Free Clash client configuration tutorials,
5-minute cross-platform guide.

Comprehensive guide for official free Clash clients on Windows (Clash Verge Rev), macOS (ClashX Meta), Android, iOS, and Linux. Step-by-step instructions from download to enabling proxy, easy for absolute beginners.

3 Steps to Complete Free Clash Setup

Regardless of the platform, the basic Clash configuration process is similar, simple, and efficient.

01

Free Download Official Clash Client

Visit the download page and choose the official free Clash client for your OS. We recommend Clash Verge Rev for Win/Mac/Linux, and FlClash or ClashMeta for Android.

02

Import Subscription Link to Clash

Paste the subscription URL provided by your proxy provider into the "Subscription/Profile" page of the Clash client and click update to automatically fetch the node list.

03

Enable Clash System Proxy

Enable "System Proxy" on the main interface and select "Rule" mode for smart routing: traffic matching your rules connects directly, everything else goes via proxy for a seamless experience.

Installation and Configuration for Each Platform

View detailed step-by-step instructions for official free Clash clients on Windows, macOS, Android, iOS, and Linux.

1

Download and Install Clash Verge Rev

Visit the download page and get the Clash Verge Rev x64 Installer (.exe) in the Windows section. For Snapdragon ARM laptops, choose the ARM64 version.

Double-click the installer and follow the prompts to complete the installation. Shortcuts will appear on your desktop and in the Start menu.

Not sure about your architecture? Most Windows PCs should choose x64.
2

Import Subscription Link

Open Clash Verge Rev, click "Subscription" on the left, then click the "+" button in the top right. Paste your subscription URL and click "Save".

Once the subscription card appears, click the refresh icon (↻) to pull nodes, then click the card to activate it.

Subscription links are provided by your proxy provider and usually start with https://.
3

Enable System Proxy

Click "Settings" on the left and toggle "System Proxy" to ON. We recommend "Rule" mode so domestic sites connect directly while overseas sites automatically use the proxy for the best experience.

A Clash icon will appear in the system tray; it turns green when the proxy is active.

To proxy all traffic (Global), switch the mode to "Global".
4

Optional: Enable TUN Mode (Full Traffic Interception)

System Proxy only handles apps that support proxies. To intercept all network traffic (including UWP apps and games), enable "Settings → TUN Mode".

Enabling TUN for the first time requires installing a virtual NIC driver. Click "Yes" when Clash Verge requests UAC permissions.

TUN mode requires admin privileges. If you experience network issues after enabling it, restart the client or disable TUN.
1

Download and Install Clash Verge Rev

Visit the download page and choose based on your Mac chip: M-series users choose "Apple Silicon (.dmg)", Intel users choose "Intel x86_64 (.dmg)".

Double-click the .dmg file and drag Clash Verge into the "Applications" folder, then open it from Launchpad or Spotlight.

If prompted "Developer cannot be verified", go to "System Settings → Privacy & Security", find the prompt, and click "Open Anyway". Or run in Terminal: sudo xattr -rd com.apple.quarantine /Applications/Clash\ Verge.app
2

Import Subscription Link

Open Clash Verge Rev, click "Subscription""+", paste the link, save, and refresh to fetch nodes. Click the card to activate.

The operation is identical to the Windows version, making it easy to switch platforms.
3

Enable System Proxy

Go to "Settings → System Proxy" and toggle it ON, selecting "Rule" mode. macOS will request permission for Clash Verge to control system settings; click "OK".

Once authorized, a Clash icon will appear in the menu bar, and the proxy will be active for Safari, Chrome, and other browsers.

4

Optional: Enable TUN Mode

To intercept Terminal, games, and other apps that don't support system proxy, enable it in "Settings → TUN Mode". Install the system extension as prompted in "Privacy & Security".

1

Download and Install APK

Select the Android section on the download page. We recommend FlClash for beginners and ClashMeta for Android for advanced users (Universal APK works for most devices).

Once downloaded, find the .apk file in your file manager to install. If prompted "Installation of unknown apps not allowed", enable it in "Settings → Security → Install unknown apps" for your file manager.

It's recommended to disable the "Install unknown apps" permission after installation for security.
2

Import Subscription Link

Open the app, go to "Profiles", click "+", choose "Add from URL", paste the link, and click "Save & Update".

Once updated, click the select button next to the profile to activate it.

3

Start VPN Connection

Return to the main screen and click "Start" or the power button in the center. Click "Allow" when the system requests VPN connection permission.

Once the status shows "Running", a VPN key icon will appear in the notification bar, indicating the proxy is active.

ClashMeta for Android supports "Per-app proxy", allowing you to choose which apps use the proxy in "Access Control".

iOS Apps require purchase from the App Store

The following steps use Shadowrocket as an example. Stash and Quantumult X have similar configuration processes.

