If you have a subscription URL or a VLESS key (a string starting with vless://) and need to connect on a Windows PC, this is the guide. v2rayN is a free, open-source Windows client that speaks every modern protocol — VLESS, Reality, VMess, Shadowsocks, Trojan, Hysteria2 — and imports all the settings automatically from the link your provider gives you. This page covers where to download it safely, how to import a subscription, how to verify the connection is actually working, and how to fix the classic "connected but nothing loads" problem.
github.com/2dust/v2rayN — third-party sites and Telegram channels often bundle malware.C:\v2rayN) and run v2rayN.exe.v2rayN isn't a VPN service — it runs no servers of its own. It's a graphical control panel for underlying routing engines ("cores") such as Xray and sing-box, which do the real work of encrypting and routing your traffic.
The cores — Xray and sing-box — handle the protocols and encryption. v2rayN gives them a GUI: server lists, subscription management, one-click proxy toggling, and live logs. Both cores ship inside the ZIP archive, so there is nothing extra to download. You can even switch which core a specific server uses, which turns out to be the single most useful troubleshooting move.
VLESS, Reality, VMess, Shadowsocks, Trojan, Hysteria2 — all supported out of the box. You don't configure any of this manually: the client reads every parameter (keys, handshake obfuscation, transport settings) from the subscription link or connection key your provider supplies. Reality needs nothing special — import it like any other connection.
The project lives at github.com/2dust/v2rayN. For regular use, take the stable release marked Latest on the Releases page and download v2rayN-windows-64.zip — the standard build for 64-bit Windows 10 and 11. You don't need pre-releases or betas. The desktop build is an alternative UI; arm64 builds are only for ARM-based devices.
There's no installer. Create a permanent folder (e.g. C:\v2rayN), extract the archive there, and run v2rayN.exe. Don't run it straight from the ZIP and don't leave it in Downloads. On first launch the app may minimize straight to the system tray next to the clock — double-click the blue V icon to open the main window.
The subscription-URL path is the easiest, because your server list updates automatically. This is how you connect an IT CRP subscription — the same steps work for any provider that issues subscription links.
Go to github.com/2dust/v2rayN/releases, take the release marked Latest, download v2rayN-windows-64.zip. Extract it into a permanent folder like C:\v2rayN and run v2rayN.exe. If the window doesn't appear, look for the blue V icon in the system tray and double-click it.
Copy the subscription URL from your IT CRP dashboard. In v2rayN, open Subscriptions → Subscription settings, click Add in the bottom left, paste the link into the Url field, give it any name in Remark (e.g. IT CRP), and click Confirm. Then open Subscriptions → Update subscription — the server list appears in the main window.
Double-click the server you want to use — the active one is highlighted in blue. Only have a single key instead of a subscription? Copy the vless://, vmess://, or ss:// string and press Ctrl + V in the main window (or use Servers → Import bulk URL from clipboard). The server appears in the list immediately.
At the bottom of the window, set System Proxy → Set system proxy. The tray icon turns red. Open an IP-check site like 2ip.io or ipinfo.io — if it shows the VPN server's location, you're routed. To disconnect, choose Clear system proxy (the icon turns blue again).
The black log window at the bottom tells you exactly where your traffic goes as pages load — worth thirty seconds to learn.
[http >> proxy] — routed through the VPNThis is what you want to see for blocked services. The request went through the encrypted tunnel to your VPN server and out from its location.
[http -> direct] — bypassed the VPNThe connection went straight to the destination. This is normal if you have routing rules enabled for local or regional sites — direct traffic is faster for anything that isn't blocked. If everything shows direct, your system proxy isn't set.
allowInsecure=true parameter. If your provider relies on an outdated config, the connection fails — update your subscription or ask support for a fresh configuration.v2rayN.exe, Run as administrator. Other VPN clients or virtual-machine software can conflict with the TUN adapter; disable inactive virtual adapters in Windows Network Connections. If TUN breaks after an update, reinstall the TUN driver from the settings menu — or just go back to System Proxy, which is simpler and more stable for regular browsing.All three accept IT CRP subscription URLs. The right one depends on how much control you want.
Highly versatile: every modern protocol, on-the-fly core switching between Xray and sing-box, works perfectly with standard subscription links. The UI is functional rather than pretty, but when a connection misbehaves, v2rayN gives you the levers to fix it. The default recommendation for Windows.
Links directly to your provider's backend and often needs zero manual configuration — paste the subscription URL (or scan a QR code) and connect. The best choice if you want the VPN to be invisible infrastructure, and the client we recommend for phones. See the Happ setup guide.
Built for complex routing rules: send specific sites through Germany, others direct, some through the Netherlands. Overkill for "I just want my subscription to work", but unmatched if you live in routing configs. See the Clash Verge Rev setup guide.
v2rayN-windows-64.zip archive you download from the official GitHub releases page. Extract the archive, run v2rayN.exe, and everything is already in place. You only interact with the cores when troubleshooting: right-click a server and use Core switch to move a connection from Xray to sing-box.allowInsecure=true parameter, so outdated provider configs can fail (update your subscription or ask support for a fresh one), and TUN Mode adds complexity you don't need — stick to the standard System Proxy for regular browsing.github.com/2dust/v2rayN. Third-party websites and Telegram channels frequently bundle malware into repackaged builds.vless:// key. Import it using the standard steps. The only Reality-specific tip: if the connection stalls on the default Xray core, switch that server to the sing-box core.