Proxies

SOCKS4 cannot resolve site names on the proxy’s side: the names would be resolved on your own machine and give your network away. So a SOCKS4 proxy can be saved, but its check always fails and a profile does not open through it — use the same proxy as SOCKS5 if the provider offers it.

Residential, mobile or datacenter — it makes no difference to the app. SSH tunnels and OpenVPN are not supported.

1. Open Connections in the sidebar and press Add Proxy or VPN.
2. Paste or type your proxies into the field — one or a whole list, in any of the formats below — or drop files onto it. Choose Files… picks files; Enter Manually gives you separate fields for the type, address, login and password.
3. Each line is checked right in the sheet while you look at it.
4. Press Add. The button shows how many connections will be added.

The same sheet opens from a profile: Profile Settings › New Proxy or VPN. There it has one more button, Add and Apply, which saves the list and gives the first working one to that profile.

One proxy per line. All of these are understood — the Formats button in the sheet shows the short list:

203.0.113.10:8080
203.0.113.10:8080:login:password
socks5://login:[email protected]:1080
login:[email protected]:8080
203.0.113.10:8080:login:password:socks5
[2001:db8::10]:8080:login:password

• The type is http, https, socks4 or socks5. It can stand in front as a scheme or at the end of the line.
• A line without a type is fine: the check tries the types in turn and keeps the one that answers.
• An IPv6 address goes in square brackets.

.txt

One proxy per line, in the formats above.

.csv

Either one column of such lines, or a table with a header row: type, host, port, login, password. Commas or semicolons both work as separators.

.conf

One WireGuard or AmneziaWG configuration — see VPN.

type,host,port,login,password
socks5,proxy.example.net,1080,login,password
http,203.0.113.10,8080,,

Several files can be dropped at once. One file may be up to 2 MB; the number of lines is not limited. A line that cannot be read is shown with the name of its file and its line number.

Every line gets a status while the sheet is open:

• A line the app could not read — no port, a broken address, an unknown type — is not added. Fix it in place or remove it.
• A line that was read is added even when its check failed: you may want to keep a proxy that is down right now. Remove Failed takes the failed ones out of the list before you add.

The table lists every connection of the workspace: Connection, Status, Type, Address, Country and Used By — the profiles that use it. Source, Last check and City are hidden until you turn them on from the header’s menu.

Status

Working, Failed, Unchecked or Checking, with the response time of the last check.

Source

Custom — a connection you added; Managed — a built-in proxy.

Filters narrows the list by status, type, country, use and source, and the search field looks through it.

• One: Check in its row.
• Several or all: select them and press Check in the toolbar, or press Check All with nothing selected.
• From a profile: Check Connection in the profile’s menu.
• On a schedule: Settings › Connections › Check Connections — Never, Every 15 Minutes, Every Hour, Every 6 Hours or Every Day. Every hour unless you change it.

A check sends a few small requests through the connection and records what a site would see. Open a connection to read the result under What Sites See:

External IP

The address sites see.

Country, Timezone

Where that address is. The profile’s language and time zone are taken from here.

ASN

The network the address belongs to.

IP reputation

Whether a large site met a request from this address with a challenge.

Protocols

Whether the route can carry UDP.

Under Checks the sheet keeps the Last failure and the results of the Last 24 hours. This history stays on this computer.

Choose Open in the connection’s menu.

General

Name, Type and Paid until — a date to remind you when the proxy runs out.

Access

Address, Login and Password; leave the last two empty to keep the saved ones. Without Authentication removes them. Disable UDP forbids UDP on this route.

Used By

The profiles on this connection.

Notes

Anything you want to remember about it.

Logins and passwords of your proxies are kept in the system’s credential store — Keychain on macOS, Credential Manager on Windows — not in a settings file.

One profile

Profile Settings › Connection › Proxy or VPN. Direct Connection takes the proxy off.

Many profiles, from Profiles

Select them and choose Set Connection…. One for All gives every profile the same connection; One per Profile hands out the connections you select in order. With fewer connections than profiles, choose Round robin or assign only to the first ones. Replace Current Connection decides whether profiles that already have one are changed.

Many profiles, from Connections

Select a connection and press Assign to Profiles: tick the profiles, or create a New Profile with This Connection.

Take off

Clear Connection in the profile’s menu.

Running profiles are skipped: a profile’s connection changes only while it is closed.

Select connections and choose Export. The list is written one per line as addresses, ready to paste back; logins and passwords are left out unless you turn on Include Passwords. Copy puts it on the clipboard, Save… writes a file.

socks5://login:[email protected]:1080
http://203.0.113.10:8080

Delete removes a connection and takes it off the closed profiles that used it. A connection cannot be deleted while a profile that uses it is open.