Install walkthroughs and connectivity fixes. Check FAQ first, then verify version and platform packages on the download page.
Start from the platform cards on the download page: a new phone that will not sign in is usually a full device quota, not a wrong password. Read the account device list, kick the dead handset, wait a minute. Do not reins
Read article →Start from the platform cards on the download page: a working browser is not proof that DNS rides the tunnel. Use 1.1.1.1/help, then strip manual DNS, Android Private DNS, and split rules that send lookups Direct.
Read article →Start from the platform cards on the download page: connecting forever on corporate Wi-Fi is a policy problem: captive portal, PAC, UDP filtered, MDM, or RFC1918 sent into the tunnel. Swapping twenty nodes is the wrong f
Read article →Start from the platform cards on the download page: connected on IPv4 does not mean IPv6 entered the tunnel. Disable IPv6 in the client or on that NIC, retest both families. Do not nuke IPv6 on the whole LAN first.
Read article →Start from the platform cards on the download page: a successful charge and an in-app “expired” banner are different databases. Wait for the billing callback, sign out and back in, match the order id. Do not pay twice th
Read article →Start from the platform cards on the download page: dead internet for the first minute after login is a race: Kill Switch fires before the tunnel, or Windows Fast Startup restored a half-dead virtual NIC. Time the 90 sec
Read article →Start from the platform cards on the download page: ignore the flag icon until you have latency, loss, and a purpose. Auto is fine for browsing; pin a tested city for calls and video. Evening slowness is congestion, not
Read article →Start from the platform cards on the download page: treat Connected-but-dead as a local config problem first. Disable Kill Switch, force global mode, flush DNS, then ping an IP versus a hostname.
Read article →Start from the platform cards on the download page: match the 2026.07 package to your OS, grant the system VPN prompt, then verify the egress IP. SmartScreen, Android battery limits, and iOS profiles are the usual traps.
Read article →Start from the platform cards on the download page: put browsers in the tunnel; leave banking and campus apps direct. Prove the node in global mode before you edit a single checkbox.
Read article →Start from the platform cards on the download page: a US flag is not a catalog. Put the player in the tunnel, enable DNS leak protection, clear the app cache, and pin one region instead of hopping countries.
Read article →Start from the platform cards on the download page: turn on Kill Switch and DNS leak protection. Do not stack a second proxy. These toggles cut leak windows; they are not a courtroom-grade no-log audit.
Read article →Start from the platform cards on the download page: apple Silicon needs the matching package and a Privacy & Security approval. Linux needs TUN access for your user, not chmod 777. Architecture mismatches fail quietly.
Read article →Start from the platform cards on the download page: a system tunnel plus PAC plus SwitchyOmega splits tabs into different worlds. Disable OS proxies and extensions until only Lvcha VPN remains.
Read article →Start from the platform cards on the download page: captive portals need a clear path to an HTTP page. If Lvcha VPN or Kill Switch is already up, the login never appears and Wi-Fi looks broken.
Read article →Start from the platform cards on the download page: home broadband can start on UDP or Auto. Offices, campuses, and hotel portals that drop UDP need TCP. Change one variable: the same node, opposite protocol.
Read article →