VPNPO Troubleshooting Guide
Start by confirming the symptoms, then check your network, subscription, route, and app rules. Change one setting at a time and keep results you can reproduce.
If you're installing for the first time, follow the Quick Start Guide to get set up. This page is for troubleshooting connection problems: jump to the section that matches your symptoms instead of reinstalling everything. The Quick Start Guide helps you create a working setup; this guide helps pinpoint what stopped working.
Find the cause of connection failures
First, tell a failed connection from a lost internet connection
Note exactly what the client does: the button won't turn on, the connection drops immediately, it stays on “Connecting,” or it shows a specific error. These point to different problems. If the button won't turn on, check system permissions and whether the client is running. If it stays on “Connecting,” check whether the network and route are reachable. Don't assume a red status means your plan has expired, or blame every connection failure on route quality.
Disconnect the proxy, then open a site you can normally access directly and check whether the network requires sign-in. Public Wi-Fi may assign an address but still require you to accept terms or sign in on a captive portal. Your browser may appear online while the client can't connect. Complete the network login or authorization, then try the client again. If direct access also fails, check Wi-Fi, Ethernet, your router, and system network status first. Don't change route settings in your subscription yet.
Check your account, subscription, and import
Open the account dashboard to check your plan status and remaining data. Being able to sign in to the dashboard doesn't mean the proxy connection is working, and seeing routes in the client doesn't mean the subscription is still valid. Make sure you imported the subscription for your current account, not an old configuration from another account. If you just changed your plan, trust the dashboard status, then update the subscription. Don't infer delivery status from cached route names.
Check that the client's current configuration is enabled, the route list isn't empty, and the selected route belongs to the configuration you just imported. Some clients store multiple configurations; updating one won't necessarily switch the active one. Open configuration management, confirm the active configuration, then return to the connection screen and check the selected route. If the list shows a parsing error or missing fields, follow the subscription-update steps instead of repeatedly trying to connect with a broken configuration.
Narrow it down with cross-checks
Leave the client configuration unchanged and test on another available network. If it connects there, the issue is more likely related to the original network, its sign-in requirements, or local restrictions. Next, keep the network the same and try another route in the same region. If only one route fails, note its name and the error. If all routes fail, check the system clock, permissions, and proxy conflicts. The goal is to separate network, configuration, and route issues—not to switch things at random until something happens to work.
Check that your system date, time, and time zone are correct. A time mismatch can cause secure handshakes to fail. Turn on automatic time synchronization, then reconnect. If the client reports a certificate validation error, don't disable validation to hide it. Check the clock, configuration source, and any network sign-in page first. A captive portal may redirect requests to its own page, making it look like a route certificate problem when you aren't connected to the wider internet yet.
Check for conflicts before authorizing the client again. Quit other proxy or tunnel apps and make sure only the intended client is managing the connection. Don't run several traffic-capture tools at once and rely on the status shown by just one of them.
Fix permission errors and know when to escalate
If the button turns off as soon as you enable it, check whether the system showed a VPN permission prompt or security software blocked the client from creating a network interface. Grant only the permissions needed to the client obtained through the dashboard; you don't need to disable all system protection to troubleshoot. On desktop, if the client says a local listening address is already in use, quit apps that may use the same proxy port and restart the client. On mobile, check whether another VPN configuration is already active.
Submit a support ticket if your basic network and account are working, the configuration parses correctly, and you still can't connect on different networks. Include the full connection error, selected route, operating system, where you got the client, and the results of your cross-checks. Don't just write “can't connect,” and never include the raw subscription URL. Explaining that the failure occurs while the connection is being established helps support distinguish a route issue from a local permission or configuration-compatibility problem.
Fix websites that won't load and DNS issues
A connected status doesn't mean apps can reach the web
When the client says Connected, that usually means a connection or network interface has been established. It doesn't prove that browser requests are being routed as expected. Try a site you can access directly and the international site you're targeting, and note whether all sites fail, only the target site fails, or only one browser fails. If no sites load, check the system proxy, traffic-capture mode, and DNS. If only the target service fails, consider account region, service maintenance, exit restrictions, and browser cache.
