Complete VPN Setup Guide

Service / scope

Understanding cross-border network services

ShunVPN is a network acceleration subscription service for cross-border access and international routes. The process works like this: your account manages your plan benefits, your subscription provides route configurations to the client, and the client handles network requests according to your device settings. Paying on the website does not connect a device by itself, and installing a client does not provide active routes. Understanding these as separate steps makes it easier to tell whether to check an order, refresh a subscription, or review device permissions when something goes wrong.

How accounts, subscriptions, and clients work together

Your account lets you check your plan, data usage, orders, and service status. The subscription link is how a client retrieves route configurations and may contain access credentials, so treat it as sensitive information. The client runs on Windows, macOS, iOS, Android, or Linux and handles importing configurations, choosing a route, and connecting. Account passwords and subscription links serve different purposes: never enter your password in a subscription URL field or share a subscription link as an ordinary web address.

Coverage includes 110+ countries and 190+ routes. This describes the service's route coverage; it does not mean every client will show exactly the same list at all times. The routes available to you depend on your account benefits, the subscription provided by the dashboard, and the results of a successful client update. If two devices show different lists, compare their subscription sources and last update times before assuming a region is no longer available.

Route types and real-world performance

IEPL, relay, and direct routes describe different ways of organizing network paths. Dedicated routes focus on dedicated link resources; relay routes use an intermediate node; direct routes reduce some relay steps. The name alone cannot predict performance. Your local broadband, wireless signal, the destination's region, and time of use all affect the result. Choose routes based on the destination and task, then compare candidates under the same conditions.

For web browsing, check whether pages load fully. For online meetings, pay attention to audio continuity; for AI coding, focus on whether sessions stay connected. A route that works well for downloads may not be ideal for interactive tasks. See the Servers and Routes page for details. This guide focuses on using routes on your devices—not ranking them by name or treating coverage figures as a guarantee that a specific website will be accessible.

Service scope and limitations

Quantum encryption is part of the service's security positioning, but network encryption does not replace good device security practices. Keep your operating system updated, review browser permissions, use a secure account password, and check where downloaded files come from. A network service also does not automatically change your account region, content licensing, or eligibility on a destination platform. If a website says your account does not meet its requirements, follow that platform's rules rather than repeatedly switching routes to work around an account issue.

Unlimited devices means you do not need to choose a plan based on device count; it does not mean every device shares the same local setup. Each device needs its own client, subscription import, and required network permissions. After connecting a home computer, you still need to configure a tablet separately. Troubleshoot the device where the problem occurs, rather than changing settings on another device and assuming the issue is fixed.

Before you begin, make sure your local network works, your system date and time are reasonably accurate, and you have your account details ready. If your device is managed by your organization, check its network and software installation policies; do not disable management settings on your own. Follow the steps in order—working account, correct subscription, client permissions, successful access. This is usually more effective than changing several settings at once.

Plans / traffic

Choosing a plan and data cycle

When choosing a plan, consider how often you use the service and how much data you need. A monthly subscription suits regular use with a recurring data allowance. A data package suits irregular use when you want to keep unused data for later. The key difference is how data carries over, not what the plans are called. Understand the billing period first, then compare prices to avoid choosing more data than your usage pattern calls for.

Compare the published prices side by side

Monthly subscription data resets each month on the activation date; the reset does not necessarily happen at the end of a calendar month. Unused data does not roll over to the next period. When checking your account, review the active status, remaining data, and the billing period shown in the dashboard. Do not rely on an estimate based on when you last paid. Check the order confirmation and your account for details on how a renewal takes effect.

Choose a data allowance based on your tasks

Looking up information, sending documents, and watching videos for long periods can use very different amounts of data. Time online alone is not a useful measure: an idle client uses data differently from a continuous file download. Check your account's usage history and consider upcoming large downloads, meetings, or video sessions. If you have no usage history, avoid guessing an exact amount.

If your work regularly depends on cross-border access, a monthly subscription may be easier to plan around. If you use the service only for travel, research, or occasional projects, a data package that you can use until depleted and that never expires makes it easier to keep unused data. Neither option is universally better, and no single plan suits everyone. For more detail, see Choosing Between a Data Package and a Monthly Plan.

