A subscription link is the address a client uses to retrieve route configuration. Get the link, import it into a compatible client, then update the configuration and choose a route to complete the basic setup. It is not a website login page or a plan renewal. Knowing the difference can help you avoid mistaking a configuration issue for an account problem.

How Subscription Links Differ from Nodes and Plans

When a client accesses a subscription URL, it retrieves configuration data it can interpret. This may include node names, server addresses, ports, authentication details, and connection parameters. A full configuration may also contain proxy groups, routing rules, and DNS settings, depending on the format provided by the service. The link itself is not an active connection: app traffic may be routed according to the configuration only after the client loads it and enables the relevant network features.

A node usually refers to one selectable connection configuration. A subscription can provide multiple nodes in one place, so the client can sync route changes when it fetches the subscription again. You can also add a single node manually, but it will not automatically receive updates from the full subscription. A plan determines your account’s billing and usage eligibility. These things are related, but they are not the same.

Client Configuration vs. Account Billing
Name Primary purpose Common point of confusion
Subscription link Retrieve or update a set of connection configurations Updating it does not renew your plan or enable a connection
Single node Specify one connection endpoint and its required parameters A node name does not confirm its exit region or actual performance
Client configuration Organize nodes, proxy groups, rules, and other settings Formats and supported features vary between clients
Service plan Set traffic limits and billing terms A configuration can remain on your device even when your account has no usable traffic

VPNLQ monthly plans reset traffic each month on the activation date. Data packages remain available until used and never expire. Selecting “Update subscription” in a client only downloads the configuration again; it does not change these billing terms. If nodes still appear but none work, check your account status instead of repeatedly updating the subscription.

Get a Subscription Link from Your Account Dashboard

Get your subscription link from the service’s account panel—not from public forums, screenshots in search results, or shared documents from strangers. VPNLQ does not require an email address; you can create an account with a username and password. If you already have an account, go to the login page, then follow the instructions in the account overview to get your subscription.

  1. Sign in and check your current plan and remaining traffic. If the panel shows an issue with your usage eligibility, resolve your account status first.
  2. Check the client instructions in the panel. If it offers multiple configuration formats, choose one that works with your client and its core.
  3. Use the panel’s copy button to capture the entire link. This helps avoid missing parameters at the end or copying extra spaces or line breaks.
  4. Open the subscription or configuration management section in your client. If you still need a client, sign in and visit the client downloads page for platform-specific instructions.

Subscription URLs often use HTTPS to retrieve configuration, but that does not make them safe to share publicly. Transport protection secures the retrieval process; anyone with a valid link may still be able to retrieve its connection configuration.

Import into a Client: Check the Format Before Connecting

Client interfaces may use labels such as “Remote configuration,” “Subscription management,” or “Import from URL.” The goal is the same: add the subscription address as a remote configuration source, not as a regular web bookmark. You can give it a name that is easy to recognize; this name is for local organization only and does not change the node’s exit route.

  1. Open configuration or subscription management, choose the option to import from a link, and paste the complete URL. Do not enter the subscription URL in a server address field.
  2. Fetch or update the subscription, then wait for the client to download and parse it. Check that nodes or proxy groups appear and look for any format errors.
  3. Select the configuration you just imported, then choose a route. Some clients do not switch to a newly imported configuration automatically.
  4. Enable the system proxy or another network routing mode supported by your client. The first time you enable it on a mobile device, follow the system prompt to approve the VPN configuration.
  5. Test with the app you actually want to use. Check the client logs and exit information to confirm that traffic is routed as expected.

Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are protocol names found in the proxy ecosystem, not synonyms for subscription formats. A client’s ability to parse a subscription does not mean its core supports every protocol in the configuration. These names are included here to explain compatibility; they do not mean VPNLQ provides every protocol listed.

IEPL leased lines, transit, and direct connections describe how a route is carried or forwarded; they do not indicate which protocol a client needs. If you see “unsupported type” or “unknown field,” check the client version, core capabilities, and configuration format provided by the account panel. Do not change authentication parameters at random to troubleshoot.

What to Check After Importing on Each Platform

VPNLQ supports Windows, macOS, iOS, Android, and Linux. The same platform does not guarantee the same client menus or traffic-routing behavior across apps. Follow the platform-specific instructions in the account panel, then check for these commonly overlooked settings.

  • ✅ Windows: Make sure the current configuration is selected and the system proxy is enabled. System-proxy-only modes usually cannot cover apps that ignore system proxy settings.
  • ✅ macOS: Check that the client has the permissions it needs. A system proxy and TUN routing are different features; how to enable them and what traffic they cover depends on the client.
  • ✅ iOS: Confirm that the system has approved the VPN configuration, and check whether another VPN configuration is active. Verify subscription updates and connection status separately.
  • ✅ Android: Check VPN permissions, app routing settings, and background activity restrictions. An excluded app may not use the selected route.
  • ✅ Linux: Distinguish desktop proxy settings, app proxy environment variables, and TUN routing. Command-line tools may not automatically use the desktop client’s system proxy.

