How can we help you today?
Browse by category or use search to find quick answers.
Installation & Launch
5 QuestionsWhat if a runtime component is missing after installation?
This is usually due to a missing Microsoft WebView2 Runtime (not always pre-installed on Windows 10).
- Visit the official Microsoft website, search for and download the "Evergreen Bootstrapper" for Microsoft WebView2 Runtime.
- Restart Clash Verge Rev after the installation is complete.
How to fix the "App is damaged and can't be opened" error on macOS?
This is a macOS Gatekeeper restriction for non-notarized apps. Run the following command in Terminal, then reopen the app:
If the prompt persists, go to System Settings → Privacy & Security, find the alert, and click "Open Anyway".
Is it safe if Windows Defender flags the installer as a threat?
This is a False Positive. Clash clients are network proxy programs, and their behavior (modifying system network settings) can trigger heuristic rules in some antivirus software, leading to false alerts.
- Simply add the app to the "Exclusions" list in Windows Security to use it normally.
- If you're still concerned, you can test it in a virtual machine first or only enable the proxy when actually needed.
Cannot find the icon in the app list or desktop after installation
Clash Verge Rev runs minimized to the system tray by default:
- Windows: Check the "Hidden Icons" area in the bottom right of the taskbar (click the ^ arrow to expand).
- macOS: Check the menu bar at the top right of the screen for a cat or network icon.
Right-click the icon to open the main window or access all features.
How to cleanly uninstall the Clash client and remove residual files?
Uninstalling via the Control Panel alone leaves configuration files behind. Full uninstallation steps:
- Disable System Proxy in the client first and quit the app.
- Windows: Uninstall via "Control Panel → Uninstall a program", then manually delete the
%APPDATA%\clash-vergedirectory. - macOS: Drag the app to the Trash, then delete
~/Library/Application Support/clash-verge.
Subscriptions & Config
6 QuestionsNode list is empty after importing the subscription link
Possible reasons:
- The subscription link has expired or was reset by the provider. Please get the latest link from your dashboard.
- The format is not Clash-compatible (e.g., V2Ray / Base64 format). You must use a dedicated Clash subscription link provided by your service provider.
- The link was truncated when pasting. Ensure the full URL is copied.
Network error or timeout when clicking "Update Subscription"
The client needs to access the provider's server to update the subscription. If your current network cannot reach it, a timeout will occur:
- Verify that your internet connection is working (try opening a website in your browser).
- Locate the subscription on the "Profiles" page and select "Update via System Proxy" or "Update via Proxy".
- If the subscription URL is unreachable from your network, contact your provider for an alternative link.
How to set the subscription auto-update interval?
On the "Profiles" page of Clash Verge Rev, edit the corresponding subscription card:
- Find the "Auto Update" or "Update Interval" option.
- A 24-hour setting is recommended to keep nodes updated without frequent requests.
- If nodes change frequently, you can shorten it to 6–12 hours.
Config file parsing failed with a YAML syntax error
YAML is extremely sensitive to indentation. Common errors include:
- Using Tabs for indentation (YAML only allows spaces).
- Missing a space after a colon, e.g.,
key:valueshould bekey: value. - String values containing special characters (
: { } [ ] , & * # ? | - < > = ! % @ \) are not wrapped in quotes.
How to quickly switch between multiple subscriptions?
On the "Profiles" page, click the "Activate" button on the right side of any subscription card (or simply click the card itself). The active card will be highlighted.
After switching, we recommend re-selecting a node on the "Proxies" page, as node lists and proxy group names may vary between subscriptions.
Where can I find and manually edit the configuration file?
By default, Clash configuration files are saved in the following paths:
- Windows:
%APPDATA%\clash-verge\profiles\ - macOS / Linux:
~/.config/clash-verge/profiles/
Alternatively, in the client's "Profiles" page, right-click the corresponding subscription and select "Edit File" to modify it directly. Reload the subscription in the client after editing for changes to take effect.
Network Connectivity
5 QuestionsBrowser displays "Unable to connect to proxy server" after enabling System Proxy
This indicates a system proxy port conflict or that the Clash core is not running:
- Check if "Running" (green status) is displayed in the top right corner of the client.
- Go to "Settings" to confirm that the mixed port (default 7890) is not occupied by another program.
- Try disabling and then re-enabling "System Proxy" in the client.
- Restart the client and try again.
Some websites are still inaccessible despite being proxied
The node itself may have restrictions on that site, or the target site's IP might be blocked by the node's exit:
- Manually switch nodes on the "Proxies" page and try an exit in a different region.
- Check if the domain is explicitly set to
DIRECTin the configuration file rules. - Check the actual exit strategy for that website in the "Connections" panel to see if it matches expectations.
Game latency has not improved or is even higher after enabling the proxy
Game traffic requires special handling:
- System Proxy is usually ineffective for game clients; you must enable TUN Mode.
- Game servers are often located locally, so proxying them may increase latency. It's recommended to set game service domains to
DIRECTin your rules. - To accelerate international games (e.g., Steam, Xbox), choose a node in the same region as the game server for improved latency.