Unlimited devices does not mean each device gets a separate data allowance. Check actual usage in your account, and look for devices syncing, downloading, or streaming in the background. If data use seems higher than expected, check active tasks on each device before upgrading. A larger allowance may only temporarily mask background usage.

Check upgrades, refunds, and payment details

If you upgrade a monthly subscription mid-cycle, the price difference is converted into remaining days. This does not simply cancel the old plan, so do not estimate the result by subtracting full monthly prices. Before upgrading, review the confirmation details in the dashboard, check your current benefits and the proposed changes, and then proceed with the order. If the explanation does not match your understanding, save the confirmation information and ask through a support ticket rather than placing duplicate orders to test the rules.

Compare plans by price, data allowance, and billing period. Do not assume a plan includes extra platform permissions, a dedicated address, or priority access to a particular website. Payment methods are Alipay, WeChat Pay, and USDT. The service offers a 14-day no-questions-asked refund policy. Review the formal refund rules in the Terms of Service and full plan details on the Plans page, along with the order confirmation, before paying.

Before choosing, ask yourself: Do I need regular access? Does the data allowance fit my current tasks? Do I understand when data resets? If you are still unsure, note your current usage and intended tasks, and include both when asking for advice. That makes recommendations more useful than simply asking which option is fastest and can help avoid confusion about billing periods later.

Account / order

Creating an account and checking your order

ShunVPN does not require an email address; create an account with a username and password. Before opening the user dashboard, make sure the browser address is on shunvpn.com, and distinguish the marketing site from the dashboard. This guide explains the process; account creation, plan selection, and orders are handled in the dashboard. Do not enter your credentials on lookalike sites in search results or use example values from this guide as your own account details.

Save your login details securely

On the account creation page, enter the username and password you want to use, then follow the page instructions. Choose a username you can recognize, and do not reuse a password from another important service. Because no email address is required, do not assume you can recover your account by email. Once your account is created, save your login details in a trusted password manager and make sure they were stored before closing the page.

If the page says your username is unavailable or flags the format, follow its specific instructions. Do not repeatedly refresh and submit the same details. If there is no response, check your local connection and whether the page finished loading before trying again. After creating an account, go to the overview and confirm which account is signed in. This helps prevent orders from being placed under someone else's account on a shared device.

Get Started Free

Go from plan selection to order confirmation

After signing in, open the plans section of the dashboard and choose a monthly subscription or data package as described above. Check the price, data allowance, and billing period—not just the amount next to the button. If you already have a plan and are upgrading, read the details of the changed benefits carefully. Creating an order does not mean it has been paid. When you reach the payment page, check that the order matches the plan you intended before continuing.

Payment methods are Alipay, WeChat Pay, and USDT. Follow the instructions on the order page and verify the recipient details and amount due. For USDT, also check the network, asset, and recipient information on the payment page; do not infer these from a previous payment. Never use an address forwarded in a chat, and do not treat a payment as complete until the order confirms it.

After the payment page returns you to the dashboard, check the order status and then review your benefits in the account overview. Payment results, order status, and plan details are related but separate steps. A success message in your payment app does not mean the client is ready to use. If the order is still pending, keep your payment receipt and order details and follow the dashboard instructions instead of creating and paying for the same order again.

What to check when plan benefits are missing

First, make sure you are signed into the same account used for payment. Then check the order status and refresh the plan and data details in the overview. Updating the subscription in a client cannot restore benefits if you are signed into a different account. If the order clearly says failed or canceled, follow the page instructions. If payment completed but the order status is unclear, do not assume it failed; ask support to check it against the payment record.

When requesting help, describe what happened in order: which account placed the order, which plan you chose, how you paid, and what appeared after returning to the dashboard. The exact message is more useful than simply saying “I paid, but it doesn't work.” Submit the issue through a dashboard support ticket. When discussing it publicly, hide identifying and transaction details rather than exposing more information than necessary.

