5 Platforms · Free & Open Source · Continuously Updated
Choose your OS to get the right installer. All versions are free and open source, with rule-based routing, multi-protocol proxy support, and one-click subscription import.
Clash for WindowsA graphical Clash client for Windows 10 / 11, with system proxy support, TUN transparent proxy mode, and automatic subscription updates. No command line needed — just double-click to run.
A smart Clash proxy client built specifically for Windows. Simple to use, with subscription import, rule-based routing, system proxy, and TUN mode support. Clean, modern interface — our top recommended client.
Download Installer
The community successor to Clash Verge, built on the Clash.Meta (Mihomo) core engine. Supports TUN global transparent proxy, subscription management, and rule scripting — the most feature-complete and actively maintained community client.
A cross-platform Clash client built with Flutter, covering Windows, macOS, Android, and Linux. Clean, attractive interface with intuitive config imports.
Download Installer
A GUI client built on the Clash.Meta core engine, supporting custom routing scripts in JavaScript, Lua, and Python — for advanced users who need highly customized routing logic.
Download Installer
The classic Clash for Windows (CFW), originally developed by Fndroid, was discontinued and its source repository removed in 2023. An archived installer is provided here for existing users as a temporary reference — we recommend migrating to one of the clients above as soon as possible.
Download Archived InstallerDouble-click the downloaded .exe file and follow the prompts to complete installation. Once done, the Clash icon will appear in your system tray.
Right-click the tray icon to open the panel, paste your subscription link under "Subscription Management," and save. The client will automatically fetch nodes and routing rules.
Switch to your target proxy node in the panel, then turn on "Set as System Proxy" to route global traffic according to your rules. You can turn it off anytime with one click.
Most laptops and desktops with Intel or AMD processors should choose the x64 version. Only choose ARM64 if your device uses an ARM processor like Qualcomm Snapdragon. If you're unsure, go with x64.
Some antivirus software false-flags software that hasn't been widely distributed yet — this is a known, common occurrence. The installer's source code is fully open source, so you can verify the build hashes yourself before deciding whether to trust it.
We currently recommend Clash Plus (clean interface, actively maintained) or the community client Clash Verge Rev (most full-featured). Both are compatible with original Clash config files, so migration is nearly effortless.
Not currently. The graphical clients rely on newer system components, requiring at least Windows 10 1809 — Windows 11 is recommended.
Clash for macOSNatively supports both Apple Silicon and Intel chips, with a menu bar for quick node switching and TUN enhanced mode. Compatible with macOS 12 Monterey and later.
A smart Clash proxy client built specifically for macOS, with native support for Apple Silicon and Intel chips. Supports subscription import, rule-based routing, and TUN mode, with a clean, modern menu bar interface.
The top community client for macOS, with native Apple Silicon support and a built-in Clash.Meta core. Supports TUN enhanced mode and script-based rules, with the same feature set as the Windows version.
The macOS version of the Flutter cross-platform client, supporting both Apple Silicon and Intel. Clean interface with a workflow consistent with the Android version.
A lightweight menu bar client for macOS, built on the Clash.Meta core, with a minimal interface. No longer actively maintained — existing users can keep using it, but new users should choose one of the actively updated clients above.
Download Archived InstallerDownload the .dmg installer that matches your chip type, double-click to open it, then drag the app into the "Applications" folder to complete installation.
Click the menu bar icon and go to "Config → Manage Configs," paste your subscription link, and save. The client will automatically fetch nodes and routing rules.
Check "Set as System Proxy" in the menu bar to route global traffic by rules; you can also enable TUN mode for broader network compatibility.
This is macOS Gatekeeper's default block on unnotarized apps. Go to System Settings → Privacy & Security, find the blocked app near the bottom, and click "Open Anyway" to proceed.
Click the Apple icon in the top-left corner and select "About This Mac," then check the "Chip" field: if it shows Apple M1 / M2 / M3, etc., choose the Apple Silicon version; if it shows Intel Core, choose the Intel (x64) version. Nearly all Macs purchased after late 2020 use Apple Silicon.
We recommend Clash Plus or Clash Verge Rev — both are natively built for Apple Silicon, actively maintained, and compatible with existing config files, making migration nearly effortless.
Check System Settings → Privacy & Security to confirm the app isn't blocked, or try reopening it from Launchpad. On some systems, you may need to allow it to run in the background under Login Items.
Clash for AndroidDownload and install the Android APK directly — supports VPN-mode transparent proxying and per-app routing. Compatible with Android 5.0 and later, no root required.
A smart Clash proxy client built specifically for Android. Simple to use, with subscription import, rule-based routing, and TUN mode support. Clean, modern interface — our top recommended client.
Download Installer
An Android client officially maintained by MetaCubeX, built on the Clash.Meta (Mihomo) core. Supports next-generation protocols like TUIC v5, Hysteria2, and VLESS Reality — the most comprehensive protocol support available.
A lightweight Android client built with Flutter, with a clean, smooth interface that's beginner-friendly. Supports one-click subscription import, fast node switching, and basic rule-based routing.
An Android client compatible with the Clash subscription format that also supports the Surge config format. Clean interface, strong stability — great for users who work with both Clash and Surge subscriptions.
Download InstallerIf your system blocks the downloaded .apk file, go to Settings → Security, or use the install prompt itself to allow this installation source.
Open the app, paste your subscription link on the "Subscription" page, and save. The client will automatically fetch the node list and routing rule sets.
On first launch, you'll be asked to grant VPN permission. Once approved, select a node and tap Connect to route all phone traffic according to your rules.
