Smart Proxy,
Your Rules

Yes — Clash Plus is 100% free to download and use. No subscriptions, no in-app purchases, no premium tiers, no ads. Every single feature — protocols, proxy groups, rules, dashboard, iCloud backup — is available to every user at zero cost, forever.

Clash Plus supports iPhone, iPad, Android and HarmonyOS. The iOS version is free on the App Store (requires iOS / iPadOS 16 or later); the Android / HarmonyOS version can be installed directly via the APK download on this site. The app is optimised for both phone and tablet layouts.

Clash Plus supports all major proxy protocols out of the box — Shadowsocks, VMess, VLESS, Trojan, Hysteria2, TUIC v5, WireGuard, SOCKS5, HTTP/HTTPS, SSH, Snell v4, AnyTLS and more. All transport layers are covered: WebSocket, gRPC, HTTP/2, REALITY, and standard TLS. If your server speaks a mainstream protocol, Clash Plus handles it without any additional plugins.

There are two ways: ① Subscription URL — paste the link provided by your proxy service. Clash Plus imports the full configuration (all servers, groups, rules) and can auto-refresh it on a schedule so your node list is always up to date. ② Manual entry — tap the + button and fill in the server address, port, protocol, password or UUID, and any transport options. You can also manage multiple separate profiles and switch between them with one tap.

System Proxy mode registers Clash Plus as the system HTTP/HTTPS/SOCKS proxy (port 7890 by default). Most browsers, terminals, and standard apps follow this automatically. It is lightweight and battery-friendly. TUN mode (Enhanced) creates a virtual network interface at the OS level and intercepts all TCP/UDP traffic regardless of whether apps respect the system proxy — ideal for games, streaming apps, and any tool that bypasses standard proxy settings. You can switch between modes at any time from Settings → Network, even while connected.

Proxy groups let you organise multiple servers under one logical group and define how traffic is distributed among them. Supported strategies: Select (manual choice), Auto Select / URL Test (automatically picks the node with the lowest latency by pinging a test URL), Fallback (uses the first available node, fails over to the next if it goes offline), and Load Balance (distributes connections across all healthy nodes). You can nest groups inside other groups, for example a regional group inside an overall selector. Node latency is shown in real time on the Dashboard.

Rules are evaluated top-to-bottom and determine whether each connection is handled by a proxy group, connected directly (DIRECT), or blocked (REJECT). You can write rules based on: DOMAIN / DOMAIN-SUFFIX / DOMAIN-KEYWORD (exact, suffix, or partial domain match), IP-CIDR (IP range), GEOIP (country code, powered by the built-in Geo database), PROCESS-NAME (specific app), and a final MATCH catch-all. Clash Plus ships with a built-in rule set that routes domestic traffic directly and foreign traffic through the proxy — you can customise or replace this at any time. The Resources tab lets you update the GeoIP and GeoSite databases.

Yes. The On-Demand Connect feature (Settings → Network) can automatically start the VPN in three modes: Always On (reconnects whenever the device has internet), Wi-Fi Only (activates only on Wi-Fi networks), or Cellular Only (activates only on mobile data). You can also trigger connect/disconnect quickly via the Siri Shortcuts integration or from the Home Screen Quick Actions (long-press the app icon).

Standard DNS queries are sent in plain text over UDP port 53, which means your ISP or anyone on the network can see — and potentially manipulate — every domain you resolve. Clash Plus has a built-in DNS module that supports DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), and DNSSEC. You can configure separate nameservers for domestic and foreign queries, enable fake-IP mode to prevent DNS leaks, and set a custom fallback server. All of this runs locally on your device — no third-party DNS resolver receives your traffic metadata.

On the Dashboard tab, tap any proxy group to expand its node list. Tap Speed Test to ping all nodes simultaneously — the result (in ms) is shown next to each node. The Auto Select group does this automatically on a configurable interval and always routes to the fastest available node. You can also run an ICMP ping to any host directly from the Tools tab.

Go to Settings → Backup. You can create a local backup (saved as a file you can share anywhere) or upload directly to iCloud. iCloud backups are stored in your personal iCloud Drive — only you can access them. To restore, tap the backup entry and choose Restore. All profiles, rules, proxy groups, and settings are fully preserved. This also makes it trivial to migrate to a new device.

Absolutely not. Clash Plus operates entirely on your device. We collect zero user data, zero connection logs, zero analytics, and zero telemetry. Your subscription URLs, server credentials, traffic history, and rule configurations never leave your device (unless you explicitly enable iCloud backup, which writes only to your personal iCloud account). There is no account system, no sign-in, and no server-side component whatsoever.

No. Clash Plus is a proxy client. It connects to proxy servers that you already own or that you obtain through a third-party provider (often called a 'proxy service' or '机场'). The app itself does not include, sell, or recommend any server access. You are responsible for obtaining your own proxy configuration in accordance with applicable laws.