Clash for Android Complete Setup Guide: From Installation to Smooth Browsing
Contents
Using Clash on Android is quite different from using it on a PC. Touch interface operations, battery optimization, background restrictions, and mobile DNS policies can all affect your experience.
This guide covers the complete process from installation to smooth browsing, helping you avoid the pitfalls specific to the Android platform.
Current State of Clash Android Clients
There are several Clash clients available for Android, but the situation is more complex than on PC:
- Clash for Android (CFA): The original Android client, no longer maintained but still usable
- Clash Meta for Android (CMFA): Fork based on Meta kernel, supports more protocols
- Clash Verge Rev (Mobile): Available on some devices, but mobile experience is not as polished
- FlClash: Cross-platform client with Android support and modern UI
- NekoBox: Based on Sing-box kernel, better support for Vless/Reality protocols
If your subscription uses Vmess/Vless protocols, we recommend Clash Meta for Android or FlClash. If your subscription uses traditional Clash protocols, the original Clash for Android remains stable and reliable.
Pre-Installation Checklist
Before starting the configuration, confirm the following:
1. Verify Your Subscription Info
- Subscription URL (usually starts with http)
- Whether the subscription supports Clash format (most providers do)
- Which nodes are available to you
2. Download the Correct APK
Do not download Clash clients from third-party app stores. Many are modified versions that may contain security risks. Only download from GitHub Releases or trusted sources.
Recommended download sources:
- Clash Meta for Android: Official GitHub repository Releases page
- FlClash: Official GitHub repository
- Clash for Android: GitHub archive (no longer maintained, but APK still available)
3. Disable Google Play Protect (If Needed)
Android may block installation of apps from outside the Play Store. You need to allow "Install unknown apps":
- Settings → Security → Install unknown apps
- Find the browser or file manager you used to download the file
- Enable "Allow from this source"
Installation and Basic Configuration
After downloading, tap the APK file to install. During installation, the system may show a security warning. Confirm to continue.
When you first open the Clash client, the system will request VPN permission. This is required because Clash needs to use the VPN service to intercept system traffic. Tap "Allow".
After opening the client, you'll see several main tabs:
- Proxy: View and switch nodes
- Profiles: Manage subscription configurations
- Logs: View runtime logs
- Settings: Adjust client parameters
Go to the settings page and confirm the following:
- Mode: We recommend "Rule mode"
- Allow LAN: Enable this if you need to share proxy with other devices
- System Proxy: Make sure it's enabled
Subscription Import and Node Selection
Importing Subscription URL
- Switch to the "Profiles" page
- Tap the "+" or "New" button
- Select "URL" type
- Paste your subscription URL
- Tap "Download" or "Import"
- Wait for the configuration to download
After successful import, you'll see the new configuration in the profiles list. Tap it to activate it (it will be highlighted or have a checkmark).
Viewing and Selecting Nodes
Switch to the "Proxy" page, and you'll see all available nodes. Nodes are usually organized by policy groups:
- Selector: Manually select the node you want to use
- URL-Test: Automatically selects the node with the lowest latency
- Fallback: Automatically switches to backup when the primary node is unavailable
Tap the test button (usually a play icon) next to a node group to test all nodes for latency. Choose nodes with latency between 50-200ms for the best experience.
Routing Modes Explained
The Android client has three routing modes, each suited for different scenarios:
Mode 1: Proxy Only
Only proxies apps that support system proxy. Most browsers and mainstream apps will go through the proxy, but some apps that don't follow system proxy settings won't.
Use case: Daily browser use. Saves battery, more stable.
Mode 2: Rule-based
Uses configuration file rules to decide which traffic goes through the proxy and which goes direct. This is the smartest mode.
Use case: Recommended for daily use. Domestic apps go direct, foreign apps go through proxy, balancing speed and accessibility.
Mode 3: Global
All traffic goes through the proxy, no distinction between domestic and foreign.
Use case: When you need all traffic proxied. Increases battery drain and latency.
TUN mode on Android requires root or a specific kernel. If you're using Clash Meta for Android, you can enable "TUN mode" in settings for global transparent proxy without root.
When TUN mode is enabled, all app traffic is intercepted, including games and utility apps that don't support proxy settings.
Background Running and Keep-Alive
Android's battery optimization will kill background apps. This is the most common issue with Clash on Android. Here's how to keep it alive:
1. Disable Battery Optimization
- Settings → Battery → Battery optimization
- Find the Clash client
- Select "Don't optimize" or "No restrictions"
2. Lock in Recent Apps
Open the recent apps list (usually swipe up and hold or tap the square button), find the Clash client card, pull down or long-press, and select "Lock". Locked apps won't be cleared by one-tap cleanup.
3. In-App Keep-Alive Settings
In the Clash client settings, find and enable:
- Auto-start: Connect automatically after phone restart
- Foreground service: Show persistent notification to prevent system from killing the app
- Background running: Allow continuous running in the background
4. Manufacturer-Specific Settings
Manufacturer ROMs like Samsung, Xiaomi, Huawei have additional background management:
- Samsung: Settings → Battery → Background usage limits → Never sleeping apps → Add Clash
- Xiaomi/Redmi: Settings → Apps → Manage apps → Find Clash → Battery saver → No restrictions
- Huawei/Honor: Settings → Battery → App launch → Find Clash → Manual → Enable all toggles
Common Issues and Optimization Tips
Issue 1: No Internet After Connecting
Troubleshooting steps:
- Confirm VPN permission is granted
- Confirm subscription is correctly imported and activated
- Confirm a working node is selected (test for latency)
- Try switching routing modes (from Rule to Global for testing)
- Check the Logs page for error messages
Issue 2: Frequent Disconnections
Possible causes and solutions:
- Battery optimization killing background: Follow Section 6 for keep-alive settings
- Unstable node: Switch to a more stable node, or use auto-select policy
- Network switching: May disconnect when switching between WiFi and mobile data. Enable "Auto-reconnect on network switch" option
Issue 3: High Battery Drain
Optimization methods:
- Use "Rule mode" instead of "Global mode"
- Disable verbose logging
- Ensure rules are configured correctly so domestic traffic goes direct
- Reduce auto-test frequency (if available)
Issue 4: Some Apps Cannot Be Proxied
Solutions:
- Check if the app is in the proxy list (some apps may be set to direct)
- Try enabling TUN mode (requires Meta kernel or root)
- Check if the app uses certificates not trusted by the system (e.g., some banking apps)
- Quick toggle: Add Clash toggle to notification shade quick settings for easy on/off
- Per-app proxy: Configure which apps go through proxy and which go direct in settings
- Auto-update subscription: Set up automatic subscription updates to keep node list current
- Multiple profiles: Import multiple subscriptions and switch between them as needed
Security and Privacy Considerations
1. Don't Fully Trust Proxy on Public WiFi
Clash can protect your traffic from man-in-the-middle eavesdropping, but if the node itself is untrusted, your data could still be monitored. Choose a trustworthy proxy provider.
2. Watch for DNS Leaks
Ensure DNS settings in your configuration are correct. When using TUN mode, configure anti-pollution DNS servers to prevent DNS requests from going through the proxy channel.
3. Keep Client Updated
Clash clients regularly release security updates and bug fixes. Keep your client updated to the latest version.
4. Be Careful with Permissions
If a Clash client requests unreasonable permissions (like access to contacts, SMS, etc.), deny them. A normal Clash client only needs VPN permission and network access.