Skip to content

A complete VPN beginner guide: from the basics to choosing a plan, connecting and verifying your setup

New to cross-border connectivity? Learn what it is, how to choose a plan, set up an account, connect on each platform, and check that it works.

This complete VPN beginner’s guide walks you through the process in order: understanding how it works, choosing a plan, creating an account, connecting a client, and checking the results. Cross-border connectivity involves more than turning on a switch: make sure the app you want to use is routed through your chosen connection, while local services retain a direct route.

The short version: if you use a VPN regularly, compare monthly plans based on your actual data usage. If you use one only now and then, consider a data package that never expires. For setup, use the client and import method provided in the service dashboard. To verify your connection, check the target app, exit IP, rule matches, and DNS—not just the “Connected” status.

VPNs, proxies, and split tunneling

“VPN” is often used as a catch-all term for tools that connect you to international networks, but the underlying technology can differ. A system VPN typically creates a virtual network interface, with routing rules determining which traffic enters the tunnel. A system proxy, by contrast, provides proxy settings to apps that support them. Browsers may follow the system proxy, while some games, command-line tools, and background processes may not.

TUN mode uses a virtual interface to capture traffic that matches its routing rules. It often covers more traffic than a system proxy alone, but its scope still depends on client rules, exclusions, and system permissions. TUN mode does not prove that every app is routed through the proxy, and it may affect access to devices on your local network. Configure it according to the client documentation.

Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are different proxy protocols or protocol implementations, not plan tiers. Your client must support the protocols and transport settings used by the subscription. Check the VPNRQ dashboard for the actual configuration; seeing a protocol listed in a client does not mean the service supports it.

Method How it usually works What beginners should know
System proxy Apps that support proxy settings send requests to the client A working browser connection doesn’t mean other apps are using the proxy
TUN / tunnel Captures traffic through a virtual interface and routing rules Check permissions, rules, and local network access
Rule-based split tunneling Routes traffic based on domains, addresses, or app-level rules Make sure requests that need the proxy aren’t mistakenly sent direct
Global proxy mode Sends requests captured by the client through the proxy Doesn’t mean the system is capturing all traffic

“Global” describes the client’s routing policy; “TUN” describes how traffic is captured. They’re different things. When troubleshooting, check the capture scope and the route selected by each rule separately.

Choose a plan based on usage and data needs

Data allowance and connection speed are different things. Video streaming, downloads, and file syncing generally use more data than browsing, but actual usage depends on video quality, file size, and your habits. Check your device’s data usage first, then choose a plan. A larger allowance does not necessarily mean a faster connection.

VPNRQ monthly plans reset their data allowance each month on the date you signed up, not at the start of the calendar month. If you upgrade mid-cycle, the price difference is prorated for the remaining days. Data packages remain available until used and never expire. They can suit occasional use, but compare the total cost with your expected usage.

Plan type Price Data How it works
Monthly plan¥9.9 / month60GBResets monthly on your signup date
Monthly plan¥18 / month250GBResets monthly on your signup date
Monthly plan¥28 / month500GBResets monthly on your signup date
Data package¥158300GBUse it whenever you want; it never expires
Data package¥3581000GBUse it whenever you want; it never expires
Data package¥6583000GBUse it whenever you want; it never expires

VPNRQ allows unlimited devices to be connected at the same time, but that doesn’t mean the data allowance is unlimited. When several devices are downloading at once, keep an eye on your remaining data and local network usage. The service offers a 14-day no-questions-asked refund. Check the plans and pricing page for billing details before choosing a plan.

Which plan should you choose? If your usage is regular and long-term, compare monthly plans first. If you only need access occasionally or while traveling, consider a data package. When trying the service for the first time, test it with your actual use case before deciding whether you need a larger data allowance.

Create an account, pay, and import your subscription

VPNRQ doesn’t require an email address. Create an account with a username and password. Use a unique password and keep your login details safe. Creating an account and activating a plan are separate steps: being able to sign in doesn’t mean your client has a working connection configuration.

  1. Open the user dashboard. Check the site domain, then create an account by following the on-screen instructions. Don’t enter your password on an unfamiliar page linked from an unknown chat message.
  2. Check your plan. Confirm whether you’re choosing a monthly plan or a data package, along with the price and allowance. VPNRQ accepts Alipay, WeChat Pay, and USDT. Check your order status in the dashboard.
  3. Get a compatible client. Find instructions for your operating system at the client download page in the dashboard. Avoid modified installers from untrusted sources.
  4. Import your configuration. If the dashboard provides a subscription link or import button, follow the instructions to add it to your client. Wait for the server list and rules to finish loading.
  5. Make sure the configuration is ready. Check your plan status, remaining data, and subscription update status, then choose a server and connect.

Subscription links usually contain credentials needed to access your configuration. Treat them as sensitive account information. Don’t post a full link in a public forum or submit it to an unfamiliar online conversion site. If you need help, redact tokens, usernames, and other credentials. If a link has already been exposed, reset it using the dashboard or contact support.

Updating a subscription fetches the configuration again; it does not renew your plan. If the server list is empty, check that the link is complete, the plan is active, and the client supports the configuration format. Importing the same subscription repeatedly can create duplicate profiles, so check which one is active before making changes.

Connect for the first time on each platform

VPNRQ supports Windows, macOS, iOS, Android, and Linux. Client interfaces and permission settings vary by platform, so follow the relevant instructions in the dashboard. The general steps are the same: install a trusted client, import the configuration, grant the required permissions, choose your routing rules and server, then test the app you want to use.

