This complete VPN setup guide for beginners starts with checking your account after checkout, then walks you through getting your subscription, installing a client, importing the configuration, and verifying your connection. First, understand that a successful payment, a successful import, and a working connection are separate milestones. Check the expected result at each stage before moving on; this makes problems easier to pinpoint than repeatedly switching servers.
For your first setup, focus on accessing your usual websites and the apps you need. There’s no need to change protocols, DNS, or advanced rules right away. This guide uses the VPNMH dashboard; button names vary by client, so follow the instructions for your platform shown in the dashboard.
Check your plan status after checkout
Go to Account Overview and confirm that your plan is active and its available data is shown before looking for the subscription link. If your payment provider shows the payment as complete but the dashboard hasn’t updated, check the order status first to avoid paying twice. If you need help, submit your order details through a support ticket. Don’t include your password or full subscription link.
A monthly plan suits ongoing use. A data package is a better fit if your usage varies and you want to keep any unused data. Choose based on how much data you use, not which device the client is installed on. VPNMH has no limit on the number of devices connected at once, but all devices use data from your account plan.
| Plan type | Price and data | Billing or validity period |
|---|---|---|
| Monthly plan | ¥9.9 / 60GB；¥18 / 250GB；¥28 / 500GB | Renews monthly from the activation date, not on a fixed calendar date. |
| Data package | ¥158 / 300GB；¥358 / 1000GB；¥658 / 3000GB | Never expires; use it whenever you need it. |
If you upgrade a monthly plan partway through its term, the price difference is prorated for the remaining days. You can also review the refund policy while setting things up: VPNMH offers a 7-day no-questions-asked refund. You can request a full refund for any reason within 7 days of your first payment. See the plans page for details and instructions.
Get your subscription: link or client?
A subscription link lets your client retrieve servers and configuration. It isn’t an installer or a regular webpage URL. It usually contains access credentials, so keep it as securely as you would a password. If you open it in a browser and see text, a download, or content that isn’t human-readable, that alone doesn’t mean the subscription is invalid.
- Sign in to the dashboard. Make sure you’re on the VPNMH account page, then find the subscription and client instructions. VPNMH doesn’t require an email address; create an account with a username and password.
- Check the client format. If the dashboard offers different subscription options for different clients, choose the one that matches the client you plan to install.
- Copy the entire link. Use the dashboard’s copy button when possible. This helps avoid missing trailing parameters or accidentally copying surrounding instructions.
- Use the original source. Get future updates from the dashboard. Don’t submit your subscription to an unfamiliar website for conversion.
“Update subscription” means fetching the configuration list again; it doesn’t renew your plan or reset your data. After an update, make sure the selected server belongs to the configuration you just imported, not an older configuration left in the client.
Install a client for your platform
Open the instructions for your platform from the dashboard’s client downloads. You’ll need to sign in to get your subscription; payment isn’t required to download clients on platforms other than iOS. For iOS, access depends on the active plan shown in the dashboard. Don’t assume the installation steps for other platforms apply to iOS.
Windows and macOS clients often have a system proxy toggle and may also offer TUN mode. The system proxy works with apps that follow the operating system’s proxy settings. TUN typically routes traffic through a virtual network interface and may require extra permissions. For your first setup, follow the tutorial’s default option. You don’t need to turn on every switch just to cover more apps.
Android and iOS clients usually ask for system permission to add a VPN configuration or establish a VPN connection. Approve it only after confirming the client’s source and while initiating a connection. A VPN indicator in the status bar means the system tunnel is enabled; it doesn’t confirm that the remote server or destination service is working.
On Linux, you can choose between graphical clients and command-line tools that use configuration files. Make sure the package supports your distribution and processor architecture, and check how to enable the system proxy or TUN. A running background process doesn’t necessarily mean your desktop browser is using the proxy.
Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are different protocols, and client support varies. Hysteria2 and TUIC are based on QUIC, which relies on UDP; network restrictions on UDP may affect the connection. These protocol names are listed to help you check compatibility. They don’t mean VPNMH offers all of them; check the configuration in the dashboard.
Import your subscription and verify the configuration
Open the client’s “Profiles,” “Subscriptions,” or similar section, choose the option to import from a link, and paste the matching URL from the dashboard. If you use one-click import, your browser may ask to open an external app. Confirm it’s the right client before proceeding. If nothing happens, switch to manual import rather than repeatedly clicking the same link.
After importing, you should see a subscription entry, no update errors, and an expandable server list. Some clients also require you to set the imported configuration as active. Seeing a subscription name with an empty server list doesn’t mean the import is complete.
- ✅ The active configuration is the VPNMH subscription you just imported, not an older local profile.
- ✅ The server list expands, and updates aren’t continually failing.
- ✅ A server or proxy group is selected, not just the subscription entry.
