What is a subscription link? It’s the address a client uses to retrieve connection configurations. Import the link into a compatible client, and it can fetch details such as servers, protocols, and connection credentials to build a list of available routes. It isn’t an installer or proof of payment. Having the link doesn’t mean you’re connected: you still need to select a configuration, start the connection, and check your actual exit IP.
Subscription Links, Plans, and Nodes: What’s the Difference?
Think of a subscription link as a gateway for fetching configurations. When a service updates its routes, the client may get a new list the next time it checks the link. The link itself usually doesn’t carry your everyday web traffic. The client establishes the connection using the fetched configuration, then routes traffic according to its rules.
“Subscription” can also mean a plan billed monthly, which can cause confusion. Billing explains how fees and data are calculated; a subscription link delivers configurations to your client. Data packages may also use subscription links to provide routes—the shared name doesn’t make them monthly plans.
| Item | What it’s for | Keep in mind |
|---|---|---|
| Plan | Sets the data allowance, price, and usage terms | Importing a configuration doesn’t change your plan benefits |
| Subscription link | Fetches or refreshes a set of route configurations | May contain access credentials unique to your account |
| Individual node configuration | Describes a connection endpoint and its protocol settings | A separately saved configuration may not update with the subscription |
| Client | Reads configurations, applies rules, and establishes connections | Must support the relevant format and protocols |
Where to Get Your Subscription Link
Get your link from the service’s official user panel—not from search results, chat screenshots, or links shared by strangers. VPNCross provides subscription links after you log in. You can create an account without an email address using just a username and password. In the panel, choose the configuration option for your client. Don’t mistake the account management page URL for a subscription link.
If the panel offers options such as “Copy link” and “Import to client,” use the first to paste the link manually; the second typically opens your client through your device’s app association. Even with quick import, check the target app and configuration source. If your browser doesn’t open the app, use the manual import flow instead.
If opening the link in a browser shows configuration text, downloads a file, or displays content that’s hard to read, that doesn’t necessarily mean the link is broken. Subscription links are meant for clients, not regular web browsing. On the other hand, if you get a login or error page, the link isn’t a valid configuration—even if its address looks right.
From Copying the Link to Connecting
Menu names vary across Windows, macOS, Android, and iOS clients. Common options include “Subscriptions,” “Configurations,” “Profiles,” and “Import from URL.” Don’t rely on button placement from a tutorial; look for the option that accepts a remote configuration URL.
- Get a compatible client. Use the download link and instructions in the official panel. VPNCross makes clients available after login, except on iOS, where an active plan is required to download. Once installed, make sure the app opens normally.
- Choose a compatible subscription format. Follow the panel’s instructions to select an option supported by your client, then copy the complete URL. Don’t include chat punctuation by mistake, cut off the end of the URL, or copy text that’s been shortened for display.
- Add a remote configuration. In your client, choose the option to import from a link, paste the URL, and save it. You can give the configuration a name, but don’t edit any credential fields in the URL.
- Wait for the configuration to load, then enable it. Once the route list appears, check that the newly imported configuration is enabled. Saving it successfully doesn’t mean it’s now the active configuration.
- Choose a route and allow the connection. Follow the app’s prompts to authorize its network configuration. If you enable system proxy or tunnel mode, make sure no other network tool is handling the same traffic.
- Check the result. Open the app you want to use, then use IP lookup to check your browser’s exit IP. To check another app, verify separately whether it’s covered by the current mode.
On desktop, system proxy mode generally works only with apps that honor the system proxy settings; some programs use their own network configuration. Tunnel mode may cover more traffic, but its scope still depends on routing, exclusion rules, and system permissions. Mobile clients typically use a system network extension, but that doesn’t mean every request takes the same route. For platform-specific instructions, see the user guide for your client’s settings.
Why the Same Link Doesn’t Work in Every Client
“Subscription format” and “connection protocol” are separate compatibility issues. The format determines whether a client can read a configuration file; the protocol determines whether it can establish that type of connection. A client may import a file without being able to use every route in it. Likewise, supporting a protocol doesn’t mean it can parse every subscription format a service generates.
Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are names of different proxy protocols or solutions, not interchangeable labels. Compatibility also depends on the client version, transport method, and security settings. These are general concepts, not a claim that VPNCross supports all of them. Check the panel and technical documentation for current details.
If your client reports “Unsupported configuration” or “Unknown protocol,” first check the format option in the panel and the client’s supported formats. Don’t try to fix the issue by manually changing protocol names. If you need to convert a format, use a method explicitly supported by the service. Third-party conversion tools may access your full subscription credentials or discard rules and protocol settings during conversion.
How Often Do Subscription Links Update? When to Refresh Manually
There’s no standard automatic update interval that applies to every client. Refresh timing depends on client settings, configuration contents, and whether the app can run in the background. Some clients check for updates at startup, some refresh periodically, and others require a manual update. Mobile operating system restrictions can prevent a scheduled refresh from completing on time.
Refresh manually if routes change, an old node keeps failing to connect, or the service announces a configuration update. First make sure your device can reach the subscription server, then refresh and check the update time and any error messages. Repeatedly tapping refresh when the network is unreachable doesn’t prove that your credentials are invalid.
- ✅ Before refreshing, make sure you’ve selected the remote configuration you’re currently using—not an old local copy.
- ✅ After refreshing, check the route list and selected route. If the old route has been removed, you may need to choose another.
- ✅ For custom rules, use the client’s supported override or separate rules feature to avoid having your manual changes overwritten during refresh.
- ❌ A successful update doesn’t prove that the connection works, that your exit IP matches expectations, or that your plan’s data allowance has reset.
VPNCross monthly plans reset their data allowance each month on the activation date. Data packages remain valid until used and never expire. Refreshing a subscription only fetches configuration; it doesn’t reset data usage or extend or change plan benefits. Check your balance and plan status in the user panel.
Troubleshooting Import and Connection Problems
Can’t fetch the subscription: Check that you copied the complete URL and that your device’s date and time are correct. Then see whether the client can reach the subscription server. A login page may mean you chose the wrong link; a permissions error may relate to your credentials or account status. Don’t disable certificate checks to get around an error. Keep the error details, but hide sensitive information before asking for help.
Fetch succeeds, but no routes appear: Check the format, parsing errors, and filters. The client may not recognize the response, or it may filter out unsupported nodes. Check the official instructions rather than repeatedly deleting your account or trying configurations from unknown sources.
Routes appear, but none connect: Check that the configuration is enabled, a node is selected, your plan is active, and system proxy or tunnel permissions are working. Try another route from the panel for comparison, but don’t assume a single failure is caused by the protocol or that a route name proves your actual exit location.
Some sites work, but some apps don’t: Check whether routing rules send the target domain directly, whether the app bypasses the system proxy, and where DNS requests are handled. A DNS leak occurs when name lookup requests don’t follow the intended path. Seeing a different browser exit IP alone doesn’t rule this out. Check the client documentation for DNS and tunnel settings; don’t enter the address of an unfamiliar DNS server at random.
The region and route names shown in a subscription aren’t the same thing as the underlying network path. Direct connections, relays, and IEPL dedicated lines describe different route arrangements; you can’t infer the actual topology from a subscription URL or node nickname. For details about routes, see the route list and technical reference.
How to Reset a Leaked Subscription Link
Anyone with your complete subscription link may be able to retrieve its configuration. If that configuration includes valid connection credentials, they may also use your plan’s data. The link usually isn’t the same as your account password, but it still needs to be protected. A QR code is simply another way to share the address and can expose the same access.
If you discover a leak, first check the official panel for an option to reset the subscription or revoke its credentials, and follow the instructions. If there’s no clear option, contact support through the panel to confirm what to do. Whether changing your account password also revokes subscription credentials depends on how the service works; don’t assume the two are linked.
After resetting, update the new URL on all your devices and check whether the old one has stopped working. Also confirm whether the reset rotated node credentials that had already been issued: disabling the old link from fetching configurations may not stop someone from using nodes they previously saved. Removing public posts or screenshots can limit further sharing, but it doesn’t revoke access.