VPN for Computer: How to Install and Set Up on Windows, macOS, and Linux

What you need to get a VPN working on your computer

A VLESS-based VPN requires two things: a subscription link from your VPN provider and a client app that can handle it. The link looks like a standard web address. The client uses it to download a server list and automatically updates it when the provider makes changes. We explain the difference between a subscription and a standalone vless:// key in our article on VLESS keys and subscriptions.

In the Byte VPN dashboard, you can copy a link like https://bytestand.fun/subscription/… with a single click. For computers, the dashboard recommends Hiddify for Windows and Happ for macOS. You can add the subscription to other VLESS-compatible clients, but the dashboard instructions are written for these two.

Hiddify is free and open-source. Happ's core features are also free. Neither app actually sells VPN services: the servers are provided by the service you bought your subscription from. The app simply connects to them.

The instructions for a laptop are identical to a desktop PC; they only depend on your operating system. The difference is where you use the laptop. On public Wi-Fi in a cafe, hotel, or coworking space, the hotspot owner and other people on the network can see your traffic. A VPN encrypts your traffic all the way to the server. That's why it makes sense to keep your laptop's VPN client turned on outside your home.

How to install a VPN on Windows 10 and 11 using Hiddify

These instructions are based on Hiddify 4.1, the latest version as of October 2026. The buttons might have slightly different names in other versions, but the general flow remains the same.

1. Go to the Hiddify releases page on GitHub and download the Hiddify-Windows-Setup-x64.exe file. If you prefer not to install anything, grab the Hiddify-Windows-Portable-x64.zip file: it's the exact same program, but runs directly from the extracted folder.
2. Run the installer. Windows might show a SmartScreen warning about an unknown publisher. Since you downloaded the file straight from the developer, click 'More info' → 'Run anyway'.
3. Copy the subscription link from your VPN provider's dashboard.
4. In Hiddify, click 'New Profile' (the '+' button) and choose 'Add from clipboard'. In a few seconds, a profile will appear with a list of servers.
5. Click the large connect button on the main screen. Once the status changes to 'Connected', your VPN is active.

If Hiddify displays 'VPN mode requires administrator privileges' instead of connecting, close the app and reopen it: right-click the shortcut → 'Run as administrator'. To avoid doing this manually every time, open the shortcut properties, go to the 'Compatibility' tab, and check 'Run this program as an administrator'.

How to check if the VPN is working and launch it with Windows

Hiddify can automatically check your IP address after connecting, displaying the country and organization handling your internet traffic (enable 'Automatically check IP address' in the 'General' settings). If it shows your home internet provider, your traffic is bypassing the VPN.

When you close the Hiddify window, it asks whether to hide or quit the app. If you choose 'Hide', the program stays in the system tray next to the clock, and the VPN keeps running. To avoid launching it manually after a reboot, go to 'Settings' → 'General' and enable 'Start on Boot' and 'Silent Start'. These settings launch the app, but they don't always automatically connect the VPN, so check the status after your computer boots.

For laptops with a Snapdragon processor (Windows on ARM), Happ is a better fit since it has a dedicated arm64 build. If you're on Windows 7, check the client requirements first. Happ officially only supports Windows 10 and 11. Throne offers a specific build for older Windows versions, all the way down to Windows 7. Just keep in mind that Windows 7 itself hasn't received security updates since January 2020.

VPN mode vs. System Proxy: Why some apps bypass the tunnel

Hiddify has a setting called 'Service Mode'. This dictates exactly what traffic goes through the VPN, and it explains most quirks like 'my browser works but my game doesn't'.

System Proxy enters Hiddify's address into your Windows proxy settings. Chrome, Edge, and Yandex Browser read these settings. Firefox does too, unless it has its own custom proxy configured. However, many other programs completely ignore these system settings: games, certain messengers, command-line utilities, and some Microsoft Store apps. Their traffic goes straight to the internet, even though Hiddify says 'Connected'.

VPN (often called TUN in other clients) creates a virtual network adapter in your system. All of your computer's traffic flows through it. Programs don't need to know how to handle proxies; they just connect to the internet normally. Windows requires administrator privileges for this mode.

There is also a 'Proxy' mode (fully named 'Proxy Service Only'). It doesn't change anything in the system itself. Hiddify just opens a local port (specified in the 'Mixed port' setting). Only programs where you manually enter 127.0.0.1 and that specific port will use the VPN.

You can switch modes in 'Settings' → 'Inbound' → 'Service Mode'. In Hiddify 4, you can also change it directly from the quick settings on the main screen. Always reconnect after changing the mode.