Most Android phones released after 2016 support ARM64-v8a — download that first. If your device is older or the ARM64 version fails to install, try ARMv7. If you're still not sure, download the Universal version — it's slightly larger but offers the best compatibility.
This is Android's default protection for installers not distributed through an app store — it's completely normal. Choose "Install anyway" in the prompt, or temporarily allow it in Settings to continue.
Try disabling "Traffic Statistics" and frequent latency testing in the settings to reduce background power usage, or switch to a lower-power node, or lower the log output level.
Some apps detect a VPN environment and block network access. Add that app to the whitelist in the per-app proxy settings so its traffic bypasses Clash and connects directly.
Clash for iOSRecommended options for proxying with the Clash protocol on iPhone and iPad. Due to Apple's platform restrictions, iOS doesn't support installing APK/IPA files directly — all apps must be downloaded through the App Store.
A smart Clash proxy client built specifically for iPhone and iPad. Simple to use, with subscription import, rule-based routing, and TUN mode support. Clean, modern interface, available directly on the App Store.
Go to the App StoreTap the button above to go to the App Store, purchase the app, and tap "Get" to install. Once done, the app icon will appear on your home screen.
Open the app, paste your subscription link on the "Config" page and save — or scan a QR code to quickly import your subscription info.
On your first connection, a system permission prompt will appear — tap "Allow" to add the VPN configuration, then select a node and tap Connect.
There's currently no fully-featured free Clash client for iOS — the mainstream clients are all paid App Store apps that need to be purchased. If some apps aren't available on your region's App Store, you'll need an Apple ID from a different region — please be mindful of account security and related risks.
Some regional App Stores restrict proxy-related apps. Try switching to an App Store account from a different region, or use the direct links provided on this page.
iOS only allows one network extension to be active at a time — disconnect any other VPN app before turning on Clash's connection toggle.
The network extension process is scheduled independently by the system and isn't subject to normal background app reclaiming — it doesn't need to stay in the foreground to keep running.
Clash for LinuxA graphical Clash client for Debian/Ubuntu and Fedora/CentOS, supporting x86_64 and ARM64 architectures. Comes as .deb and .rpm packages — ready to use on your desktop once installed.
A graphical Linux client with the same experience as the Windows / macOS versions. Available as both .deb and .rpm packages, supporting AMD64 and ARM64 — covers the needs of most desktop users.
The Linux version of the Flutter cross-platform client, great for Debian/Ubuntu-based distros. Easy to install (just dpkg -i), with an interface consistent with the Android version.
deb users run sudo dpkg -i filename.deb; rpm users run sudo rpm -i filename.rpm or sudo dnf install filename.rpm.
Open the app, paste your subscription link on the "Subscription" page, and save. The client will automatically fetch nodes and routing rule sets.
Enable the system proxy or TUN mode in settings to have all global traffic routed according to your rules.
Run uname -m in a terminal — x86_64 corresponds to amd64, and aarch64 corresponds to arm64. Use this to pick the matching installer.
Run sudo apt --fix-broken install to resolve missing dependencies, then reinstall. This is usually caused by outdated system libraries.
Install with sudo dnf install filename.rpm when possible — dnf will automatically resolve and install missing dependencies. If only the rpm command is available, manually install the dependencies first and try again.
For router environments, we recommend using the mihomo binary from the "Core" tab directly, and registering it as a service with your system's built-in init scripts — no need for a full graphical client.
Mihomo CoreMihomo (formerly Clash.Meta) is the most widely used Clash core engine in the community, supporting all mainstream proxy protocols. Ideal for deployment on servers, OpenWrt routers, or Docker containers — basic command-line skills required.
| Architecture | Format | Best For | Download |
|---|---|---|---|
| AMD64 / x64 | .zip | 64-bit Windows 10 / 11 servers | Download → |
| ARM64 | .zip | ARM-based Windows devices | Download → |
| Architecture | Format | Best For | Download |
|---|---|---|---|
| AMD64 / Intel | .gz | Intel Macs (macOS server) | Download → |
| ARM64 / Apple Silicon | .gz | M1 / M2 / M3 Macs | Download → |
| Architecture | Format | Best For | Download |
|---|---|---|---|
| AMD64 / x86_64 | .deb | Debian / Ubuntu servers (recommended) | Download → |
| AMD64 / x86_64 | .gz | Generic Linux x86_64 binary | Download → |
| ARM64 / AArch64 | .gz | ARM64 servers / Raspberry Pi 4+ | Download → |
| ARMv7 | .gz | 32-bit ARM (Raspberry Pi 3 / older routers) | Download → |
| MIPS（soft-float） | .gz | OpenWrt / MIPS-based routers | Download → |
Download the .gz file for your architecture, extract it, make it executable (chmod +x mihomo), write a YAML config file, and start it with ./mihomo -d /path/to/config-dir. We recommend setting it up as a systemd service for auto-start, and opening the proxy ports in your firewall (default HTTP 7890 / SOCKS5 7891).
The Mihomo core is a command-line program that handles the actual proxy traffic — fully featured, but you need to hand-edit a YAML config file and run it from a terminal, making it ideal for server/router deployments. A GUI client (like Clash Verge Rev) wraps a graphical interface around the core — most users should just use a GUI client directly and never need to touch the core.
We recommend the armv7 or mips core, registered as a system service via OpenWrt's init.d scripts so the proxy process starts automatically after a firmware reboot.
When running in the foreground, logs print directly to the terminal. If managed via systemd, use journalctl -u mihomo -f to view live service logs.
