A complete VPN beginner guide: from choosing a plan to connecting

Create an account: Keep your sign-in details secure

I8VPN doesn’t require an email address. Create an account with a username and password from the entry point on the site, following the on-screen instructions. Save your sign-in details in a password manager. Choose a username you can easily recognize, don’t reuse passwords from other sites, and never include your password in public screenshots or feedback.

What to expect: You should be able to open your account overview and see your plan status and order options. If your new account doesn’t have an active plan yet, having no available allowance doesn’t mean account creation failed. If you can’t sign in, check for extra spaces in your username, verify the password’s capitalization, and make sure your browser hasn’t autofilled credentials for another site.

Before you begin, make sure your local network is working. Temporarily disconnect other proxy tools and check that your usual websites load. This baseline will help you tell a local network issue from a client configuration problem later. If you’re using a work device, follow your organization’s network and software policies.

Choose a plan: Monthly subscriptions vs. data packages

When choosing a plan, start with how often you’ll use it, then consider your data needs. Web browsing, document collaboration, and continuous video streaming use different amounts of data, so daily time online alone isn’t a reliable estimate. A monthly subscription suits regular use; a data package works well for variable usage when you want unused data to remain available. Here are I8VPN’s plan details. Review the plans page before choosing.

“Unlimited devices” refers to the number of devices that can be connected at the same time, not unlimited data. Keep an eye on your account’s data allowance when using multiple devices. A monthly subscription resets on its activation date, not necessarily on the first of the calendar month. A data package that never expires won’t automatically replenish when used up.

I8VPN accepts Alipay, WeChat Pay, and USDT, and offers a 7-day no-questions-asked refund. Before paying, check the plan, amount, and billing method on your order. Refer to the terms page for refund details. If you’re considering using a monthly subscription and a data package together, don’t assume which one will be used first—check the dashboard details or contact support.

Confirm payment: Check the order and plan status

Create an order in the dashboard, choose an available payment method, and follow the payment page instructions. After paying, return to the original order to check its status, then open your account overview to confirm the plan is active. The payment page’s success message and the plan status in the dashboard are two separate checks; don’t rely on just one.

What to expect: The order should show as paid, and your account should display the plan you chose and its data allowance. If your payment service shows a charge but the dashboard still says payment is pending, refresh the order status and check the account and order details. Don’t rush to pay again.

If you need help, keep the order number, plan name, payment result, and relevant times, then submit them through a support ticket in the dashboard. Hide your password, sensitive payment details, and subscription link in screenshots. Switching routes repeatedly won’t fix an allowance that hasn’t been activated yet.

Get a client: Match the subscription format to the app

Once your plan is active, go to the client section of the dashboard to get compatible software. I8VPN supports Windows, macOS, iOS, Android, and Linux. Sign in to get your subscription. If you’re new to this, choose a client using the setup guide for your platform. Don’t download installers with familiar names from random search results.

A subscription link isn’t a regular website address or an installer. It lets a client retrieve nodes, connection settings, and sometimes routing rules. Subscription formats don’t all support the same content. Get the link from the client or format option listed in the dashboard; don’t assume every app can import the same link.

1. Install and open a compatible client. Check for old configurations first so you don’t select the wrong one after importing.
2. Copy the matching subscription from the dashboard and use the client’s subscription import or import-from-link feature. If one-click import is available, make sure your device opens the intended app.
3. Update the subscription, check that a node list appears, and make sure the newly imported configuration is selected.
4. If parsing fails, check that the link is complete, the format is supported, and your current network can reach the subscription address.

What to expect: The client should show routes you can select, not just a configuration name with no nodes. Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are different protocols, and client and core support varies. This is a general explanation of compatibility; it doesn’t mean I8VPN offers all of these protocols. Follow the configuration shown in the dashboard—there’s no need to edit protocol names manually.

Connect: Choose a route, authorize the client, and check how it handles traffic

After importing successfully, choose a route and start the client connection. A nearby location isn’t always best for a particular service: your local carrier, the path between networks, and the destination website’s entry point all affect performance. Start with a route suited to the destination region, keep the task the same, and compare alternatives. Don’t change the route, DNS, and rules all at once, or it’ll be hard to identify the cause of an issue.