The error text is more useful than the loading spinner. If a domain can't be found, check name resolution. If the connection is refused, check the proxy endpoint and destination port. For a certificate error, check the clock and any captive portal. If the page loads but sign-in fails, check the account and region. Don't lump all of these together as “bad internet.” Keep the domain where the error occurred, but remove any login tokens or private information from the URL before sharing it.
Check the DNS path one step at a time
DNS translates domain names into addresses. System DNS, the client's built-in resolver, browser Secure DNS, and an app's own resolver can all be involved, so changing system settings may not affect the app you're testing. First check whether the client handles DNS itself, then see whether the browser has a separate resolver configured. Once you know the path in use, change only one part. If you change both system and browser settings, you won't know which one fixed the issue.
On Windows, use PowerShell to check the system's DNS result. On macOS and Linux, use a suitable tool if one is installed. The example domain below is only for checking whether the command returns a result; it doesn't guarantee that any particular site is reachable. Successful name resolution doesn't prove the connection works—open the site in a browser to verify. Different exit routes may return different addresses, which isn't by itself evidence of a problem.
# Windows PowerShell
Resolve-DnsName example.com
# macOS or Linux with dig installed
dig example.com
# Check an HTTPS request; curl must be available on your system
curl -I https://example.com
Compare results with the proxy off and on, and note the environment in which you ran each command. Command-line tools may not use the browser's system proxy settings, so a successful command with a failing browser—or the reverse—is just a clue. If the client uses virtual address mapping, the address shown by the system may not be the destination service's final address. Don't turn off mapping just to make the result “look normal”; check the client's configuration documentation to see whether this is expected.
Check for proxy and cache issues
Desktop system-proxy mode generally works only with apps that support and follow the system setting. Check whether the client's proxy endpoint is active and whether a proxy setting remains after you quit the client. A leftover setting can make the browser send requests to a stopped program, so your local network seems fine but every site fails. Clear the stale setting, then reconnect the client. If you're using traffic-capture mode, check whether another tunnel app has taken over the default route.
If you've fixed the configuration but still see the old error, close and reopen the app so it creates a fresh connection. Browser cache, connection pools, and an app's DNS cache can all preserve the old route after a change. Compare with a temporary browser session, but don't rush to delete all your personal data. If the temporary session works and the regular one doesn't, check extensions, site data, or app proxy settings specifically so you don't also erase account state.
Keep DNS-path checks separate from privacy conclusions. A DNS test provides clues about the environment in which you ran it. Don't infer how every app resolves names from one web test, or treat “Connected” as an absolute guarantee in every situation.
When only some websites fail
If regular sites work but the target service reports a region error or denies access, keep the route in the same region and check the account region, service terms, and client rules. Temporarily using a full-proxy route can help reveal whether some requests are bypassing the proxy, but restore your usual rules once testing is done. For a detailed guide to exit routes, DNS, and app-by-app checks, see How to Check Whether Your VPN Is Really Working. When contacting support, include the error type and DNS path, not your browsing history.
Troubleshoot slow speeds and peak-hour lag
First, pinpoint what feels slow
Break “slow” down into specific symptoms: does a page take a long time to start loading, is a download slow once it begins, does video keep buffering, or does an AI tool pause intermittently while generating a response? Each points to a different part of the connection. A slow first page load may involve DNS or connection setup; a slow download may involve throughput; video buffering can also depend on content delivery, resolution, and device decoding. Don't use one download test to judge every use case, or attribute all of a service's response time to the route.
Pause background updates, cloud sync, and other high-bandwidth tasks, and keep the test consistent. Other devices on your home network may also be using the connection, even if the client can't show that shared contention. If Wi-Fi is weak, move closer to the router or compare with a reliable wired connection. Keep the client route unchanged while checking your local network; otherwise, changing both the route and where you connect makes the comparison meaningless.
