To set up a VPN on iPhone, first understand the difference between an iOS client, a service subscription, and an iOS VPN configuration. The client runs the connection, the subscription provides routes and rules, and the system configuration lets the client handle the relevant network traffic. Installing an app doesn't activate a service, and importing a subscription doesn't prove that access is working. Follow the steps below in order, and check each stage as you go.
Before you begin: check your client, subscription, and account
Open the VPNJG user panel in Safari. You can create an account without an email address; you must sign in to access your subscription. Check your plan status and remaining data, then open the downloads section for the current iOS instructions. This guide doesn't name a specific app because App Store availability, regional access, and client compatibility can change. Follow the instructions shown in the panel at the time.
iPhone Settings provides an entry point for VPN configurations, but you can't paste any proxy subscription URL into it. A compatible client must parse the subscription's routes and protocols, then use the iOS network extension to establish a connection. If you only have a subscription link and no compatible client, you're not ready to proceed.
| Item | Purpose | Where to use it |
|---|---|---|
| User panel account | Check your plan, data, and subscription access | Open the VPNJG user panel in Safari |
| iOS client | Parse the configuration and establish a connection | Get the app using the panel's download instructions |
| Subscription link | Access routes and any included rule configuration | The client's subscription or configuration import screen |
| System VPN configuration | Allow the app to create a network tunnel | The system authorization prompt on first connection |
Get an iOS client: check its source and compatibility
See the iOS instructions in the client downloads section of the panel. Verify the app name, developer, and download source. App Store listings depend on your store account's region; being able to open a webpage doesn't mean the app is available to your account. If you see an unavailable message, check the instructions rather than installing an app with the same name from search results.
The client itself may cost money, separately from a VPNJG service plan; don't treat them as the same purchase or benefit. Read the App Store listing before downloading. Don't install unknown enterprise certificates, device management profiles, or root certificates just to import a subscription. These are unrelated to a client's request to add a VPN configuration.
Compatibility depends on both the protocol and configuration format. Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are different proxy protocols or solutions; an app's claim to “support VPN” doesn't mean it supports all of them. A client that can parse one subscription format may still not support every node in it. This is a general explanation and doesn't mean VPNJG offers all of these protocols.
- ✅ The app name and developer match the panel's instructions.
- ✅ The client supports the iOS subscription type provided in the panel.
- ✅ You've confirmed the app is available to your store account and reviewed any fees.
- ❌ Don't treat an unknown profile as a regular subscription import or trust a root certificate without checking it.
Import a subscription: copy it from the panel to your client
Keep your iPhone's internet connection working, then find the subscription section in the panel. Depending on the version, it may be labeled “Copy subscription,” “Import to client,” or something similar; follow the current page. If the panel offers multiple formats, choose the one for your client rather than trying options at random.
- Copy the matching subscription link. Make sure you copy the subscription URL from the panel, not the panel's address from your browser bar. Don't remove any parameters from the end of the link.
- Open the client's configuration screen. Look for “Subscription,” “Configuration,” “Import from URL,” or a similar option. These are examples of features; labels vary between apps.
- Paste and save. Give it a recognizable name, such as “VPNJG.” If iOS asks whether to allow pasting from Safari, check the source and allow it if appropriate.
- Update the subscription. Wait for the app to download the configuration. When it succeeds, you should usually see a configuration name, a list of routes, or a proxy group—not just a blank entry.
- Select the configuration you just imported. Some clients let you save multiple configurations, so check that the newly imported one is active rather than an older configuration.
If the panel offers an “Import to client” option, tapping it may prompt you to open the app. If nothing happens, the link may still be valid—the app might not be installed, the handoff method may not match, or the browser may block it. Instead, copy the link and import it within the app. Don't send the full subscription to a third-party conversion service.
If an import fails, start by reading the error. A format error points to a client compatibility issue; a download failure calls for checking your internet connection and the complete link; an authentication error or account issue means you should check your plan in the panel. Updating a subscription contacts the service; connecting to a route is a separate step. Don't confuse the two.
Allow the VPN configuration, then choose a routing mode
Select the configuration, choose a route in the app, and start the connection. The first time, iOS will usually ask whether the app can add a VPN configuration. Make sure the prompt comes from the client you just installed and verified, then allow it and complete any device authentication requested by iOS. If you deny permission, the subscription may remain in the app, but the connection can't be established properly.
In Settings, the VPN option is generally near “VPN & Device Management” under “General”; labels may vary by iOS version. Start and stop the connection in the client. Don't enter server addresses or authentication details from other guides into the system's manual configuration screen—that's a different setup method.
