FAQ

OpenFreeNet transports traffic over VLESS Reality (TCP, default port 443), with TUIC and Hysteria2 over UDP where the operator enabled them. Any client that speaks these protocols works, including the popular rule-based clients (Clash, sing-box, Surge, Shadowrocket, QuantumultX). For background on modern protocol design, see WireGuard vs OpenVPN.

Any platform with a client from the portal’s Subscription page works. In practice that covers iOS, Android, macOS, Windows, and Linux. For a per-platform install walkthrough, see Installation.

Billing is set up by your service operator. Operators offer self-service plans through card rails (Stripe, Lemon Squeezy) and/or crypto (NOWPayments, USDT/USDC only and non-refundable once confirmed on-chain); some run on manual renewal (the operator extends your subscription from the admin panel when you pay them directly). Either way:

• Subscription expiry suspends your account but does not delete your data.
• Renewal re-activates immediately, with no config re-download.
• Data quota overage behaves the same as expiry.

New accounts start with a free trial where enabled. To renew, go to Console → Shop; for pricing, check the marketing site’s pricing section or ask your operator.

1. Wait 10-30 seconds after toggling on, the peer needs to propagate to the node.
2. Toggle off and on to force a reconnect.
3. Check the Console for any account status warnings (suspended, quota exceeded).
4. Try a different node if your operator runs more than one.
5. Check the firewall, the node’s REALITY TLS port (usually 443, or 8443 on a self-hosted node sharing the box with Caddy) must be reachable from your network. Some public WiFi networks block it.
6. If still failing, see the subscription troubleshooting table or contact your operator with the timestamp of the failed attempt.

• The operator runs the infrastructure but cannot decrypt your traffic; your account credential (UUID plus subscription token) is issued server-side and identifies you, it does not expose content.
• Your subscription URL is your credential; the operator can see connection metadata (which node, when, how much) but not content.
• The operator’s privacy policy applies to the operational data they store. Ask your operator for their policy directly.

Yes. Join tokens (used by operators to onboard a new node) are single-use and expire after 30 minutes by default. If a token expires or is lost, the operator generates a new one from the admin panel.

Your subscription token (the part of your subscription URL) does not expire on its own, but you can rotate it at any time from the Console’s Get connected card or the Subscription page’s Danger Zone if you suspect it has leaked.

Contact your operator through the channels listed on the marketing site. If you are reporting a security vulnerability, request their security contact, responsible disclosure is appreciated.

• Quickstart, first-time setup.
• Using Subscriptions, rotating, multi-device, advanced node selection.