Compare route types for your use case
Check the region and route-type details on the Routes page, then choose a route suited to what you're doing. A shorter geographic distance doesn't automatically mean a faster response from a service; the route's entry point, transit path, and the platform's content delivery all matter. Labels such as IEPL, transit, and direct describe how traffic is routed, not a fixed speed ranking for every network. Compare using the same service, content, and local network, and note when you tested.
| Route Type | What to Check | How to Verify |
|---|---|---|
| IEPL Dedicated Line | The path between the local entry point and the destination exit | Compare with other routes in the same region |
| Transit | The entry network and performance after transit | Keep the use case the same and compare different entry points |
| Direct | The path from the local network to the international exit | Repeat the same task after switching networks |
For streaming, choose the target region first, then check whether the content plays and how it performs over time. Being able to see a title doesn't mean every part of playback uses the same route: previews, full episodes, subtitles, and account checks may use different domains. With AI tools, check page loading, sign-in, and response generation separately so server-side queueing isn't mistaken for a dropped connection. Choose routes for the task at hand, not just for a flattering result in a speed-test interface.
Compare time periods to diagnose peak-hour issues
If performance is normal during the day but noticeably worse in the evening, compare the same network, route, and task. First check whether it happens only when your home Wi-Fi is congested, then see whether other routes in the same region are affected too. If the whole local network slows down at that time, look into shared bandwidth and your internet connection. If the problem keeps affecting only one route, send support its name and the time it occurred. Don't change the region, client, and content at the same time during each test.
It's also useful to note what restores the connection. If pausing and resuming a video fixes it, the issue may be with the player connection. If reconnecting the client fixes it, check the session or network interface. If switching networks fixes it, investigate the original network entry point. Writing down exactly what restores service is more useful than saying “it's unstable at night.” Once you find a route that works, you can save it in a group for that use case, but still verify it in the target app.
Don't let testing become a source of extra load. Speed tests, downloads, and video compete for network resources when run together. Stop other tasks and repeat your normal use case. Record what you notice and any errors; there's no need to generate continuous high-bandwidth traffic for a support ticket.
Know when to escalate
If continuous playback fails but regular websites work, lowering the video resolution can help determine whether sustained traffic is a factor, but it doesn't prove the route is at fault. Check device resources too if it's overheating, under heavy background load, or running lots of browser extensions. If all routes behave unusually across multiple networks, send support the results from tests under the same conditions so they can check the routes and service status. VPNPO covers 90+ countries and 170+ routes; coverage doesn't guarantee access to every service in every region.
Fix frequent disconnections and background drops
First, identify what is disconnecting
When the connection drops, note whether the client still says Connected, the system VPN indicator disappears, or only the target app stops receiving data. A client process being closed, a tunnel going down, and an app connection expiring are different issues. If the system indicator disappears, check permissions and the client process. If it remains but all requests fail, check network changes and reconnection. If only one app is affected, start with the app-routing section instead of changing the whole configuration.
Write down what triggers the drop: does it happen after locking the screen, switching apps, changing Wi-Fi networks, or waking the device from sleep? Repeat the same action and see whether it happens consistently. If everything works in the foreground but fails with the screen locked, check background restrictions. If it disconnects while the screen is on too, investigate network quality and the route session. “It drops after a while” isn't specific enough, since several different triggers could be involved.
Check Android background restrictions
Open the system app settings and check whether the client is restricted from running in the background, using background data, or using battery. Menu names vary by device, so look for battery optimization and background activity options in the interface you actually have instead of following a path written for a different model. If the client needs to stay connected, allow background activity using the system's available options. If your system has separate startup management, make sure it won't stop the process when the screen locks. Reconnect in the client, then test by locking the screen.
Check whether a cleanup utility, game mode, or battery saver is stopping the client. Keeping its card in the recent-apps list doesn't necessarily allow background network access; some systems still restrict activity. Note the original settings before changing them, and keep only the permissions you need after troubleshooting. You don't need to remove restrictions from every app. For detailed steps, see Android VPN Setup: A Beginner's Guide. For background behavior and app routing when choosing a client, see Android VPN Clients: Background Use and App Routing.
