To use a VPN on Android, install a compatible client, get a subscription or sign in to your account, allow Android to establish a VPN connection, then check your public IP. The VPN page in Android settings is not a general-purpose subscription importer, so you can’t simply paste any subscription link there. Follow the steps below for a first-time setup. Menu names may vary by device and client version.
Get the connection working first; fine-tune the rules afterward. Start with the client and instructions provided in your account dashboard. Once the configuration is loaded, system permission is granted, and the target app is using the selected route, you can adjust background settings and per-app routing. Changing several settings at once makes problems harder to pinpoint.
Before you install: understand how the client and subscriptions work together
The client reads connection settings, handles traffic, and shows connection status. A subscription provides route configurations to compatible clients. They are not interchangeable: installing an app doesn’t mean your account has available data, and having a subscription doesn’t mean every Android client can read it.
Some services use a dedicated client that displays routes after you sign in; others require you to import a subscription into a compatible client. Follow the instructions in your account dashboard rather than switching apps just because one is mentioned in an online guide. Shadowsocks, VMess, Trojan, and VLESS are different proxy protocols or configuration systems. They aren’t interchangeable import formats, nor are they the same as the protocol options in Android’s VPN settings.
X8VPN supports Android. Create an account with a username and password—no email address required. Sign in to get the client and subscription. Before connecting, check your plan status and remaining data in the dashboard. X8VPN allows unlimited simultaneous devices, but keep an eye on your data balance when using multiple devices.
- ✅ Make sure the client comes from your account dashboard or a source it explicitly recommends.
- ✅ Check that the client supports the configuration type provided in your dashboard.
- ✅ Keep your account credentials safe and check your subscription status and remaining data.
- ✅ Disconnect any other apps that are using Android’s VPN connection first.
Install the client: check its source and permissions
Get Android installation instructions from the client download section in your dashboard. If you install from a package file, Android may ask you to allow the browser or file manager you’re using to install unknown apps. Grant this permission only to the source you’re using, and turn it off again when installation is complete. Don’t disable Android’s security checks altogether just to install the client.
If you see “App not installed,” check the system message before trying another package. Common causes include an incomplete download, an incompatible Android version, or a mismatch between the existing app’s signature and the new installer. Check the dashboard instructions and where the existing app came from. Before uninstalling, make sure you can restore your account details and configuration so you don’t lose your only saved copy.
The app may request notification permission the first time you open it. Notifications can help you monitor background connection status, but notification access is separate from Android’s VPN permission. If the app requests a permission that doesn’t seem related to its connection features, check its documentation before allowing it. A successful installation means the app opens properly—not that you can already access your target site.
Import a subscription: it’s not a regular web page
Find the subscription option for your client in the account dashboard. If automatic import is supported, check that the correct app is about to open. If the automatic handoff fails, use an option such as “Import from link” or “Add subscription” in the client. When copying the link, don’t include surrounding instructions, line breaks, quotation marks, or trailing spaces. The dashboard page URL is not a subscription URL.
- Sign in to the dashboard and open the subscription instructions for your client.
- Import automatically as instructed, or copy the subscription link into the client’s subscription field.
- Save and update, then wait for the client to fetch the configuration.
- Check that a route list appears, then select the route you want to use.
A successful update means the client fetched and parsed the configuration; it doesn’t mean a route is connected yet. If the client says the format isn’t supported, check the import type and client compatibility. If it can’t fetch the configuration, check your network, the link, and your account status. Don’t send the link to an unknown online conversion site—the site may be able to access your full account configuration.
If a dedicated client only asks you to sign in and sync routes, there’s no need to look for an import button. Avoid keeping unfamiliar old configurations alongside a new subscription, as it’s easy to select the wrong one. After an update, make sure the active configuration is the one you just synced.
Connect: allow Android’s VPN request
Choose a route and tap Connect. Android will usually show a VPN connection request. Check that the app name in the prompt matches the client you installed, then allow the connection. Clients often use Android’s VPN interface to handle selected traffic. The VPN icon only indicates that the interface is active; by itself, it doesn’t prove the remote route is working.
For your first test, use the client’s recommended default mode. Rule-based mode routes traffic according to domain, address, or app rules, so some sites may connect directly as expected. Global proxy mode generally sends traffic handled by the client through the proxy, but settings such as app exclusions can still affect what gets routed. “Global” doesn’t mean all data always goes through a remote route under every circumstance.
