What This Guide Covers
We assume you already have an HTTPS subscription URL or a hosted Clash config. The focus is on on-device steps: safe APK install, granting VPN permission, adding a profile and updating it, and understanding Rule vs Global modes. If your link is not Clash-ready, read Subconverter: Convert V2Ray / SSR / Trojan to Clash YAML first.
Before You Install: Android Version and Source
Use a reasonably current Android 8+ device with security updates, and prefer an arm64-v8a APK for most phones. Download from the Clash download page FlClash section or verify checksums against official GitHub releases. Avoid repacked or unknown cloud links to reduce tampering risk.
Tip: Never paste full subscription URLs in public chats. Rotate the link in your provider panel if it may have leaked.
1Install the APK and Unknown Sources
Open the downloaded APK from your file manager. If Android blocks install, enable Install unknown apps for that browser or file app as prompted. After install, check App info to confirm the version matches what you expect.
2First Connection and VPN Permission
FlClash uses Android VPNService. The first time you start the tunnel, the system shows a VPN confirmation dialog—tap OK or Allow. If you denied it earlier, open system Settings → Apps → FlClash and clear defaults or relaunch the app to trigger the prompt again. On heavily customized ROMs, also allow background activity and disable aggressive battery saver for FlClash to avoid instant disconnects.
3Import Subscription or Remote Config
Open Profiles (or equivalent), choose Add from URL, paste the subscription link, name the profile, then tap Update or fetch. You should see proxy groups populate. TLS or timeout errors often mean wrong device time, captive portal, or HTTPS interception—try the same URL in a browser on the phone.
4Activate Profile, Pick Nodes, Choose Mode
Select the new profile as active. In Proxies, choose nodes inside each policy group (manual, auto, fallback, etc.) and run a latency test if available. Use Rule mode for everyday use so domestic sites can stay direct; switch to Global briefly only when diagnosing rule issues.
5How Routing Works on Mobile
Routing comes from your config’s rules and optional rule-providers; FlClash executes them with the Meta core. Most provider subscriptions already include sensible rules. Heavy customization is usually done on a PC, then hosted as a remote URL—pair with Meta Core DNS Leak Prevention when you tune DNS.
Troubleshooting
Profile update fails: Open the same URL in the browser; disable private DNS; check corporate Wi‑Fi inspection.
Connected but no access: Verify the selected node works; try Global mode briefly; disable other VPN apps.
Drops often: Unrestrict background; allow autostart if your OEM has it; scan in-app logs for TLS or dial errors.
Desktop: For Windows setup, see Clash Verge Rev Windows Install Guide (2026).
Summary
On Android, success with FlClash is four steps: trusted APK, VPN permission, successful profile update, stable nodes in Rule mode. Nail that first; refine remote configs and DNS later.