Choosing between rule-based and global mode
For everyday use, start with the rules provided by the service. Rule-based mode directs traffic according to domains, addresses, or other criteria; “direct” means that the relevant traffic doesn't use the selected proxy route. Global mode generally sends more traffic through the proxy, but the result still depends on the client, tunnel routing, and exceptions. It doesn't guarantee that every packet takes the same path.
If an app isn't using the route, you can temporarily switch to global mode to compare results, then restore your original setting. Avoid running multiple apps that may compete for the system VPN configuration; otherwise, it's hard to tell which one is active. If a work or school profile is already installed, check its management requirements before changing or removing anything.
Verify the connection: check your exit IP, DNS, and target app
When the client shows “Connected,” it means the connection has reached the status reported by the app—not that the target app is accessible. Keep your network environment consistent while testing and compare results before and after connecting. Switching between Wi-Fi and cellular during the test can make network changes look like route effects.
- Check the connection status. Confirm the active configuration, selected route, and connection toggle. If the VPN indicator isn't visible in the status bar, check Control Center or Settings instead of relying on the icon alone.
- Compare your exit IP. Use a trusted IP lookup page to compare results before and after connecting. In rule-based mode, the lookup page may use a direct connection; temporarily switch to global mode and check again. Geolocation can be inaccurate, so don't judge a route solely by its city label.
- Check the DNS path. A DNS test shows the resolver path observed for the test domains; it may not be the server configured in the app. If the results show an unexpected resolver, check the configured DNS, routing rules, and fallback behavior. Seeing your local ISP's name doesn't by itself prove that all traffic is leaking.
- Open the app you actually want to use. Refresh the feature you need, and fully quit and reopen the app if necessary. If it works in a browser but not in the app, possible causes include cached data, account region, app-specific restrictions, or different routing rules.
A DNS leak is about DNS requests taking an unexpected path—not about getting as few results as possible. Encrypted DNS doesn't automatically mean requests go through a proxy. Safari, other apps, system DNS, and a client's built-in resolver may use different paths, so check the client logs. Logs may include visited domains; review them and hide unnecessary details before submitting a support ticket.
To confirm it works: the configuration must be running, the exit for traffic expected to use the proxy must match your settings, and the target app must work. A connection icon alone—or a single webpage loading—isn't enough to confirm that all apps are being routed as expected.
Common issues: troubleshoot by symptom, not by reinstalling
Subscription imports, but won't connect
First, check your plan and remaining data in the panel, then make sure you've selected an available configuration. Try another route currently listed in the panel and note whether the error changes from a timeout to an authentication failure. A timeout is more likely to involve the network path or server reachability; an authentication failure makes credentials and account status the first things to check. Neither message alone proves the root cause.
Websites won't load while connected, but work when disconnected
Check the active route, DNS configuration, and routing mode. Reproduce the issue with the default configuration first; don't change protocol settings, DNS, and routing rules at the same time. Change one setting at a time and record the result to identify what helped. If your network requires a browser sign-in, complete that first, then connect.
Browser works, but an app still reports the wrong region
An app may determine availability using account region, payment details, or other environment signals; the route's exit location isn't the only factor. Check whether the app matches a direct-connection rule, then restart it and try again. Network access doesn't necessarily change account benefits, regional eligibility, or content permissions.
Connection drops after switching networks or locking the screen
Switching between Wi-Fi and cellular changes the underlying network path, so the existing connection may need to be re-established. Return to the client to check whether it reconnects, then test the app again. Check the client's on-demand connection settings, but don't assume they guarantee an uninterrupted connection. If the issue persists, note the network type, client version, route name, and a redacted error message, then submit a ticket through the panel.
Maintenance: update your subscription and keep reproducible notes
Route configurations may change. If an old node stops working, update the subscription before changing server settings manually. Whether a subscription update preserves custom rules depends on the client; check its documentation before making changes. If your subscription link is exposed, check whether the panel lets you reset it. If you can't find that option, ask through a support ticket and don't share the original link further.
VPNJG monthly subscriptions reset their data each month on the activation date, not at the start of the calendar month. Data packages remain valid until used and never expire. Video, downloads, and system updates can use substantial data, so check the panel's usage figures and your actual routing. Unlimited devices doesn't mean unlimited data, and each device still needs to be configured correctly.
Keep a personal troubleshooting note: which client you used, which configuration was active, which routing mode you chose, and what error appeared. You can make a support ticket clearer without sharing your subscription or sensitive logs. When setting up a new device, follow the same order—get a client, import the subscription, allow the configuration, and verify the connection. A successful connection on an old device doesn't mean a new one is configured.