Check recovery after switching networks on iOS and desktop
On iOS, first check that the system VPN configuration belongs to the client you're using and that no other network tool is trying to take over. If an app stops updating after you lock the screen, that alone doesn't prove the VPN disconnected. Unlock the device and make a fresh request in a browser. If the browser works but the original app is still stuck, close and reopen it to check whether it simply failed to resume its old connection. Assess system-managed tunnels separately from each app's background behavior.
On Windows, macOS, and Linux, sleep can change the state of network interfaces, and the previous connection may not come back automatically when the device wakes. First make sure the system network is back, then check whether the client reconnects. If you have to reconnect manually, note what happened between sleep and wake and any message from the client. Don't permanently disable sleep to address this. Check whether the issue is with interface recovery, network authorization, or the client and system being out of sync.
Recheck apps after switching networks. Moving between Wi-Fi and mobile data changes the connection path. Even after the client shows Connected again, reopen the target page to make sure the app isn't still using a stale connection from before the switch.
Find reconnection loops and reproducible triggers
If the client keeps cycling between connecting and disconnected, quit other traffic-capture apps, check whether the local network is dropping, and compare with another route in the same region. Don't keep clicking the button during the loop; each click can create a manual disconnect that makes it harder to tell an automatic failure from user action. Make one normal connection attempt, wait for a clear result, then collect the error. If the network requires periodic reauthorization, resolve that first.
In your support ticket, say whether the disconnect happens in the foreground or background, whether the network changed, whether the system indicator stayed on, and whether reopening the app or reconnecting helped. You can attach a cropped screenshot of the error; there's no need to send a full activity log. Background issues often depend on specific system settings, so support can't diagnose them from the route name alone. If the issue occurs only after locking the screen across different networks and routes, highlight that pattern so the investigation can focus on device background restrictions.
Fix subscription update failures and configuration errors
Tell fetch failures from parsing errors and inactive configurations
Updating a subscription involves several steps: the client requests it, retrieves the content, parses the configuration, and saves it. A request timeout is a fetch failure; an unsupported-format message is a parsing error; if the list updates but the client still uses an old entry, the new configuration may not be active. Keep the full error text and current configuration name so you can identify the failing step. Don't delete a working old configuration while investigating—you'd lose both a recovery option and a comparison point.
Sign in to the client download section of the account dashboard and get and import your subscription using the instructions there. Only get your subscription from your own dashboard, not from someone else's screenshot, a forwarded message, or notes on an old device. The dashboard determines whether your account can access the client download. If your plan status looks wrong, check your account and order first, rather than treating an account-delivery issue as a configuration syntax error.
Check the request path and account status
If an update times out, first check whether you can open the dashboard on your current network. If the dashboard works but the subscription request fails, check whether the client sends update requests through a different proxy route. Some configurations send update requests through the current, non-working route, creating a loop where the client can't reconnect to update. Use the client's supported options to fetch over your regular network, or switch temporarily to a route that still works. Don't edit parameters in the subscription URL; that could break the account delivery details.
If the response is a webpage instead of a configuration, the client may have received a sign-in page, network authorization page, or error page. Don't force-import this as a route list or post the full response on a public forum. Complete network authorization, check that you're signed in to the dashboard, and fetch again from the correct page. For an access error, rely on the account and plan status shown in the dashboard. Copying the URL successfully doesn't prove your account currently has access to the subscription.
Keep local rules and check compatibility
Before updating, distinguish subscription-provided settings from rules you've added yourself. Custom app routing, region groups, and local overrides may live in separate files or be part of the current configuration. Back up the settings you need using the client's supported method, then update the subscription. Afterward, check that the route list, active configuration, and local rules are still there. Don't assume every client preserves the same settings. If you need to restore an older configuration, keep it available for comparison first.