1

Purchase and Install from App Store

Search for "Shadowrocket" (or Stash / Quantumult X) in the App Store to purchase and install. Prices are approximately $2.99 (Shadowrocket), $3.99 (Stash), and $7.99 (Quantumult X).

If the app isn't available in your region's App Store, check that it's listed in a supported region to find it.
2

Add Subscription Link (Shadowrocket Example)

Open Shadowrocket, click the "+" in the top right, choose "Subscribe" as the type, paste your URL, and click "Done".

Once updated, the node list will be populated. Select a node on the home screen to connect.

For Stash and Quantumult X: Go to the "Config" or "Nodes" page and choose "Import from URL" to paste your link.
3

Start VPN Connection

On the Shadowrocket home screen, toggle the "Not Connected" switch at the top (turns green when connected). Click "Allow" and verify with Face ID or password for the system VPN prompt.

A "VPN" icon in the top left status bar indicates the proxy is active.

Linux supports two methods: Graphical Interface (GUI) for desktop users and Command Line (CLI) for servers or headless environments.

1

Method 1: Install Clash Verge Rev (GUI)

Download the corresponding format: .deb for Ubuntu/Debian and .rpm for Fedora/openSUSE. Supports amd64 and arm64 architectures.

# Install on Ubuntu / Debian
sudo dpkg -i clash-verge_2.4.7_amd64.deb
# Install on Fedora / openSUSE
sudo rpm -i clash-verge-2.4.7-1.x86_64.rpm

Once installed, search for "Clash Verge" in your app menu. Setup is identical to Windows and macOS.

2

Method 2: Mihomo CLI (Command Line)

Ideal for headless environments like servers and home routers, NAS devices, or edge gateways. Download the .gz file for your architecture and run:

# Extract and set permissions (amd64 example)
gunzip mihomo-linux-amd64.gz && chmod +x mihomo-linux-amd64
sudo mv mihomo-linux-amd64 /usr/local/bin/mihomo
3

Prepare Config and Start (CLI Method)

Save your subscription configuration file (YAML format) to ~/.config/mihomo/config.yaml, then run:

mihomo -d ~/.config/mihomo

Mihomo opens a Web Dashboard interface at 127.0.0.1:9090 by default, which can be managed visually through panels like Yacd.

You can use a systemd service to set Mihomo as an auto-start service at boot.

Explanation of Clash Proxy Modes

The official Clash provides three proxy modes (Rule / Global / Direct) that you can switch between based on your needs.

Recommended

Rule Mode

Automatically decides based on built-in rules: local traffic connects directly, other traffic uses the proxy, and ad domains are blocked. Balances speed and access—Recommended for daily use.

Full Traffic

Global Mode

Forces all traffic through proxy nodes. Ideal for accessing global content or when Rule mode fails to correctly identify certain sites. Speed depends on the proxy node.

Direct

Direct Mode

All traffic bypasses the proxy and connects directly. Used for temporarily disabling the proxy without exiting Clash, or for testing local network speed.

Clash FAQ

Common questions and solutions when using official free Clash clients.

Node list is empty after importing subscription. What to do?

Ensure your subscription link is complete and valid; you can test it by opening it in a browser to see if the config file downloads. If it's expired, request a new one from your provider. Also, ensure your network is working when updating subscriptions.

No internet after enabling system proxy. How to troubleshoot?

Follow these steps: 1. Ensure an active node is selected; 2. Switch to "Global" mode to test; 3. Check node status (test latency in the proxy list); ④ Restart the Clash client; ⑤ After closing Clash, check if system proxy settings were incorrectly modified and clear them manually if needed.

How to bypass proxy for a specific app?

In Rule mode, you can add DIRECT rules to the rules section of the config. For GUI clients like Clash Verge Rev, add domains or IP ranges to "Settings → Bypass Proxy". ClashMeta for Android supports per-app settings in "Access Control".

Can the client be set to auto-start at boot?

Yes. Clash Verge Rev has a toggle in "Settings → Auto-Start". ClashX Meta (macOS) has this in its menu. FlClash and ClashMeta for Android support starting with the system VPN. Linux CLI users can configure a systemd service for auto-start.

How to update subscription links? How often?

Click the refresh icon on the subscription page to update manually. Most clients support auto-update intervals (12 or 24 hours recommended). Since updating downloads the config file, once a day is usually sufficient.

Is Clash free? Do I need to pay?

All clients provided here (including Clash Verge Rev, FlClash, ClashMeta for Android, etc.) are completely free open-source software. You only need your own subscription link from a provider. iOS apps like Shadowrocket and Stash are third-party paid apps with fees collected by the App Store.