Once the overview shows active benefits, you can set the order aside and move on to getting your subscription. Do not look for a client connection switch on the payment page or import a payment screenshot into the client. Return to the dashboard, find the subscription or download section, and get the configuration link as described in the next chapter. Import it on the device you plan to use.

Subscription / credentials

Getting and securing your subscription

A subscription link lets a client retrieve route configurations from a specified source. It is not an installer or a webpage you need to open in a browser every day. The link may contain credentials tied to your account benefits, so do not paste it into public notes, screenshots, or online conversion tools. Use the import options provided by the dashboard whenever possible, rather than sending the full link to an unfamiliar website to convert its format.

Get the configuration from the correct account

Sign in to the dashboard, check your plan status in the overview, and then open the subscription section. If the page offers both automatic import and a copy option, make sure the relevant client is installed on your device and choose the matching method. App handoff prompts vary by system. If your browser asks to open a client, check that the app name matches the software you installed before allowing the handoff.

Automatic import still transfers the subscription to the client on your device. If nothing happens, the client may not be installed, the system may not have an app association for the import protocol, or the browser may be blocking the handoff. Instead, copy the subscription link and add it as a remote subscription in the client. A failed automatic import does not mean your plan has expired, so there is no need to reset your account or pay again.

For manual import, find the client's option for remote configuration, subscriptions, or configuration sources. Paste the full link, save it, and run an update. Interface labels vary by platform, so follow the instructions for the client you installed. Remove any spaces or explanatory text included when copying, but do not edit the link's query parameters or split the address into separate fields.

Check the import result, not just the save message

A successful save only means the link was stored locally; it does not necessarily mean routes have been downloaded. Check the update result and confirm that a route list appears without authentication, unsupported format, or network errors. If the client lets you name the configuration, choose a clear local label, but do not include the full subscription link. When switching devices later, make sure the configuration you just imported is the one currently enabled.

If an update fails, check your local network and account benefits, then verify that the link is complete. If the client says the format is unsupported, return to the dashboard and choose an option compatible with that client. Do not try to assemble a configuration manually from the page returned by your browser. If you previously imported another service, check the configuration source; you may have updated ShunVPN but still be using an older configuration to connect.

Updates, device transfers, and handling a leak

There is no single update interval that works for every client. Follow dashboard notices and the client's capabilities. You can update manually if routes are missing, the service announces a configuration change, or a plan change has not synced. An update fetches configuration; it does not renew your plan or add data. If an update fails, keep the existing configuration and error details while you investigate. Do not rush to delete every saved entry.

When moving to a new device, sign in to the dashboard and get the subscription again. This makes it easier to verify its source than forwarding an old link through a chat app. You can keep the old device configured if you still use it. Before transferring, repairing, or handing it to someone else, sign out and remove the subscription from the client. Deleting a desktop shortcut does not remove the configuration; check app data, clipboard history, and synced notes if needed.

If you suspect your subscription link has been exposed, stop sharing it and look for a reset option in the dashboard. If there is no clear option, submit a support ticket. After resetting, you may need to get and import the new link on each device; updating just one does not complete the process everywhere. Subscription credentials and your login password serve different purposes. Do not assume changing one affects the other—check how the dashboard actually works.

Before leaving this chapter, make sure you know where your subscription is stored, whether the client can update it successfully, and which account the active configuration belongs to. You do not need to record these details publicly; just make sure you can verify them. Next, configure platform permissions and connection settings. A route appearing in the list does not yet mean the client is handling network requests.

Clients / platforms

Importing on each platform with a client

Download clients from the dashboard download section. After signing in, you can get a client for Windows, macOS, Android, or Linux without first purchasing a plan. The iOS download option requires an active, purchased plan on the account. Downloading a client and getting a subscription are separate steps: installing the client does not mean your account has active routes. Avoid unknown mirrors and do not rely on old articles for fixed installer links.

Windows: import first, then check the system proxy

Install and open the client, add the remote subscription as described above, update the route list, and choose a route. If the client offers a system proxy switch, start with its recommended default flow. Check the app source when the system asks for network permission. Do not disable system security protections as a troubleshooting shortcut. If a browser works but other apps do not, check whether those apps use the system proxy; see the connection verification chapter for details.