- ✅ The system proxy or connection mode required by the tutorial is enabled.
- ❌ Don’t run multiple proxy clients during your first test; their routing and system proxy settings may conflict.
If you see a format error, first check that the subscription is compatible with your client and its core version. Don’t treat a full configuration file, a single-server share link, and a subscription URL as interchangeable import methods. If the download fails, check whether the URL was copied correctly, the current network can reach the subscription server, or the account status is valid. A single error doesn’t prove that all remote servers are unavailable.
Choose a server and routing mode
For your first connection, choose a server in a region that meets the destination service’s requirements, then check how it performs. If there’s no regional requirement, start with a geographically closer location. A client’s latency test measures the response to a specific test target; it doesn’t translate directly into download speed or confirm that video or work apps will function.
IEPL, relay, and direct connections describe different network paths. IEPL generally uses an Ethernet private line provided by a carrier; a relay routes traffic from an entry server to an exit server; a direct connection links your local network to a remote server. These terms can help explain the route, but don’t guarantee performance—test the connection on the network you actually use. See VPNMH’s global server locations for network details.
For your first session, keep the client’s default rule mode. It uses domains, addresses, or other matching criteria to decide whether traffic connects directly or through a proxy. “Global mode” generally routes traffic handled by the client through the selected proxy, but it doesn’t automatically mean every app is covered. Switching to global mode may not help if an app ignores the system proxy.
Verify the connection—don’t just trust the icon
Confirm a successful connection by checking what actually works. First open a familiar local website to make sure your basic internet connection is fine. Then try a destination that requires an international route, followed by the app you actually want to use. This helps distinguish an underlying network issue from a proxy routing problem or an issue with a specific service.
- Check websites and apps. Once a webpage loads, test the app itself—for example, sign in, load a document, or play media. Sign-in failures may also be caused by account permissions or the platform’s regional policies.
- Check your exit IP. Use a trusted IP lookup tool to see whether requests are exiting through the expected region. In rule mode, different requests may take different routes, so one lookup page can’t represent all your traffic.
- Check the client logs. Look at the rule matched for the destination domain and the selected exit route. Check whether traffic was mistakenly sent direct or assigned to an unconfigured policy group.
- Test under normal conditions. Restart the app and switch to your usual network to confirm the connection still works as expected, rather than succeeding only once right after import.
A DNS leak check looks at whether domain names are resolved through the expected route. Even with a proxy enabled, DNS behavior may depend on system settings, secure DNS in your browser, the client’s DNS mode, and routing rules. Seeing a resolver’s name on a test page isn’t enough to determine whether there’s a leak or a security issue; check the rules and logs too.
If a destination website won’t load but the client’s connection test passes, first check whether its domain matches a proxy rule. Then make sure your DNS settings match the client’s instructions. Don’t enter DNS addresses from untrusted sources or disable certificate checks as a workaround. For certificate warnings, check your system clock, network, and the destination site’s status.
How to troubleshoot common issues
Subscription update fails, but regular websites work
Return to the dashboard and check that the link is complete, your plan is active, and the format matches your client. If the client provides update logs, note the error type: a configuration parsing error is different from a network connection timeout. If needed, update the client as instructed by its official documentation, then try fetching the configuration again. Don’t delete all working configurations first; you may need them for comparison while troubleshooting.
Web browsing works, but a work app won’t connect
First check whether the app has its own proxy settings and whether you need to restart it before it picks up the system proxy. If it doesn’t follow the system proxy, try TUN only if your client supports it and you understand the permissions involved. Managed work devices and company VPNs may have their own policies. Follow your organization’s network rules and don’t override managed settings without permission.
Connection stopped working after switching networks
Hotel and airport networks may require you to sign in through a captive portal first. Pause the proxy, complete the network sign-in in your browser, and confirm basic internet access before reconnecting. Switching networks can also change UDP availability or DNS behavior. Try another route from the options in the dashboard; don’t change the protocol field to a value your client doesn’t support.
Websites load, but video or AI tools are still restricted
Being able to access a page doesn’t necessarily mean you’re eligible to use the service. Platforms may also check your account region, subscription eligibility, or exit IP address. First verify the route your traffic actually takes, then see the streaming access guide or AI access guide. Don’t assume a service will work just because of a server’s name.
Keep a reproducible record after setup
After your first successful test, note the client name and version, connection mode, server region, and any error messages you encountered. Don’t include subscription keys or account passwords. If an issue comes up later, compare your setup with this known-working state and change one thing at a time.
When contacting support, describe your operating system, client, network environment, affected app, and what you’ve already tried. Share only relevant log excerpts, with credentials, personal information, and unrelated browsing records removed. “The subscription updates and the server test passes, but the target app won’t load” is more useful than “It won’t connect.” For more common tasks, see Quick Start and the Help Center.