Skip to content

What Is a Subscription Link? A Beginner’s Guide to Getting, Importing, Updating, and Handling Leaks

Learn what a VPN subscription link is, where to find it in your account panel, how to import it into different apps, when to update it, and what to do if it leaks.

A VPN subscription link lets a client import the server configuration authorized for your account. Add it to a compatible client, and the app downloads the config and creates a list of available servers. It serves a different purpose from an app installer or login password, and should be treated as sensitive information.

Subscription Links, Node Links, and Client Apps: What’s the Difference?

Think of a subscription link as an address for retrieving configuration, and a client as the software that reads and uses it. The client requests data from the service through the link, then converts the returned server address, port, protocol, and authentication parameters into connection settings. Some subscriptions also include proxy groups, routing rules, or other settings, depending on the subscription format and what the client supports.

A successful import only means the configuration is in the app; it doesn’t mean the proxy connection is enabled. You usually still need to select a server and enable the system proxy, network extension, or TUN mode as directed by the client. Whether apps beyond your browser use the connection also depends on the mode and each app’s network behavior.

Identify download and configuration options in your account panel by what they do
Item What it’s for What to keep in mind
Subscription link Fetches the server configuration authorized for your account and supports future updates The format must match your client; the link may contain access credentials
Server link Describes the connection parameters for a single server After manual import, it may not update automatically when the server-side config changes
Configuration file Stores settings such as servers, proxy groups, or rules A local copy may become outdated or contain sensitive fields
Client installer Installs software for reading configurations and establishing connections You still need an authorized configuration after installation

Find Your Subscription Link in the Account Panel

VPNWD’s client downloads and subscription options are available in the account panel. Sign in first, then follow the panel instructions for your device. Installer availability depends on the active subscription shown in the panel. Since the interface may change, look for the relevant function rather than a fixed location from a tutorial screenshot.

  1. Open the official account panel.Go to the account panel sign-in page on this site and make sure you’re using the account associated with the subscription you want to use.
  2. Check your subscription status.Review your active subscription, available data, and any notices in the panel. Being able to sign in and being able to use the servers are separate things.
  3. Get the client for your device.Open the client download page and choose your operating system and configuration method as directed in the panel.
  4. Choose the matching subscription format.If the panel offers options for multiple clients, choose the format that matches your app, then copy the link or use the panel’s import option.
  5. Check the copied link.Make sure it’s complete and has no extra spaces, line breaks, or punctuation added by a chat app. Don’t paste the full link into a public page to check it.

If you can’t find the configuration option, first check the subscription access shown in the panel, then see the guides or support page. When contacting support, share your device’s operating system, client name, and error message. Before sending a screenshot, hide the subscription URL, QR code, and authentication fields.

Import on Any Platform: Match the Format, Then Connect

Windows, macOS, iOS, Android, and Linux handle permissions differently, but the import process is similar: add a remote subscription in the client, paste the URL, fetch the configuration, then select the configuration and a server. Buttons may be labeled “Subscription,” “Config,” “Profiles,” or something else. The steps below describe the functions, not the fixed menus of a particular app.

Desktop: Windows, macOS, and Linux

In the configuration manager, add a remote profile, enter a name you’ll recognize, paste the subscription link, and save. Update it, check that a server list appears, then select the imported profile. Windows clients commonly offer system proxy and virtual network adapter modes; macOS may require permission for a network extension; Linux options for graphical interfaces, background services, and proxy environment variables vary by client.

A system proxy doesn’t necessarily route all traffic through the proxy. Some programs use their own proxy settings, and command-line tools may need to be configured separately. If you need to route more traffic, read the client’s documentation on TUN mode and permissions before enabling it.

Mobile: iOS and Android

Use the import method recommended in the account panel. When you use one-tap import, your device may ask whether to open the client. After importing, check that the configuration was saved successfully. On the first connection, the system will typically ask permission to add or establish a VPN connection; verify the requesting app’s name before allowing it.

On Android, some clients use the system VPN service to route traffic, and other network tools may conflict with them. On iOS, importing a configuration and turning on the connection are separate steps too. If import succeeds but you can’t access anything, check the client’s connection status instead of repeatedly importing the same link.

  • ✅ Updating the subscription produces a server list, with no format parsing errors.
  • ✅ The newly imported configuration is active, and a usable server is selected in its proxy group.
  • ✅ System proxy, network extension, or TUN mode is enabled as directed by the client.
  • ✅ Test access in the app you want to use, then check the exit IP and logs to verify the actual traffic path.

Use the IP lookup tool to check your browser’s exit IP. A change only shows the route used for that request; it doesn’t prove that every app is using the proxy. Also check that your target app works and that the client’s connection logs match your expectations.

Protocol Compatibility and Config Formats: Why a Link May Not Import

A subscription URL may return a list of server URIs, an encoded list, or a YAML or JSON configuration. Support for a proxy protocol doesn’t mean an app can read every subscription format. Likewise, an app’s ability to read a configuration file doesn’t guarantee that its current core version supports every field in that file.

Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are distinct protocols or protocol suites, not interchangeable link formats. Hysteria2 and TUIC use QUIC-based transport and have specific client implementation and UDP network requirements. These are compatibility examples, not a claim that VPNWD currently offers every protocol; check the account panel and client documentation for current details.

If you see “Unsupported protocol,” “Unknown field,” or a parsing error, first check the format selected in the panel and the software version. Don’t try to work around the error by deleting arbitrary configuration fields, especially by turning off certificate verification. That may hide a format or security issue without fixing the underlying incompatibility.

How Often Should You Update? Subscription Updates vs. Data Resets

A subscription update fetches the server configuration again; a data reset is part of your account’s billing rules. They’re separate. VPNWD’s monthly data resets each month on your activation date. Manually updating the subscription won’t restore data early. Data packages remain available until used and don’t expire; updating the subscription doesn’t add more data.

There’s no single update frequency that works for every client. Update the configuration after the initial import, and fetch it again if the service changes its server list, a server has an issue, or you switch configuration formats. For routine use, you can enable the client’s automatic update option at a sensible interval; follow the client and account panel guidance.

If server names or the number of servers changes after an update, the service may have adjusted its configuration, or filtering rules or parsing behavior may have changed. Check the update notice and configuration source, then compare them with what’s available in the panel. Don’t judge subscription status only by whether the server list got longer or shorter.

Look for configuration changes or error messages to decide whether an update is needed.If your connection is working, there’s no need to refresh repeatedly. If something goes wrong, distinguish between “subscription fetch failed” and “server connection failed,” then troubleshoot the relevant step.

Troubleshooting Import Failures, Update Problems, and Connection Issues

First, note which stage produced the error. A subscription that downloads successfully but can’t connect is a different problem from a client that can’t fetch the configuration at all. Follow the checks below to avoid unnecessary reinstalls and settings changes.

  1. Check the link’s source and completeness.Copy it again from the account panel and make sure it isn’t a sign-in URL, help page URL, or expired link.
  2. Check the network route used to fetch the subscription.Configuration updates may use a direct connection or go through the current proxy. If your existing servers are down, adjust the update request route as described by the client so fetching the configuration doesn’t depend on a failed connection.
  3. Check the returned content and format.An authentication error, web page, or network block page can’t be parsed as a server configuration. Use the error message to check your access and subscription format.
  4. Check the core and connection settings.If the server list is present but connections fail, check protocol support, system time, certificate errors, and network permissions. Don’t simply disable security checks.
  5. Check routing rules and DNS.If only some websites are affected, check the matching rules, selected route, and DNS records instead of assuming every server is down.

A DNS leak occurs when domain lookups don’t follow the selected DNS route as expected, potentially exposing them to your local network or another DNS provider. Turning on a proxy doesn’t guarantee DNS uses the same route. Secure DNS in your browser, system resolver settings, and the client’s DNS mode may all affect the results, so check the client documentation.

Routing rules determine whether requests connect directly, use a proxy, or are blocked. Updating a subscription doesn’t necessarily update separate rule providers. If your client manages server subscriptions and rule updates separately, check their status individually. Logs can help troubleshoot; remove links, account identifiers, and authentication details before sharing them.

What to Do If Your Link Leaks: Revoke Old Credentials and Import the New Link

Treat a full subscription URL posted in a public screenshot, code repository, forum, or chat as potentially exposed credentials. Deleting the public post doesn’t confirm that no copies remain. The priority is to invalidate the old credentials and update your own devices.

  1. Remove the exposed content first.Delete posts, screenshots, files, and shared records containing the link or QR code to prevent further spread.
  2. Look for a reset or revoke option in the account panel.Change your subscription credentials as directed by the panel. If there’s no such option, contact support to find out how to revoke the old access. Don’t assume changing your login password will also reset the subscription.
  3. Confirm what the revocation covers.Check the instructions or ask support whether the action only changes the download link or also rotates the underlying server authentication credentials. Revoking only the old download URL may not immediately invalidate server configurations that have already been downloaded.
  4. Update your own devices.Import the new link into each client, remove the old subscription and any manually saved server copies, then verify the connection.
  5. Review account activity.Check the traffic and security information available in the panel. If anything looks unusual, contact support with a description that doesn’t reveal sensitive details.

Subscription credentials and account passwords may be managed separately, so being able to sign in doesn’t prove that an old link has been safely invalidated. For server configurations already copied to other devices, rely on the actual scope of the server-side revocation. After resetting, clear your clipboard history and delete configuration backups you no longer need.

Treat your subscription link as a connection credential.Get it from the official account panel, import it using a compatible client format, and update it as needed. If it leaks, revoke the old access first, then replace it on your devices.

Start Free