If other proxy tools or workplace access software are installed on Windows, check whether they also control proxy settings. Closing a window may not stop a background service; disconnect it from the software's own interface if needed. After setup, check whether the system proxy is restored when you close the client. If the client is closed but the browser still points to a nonworking local proxy, restore the system settings instead of repeatedly reinstalling the browser.

macOS: distinguish installation approval from network permissions

Install the client in the location recommended by the system, then launch it. Import your subscription and allow the necessary network configuration when prompted. System permission to open an app, add a network configuration, or run in the background serves different purposes. Respond only to prompts related to the client you are using; do not look for menus from an old guide that may no longer exist. For detailed steps, see the macOS Setup Guide.

If the app opens but the connection does not take effect, check whether a related permission is still awaiting approval in System Settings, then confirm that the client has an active configuration selected. On organization-managed devices, an administrator may need to grant some permissions; do not try to fix the issue by removing management controls. Close other similar tools before testing, and preserve any settings that already work. Avoid changing the system proxy, network extensions, and in-app settings all at once.

iOS: allow the network configuration

Get the client using the link provided in the dashboard, add your subscription, and update it. When connecting for the first time, iOS may ask you to approve a VPN configuration. Check the app source before allowing it. If the browser opens again after import, return to the client and confirm the configuration was saved; do not rely on the handoff alone. A connection icon only indicates a system network state—open your destination website to verify access.

If your system already has other VPN configurations, identify which one is currently active. When switching apps, make sure you do not connect to an old configuration by mistake. If access fails in only one app, check that app's region, account, and network settings before removing all system configurations. After the device resumes from the background, check the connection again, especially after switching between Wi-Fi and another available network.

Android: check background operation after importing

Install the client and update your subscription. When connecting for the first time, allow the VPN connection when prompted by Android. Background management varies by device. If the connection drops when the screen turns off, check whether background activity is restricted and adjust it according to the system instructions. Do not grant permissions unrelated to network use just to keep the connection active. After the subscription updates, select a configuration and route; loading the list does not mean you are connected.

Linux: check desktop and terminal network paths

Choose a client suited to your environment in the dashboard, follow its installation instructions for dependencies and permissions, then import your subscription. Do not run installation scripts from unknown sources that request elevated permissions. Linux desktop proxy settings may not apply automatically to terminal programs. If a browser works but a command-line tool does not, check which proxy options that tool supports rather than copying a local listener value from another guide.

Connect / verify

Connection verification and troubleshooting

The goal is not just to leave the client showing “Connected,” but to confirm that the app you need can actually complete its task. Choose a destination website or work tool, note your current network, route, connection mode, and symptoms, then test. Change one thing at a time so you can tell what helped. If you switch routes, change modes, and edit DNS all at once, it will be hard to explain what fixed the problem—even if access returns.

Establish a baseline for your local network

Temporarily disconnect the client and check that your local network works and that you have completed any required network sign-in. If the underlying connection is failing, address the router, Wi-Fi signal, or access authentication before changing the subscription. Reopen the client, confirm the configuration is active and the subscription updated successfully, then choose a route and connect. Correct a clearly inaccurate system clock first as well; otherwise, certificate errors may look like route problems.

After connecting, open a regular webpage to check basic access, then try the service you actually need. Loading a homepage does not confirm that sign-in, file transfers, or long-running sessions will work. Test a real task, such as opening a document, submitting a query, or starting a work session. Avoid repeatedly refreshing or switching routes during the test; changes to the service session can make a stable connection appear unreliable.

Troubleshoot based on where the error occurs

If the client reports an authentication or subscription error, first check your account benefits, link completeness, and configuration format. If the client says it is connected but every destination fails, check whether system proxy or network permissions are active and whether another tool is overriding the settings. If only one website fails, check that site's status, account requirements, and region rules. Do not assume every issue is a subscription problem.

If you see a certificate warning, do not bypass verification to continue signing in. Check the URL spelling, system time, and network, and make sure you are not still on a network sign-in page. If a browser works but a desktop app does not, compare their proxy paths. Some apps have their own network settings, so the system proxy may not apply. Read the app's settings guidance rather than granting the client more permissions.

