This beginner’s guide walks through the process of accessing international websites. First, learn the difference between a service, a client app, and a subscription link. Then choose a plan, import your configuration, and connect to a route. Finally, check whether the app you want to use is taking the expected path. A “Connected” status is only the starting point.
VPN services, client apps, and subscription links
In everyday conversation, “VPN” is often used as a catch-all for tools that speed up or route network traffic. Strictly speaking, a VPN that creates a system-wide network tunnel works differently from a proxy that forwards connections by app or rule. Some proxy apps also request your device’s VPN permission to handle traffic. Seeing that permission prompt doesn’t mean the app uses a traditional VPN protocol.
The key is understanding how the pieces fit together: the service provides routes and account benefits, the client app reads the configuration and connects, and the subscription link gives the app the route information provided by the service. Installing an app doesn’t give you access to routes, and buying a plan doesn’t automatically configure your device.
| Term | What it does | Common point of confusion |
|---|---|---|
| Service account | Manages your plan, data, subscription, and support | Signing in successfully doesn’t mean you’re connected |
| Client app | Loads configuration and applies proxy and routing rules | The client app and route service may come from different providers |
| Subscription link | Retrieves or updates route configuration | Usually not a URL for opening a website in your browser |
| Node or route | Determines the service path and exit point for your connection | A listed region doesn’t guarantee that every app will work |
| Routing rules | Determine which connections use the proxy and which connect directly | Rule-based mode doesn’t mean all traffic goes through the proxy |
A subscription link may contain credentials that grant access to your configuration, so treat it like a password. Don’t post the full URL in public forums or paste it into an unfamiliar online conversion tool. If you need help, share the error message with sensitive details redacted.
Choosing a plan: match it to your needs, then compare routes
Make a note of the apps you plan to use, your main devices, and the networks you use most often. Browsing, downloading, streaming video, and video calls all have different network needs. A homepage loading quickly doesn’t guarantee smooth transfers or calls, and fast downloads don’t necessarily mean low gaming latency.
A nearby region can be a useful starting point, but it isn’t the whole story. Your local ISP, interconnection between networks, and server load all affect the actual route. Try a region suited to your needs, then test it again on your usual network and at your usual times. Apps with regional restrictions may also check your account region, payment details, and terms of use, so the exit region isn’t the only factor.
Direct connections, relays, and IEPL links
A direct connection typically links your device straight to an overseas server. A relay usually connects to an entry point first, which then forwards traffic to another node. IEPL is an international Ethernet private line—a type of link infrastructure. These terms describe different layers from encryption protocols. A private-line route may reduce some public-network fluctuations, but end-to-end performance still depends on your local connection, entry and exit points, and destination website. The label alone can’t guarantee performance.
Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are proxy protocols or related protocol implementations—not countries or plan tiers. Your client app must support the protocols and configuration format used by the subscription. Hysteria2 and TUIC use UDP, which some networks may restrict. If a connection fails, check the official documentation instead of changing ports or security settings at random.
Choosing a plan: monthly subscriptions vs. data packs
VPNUO monthly plans are ¥9.9 for 60GB, ¥18 for 250GB, and ¥28 for 500GB. Monthly data resets on the activation date. Data packs are ¥158 for 300GB, ¥358 for 1000GB, and ¥658 for 3000GB; they never expire and remain available until used. Compare monthly plans if you use the service regularly, or data packs if your usage varies. Consider your data needs, not just the price.
There’s no device limit, but that doesn’t mean plan data is unlimited. Streaming, downloads, and cloud storage sync can all use data, so keep an eye on usage in your dashboard when you first get started. When upgrading, the price difference is prorated against the remaining days; check the amount shown in your dashboard before proceeding. See the plan pricing page for details.
You don’t need an email address to create a VPNUO account. Once you’re in the dashboard, check your plan, billing method, and service details before proceeding. The service offers a 30-day no-questions-asked refund; see the terms of service for the full policy. Keep your account credentials somewhere safe so you can access your subscription, download a client app, or submit a support ticket later.
Your plan gives you access to the service; the client app is the connection tool. On Android, Windows, macOS, and Linux, you can download the client app after signing in. On iOS, availability follows the active plan rules shown in the dashboard. Get your subscription after signing in—downloading a client app on every platform doesn’t necessarily require paying first.
Connecting: get a client app and import your subscription
Get software from the service dashboard or the client’s official source whenever possible, and avoid lookalike download links in search results. These steps apply to common subscription-based client apps; buttons may be labeled “Configuration,” “Subscription,” or “Profile.” Follow the current app interface and the quick-start guide.
- Check your device and app version. Choose a client app for your operating system in the dashboard and review its installation requirements. If the system asks for permissions or security changes, verify the software source and instructions first.