If parsing fails, check that the import method matches a format supported by the client. Being able to save text doesn't mean the client can interpret its fields. Prefer the import steps provided by the dashboard and the Quick Start Guide. Don't paste your subscription into an unfamiliar conversion site; the URL can grant access to your account. If the client identifies an unsupported field, note its name and the error type. You usually don't need to send the entire configuration.
Treat your subscription like sensitive account information. Don't expose the full URL in screenshots, support tickets, or chats. A tutorial example can look like
https://example.com/sub?token=YOUR_TOKEN, but don't use it to import a real subscription.
Verify that the update took effect
After the client says the update succeeded, return to the configuration list, confirm which one is active, and select a route from the group that fits your use case. Some clients keep old connections open, so updating a configuration may not change an existing session. Reconnect and test the target app. If the new list appears but the client still uses an old route, check the group selection, cached connection, and local overrides instead of repeatedly refreshing the same subscription.
If the dashboard and client show different data usage, first distinguish a display cache from the actual account status. Monthly plan data resets on the activation date each month, not on the first day of the calendar month. If you upgrade partway through a term, the price difference is prorated over the remaining days; not every displayed item will necessarily refresh the same way. See the Plans page for plan details. When contacting support, include a screenshot of your account status, the error text, and the stage that failed. Hide the subscription URL and other sensitive account information.
Troubleshoot an app that isn't using the proxy
Compare behavior on the same device
If a browser works but one app doesn't, keep the network and route unchanged and open the service's public page in the browser. If that also fails, check the route and service region. If the browser works but the app doesn't, focus on app-routing rules, the app's own network settings, and stale connections. This comparison only shows that the access paths differ; the app's account, sign-in, and content requests may use different endpoints. Note exactly where the app fails.
Check whether the startup screen won't load, sign-in fails, the content list appears but playback fails, or uploads and notifications stop working. Apps often connect to multiple domains, so a working public page doesn't mean all the app's requests use the same path. If you save the client's rule-match information, include only the relevant app, destination domain, and rule name—not unrelated browsing history. Be specific about the failed step so support can distinguish a missing rule from a region restriction or service-side issue.
Check app lists and rule order
In a client that supports per-app routing, first confirm whether the selected apps are set to use the proxy or bypass it. These modes can look similar, but they produce opposite results. Make sure the target app is on the right list, and check for separate work profiles, cloned apps, or installations from different sources. Apps with the same name may be treated as separate instances; use the instance shown in the client to confirm which one is active.
Rules usually determine the route in match order. A broad direct-connection rule may match before the target service's proxy rule, so adding a proxy rule doesn't necessarily mean requests reach it. Check which rule actually matched instead of just confirming the rule exists. Save the original settings before making a change, then adjust only the relevant item. If something else breaks, restore the original rule and investigate further. Don't route all traffic through one exit indefinitely to hide a broken split-tunneling setup.
Distinguish system proxy from traffic capture
Desktop apps don't always follow the system proxy. Some have their own connection settings, while others connect directly. Check whether the app supports the system proxy, then see whether the client offers a suitable traffic-capture mode. In system-proxy mode, a browser working while an app fails is a useful clue to investigate, not enough reason by itself to switch routes. Before enabling traffic capture, check permissions and conflicts with other tools so two routing methods aren't active at once.
| Path | Common Limitations | Where to Check |
|---|---|---|
| System Proxy | The app may not follow system settings | App network settings and system proxy |
| Traffic Capture | May conflict with permissions, interfaces, or other tunnels | Client capture status and system permissions |
| Per-App Proxy | The list mode or app instance may be wrong | Included apps, excluded apps, and app instances |
After changing a rule, close and reopen the target app to clear its old connection. Browser extensions, in-app proxy settings, and the system proxy may also override each other, so make sure you know which one handles traffic during testing. If using a temporary full-proxy route fixes the problem, check which domains or apps the original rules missed. If it still fails, look beyond app routing and check the account region, service restrictions, or app status.