Keep conditions consistent when comparing routes

Choose candidate routes that match the destination service's region needs, then test the same task on the same device. Compare page response, transfer stability, and whether sessions stay active. Do not treat one download speed as representative of every use case or rely only on the latency shown in the client. Different websites may take different paths, and the file host may impose its own speed limits. For a more systematic approach, see How to Test VPN Speed and compare results on your own network.

For streaming, assess network performance separately from content licensing. Being able to open a platform does not mean every region's content is available to you; playback failures may also relate to your account, licensing, or device. AI tools work the same way: signing in through a browser and maintaining a coding session are different tasks. Test the service as you actually use it rather than treating one accessible webpage as proof that everything works.

If the problem can be reproduced consistently and persists after trying reasonable alternative routes, stop making changes at random, organize your findings, and submit a support ticket. Note the last known working state and what changed before the issue started; this is often more useful than a pile of logs. If it happens only on a particular network, mention that too. The goal is to identify the affected step and restore the task—not to try every client setting.

Maintain / renew

Routine maintenance and renewal checks

Once the service is working reliably, maintenance is less about getting connected and more about understanding why it works. Keep track of your configuration source, commonly used routes, and connection mode, and monitor your data and plan status in the dashboard. There is no need to reinstall the client or change every setting daily. Act on the specific part that has changed. This reduces accidental changes and makes it easier to restore your setup after switching devices or resetting a system.

Check your account, not just the connection icon

For a monthly subscription, keep an eye on its active status, remaining data, and the monthly reset date based on activation. For a data package, check the remaining allowance; it lasts until depleted and never expires. A client that launches does not prove your plan is still active, and a working connection does not mean you have plenty of data left. Check your account before scheduled meetings, file transfers, or remote work rather than waiting for a problem to interrupt them.

If data usage seems unusual, first check which devices are using the account. System updates, cloud sync, autoplay, and background downloads may all transfer data. Check your account statistics for whether they count toward your plan and how much they use. A file size shown by one app does not reveal the account's total usage. Stop unnecessary tasks, monitor usage to identify the source, and then decide whether to adjust your allowance or connection mode.

If you no longer use a device, remove its subscription and sign-in details, especially if it was shared, borrowed, or is about to be transferred. Unlimited devices makes it easier to use the service across multiple devices, but also makes it important to know which ones still hold your configuration. Before deleting an app, check whether you need to sign out, remove local configurations, and clear exported files. The disappearance of the app icon does not mean all its data is gone.

Check renewals and upgrades separately

Before renewing, open the dashboard and check your current plan and the option you intend to choose. Review the order confirmation. Do not assume that choosing the same price again will carry the period forward in the way you expect, or that a data package automatically extends a monthly subscription. After confirming, pay and then check that the order and overview agree. If the page does not explain how the renewal takes effect, ask for help before paying.

For a mid-cycle upgrade, the price difference is converted into remaining days, so the outcome cannot be calculated from the price difference alone. Note your current benefits before changing plans, compare them with the dashboard afterward, and update the client subscription if needed. A plan change, subscription update, and connection restart are separate actions: changed benefits do not mean every client has loaded the new configuration, and repeatedly refreshing a subscription cannot replace an incomplete order.

Client updates and network changes

Check the source of a client update through the dashboard and read the current installation instructions. After updating, confirm that your subscription, permissions, and proxy settings are still in place, then test real access. If only one app has a problem after the update, compare its network path rather than rolling back the whole system immediately. If installation fails, save the message and check platform compatibility. Avoid repeatedly installing packages from different sources, which can make the environment harder to diagnose.

When switching from a home network to an office or public one, your existing connection may need to be re-established. First confirm that the underlying network works, then check that the client is still connected. Follow the same steps after waking a device from sleep. If the network is managed by an organization, follow its usage requirements rather than changing access policies yourself. If the problem occurs only on one network, note what's different before requesting help.