Regular apps generally can’t use Android’s VPN connection at the same time within the same user profile. Firewalls, ad blockers, and other network tools that use a local VPN interface may conflict with your client. Pause them and test again. Don’t assume they can work together just because their icons are still visible.
If the client offers “Always-on VPN” or “Block connections without VPN,” consider enabling these only after the connection is stable. The latter may block network access if the client disconnects. If nothing loads, check these system settings before assuming your local network is broken.
Disconnects in the background: adjust battery and network restrictions
If the VPN works while your screen is on but stops working when it’s locked, background restrictions may be the cause—not the route itself. Open the client’s app info in Android settings and look for battery options. Allow background activity or set the app to unrestricted, depending on the options available on your device. Menu names vary by manufacturer, so don’t worry if they don’t match a screenshot exactly.
Some Android devices also have separate controls for auto-start, background data, or data saver. Allow the client to use the background data it needs and check whether Data Saver is pausing it. “Lock app” in the recent apps screen is a manufacturer-specific aid; it doesn’t replace battery settings or guarantee the system won’t close the app.
Test the changes: keep the connection active, lock your screen, then unlock it and check the client and target site. Repeat after switching between network connections. Switching networks can trigger a reconnect, so a brief interruption alone doesn’t mean the configuration is wrong. Allowing background activity may increase battery use, so choose settings that suit your needs rather than disabling every battery-saving feature on your device.
Check that it works: IP address, DNS, and app routing
Before connecting, open the network check page and note your public IP. Connect, refresh the page, and compare the results. If your browser is set to bypass the proxy under your rules, an unchanged IP doesn’t necessarily mean the connection failed. You can temporarily test with the client’s global proxy mode or explicitly route the test browser through the proxy, then restore your usual rules afterward.
Geolocation databases may take time to update, so the displayed region is only a clue. Also open the content you actually need in the target app and check whether it loads and you can sign in. Apps have their own region, account, and access rules. A changed IP doesn’t guarantee the platform will accept your current network environment.
Interpret DNS test results in the context of your routing rules. A local resolver may appear because of a direct-connection rule, browser Secure DNS, Android Private DNS, or the client’s DNS settings. First check whether the test domain should go through the proxy, then verify its resolution path. A resolver’s location alone doesn’t prove that all traffic is leaking. Don’t disable every DNS protection setting just to get a particular test result.
| What you see | Check first | Next step |
|---|---|---|
| Subscription update failed | Link, import format, local network | Get the right configuration from the dashboard again and check client compatibility. |
| Routes are listed, but none will connect | System permission, account data, selected route | Check permission and remaining data, then try another route available in the dashboard. |
| Connected, but browser IP hasn’t changed | Routing rules, app exclusions | Make sure the browser is routed through the client, then test again. |
| Connection drops when the screen is locked | Battery optimization, background activity restrictions | Allow the client to run in the background, then test again with the screen locked. |
| Only certain sites or apps fail | App rules, DNS, target platform restrictions | Keep other settings the same and check each factor one at a time. |
Wrap up troubleshooting: keep details you can reproduce
Change one thing at a time. For example, keep the same network and app while trying a different route, or keep the route and adjust only the routing mode. Reinstalling, refreshing the subscription, changing DNS, and switching modes all at once can erase useful clues. For more checks, see the troubleshooting guide.
If you still can’t find the cause, submit your device and Android version, client version, network type, where the failure occurs, and the exact error message through a support ticket in the dashboard. Before sharing screenshots or logs, hide subscription credentials, passwords, and personal information. Don’t post your full configuration on a public page.
Choose a plan based on your actual data needs rather than upgrading to troubleshoot a connection issue. X8VPN monthly subscription data resets each month on the activation date. Data packs remain available until used and never expire, and X8VPN offers a 30-day money-back guarantee. Check current prices on the plans page. Once your connection is verified, keep the working configuration and focus on subscription updates, your remaining data, and app rules.
Your setup is working when: the client can update its configuration, Android permission is active, your target apps follow the expected routing rules, the IP check matches those rules, and the connection recovers after you lock your screen. These checks tell you more than the “Connected” label alone.