The key to setting up a VPN on Windows is to make sure the client handles the traffic you want routed, then configure it to start when you sign in. Installing the app is only the first step: the subscription provides connection settings, the route determines the exit location, and the proxy mode determines which apps use it. Follow the steps below in order. You don’t need to change your router or enter server details that haven’t been provided.
Before installation: Understand VPN clients and Windows’ built-in VPN
The “VPN” section in Windows Settings isn’t a universal importer for every subscription service. Configurations using Shadowsocks, VMess, Trojan, VLESS, Hysteria2, or TUIC generally require a client that supports the relevant protocol and subscription format. Different protocol names don’t mean they’re interchangeable on the same computer; check the client’s supported protocols and the configuration provided in your panel.
Sign in to the VPNNM panel, open the client download page, and read the Windows instructions. You’ll need to sign in to get your subscription. Downloading the app and obtaining a usable configuration are separate steps. If you already have a client, don’t import anything yet—first check that its version, supported protocols, and configuration format are compatible.
- ✅ In Windows, go to “Settings → System → About” and check your system type. Download the app for the matching architecture.
- ✅ Make sure the download source matches the panel’s instructions. Save your subscription link only in a client you use.
- ✅ Note your existing proxy settings. If you already use another network tool, exit it first to avoid having multiple tools handle traffic at once.
- ❌ Don’t paste your subscription link into public conversion websites, forums, or screenshots. It may contain credentials that grant access to your account.
Step 1: Install and launch the client
Once the installer has downloaded, run it as directed on the download page. If it’s an installer, verify the source and complete the installation. If it’s a portable archive, extract all files to a permanent folder, then launch the app from there—don’t run it from the archive preview. Keep the folder in place if you plan to enable startup at sign-in.
Windows may show a User Account Control prompt. Check the app’s name and source, and approve it only if the installation or a required feature needs permission. If Windows blocks the app, check the file source, signature, or official instructions; don’t routinely disable system protection to install software. On work-managed computers, network drivers and proxy settings may also be restricted by administrator policies.
After launching the client, look for “Settings,” “Configuration,” or “Subscriptions.” These are general labels to help you find the right screen; this guide doesn’t assume the panel currently offers a specific client. If the client asks to install a virtual network adapter or background service, read the accompanying guide first. You may not need these features if you’re only using the system proxy.
Step 2: Get and import your subscription
Find the subscription section in the panel, choose the format for your client, and copy the link. In the client, open “Subscriptions,” “Configuration,” or a similarly named page, add a remote subscription, paste the link, and give it a recognizable name. Save it, then update the subscription or download the configuration. If the panel offers one-click import, confirm the target app before allowing your browser to open it.
- Sign in to the panel, find an active subscription, and confirm that it matches your client or configuration format.
- Add a remote subscription in the client and paste the full link without extra spaces or line breaks.
- Run an update and check that routes or policy groups appear—not just a new subscription name.
- Select this configuration for use, then open the route selection screen.
A “subscription updated” message only means the configuration was retrieved; it doesn’t mean you’re connected. If you see a format error, check whether you pasted a web page URL instead of a subscription link. If the download succeeds but the client can’t parse it, check that you selected the correct format. For update failures, also check your system clock, local network, and subscription status in the panel. Don’t repeatedly delete and reinstall the client.
Step 3: Choose a route and decide which traffic to route
Choose a route in the region required by the service you want to use. If there’s no specific region requirement, try a nearby region first and compare the results. Latency tests are useful for troubleshooting, but don’t tell you everything about download speeds or video playback. For your first setup, stick with one route while verifying the connection; frequent switching makes issues harder to diagnose.
The route’s exit location and the way traffic is handled are two separate things. Choosing a route in Japan doesn’t mean every app will use a Japanese exit; that also depends on the system proxy, virtual network adapter, and routing rules. The options below aren’t interchangeable switches.
| Option | What it does | What beginners should know |
|---|---|---|
| System proxy | Routes traffic from apps that follow Windows proxy settings through the local proxy. | Browsers are usually a good way to test it, but some apps ignore this setting. |
| TUN / virtual network adapter | Uses a virtual network interface to handle traffic in supported clients. | Usually requires extra permissions. The traffic covered still depends on routing, exclusions, and DNS settings. |
| Rule mode | Uses domain, address, or other rules to decide whether traffic connects directly or through a proxy. | Start with the supplied configuration. Changing rules yourself could accidentally send the site you want to access through a direct connection. |
| Global mode | Typically sends requests already handled by the client through the selected proxy policy. | This doesn’t mean every app will be handled, or that the system proxy automatically covers the entire computer. |
If you’re only testing websites, follow the client’s guide to enable the system proxy and rule mode. If an app doesn’t follow the system proxy, check its network settings or the client’s TUN instructions. Don’t run multiple virtual network adapter tools at the same time; conflicts involving routes and DNS can make problems harder to diagnose.