- Sign in to the dashboard and get your subscription. Find the subscription option for your client app and copy the full URL. Don’t omit any parameters or mistake your account login URL for a subscription link.
- Import the configuration. Use the client app’s link-import option or the import option provided in the dashboard. If your device asks whether to open an external app, check the name of the app it’s about to launch.
- Update and select the configuration. Make sure the route list appears, then activate the configuration you want. If you’ve added a subscription without enabling it, the client may still be using an old configuration.
- Choose a route and mode. Start with the service’s default rules, select a route suited to your needs, and then connect. When granting system network permission for the first time, make sure the prompt is for the client app you just installed.
- Open your target app and test it. Note the route and mode you’re using so you can change settings one at a time if something goes wrong. Don’t change the protocol, DNS, and routing all at once.
A successful import only means the client received the configuration. If the list is empty, an update fails, or the app says the protocol isn’t supported, first check the subscription format and client compatibility, then check your account benefits and local network. Don’t disable certificate verification just to clear an error; it weakens connection identity checks.
Permissions and traffic handling across platforms
iPhone and iPad
Whether an iOS client app is available may depend on your App Store region and the app’s listing status, so don’t rely on an app name someone else gives you. The first connection usually asks you to allow a VPN configuration. This system setting lets the app handle network traffic; it isn’t the subscription link itself. Shortcuts can help automate actions, but they can’t replace a route service or a compatible client app.
Android
After verifying the installer’s source, check the system’s network permission and whether the client app has per-app routing enabled. Background restrictions and battery-saving settings can interrupt a persistent connection. If problems only occur when the app is in the background, check those settings first rather than assuming the route is unavailable. Settings vary by operating system.
Windows, macOS, and Linux
Desktop apps commonly offer system proxy and TUN modes. A system proxy mainly affects apps that honor the relevant settings; some games, command-line tools, and standalone apps may not. TUN typically handles a wider range of traffic, but client rules, routing, and permissions still apply. On Linux, terminal proxy settings may also be separate from desktop settings. If a website opens in your browser, that doesn’t mean every terminal command takes the same route.
Don’t run multiple tools at the same time if they all change proxy, DNS, or routing settings. If your device is managed by your employer or school, follow its network and device policies and avoid overriding existing remote-access settings.
Verifying your connection: check your exit IP, DNS, and routing
After connecting, visit a website that already worked, then try your target international website. Check whether the issue affects only a particular app. Next, use a trusted exit IP checker: in a browser expected to use the proxy, does the exit IP match your selected route? The result only shows the exit used for that request; it can’t prove that every app on your device uses the same route.
DNS translates domain names into IP addresses. A DNS leak usually means lookup requests didn’t follow the expected protected route and were sent through another channel, such as your local network. Encrypted DNS in your browser, system resolver settings, and the client’s DNS policy can all affect the result. Don’t draw conclusions just because a test site shows a particular region: the DNS resolver’s location isn’t necessarily the same as the exit location for your website connection.
- ✅ Check the client’s active configuration, route, and mode. Make sure you haven’t selected an old subscription or a direct-connection rule by mistake.
- ✅ Test the actual feature in your target app; don’t just check whether its homepage loads.
- ✅ Review exit IP and DNS tests separately, then compare them with the client’s routing and DNS documentation.
- ✅ Check whether another network tool is still controlling the system proxy, DNS, or virtual network adapter.
- ❌ Don’t treat a “Connected” status, region label, or single speed test as a guarantee that every app will work.
Rule-based mode routes traffic according to conditions such as domain, address, or app. Global proxy mode generally sends connections handled by the client through the proxy, but that doesn’t mean every system connection is covered. If global mode works but rule-based mode doesn’t, check which rules are matching and how DNS is handled before changing plans. After troubleshooting, switch back to the rules that suit your everyday use.
Can’t connect? Troubleshoot by where the problem occurs
Subscription won’t update: First check that your local network is working, the subscription URL is complete, and your dashboard shows an active plan. Then make sure the format is compatible with your client app. If you reset the subscription, the old URL may no longer work, so import the new one. Always redact subscription credentials from screenshots you share for troubleshooting.
Client app won’t connect: Check the error log for messages about DNS resolution, timeouts, certificates, or protocols. Update the subscription and check your system clock, then try another route in the list. If it only fails on one network, test a different connection to help determine whether the issue is related to local network restrictions.
Your browser works, but an app doesn’t: Check whether the app follows the system proxy, falls outside the client’s traffic-handling scope, or has its own region or account requirements. Don’t mistake an app-specific eligibility restriction for a network problem.
Websites that worked before won’t load after connecting: Check routing rules, DNS, and conflicts with other network tools. Disconnect and see whether your local connection recovers. If access is still unavailable after the client exits unexpectedly, check for a leftover system proxy setting and restore it according to the client’s instructions.