VPN beginner questions usually fall into three areas: understanding plan rules, knowing what happens after connecting, and deciding where to troubleshoot first. Multiple devices, data usage, speed limits, and always-on connections are not separate issues; they are also affected by client mode, route type, the local network, and split-tunneling rules. The sections below follow the order of real-world use and provide checks you can perform directly.

Can multiple devices be used at the same time?

First check whether the plan limits the number of devices that can be online simultaneously, rather than only checking which platforms support the client. VPNSZ plans allow unlimited devices online at the same time, so one subscription can be used across your everyday devices. Windows, macOS, Android, and iOS clients work differently, but the device type itself does not change how plan data is counted.

Unlimited devices does not mean every connected device will have the same experience. If a home computer is syncing large files while other devices stream media or join video meetings, they still share the local broadband connection and the current route. When one device slows down, pause downloads, cloud sync, and system updates on the others, then compare the connection again.

A subscription link contains route configurations and should be handled like account credentials. When importing it on a new device, copy it again from the user panel rather than placing it in a public document, screenshot, or searchable page. VPNSZ registration requires no email address; a username and password are enough. Keep your login details safe, then retrieve the client and subscription from the panel when needed.

Bottom line: The plan determines the device limit, while connection quality depends on the local network, concurrent tasks, client mode, and selected route. When troubleshooting, separate “can it connect?” from “is it fast after connecting?”

How VPN data usage is calculated

Data usage is the amount of information transferred between your device and the route. Opening a webpage creates download traffic, while uploading files, sending images, and syncing cloud storage create upload traffic. Services may count uploads, downloads, and protocol overhead differently, so use the user panel and plan details as the source of truth rather than comparing them directly with a single app’s operating-system statistics.

Encrypted connections add overhead from handshakes, encapsulation, retransmissions, and keepalives. A webpage may appear small while loading images, scripts, fonts, and API data in the background; streaming services may also preload upcoming segments. The instant speed shown on the client home screen reflects the current transfer rate, not cumulative usage, and it cannot show how much data remains.

Activity Main traffic direction Often-overlooked usage Where to check
Web browsing Mostly downloading Images, video previews, and background APIs Cumulative usage in the user panel
Streaming media Continuous downloading Quality changes and preloading Player quality and panel usage
Cloud sync Uploads and downloads together Version sync and failed retransmissions Cloud tasks and client connection logs
Software updates Mostly downloading Automatic background downloads System update history

When does monthly data reset?

“Monthly reset” does not necessarily mean the balance clears on the first day of every calendar month. VPNSZ monthly subscription data resets on the monthly anniversary of activation, so check the activation and reset details in the panel when reviewing your cycle. If the remaining balance changes near the reset date, first confirm whether the current usage cycle has updated before treating it as unusual consumption.

Monthly subscription allowances and data packages follow different rules. Monthly subscription data resets with the subscription cycle, while data packages do not expire; check each set of details separately. Do not mistake the client’s usage total since installation for the remaining balance in the current server-side cycle. Reinstalling the client, clearing its data, or changing devices does not replace the usage records in the panel.

  • ✅ Confirm the plan type and current cycle in the user panel.
  • ✅ Compare the activation date to see whether the monthly reset has just completed.
  • ✅ Check whether system updates, cloud sync, or streaming are running in the background.
  • ✅ When using multiple devices, check each device for high-usage tasks.
  • ❌ Do not use the data consumed by a single speed test to estimate a normal month’s usage.

Will the connection be speed-limited?

A drop in speed does not automatically mean the service is limiting you. Encryption, detoured routes, congestion at the exit, local Wi-Fi conditions, the destination site’s load, and fluctuations on international links can all make the usable speed lower than your local broadband speed. In the evening, with several devices active, or when the wireless signal is weak, the local environment is often the first bottleneck.

To determine whether a consistent speed limit exists, hold the variables constant: use the same device, local network, and download source while comparing a direct connection with different routes. Do not change the client, protocol, node, and test site at the same time, or you will not know which change affected the result. Browser-based speed tests are also influenced by proxy mode, caching, and server location, so treat them only as a snapshot of current conditions.

Why route types affect speed

A direct route enters the public internet from the local network, keeping the path simple but making performance more dependent on carrier routing. A transit route first reaches an optimized entry point before continuing to the exit region, aiming to improve less stable parts of the public path. An IEPL private line typically places key transport segments on a dedicated link, with a different focus on stability; access to the destination can still be affected by the target service and local network conditions.