An app reaching the service doesn't mean the account can use it. A platform may decide what features are available based on account region, payment details, or its policies. A route can change the network path, but it can't replace the platform's account requirements.
Troubleshoot AI tools and streaming issues
An AI tool may load but fail to return a response; a streaming app may show its catalog but refuse to play a title. Check the relevant request rules and target region separately, and avoid switching regions repeatedly within an account session. For what's available on Japan-region routes, see Japan Routes and Streaming Platforms. For other services, see the Streaming guide. In your support ticket, include the app, failed step, rule mode, and results of any temporary comparison—not just a screenshot of a loading screen.
Check device limit warnings and system differences
First, identify where the alert comes from
VPNPO supports simultaneous connections on an unlimited number of devices. If you see a “device limit exceeded” alert or similar message, first find out whether it came from the account dashboard, client, target website, or another network tool on your system. A target platform's account device limit isn't a VPNPO device limit, and a client's own configuration limits don't automatically apply to this service. Note where the message appeared and its exact wording. Don't delete working configurations on other devices just because the message sounds similar.
If the alert comes from the dashboard, make sure you're signed in to the intended account and check its current status. If it still shows a limit that contradicts the unlimited-device policy, contact support instead of guessing at a hidden device allowance. If it comes from the client, check whether you've imported an old configuration for another service or selected the wrong active configuration. If it comes from the content platform, follow that platform's account rules; VPNPO can't replace its authorization requirements.
Compare configurations across devices using the same account
If some devices work and others don't on the same network, compare the active configuration, selected route, rule mode, and subscription update status. Supported platforms include Windows, macOS, iOS, Android, and Linux, but they manage proxies and background activity differently. Don't treat a screenshot of one system's settings as instructions for another. Keep the route the same while comparing system-level differences to determine whether the problem is configuration or device permissions.
| Platform | Check First | Commonly Misleading Symptom |
|---|---|---|
| Windows | System proxy, network interface, and security software prompts | Proxy setting remains after quitting the client |
| macOS | Network extension permission, system proxy, and recovery from sleep | Configuration appears imported before authorization is complete |
| iOS | VPN configuration ownership and app reconnection | An app's stale session mistaken for a dropped tunnel |
| Android | VPN authorization, background restrictions, and per-app lists | Process stopped when screen locks or wrong app instance selected |
| Linux | Process permissions, desktop proxy, and network routes | Command-line tools not following the desktop proxy |
On desktop, check that the client is actually running, not just that a configuration file remains on disk. The system tray icon, background process, and network interface may not always reflect the same state, so check what happens to a real request and note any error. If security software prompts for permission, confirm where the program came from and what access it needs, and allow only the relevant item. Don't disable protection indefinitely for troubleshooting or grant traffic-capture access to an untrusted program.
Don't mistake a home network issue for a device limit
When several devices share a home network, downloads, video, and cloud sync may compete for bandwidth and slow everything down. That's shared network capacity, not a service-imposed device limit. Pause other high-bandwidth tasks and test again, then compare on another network. If your router already routes traffic through a proxy and each device also runs a client, requests may be forwarded twice, making the path more complex. First decide which device handles proxying on your home network, then configure the endpoints accordingly.
Don't delete router settings before you understand your network setup. Note the current network on the device, whether the router handles routing, and whether the device has a system proxy enabled so you can compare and restore settings. For the limits and trade-offs of router configurations, see Whole-Home Network Acceleration. That article explains architectural choices; it doesn't mean every router has the same features or replace VPNPO's platform and dashboard setup instructions.
Unlimited devices doesn't mean every device uses the same route. Each device still needs the subscription imported correctly, the necessary system permissions, and a check in the target app. Devices share account details, but their local routing rules and background settings aren't shared automatically.
Tell account problems from device configuration issues
If all devices stop working at once, first check the account status, subscription changes, and shared network entry point. If only one device fails, focus on its local configuration and permissions. Check account issues in the dashboard rather than trying to diagnose them by repeatedly creating local configurations. VPNPO doesn't require an email address; you can create an account with a username and password. To troubleshoot, check delivery using your existing account instead of creating another for testing. In your support ticket, say where the alert appeared and how devices compare. Don't include your password.