IEPL, relay, and direct connection describe route characteristics, not client protocols. IEPL typically involves a dedicated transport segment, but that doesn’t mean the entire path from your local connection to the destination website is exclusive. A relay forwards traffic through an intermediate server; a direct connection typically connects from your local network straight to an overseas node. Choose based on the dashboard labels and how your target app performs—not on a name alone.

Where to authorize depends on your platform

• Windows: A common option is to enable the system proxy. For more apps, the client may offer TUN mode, which can require additional permissions or a virtual network adapter component.
• macOS: Depending on the client, you may need to allow a network extension or VPN configuration. After granting permission, return to the client and confirm the connection status.
• iOS and Android: The first time you connect, you’ll usually need to allow the client to add a VPN configuration or establish a VPN connection. On Android, check background and battery restrictions too, so the connection isn’t terminated when the app moves to the background.
• Linux: Proxy settings in the desktop environment may differ from proxy settings for terminal programs. A working browser connection doesn’t mean command-line tools are using the proxy.

A system proxy only affects apps that follow that setting. TUN uses a virtual network interface to handle traffic and usually covers more apps, but routing, exclusions, and client implementation still matter. Don’t assume every app is connected just because the status bar shows an icon, and don’t let multiple proxy tools compete for control of system settings.

Test the connection: Check the destination and routing results

For your first connection, use the routing mode recommended by the setup guide. Rule mode chooses direct or proxied connections based on conditions such as domains, addresses, or apps. Global proxy mode typically sends traffic handled by the client through the selected proxy; it doesn’t automatically cover all traffic on your device. If a destination website fails, temporarily switching to global mode can help isolate the issue. Restore your intended mode after troubleshooting.

• ✅ Open the destination website and try a real task, such as searching, signing in, or loading a document. Seeing the homepage alone may only mean it was served from a local cache.
• ✅ Check the client’s connection log to confirm the destination request used your selected proxy rather than being routed directly by a rule.
• ✅ Use a trusted exit IP lookup page to help check for a change in your exit IP. It only shows the exit IP used for requests to that page, not every app’s traffic.
• ✅ Check that your usual local websites still work and that split tunneling hasn’t disrupted everyday browsing. Then test another app you use regularly.
• ❌ A response from the node speed test doesn’t prove the entire connection works. And a destination website’s account restrictions don’t necessarily mean there’s a routing issue.

If a website works but an app doesn’t, first check whether the app follows the system proxy and whether the setup guide recommends enabling TUN. If global mode works but rule mode doesn’t, check whether the rules match and whether the rule resources are up to date. Don’t rush to reinstall the app.

DNS translates domain names into addresses. A DNS leak generally means queries that were expected to use a particular secure route instead went to a resolver outside that route. Rule mode may intentionally use local DNS for local domains, so seeing a local resolver on a test page isn’t enough to conclude that your setup is wrong. Check the client’s DNS policy, the destination domain, and connection logs together. Don’t follow unfamiliar guides that tell you to disable system security features.

Stuck? Troubleshoot by working backward from the last confirmed step

Start troubleshooting at the last step you know worked. If the account is fine but the plan isn’t showing, check the order. If the plan is active but the node list is empty, check the subscription. If nodes are listed but won’t connect, check permissions, traffic handling, and your local network. Describing what happened at a specific step is more helpful than simply saying “it doesn’t work.”

1. No nodes in the list: Make sure the right configuration is selected, update the subscription, and check the specific error. Don’t mistake an unselected configuration for a lack of available routes.
2. No websites load after connecting: Disconnect and check that your local network works. Then check for other proxy tools, leftover system proxy settings, and security software alerts. Follow the setup guide to restore settings one at a time.
3. Only one website fails: Compare rule mode with global mode and check how requests to the destination are routed. The website itself may also be down, or access may be affected by regional policies or account restrictions.
4. The connection drops on its own: Check sleep settings, network changes, and background restrictions. After the network is restored, confirm whether the client reconnects.

If the issue persists, follow the connection troubleshooting guide, or provide your operating system, client name, exact error message, what you were doing, and the steps you’ve already tried. Diagnostic logs may contain destination and configuration details; review them and hide sensitive information before sharing.