Step 4: Verify the connection and DNS behavior
Open the network test page to check your browser’s current exit location, then visit the site you actually need. In rule mode, the test page may connect directly, so seeing your local exit doesn’t immediately mean the setup has failed. Check the client’s connection logs to see whether the request matched a direct, proxy, or block rule.
If the site opens, test the features you need, such as sign-in, images, and video. Reaching a site’s main domain doesn’t mean its resource domains are using the right rules. If an app still doesn’t work, first check whether it uses the system proxy. If needed, follow the guide to switch to a supported traffic-handling mode instead of replacing your subscription right away.
DNS translates domain names into addresses. A DNS leak generally means a query that should have followed the expected resolution path went another way. Seeing the name of a particular DNS provider alone doesn’t prove there’s a leak; consider the client’s DNS settings, the browser’s secure DNS, and direct-connection rules together. A browser-based test also can’t show how every app on your computer handles DNS.
When troubleshooting, keep the supplied DNS configuration and check the connection logs and relevant browser settings. Change one thing at a time. Don’t apply DNS addresses you find online without checking first: the resolver’s location, how a site identifies your region, and network reachability can all affect each other.
What verification tells you: A running client and a successful subscription update don’t prove the target app is using the connection. Confirm that the site works, requests follow the intended rules, and remember that test results cover only the access path you tested.
Step 5: Set up startup and exit behavior
First, connect manually and make sure it works. Then enable “Start with Windows” or “Launch at sign-in” in the client settings. Check separate options such as “Connect on startup” and “Restore system proxy”—some clients launch the app without restoring the proxy automatically. Windows app startup usually happens after you sign in; it doesn’t mean a connection is established before sign-in.
In Windows, go to “Settings → Apps → Startup” to check whether the client is allowed to launch. You can also check the Startup apps list in Task Manager. Keep portable clients in their original folder. If TUN mode requires a background service or extra permissions, follow the supplied documentation. Don’t create a high-privilege task just to bypass a prompt.
After restarting and signing in, check the tray icon, active configuration, and proxy status, then open the target site. If the client can’t connect immediately after startup, check that the network is ready and whether the client supports reconnecting. Finally, test a normal exit: the client should restore settings as designed. If your browser loses connectivity after an abnormal exit, check whether a local proxy address remains under Windows “Network & Internet → Proxy.”
Common issues and troubleshooting steps
My subscription shows routes, but no websites open after connecting. What should I do?
First, stop the client from handling traffic and restore your usual proxy settings. Check that your local network works on its own. Then check the subscription status, system clock, selected route, and any other network tools. If your local connection works again, re-enable the client and use its logs to determine whether the issue is a failed connection, a routing rule, or DNS. When contacting support, include the error details with sensitive information removed.
Why does it work in my browser but not in other apps?
Apps vary in their support for the system proxy. Some have their own proxy settings or use a different network transport. Check the app’s network settings first, then consult the client’s guide to see whether TUN mode is suitable. Global mode usually changes routing only for traffic already handled by the client; it can’t guarantee that apps which bypass the proxy will be covered.
Which VPN plan should I choose for Windows?
VPNNM monthly plans are ¥9.9/60GB, ¥18/250GB, and ¥28/500GB. Monthly data resets on the activation date each month. Data packages are ¥158/300GB, ¥358/1000GB, and ¥658/3000GB; they never expire and can be used until depleted. Choose based on how often you use the service. See the plans page for details, and don’t treat traffic shown by your local client as a billing record.
Once setup is complete, check subscription updates, the active route, and proxy status as part of your routine. For more configuration help, visit the Guides for the instructions currently provided with the panel. If something goes wrong, keep the error details and note the steps you took; that’s more useful for troubleshooting than repeatedly reinstalling the client.