Prepare a support ticket and troubleshooting checklist
Know when to stop changing things yourself
Submit a support ticket when your basic network and account are working, the subscription parses, and the issue still reproduces consistently on different networks or on different routes in the same region. Also contact support if dashboard delivery is wrong, you see a clear permission error, or an alert conflicts with VPNPO's unlimited-device policy. Random changes add variables and can turn one problem into a mix of configuration, rules, and permissions issues. Stop at a state you can describe, then gather evidence.
If you've changed a lot of settings, first write down how they differ from a working setup, then restore the last known-good configuration or build a basic one using the Quick Start Guide. Don't uninstall every tool and expect support to diagnose the original problem from a blank system. Reinstalling may fix some application-state issues, but it won't automatically resolve network authorization, account delivery, or target-platform restrictions. Keep a working backup and the error records so you still have something reliable to compare if you need to rebuild.
Share enough detail without exposing account secrets
Describe the issue through the support ticket section of the account dashboard. Include your operating system, where you got the client, its current mode, the failing route, and what you're trying to do, along with the trigger and error text. If you know the system and client versions, copy them from the device instead of guessing from a guide. Include the local time and time zone so support can distinguish a persistent issue from one limited to a particular time.
Summarize the comparisons you've already made: whether direct internet access works, whether another network changes the result, whether another route in the same region fixes it, whether foreground and lock-screen behavior differ, and whether temporarily changing the rule mode helped. These results are more useful than a long list of attempts. It's fine to say “not tested”; don't guess just to make the report look complete. Support needs to know what you actually observed versus what you assumed so it can avoid repeating checks you've already done.
Redact before attaching screenshots. Hide passwords, subscription URLs, login credentials, sensitive payment details, and unrelated personal information. VPNPO's no-logs policy doesn't mean client diagnostic files are safe to share without checking them first.
Describe the minimal steps to reproduce the issue
A minimal reproduction keeps the conditions needed for the problem and removes unrelated actions. For example: “Regular websites work. With rule mode enabled, sign-in fails in the target app. Switching to another route in the same region doesn't help. Temporarily changing the app list fixes it.” This gives support the scope, trigger, and recovery condition. Don't conclude “the service is broken” when local rules may be involved, and don't send only a “Connected” screenshot—it doesn't show the route taken by the target request.
Symptom: Describe the connection failure, web error, or app failure
Environment: Operating system, client source, and current network type
Configuration: Active configuration, rule mode, and selected route
Trigger: Screen lock, network switch, or target action
Error: Copy the full error text after redacting sensitive details
Comparison: Results after switching networks, routes, or modes
Recovery: What restores service, or whether it still cannot be restored
When attaching logs, include only the relevant lines from the time the issue occurred, and check them for subscription URLs and account details first. Client logs may contain destination domains and local addresses; “diagnostic information” doesn't mean there's nothing sensitive in it. If you're unsure what can be shared, start with the error text and a screenshot, then ask support what else they need. Don't upload full configurations or logs to a public link and attach that to your ticket.
Verify the fix and restore your usual setup
After receiving troubleshooting steps, try one change at a time and repeat the original trigger. For a website issue, reopen the same page; for a background issue, lock the screen again; for app routing, restart the target app. One successful attempt doesn't prove the root cause is fixed—check that the original failure no longer occurs. When you're done, restore any temporary full-proxy mode, extra permissions, and test rules you enabled to the settings you need day to day.
Save the working region, use-case groups, and essential settings, and note what triggered the problem and what resolved it. If it happens again, you can reuse a tested troubleshooting sequence instead of wiping the configuration. For questions about plan delivery or billing, review the plan details and Terms of Service. VPNPO offers a 60-day no-questions-asked refund; see the terms for application rules. This guide helps diagnose technical issues; it doesn't replace the account status shown in the dashboard or the target platform's own policies.