Running multiple traffic-routing tools on the same device can cause conflicts with proxy ports, default routes, or DNS settings. When troubleshooting, keep only the client you are testing and note the original settings before changing anything. VPNLQ has no device limit, but each device needs its own configuration and permission checks. A successful connection on one device does not verify the others.

When to Update: Respond to Changes and Errors

There is no fixed subscription update interval that works for every client. After the first import, confirm that the fetch succeeded. Update again if the service announces route changes, the node list looks outdated, or a current route stops working. If your client supports automatic updates, configure them as described in its documentation; background restrictions and network conditions may still interfere.

An update usually refreshes remote node data. Whether it overwrites local proxy groups, rules, or manual changes depends on how the client manages configurations. Back up important local changes first, and use the client’s persistent override feature when available. Do not assume edits made directly to a remote configuration file will remain in place.

If one route fails but the subscription still fetches successfully, update it and try another route for comparison. If the entire subscription download fails, start by checking the network path to the URL. Some clients fetch subscriptions through the current proxy; if that proxy is unavailable, updates may fail too. Check whether the update request uses a direct connection or a proxy instead of repeatedly clicking the button.

Troubleshooting: Import Fails or Apps Won’t Load

Treat Download Errors and Parsing Errors Separately

“Timed out” and “DNS resolution failed” usually point to a problem fetching the subscription. “Invalid format” and “Unsupported protocol” are more likely parsing or compatibility issues. Check the full URL first, then your account status and network path, and finally the formats supported by your client. Being able to open the login page in a browser does not prove that the client can retrieve the subscription data.

Do not paste a full subscription URL into an unfamiliar online conversion tool. It may expose your subscription token and all node information. If conversion is necessary, first check for a compatible format in the service panel or use a trusted local option, and understand which credentials the process can access.

A Successful Connection Doesn’t Mean Every App Uses the Proxy

Rule mode decides whether traffic connects directly or uses a proxy based on domains, addresses, or other conditions. Global mode usually routes traffic handled by the client through the selected proxy, but it does not necessarily route all operating-system traffic. Whether a specific app uses the proxy also depends on system proxy settings, TUN, app routing rules, and the client’s implementation.

Test with the app you want to use and the IP lookup page to help check your exit route. The exit shown in a browser only reflects that request; command-line tools, games, and other apps may use different routes. If switching to global mode restores access, review your rules rather than treating global mode as a permanent diagnosis.

Check DNS and Exit Routes Separately

A DNS leak generally means domain lookups use a resolution path that does not match your intended privacy or routing policy—for example, when app traffic goes through a proxy but DNS queries still use your local network’s resolver. Confirm a leak by checking the client’s DNS policy and running an appropriate test. The exit IP alone is not enough, nor is the name of a resolver.

After enabling DNS routing, also check whether DNS-over-HTTPS or other encrypted DNS settings in the operating system, browser, and apps are affecting one another. Note the original configuration and follow the client documentation step by step; changing multiple settings at once can make the cause harder to find. For more help, see Quick Start, or sign in and submit a support ticket with sanitized error details.

Resetting and Replacing a Leaked Link

If a subscription link has been posted publicly, sent to an untrusted site, or exposed in a QR code, treat it as a potentially compromised credential. Removing the public post can limit further sharing, but it cannot recall configurations that have already been copied. Changing your account password may not invalidate the subscription token; that depends on how the service works.

  1. Open the account panel and check whether it offers a subscription reset or token regeneration. Read the instructions to confirm what will happen to the old link and any node credentials already downloaded.
  2. If there is no clear reset option in the panel, or you are unsure what a reset will do, submit a support ticket explaining what happened and ask how to revoke the old credentials.
  3. After getting a new link, replace the remote URL in each client and update the configuration. Make sure the active configuration comes from the new address.
  4. Remove old subscription records and screenshots containing sensitive information. Resume normal use on your devices after confirming what happened to the old credentials.

VPNLQ’s anonymous, no-logs policy is a service privacy policy. It does not make subscription links safe to share publicly, nor does it prevent websites from identifying an account that is signed in. Protecting the link, securing the account password, and checking device permissions address different risks and are not interchangeable.

After the initial setup, keep the process straightforward: get the link from the account panel, import it into a compatible client, confirm the configuration and route, then test the app you plan to use. Update when something changes, and secure the credentials if a leak is suspected. This keeps configuration maintenance separate from everyday use.