Windows and macOS

On desktop, first check whether the system proxy is enabled. If an app doesn’t follow the system proxy, consider using TUN mode if your client supports it. Windows may require administrator permissions to set up a virtual interface. macOS may ask you to allow a network extension or add a VPN configuration, depending on how the client works. Don’t disable system security features just to dismiss an error.

If your computer also runs a company VPN, security software, or another proxy tool, check your organization’s network policy first. Multiple tools can change proxy settings, routes, or DNS and cause conflicts. For company network access, don’t override managed settings without permission; ask your administrator what’s allowed.

iOS and Android

On mobile, client traffic often runs through the system VPN interface, and the first connection usually requires system permission. Android battery optimization may limit background activity; if the connection drops when the screen locks, check the client’s background restrictions. On iOS, make sure the expected configuration is enabled so you don’t mistake another network tool’s status for the current client’s connection.

Linux

On Linux, graphical apps, terminal tools, and system services may not share proxy settings. Command-line tools may need their own proxy configuration or environment variables; a desktop proxy switch doesn’t prove background services are routed through the client. When enabling TUN, also check permissions, routes, and DNS management to avoid multiple components competing to handle DNS.

Choosing a server: location, route, and use case

VPNRQ covers 100+ countries and 190+ routes. When choosing a server, start with the location required by your target service, then compare how it performs in the apps you use. Shorter geographic distance is only a rough guide: your local carrier, the route between networks, and the destination server’s location can all affect performance.

A direct connection usually means connecting from your device straight to an overseas entry point. A relay typically routes traffic through an intermediate entry point before it reaches the destination. IEPL refers to a dedicated link used on a particular network segment. These labels alone don’t prove end-to-end performance or mean the entire route uses a dedicated link. Check the server details in the dashboard for available connection types.

For calls, look for consistent audio and smooth video. For downloads, consider sustained transfer performance. Websites and AI tools may also have their own location, account, and risk-control requirements. Being able to open a speed-test page doesn’t guarantee that every app will work. For a fair comparison, keep the device, task, and local network conditions the same.

For everyday use, start with rule-based split tunneling so local services and devices on your network keep an appropriate route. If the target app doesn’t work, temporarily switch policies to compare. Avoid changing the server, rules, and DNS all at once during testing; even if things start working again, you won’t know which change made the difference.

How to verify that your connection works

A “Connected” status usually only means the configuration has started or the tunnel is up. Test the connection using your actual use case, and check the client’s connection details or logs as well. Exit IP lookups, DNS checks, and app tests provide different evidence; none can replace the others.

  • ✅ Open the app you actually want to use and try a real task, such as loading a document, sending a request, or playing content—not just sitting on the login screen.
  • ✅ Check the client’s rule matches and connection details to confirm the request is using the expected route, not a direct connection or a different exit.
  • ✅ Look up your exit IP address and location in a browser, then compare them with the server details. This only reflects that browser’s request, not every app.
  • ✅ Check the DNS resolution path against the client’s split-tunneling design. Also check whether IPv6 is following the expected route.
  • ✅ Disconnect and check the target app and local services again. Confirm that system proxy settings and routes have been restored and devices on your local network are still accessible.

A DNS leak generally means that queries intended to use a particular resolution path were sent to another resolver by mistake. But seeing a local resolver on a test page doesn’t automatically mean there’s a leak: some setups intentionally use local DNS for local domains. Consider the query, routing rules, and client logs together.

Conversely, if a test page doesn’t show a local resolver, that doesn’t prove all traffic is being handled as expected. Your browser’s encrypted DNS settings may differ from the client’s, and IPv6 connections may take a different route. If results conflict, note your current settings and adjust them using the client documentation. Don’t pile on extra DNS services without a reason.

VPNRQ emphasizes quantum encryption in its security messaging, but a connection tool doesn’t replace checking website identities, keeping devices up to date, or protecting your account. Don’t enter credentials on untrusted pages, and don’t assume an encrypted connection guarantees the behavior of the websites you visit.

Can’t connect? Troubleshoot one clue at a time

Disconnect the client first and check whether your regular internet connection works. Switching servers usually won’t help if the underlying network is down. Once it’s working, check your plan status, whether the subscription updated successfully, whether your system clock is correct, and whether the client has the configuration you intended to use enabled.

If no apps work, start with connection logs, permissions, and whether the entry point is reachable. If only one app fails, check whether it follows the proxy, which rule it matched, and whether the service itself has restrictions. If only one server fails, compare it with another server in the same region instead of immediately reinstalling the entire client.

If websites work but your local printer, shared files, or company network don’t, check whether local network or company network addresses are being incorrectly sent through the proxy. If problems start after waking your device or switching networks, reconnect and check the system proxy status. Keeping a record of changes makes it easier to find the cause than repeatedly restoring default settings.

If the issue persists, check the Help Center and troubleshooting guide, or contact support through a support ticket. Include your operating system, client version, what you were doing when the issue occurred, the server name, and redacted logs. Don’t share your password, full subscription link, or payment credentials.

How to know you’re set: Your plan matches your usage, you know where the client configuration came from, the target request uses the expected route, DNS and routing follow your split-tunneling rules, and your local network works normally after disconnecting. When all these checks pass, you’ve completed the process from choosing a plan to verifying your connection.

First Month Free