The easiest way to confirm your traffic is going through the VPN is to use an IP checking website. It should show the server's IP and country, not your provider's. We explain how to do this, and check for DNS and WebRTC leaks, in our guide on how to test your VPN.

If you're using a work laptop

On company computers, the IT department usually installs all software, and company policy might outright ban personal VPNs. Check the rules first: a personal VPN can conflict with a corporate one, blocking your access to internal company resources. If you're allowed to install apps but lack administrator privileges, System Proxy is your only option. Your browser will use the VPN, while everything else connects directly.

How to choose a server and check latency

A subscription usually includes several servers, often in different countries. For everyday tasks, pick the closest one. A shorter physical distance to the server means lower latency and faster page loads. Latency is far more important for video calls and online gaming than it is for simply downloading files.

In Hiddify, open the 'Proxies' tab and click the latency test icon. The response time in milliseconds will appear next to each server, and you can sort the list 'By Latency'. If a server doesn't respond, you'll see a timeout message instead of a number. If your subscription supports it, the automatic selection feature will switch to the server with the lowest ping on its own.

A good ping doesn't guarantee fast download speeds. If websites are loading slowly, compare two or three different servers. The load on a specific server can fluctuate depending on the time of day.

VPNs and online games

Gaming through a VPN routes your data to the VPN server first, and only then to the game server. If the game servers are in your country but the VPN server is in Europe, your ping will spike. In fast-paced games, you'll feel the delay. If you don't need a VPN for the game itself, it's easier to route the game's process directly using routing rules (more on that below). Also, always check the game's terms of service: some platforms restrict or ban VPN usage.

How to install a VPN on MacBook and iMac using Happ

Happ for Mac comes in two versions. The GitHub release (Happ.macOS.universal.dmg) runs on macOS 13 and newer, supporting both Apple Silicon and Intel processors. The Mac App Store version is built from the iPhone/iPad app using Catalyst and requires macOS 15 or newer. However, Happ apps are currently unavailable in the Russian App Store (as of October 2026), so if you have a Russian Apple ID, the GitHub version is your only option. The setup steps are similar for both.

1. Download Happ.macOS.universal.dmg from the Happ releases page on GitHub. If you use an Apple ID registered in a different country, you can install Happ directly from the Mac App Store.
2. Open the .dmg file and drag Happ to your Applications folder. On first launch, macOS might warn you that the app was downloaded from the internet and ask you to confirm opening it.
3. Copy your subscription link. In Happ, click '+' and select 'Add from clipboard'.
4. Select a server from the list and click the connect button.

Why your Mac asks for a password and permissions

macOS will ask for confirmation the first time you connect. This is completely normal. The GitHub version installs a background service to handle the connection, so it may ask for your administrator password. You can see this service listed as 'Happ' under 'System Settings' → 'General' → 'Login Items' (called 'Login Items & Extensions' in newer macOS versions).

The App Store version uses the built-in macOS VPN framework, just like the iPhone app. When you first enable it, macOS will ask you to allow Happ to add a VPN configuration. Once approved, it will appear in your Network settings.

Once set up, you don't need to keep the main Happ window open. You can easily connect and switch servers right from the menu bar icon.

The routing modes on Mac work exactly like they do on Windows. In Proxy mode, Happ configures the macOS system proxy, so mostly browsers will use the VPN. In TUN mode, all traffic goes through the tunnel. We cover routing, app-specific proxies, and common Happ errors in our deep dive into the Happ app.

Which VPN client to install on Linux

There are fewer options for Linux, but solid clients do exist. All three listed below can be downloaded from the developers' GitHub pages.

• Hiddify: An AppImage for most distributions and a .deb package for Debian and Ubuntu, strictly for x86-64 architecture. You'll need to make the AppImage executable before the first launch, either in the file properties or using the chmod +x command.
• Happ: .deb, .rpm, and Arch Linux packages, available for both x86-64 and ARM64. The developer specifies requirements of Ubuntu 22.04+, Debian 11.6+, or Red Hat 8.10+.
• Throne, the successor to NekoRay. The original NekoRay is no longer in active development (its repository is archived), but Throne is actively updated, with version 1.3.2 released in September 2026. It runs on sing-box and offers packages for Debian and Fedora, alongside versions for Windows and macOS.

For single-board computers like the Raspberry Pi or other ARM-based Linux machines, Happ and Throne are your best bets. Hiddify does not currently offer ARM builds for Linux.

