❌ Do not run multiple proxy clients at the same time during initial troubleshooting.
- ❌ Do not assume that a connected indicator means every application uses the proxy.
Verify the Connection
Use a simple, repeatable test. First confirm that Clash Verge shows the selected profile and server and that its connection control is active. Next, open a browser that is expected to follow the system proxy, visit a familiar site, and check whether it loads normally. If the purpose of the setup is to use a particular service, test that service as well; a generic connectivity check cannot prove that every destination follows the same route.
If the browser works but another application does not, that difference is useful evidence. The second application may ignore the system proxy, use its own proxy configuration, apply separate DNS settings, or be blocked by a local network policy. Try the same application with TUN mode only if you need to route its traffic and are comfortable with the broader effect. Return to the previous mode if the change causes unexpected behavior.
Also compare a direct connection with the proxied test when practical. If both fail, investigate the Wi-Fi, internet connection, destination service, or account before changing the subscription. If direct access works but the proxied test fails, review the selected server, rules, and profile update. If only one destination fails, consider that the destination may have its own regional restrictions, service outage, or security checks.
For a clearer result, write down the mode, selected server or group, application, and observed behavior. You do not need to record private subscription data. This small note makes it easier to reproduce the issue and to describe it accurately if you contact support. Avoid sharing account passwords, full subscription URLs, or screenshots that expose them.
Troubleshoot Common Setup Problems
The subscription will not import
Check the copied URL first, then confirm that the computer has ordinary internet access. Make sure you used the subscription URL rather than a web address for the account dashboard, a client download, or a manual configuration file. Confirm that the link is still available in your account and that the client accepts its format. If the provider supplies client-specific instructions, follow those before trying alternative formats or editing configuration text.
The profile loads, but no traffic works
Confirm that a server is selected and that the connection control is active. Then check whether the current mode is direct, rule-based, or global. In rule-based mode, traffic for a particular destination may intentionally go direct or may not match the rules you expect. Try one known browser test and one target service, then switch only one setting at a time. If the client displays an error, note its wording and consult the client or provider’s support instructions.
Some applications work and others do not
This often points to different proxy behavior rather than a failed subscription. Browsers commonly honor the Windows system proxy, but not every application does. Check whether the affected application has its own proxy option, uses a separate network service, or is restricted by a workplace or school policy. TUN mode may capture more traffic, but it is not a reason to ignore managed-device rules or security warnings.
Windows network settings seem stuck
If applications continue using an unexpected route after you disconnect, inspect Clash Verge’s connection and system proxy controls. A second proxy client may have changed the same settings. Close the other client, return the controls to their intended state, and restart the affected application. If you recently enabled TUN mode, disable it through the client before making manual adapter changes. Avoid deleting network adapters or resetting all network settings as an early troubleshooting step.
The connection is intermittent
Check whether the issue occurs on another trusted network or only on the current Wi-Fi. A weak wireless signal, captive portal, network congestion, or local filtering can affect the result independently of the subscription. Refreshing the profile may help if configuration has changed, but it will not repair an unstable local connection. If only one server or destination fails, test another available option from the profile and report the specific pattern without exposing the subscription URL.
Keep the Setup Safe and Maintainable
Once the connection works, keep the setup simple. Use a clear profile name, remember which routing mode you selected, and refresh the profile when the provider’s instructions or account dashboard indicate that an update is needed. A refresh retrieves current configuration; it does not mean that every server is automatically selected or that all applications are routed through it.
Protect the subscription URL as you would other account-related information. Do not store it in a public document or paste it into an online decoder or configuration converter. If you need help, describe the client version, Windows behavior, the step that failed, and the error message. Redact subscription links, usernames, and other sensitive details from screenshots before sending them through an approved support channel.
Finally, remember that a proxy client changes network routing; it does not replace endpoint security, account protections, or the terms of the services you use. Keep Windows and the client updated through trusted channels, leave the firewall enabled, and disconnect or restore your preferred settings when you no longer need the proxy. If the device is managed by an employer or school, follow its IT guidance before enabling system-wide routing.