Clash FAQ

This is SmartScreen's standard block for open-source software without a Microsoft-signed certificate. Click "More info," then "Run anyway" to install normally — this is expected behavior and doesn't mean the software is risky.

Go to System Settings → Privacy & Security, find the prompt for this app, and click "Open Anyway." This is macOS's default policy for apps not signed through the App Store.

You'll need to allow your browser or file manager to "install unknown apps" in system settings. The exact location varies slightly by Android skin, but you're usually guided there automatically when installing the APK.

Check in this order: has the subscription expired or run out of data → is your system clock accurate → try re-testing with a different speed-test URL → restart the client to re-fetch the subscription. These four steps resolve the vast majority of cases.

This may be a line-quality issue with those specific nodes, or that protocol/transport being specifically restricted on your current network. Try switching to another working node and report the specific node details to your provider.

First check whether that site's connection is matching a "direct" or "proxy" rule — if it's matching direct, you'll need to add a dedicated rule in Rules to route it through the proxy.

Yes. Most clients let you save multiple subscriptions in the "Subscriptions/Profiles" list and switch which one is currently active. You can also merge configs to combine nodes from multiple subscriptions into a single proxy group for unified scheduling.

This is usually a DNS configuration issue: check whether dns.enable is set to true, and whether the fake-ip-range conflicts with your local network range. You can also try switching tun.stack from system to gvisor to rule out a network stack compatibility issue — see Advanced Configuration for details.

TUN mode needs to capture all traffic and run continuously in the background processing network packets, so it uses slightly more battery than system proxy mode. If you don't need to capture non-proxy-aware apps, we recommend using the system proxy on mobile instead.

You'll need to authorize the System Extension the client requests in System Settings → Privacy & Security first. After authorizing, restart the client for the TUN toggle to take effect.

A VPN typically takes over all your traffic at once; Clash is a rule-based routing tool that lets different sites/apps connect directly or through different proxy nodes individually — more flexible, but it takes some rule configuration knowledge. See the Glossary for details.

People often describe tools used to reach geo-restricted or censored content simply as “a proxy” or “a VPN.” Clash falls into that broad category, but it's a rule-based routing client rather than a blanket VPN that tunnels every connection indiscriminately. It doesn't provide nodes itself — you'll need to obtain a subscription link and import it into the config yourself; see the Installation Guide for the steps.

These are different stages of the same lineage: Clash was the original project (now discontinued), Clash.Meta was the community's enhanced fork built on top of it, and mihomo is the continuation of Clash.Meta after a rename — it includes everything Clash.Meta had and keeps adding new features.

Clash Manual (ClashManual) is an independent site that organizes tutorials and download resources — it is not the official Clash website. Clash is an open-source project whose copyright belongs to the original authors and community; we only curate and organize information.