Keep your username and password secure. If you notice unusual activity, check your login credentials and subscription separately. Do not assume changing your password automatically invalidates an old subscription, or that resetting a subscription recovers an account. If you have trouble accessing your account, see Contact and Service Information for support options. Share only the information needed to verify the issue and never post full credentials publicly.

To request a refund, follow the 14-day no-questions-asked refund policy and the Terms of Service, and keep a record through a support ticket. Include the relevant order and request; do not create repeated orders to test the refund status. For general questions, check the FAQ. If the issue persists, include your account status, change history, and connection symptoms from this chapter so support can follow up effectively.

Advanced / routing

Advanced settings and use cases

Advanced settings are for users who have completed basic checks and can identify the active configuration source. The goal is not to turn on every option, but to match network handling to the task. Before making changes, record the current state and identify whether the issue is an app bypassing the proxy, a DNS problem, or an interrupted long-lived connection. Routing and DNS changes will not resolve account or order issues.

Understand system proxies, rules, and network routing

A system proxy tells apps that follow system settings where to send proxy traffic, but not every program uses it. Rule mode handles requests according to configuration rules, while global mode routes a broader range of traffic through the proxy. These are client-side handling policies; they do not change a website account's region or permissions. Global mode can help determine whether routing rules are involved, but it should not be treated as a permanent fix for every issue.

Some clients offer virtual network routing, but availability and required permissions depend on the client. It can change the traffic path for more apps and may conflict with workplace network tools. If you only need a browser to open a webpage, there is no need to enable every low-level feature first. For an app that does not use the system proxy, check whether it supports its own proxy settings before considering broader network routing.

Before adding custom rules, identify what they match and the order in which they run. Domain rules, address rules, and default policies apply to different traffic, and a new rule may not override an existing match. Changes to a generated subscription configuration may also be replaced at the next update, so first check whether the client supports persistent overrides. Do not replace your current configuration with an entire rule set found online, and never casually remove fields related to authentication, outbound routes, or DNS.

DNS and command-line apps

DNS resolves domain names to addresses; a proxy determines how requests reach their destination. They are related, but not the same issue. If a website says it cannot find a host, check system resolution and the client's DNS policy, but do not change every DNS setting at once. If system DNS fails while the client works, they may be using different paths. If only one domain has a problem, check its spelling and service status before changing settings across the whole device.

On systems that provide the relevant command, the query below can show whether system DNS resolution gets a response. It does not prove that your browser is using a proxy or that the destination service is available. The example.com in the command is a public example domain and contains no subscription information. If the command is unavailable, use the network diagnostics provided by your system; you do not need to install software from an unknown source just to test.

nslookup example.com

Command-line tools may use environment variables or recognize only their own proxy options. Check the tool's documentation and confirm the local proxy protocol and listener details in the client before configuring it. Do not copy someone else's address or listener value. After testing, remove temporary settings added for diagnostics so they do not leave a dead proxy configured when the client is closed. Hide sensitive information such as request headers, account credentials, and subscription links from logs before sharing them.

AI tools, streaming, and persistent sessions

AI coding tools may use different connection methods for autocomplete, chat, and command-line requests. A service homepage loading in a browser does not mean an editor extension uses the same network path. Check the tool's own network settings, then test with an actual request. Avoid switching regions or routes during a long-running session. For specific examples, see Choosing Routes for Cursor, Copilot, and Command-Line AI, with a focus on sustained use rather than a single page load.

Streaming requires you to consider network continuity, account requirements, and content licensing separately. If video quality changes, check your local network and playback settings before comparing suitable routes. If a region or licensing notice appears, follow the platform's rules. A network connection does not replace platform eligibility, and a successful playback once is not a long-term guarantee. Keep test conditions consistent to tell whether the route, device, or destination platform has changed.

The full process should now fit together: confirm your benefits in the account, get the subscription from the dashboard, import it and grant permissions on your device, verify it with a real task, and keep an eye on data and billing periods. If a problem comes up later, return to the affected step instead of repeating everything from the beginning. For a quick walkthrough, see Quick Start; for specific answers, visit the FAQ. If you need help from support, include the troubleshooting steps you have already completed in your ticket.