Overall network speed has significantly decreased after enabling the proxy
Troubleshooting steps:
- Check Proxy Mode: "Global Mode" routes all traffic through the proxy, which can slow down sites in your region or on your LAN. Switch to "Rule Mode".
- Switch Nodes: The current node may be overloaded. Run a latency test on the "Proxies" page and choose the node with the lowest latency.
- Check Node Protocol: Some encryption protocols (e.g., VMess + WebSocket + TLS) have higher overhead. Try VLESS or Trojan protocols.
Concerned about DNS leaks? Here's how to confirm and fix them
A DNS leak occurs when DNS queries are not routed through the proxy, exposing the domains you are visiting.
Detection Method: Visit dnsleaktest.com and run a standard test. If your ISP's DNS servers appear instead of your proxy's DNS, a leak exists.
Fix Method: Enable the following settings in the dns section of your configuration file:
TUN Mode
4 QuestionsComplete loss of internet access after enabling TUN Mode
TUN Mode takes over all traffic; an issue with the core or node can result in a total connection loss. Emergency recovery steps:
- Disable TUN Mode in the client (or quit the client; the system will restore original network settings).
- Ensure the selected node passes the latency test before re-enabling.
- Verify that the DNS settings in the config file are correct (
fake-ipmode is recommended).
192.168.1.1) as DIRECT in your rules, or use a trusted resolver like 1.1.1.1, to prevent DNS resolution failures from taking the whole connection down.
Windows constantly prompts for UAC permission when enabling TUN Mode
TUN Mode requires creating a virtual network card at the system driver level, which necessitates administrator privileges. Prompting at each launch is normal.
To avoid manual confirmation every time, you can set Clash Verge Rev to Run as Administrator on Startup (by creating a startup task with "Highest Privileges" in Task Scheduler).
macOS prompts to install the "Helper" tool
This is a normal process. The Helper is a system-level auxiliary process required for Clash to create a TUN virtual network card on macOS:
- Click the "Install" button in the prompt.
- Enter your macOS login password in the system password dialog.
- Once installed, the Helper runs in the background. You won't be prompted again when enabling TUN Mode.
The Helper is only used for managing the TUN network card and does not read or upload your traffic data.
Will TUN Mode and System Proxy conflict if enabled together?
Since TUN Mode already handles all traffic (including apps that follow the system proxy), enabling both results in redundant proxying, which may cause some app traffic to be proxied twice, increasing latency.
Recommended Practice: When enabling TUN Mode, disable System Proxy to let TUN handle all traffic uniformly.
Platform Specific
5 QuestionsWhy can't I find Stash or Shadowrocket in my App Store?
These iOS proxy apps are available in many regions' App Stores, but not all. If you can't find an app by searching, it may not be listed in your regional store.
You can try the direct App Store links on our Download Page. If the app is unavailable in your region, you may need to use an Apple ID from a region where it is listed — check the app's official page for supported regions.
Android APK installation prompt: "Cannot install apps from unknown sources"
By default, Android prohibits installing APKs from outside the App Store. You must manually authorize it:
- Android 8+: Go to "Settings → Apps → Special app access → Install unknown apps", find your file manager or browser, and enable the permission.
- Older versions: Go to "Settings → Security" and enable the "Unknown sources" option.
It is recommended to disable this permission after installation for security purposes.
Android app prompts for VPN permission after launch
This is a normal process; Android requires all VPN-type apps to obtain explicit user authorization during their first run:
- Tap the system VPN permission request and select "OK" or "Allow".
- A VPN icon will appear in the status bar, indicating the proxy is active.
If this permission is not granted, the app will be unable to intercept any network traffic.
How to set up auto-start on Linux?
Using systemd (on most modern Linux distributions):
What are the differences between using it on Windows 10 and Windows 11?
Functionally they are nearly identical; the main difference lies in runtime dependencies:
- Windows 11 comes pre-installed with WebView2 Runtime, making it ready to use out of the box.
- Windows 10 requires manual installation of Microsoft WebView2 Runtime.
- TUN Mode requires administrator privileges on both systems.
- Windows 7 / 8 is not supported.
Privacy & Security
3 QuestionsDoes the Clash client log or upload my traffic?
The Clash core and mainstream clients (Clash Verge Rev, FlClash, etc.) are open-source projects, and their code is available for anyone to audit. The client itself does not upload your traffic or behavioral data to third parties.
Your traffic only passes through the proxy nodes you configure (i.e., your service provider's servers). The provider's log policy is determined by them and is independent of the Clash client.
What should I do if my subscription link is leaked?
A subscription link is equivalent to account credentials; if leaked, others can use your traffic quota. You should immediately:
- Log in to your provider's dashboard and find the "Reset Subscription Link" or "Regenerate Subscription" function.
- Replace the old subscription in your client with the new link.
- Check your account's traffic usage history to confirm any abnormal consumption.
Why does enabling TUN Mode require administrator / root privileges?
TUN Mode takes over all traffic by creating a virtual network interface (TUN/TAP device) at the OS kernel level. This is a low-level system operation, and all operating systems (Windows, macOS, Linux) require such actions to be performed by privileged processes.
This is a security design of the operating system, not a requirement unique to Clash. Other VPN tools like WireGuard and OpenVPN also require the same privileges.