Set up your devices.
A practical guide to importing your subscription and connecting with a compatible client.
Local development mode. Import and account workflows work locally. Seeded hosts use example.invalid and cannot carry VPN traffic. Follow network-owner rules and use only networks and services you are authorized to access.
iOS
Install your client
Install a sing-box compatible client from its official distribution. On Apple platforms, availability can vary by region; follow the official sing-box Apple client documentation.
Import your subscription
Create a remote profile, paste your subscription URL and update the profile. If the client supports QR import, scan your subscription QR.
Connect with permission
The exported profile uses a loopback proxy. Full-device VPN mode requires a client-managed TUN profile and permission to add a VPN configuration.
Android
Install your client
Use the official sing-box for Android distribution linked from the sing-box documentation. Review the requested VPN permission.
Import your subscription
Add a remote profile using your subscription URL. Update it before connecting; a compatible QR importer can use the same URL.
Connect with permission
Select your imported profile. For full-device routing, use the client’s TUN profile controls and approve Android’s VPN permission.
Windows
Install your client
Install a compatible sing-box desktop client or the official sing-box command-line binary from its release page.
Import your subscription
Save the subscription response as a JSON configuration or add the URL as a remote profile in a compatible client.
Connect with permission
The generated profile exposes a local HTTP/SOCKS proxy at 127.0.0.1:2080. Point an authorized application at that proxy. Full-device routing needs a reviewed TUN configuration.
macOS
Install your client
Use an official Apple-platform sing-box client when available, or the official command-line binary. Follow the upstream installation guide.
Import your subscription
Add a remote profile and paste your subscription URL, or download the JSON profile and import it locally.
Connect with permission
Use the local proxy at 127.0.0.1:2080 with an authorized application. A client-managed TUN profile is required for full-device VPN mode.
A quick troubleshooting checklist
- Check that your subscription is active, has remaining traffic, and has not expired.
- Register an active device within your allowance. Revoked device URLs return an error.
- After regenerating a token, update every client with the new URL. Old URLs no longer work.
- Check your selected node’s availability. Development endpoints intentionally do not connect.
- Never disable TLS certificate validation to fix a connection. Verify the configured hostname and certificate with the administrator.
- Use only authorized network access. A VPN does not replace required authentication or permission.
Official references: sing-box clients and standard VLESS configuration.