The setup process is identical: add the subscription link, pick a server, and connect. The routing modes, however, are trickier than on Windows. On Linux, system proxies are configured within your specific desktop environment (GNOME, KDE, etc.), and many applications—especially command-line tools—simply ignore them. TUN mode is much more reliable. To use TUN, the client requires root privileges, so be prepared to enter your password.

Step-by-step instructions for every single Linux distribution become outdated quickly, so always check the client's README file on GitHub.

Why browser extensions and built-in VPNs fall short

What a browser extension actually protects

A VPN extension for Chrome, Edge, or Yandex Browser only configures a proxy within that specific browser. Websites will load through the extension's server, but absolutely everything else on your computer connects directly: email clients, Telegram Desktop, games, cloud storage syncing, and system updates.

Even inside the browser, your protection might be incomplete. Websites can use WebRTC—a technology for browser-based voice and video calls—to discover your real IP address if the extension doesn't actively block it.

For subscription holders, the biggest issue is that you simply can't paste a VLESS link into a standard browser extension. Extensions typically only work with their own proprietary servers, essentially functioning as a separate service with its own terms. Free extensions often make money by displaying ads or selling user data. We explain why a free VPN usually costs you more in the long run in our article on free VPNs.

An extension makes sense if you only need a VPN occasionally and strictly for browsing. For everything else, install a dedicated desktop client.

Why Windows and macOS built-in VPNs can't handle VLESS

Windows 11 has a dedicated menu at 'Settings' → 'Network & internet' → 'VPN' → 'Add VPN'. macOS has a similar path: 'System Settings' → 'Network' → action menu → 'Add VPN Configuration'. It seems logical to try these first.

However, their supported protocol lists are quite short. Windows supports PPTP, L2TP/IPsec, SSTP, and IKEv2. macOS supports IKEv2, L2TP over IPSec, and Cisco IPSec. VLESS is missing from both lists. VLESS is a protocol from the Xray ecosystem, which inherently requires a dedicated third-party client. Built-in system VPNs are primarily designed for connecting to corporate networks where an IT admin hands you a server address, username, and password.

If a provider gives you a link starting with vless:// or a subscription URL, pasting it into your system's built-in VPN settings is useless. We break down the differences between VLESS, WireGuard, OpenVPN, and IKEv2 in our protocol comparison guide.

How to make local Russian sites and banks work while the VPN is on

When all your traffic runs through a foreign server, Russian services see an international IP address. Your bank might demand extra verification, marketplaces will show the wrong delivery city, and Gosuslugi (Russia's public services portal) might refuse to load entirely. You don't have to turn off your VPN every time: modern clients can route specific traffic directly.

Hiddify has a built-in region setting for this: go to 'Settings' → 'Routing' → 'Region' → 'Russia (ru)'. Reconnect the VPN. Sites and IP addresses that Hiddify identifies as Russian based on its internal lists will now bypass the tunnel.

In the same 'Routing rules' menu, you can create custom rules. For example, you can route a specific program directly by its process name. Note that Hiddify only applies process and path rules when running in VPN (TUN) mode. For a detailed setup guide with examples, see our article on split tunneling in Windows.

If you need to bypass the VPN for a site that isn't on the built-in lists, create a manual rule:

1. Open 'Settings' → 'Routing' → 'Routing rules' and click 'Add new rule'.
2. In the 'Domain' field, enter the specific website (e.g., example.ru), or use the 'Domain suffix' field for an entire zone (e.g., .ru).
3. Under 'Outbound', select 'Direct' and save the rule.
4. Reconnect your VPN to apply the new rule.

Happ for desktop offers similar tools: routing profiles and application-specific proxies.

What to check if your computer's VPN won't connect

• Update the subscription within the app. In Hiddify, select 'Update profile' from the profile menu. The provider might have changed the server addresses.
• Try selecting a different server from the list.
• Close any other running VPN clients or proxy extensions. Two VPN clients running in TUN mode simultaneously will conflict with each other.
• Check if your antivirus or firewall is blocking the connection. Add the VPN client to your security software's exclusions if necessary.
• Verify your computer's date and time settings. Secure connections often fail if your system clock is significantly out of sync.
• If the client complains about permissions, run it as an administrator or change the service mode.
• If you lose internet access entirely while in VPN mode, switch to 'System Proxy' and check your browser. If it works, the server is fine, and the problem lies with the virtual network adapter. Restarting your computer or reinstalling the VPN client usually fixes this.
• Update the client app. Developers release fixes frequently; Happ for desktop had multiple updates in October 2026 alone.

If nothing helps, go through our VPN troubleshooting checklist. It covers device-independent issues, from mobile network quirks to ISP disruptions.