A shorter distance is not always faster, and a region name does not guarantee an identical route. Choose based on results on your current network: slow webpage responses with reasonable downloads may indicate DNS or packet loss; a slow connection setup may relate to protocol handshakes or UDP availability; if only one website is slow, check the destination and routing result first.

Troubleshooting order: Stop background high-volume tasks, switch to another route in the same region, then compare direct, transit, and IEPL private routes. Only after that should you change the protocol or client core. Change one variable at a time.

Should a VPN stay connected all the time?

Whether to stay connected depends on the use case. Keep the connection active when you need ongoing protection on public networks, a consistent exit region, or a specific app to use an international route reliably. If you only need a route for certain services, rule-based split tunneling is usually better, allowing local websites, LAN devices, and apps that do not need a proxy to connect directly.

Always-on mode lets the client continuously control the system proxy or virtual network adapter. After a computer sleeps, a network changes from Wi-Fi to Ethernet, or a device moves between networks, the connection may need to be re-established. Mobile platforms are also affected by background and battery-saving policies. Even when the status bar still shows a connection icon, verify the exit in practice if access behaves strangely instead of relying on the icon alone.

Will switching routes disconnect me?

A brief interruption can occur, and it is a normal part of switching connections. The client must close the old connection, establish a new one, and update the system proxy, routes, and DNS state. Video calls, file uploads, remote terminals, and online games may reconnect as a result. Some sites that are sensitive to the source address may also ask you to verify the session again.

Before switching routes, pause uploads that cannot resume automatically and save any remote work. Once the client shows that the new connection is ready, open a new page to confirm access. If an existing page still behaves strangely, the browser may be retaining an old connection or DNS cache; refresh it and then restart the browser if needed instead of switching through several nodes rapidly.

If every route switch requires a device restart, that is usually not normal. Check whether the client core is outdated, a system proxy setting remains behind, a virtual network adapter is being controlled by another network tool, or security software is blocking the new connection.

How should I choose a protocol?

Protocol names are not a simple speed ranking. They determine how the client and server authenticate, encapsulate, and transport data, as well as how TCP, UDP, the system proxy, and virtual network adapters are supported. The safest approach is to start with the protocol and parameters already configured in the subscription. Do not change ports, transport layers, or encryption options without understanding the server-side settings.

Protocol Key characteristics What to consider
Shadowsocks An encrypted proxy protocol; clients commonly handle traffic through system proxy or TUN mode Encryption method, UDP support, and client compatibility
VMess An authentication and transport protocol in the V2Ray ecosystem Client core, system time, and transport parameters
Trojan Typically establishes encrypted transport with TLS Certificate validation, domain name, and network environment
VLESS The protocol itself has a relatively minimal design; secure transport depends on supporting mechanisms such as TLS Transport-layer configuration and client core version
Hysteria2 Based on QUIC and UDP, designed for networks with packet loss and fluctuations Whether the local network properly supports UDP
TUIC Also based on QUIC, with multiplexing and UDP forwarding Client implementation and UDP reachability

When a network restricts UDP, Hysteria2 or TUIC may not work as intended and may even fail to establish a connection. In that case, try another protocol available in the subscription. VMess, Trojan, and VLESS cannot be judged by name alone; actual performance depends on transport settings, route paths, and client implementation. Choose a protocol for stable compatibility rather than chasing a fixed label.

How to import a subscription link into a client

A subscription link is usually not a regular webpage; it is an address the client uses to retrieve route configurations. After copying it, open the client’s subscription management, configuration management, or remote-configuration section and import it, then update. Pasting the link into a browser address bar may only show encoded content or trigger a download; that does not mean the configuration has been added to the client.

  1. Copy the complete subscription link from the user panel and make sure it has no extra spaces at either end.
  2. Find subscription management or the remote-configuration section in the client.
  3. Paste the link, save it, and then update the subscription manually.
  4. Choose a route from the updated list, then enable the system proxy or TUN mode.
  5. Open a new page to verify access and the exit status before starting your actual task.

Windows and macOS clients typically let you choose between system proxy and TUN mode. System proxy mainly handles apps that follow the operating system’s proxy settings; some games, command-line tools, and apps with their own network stack may bypass it. TUN mode handles a broader range of traffic through a virtual network adapter, but it requires correct routing and permissions.

Android clients generally connect through the system VPN interface and are also affected by background and battery policies. iOS clients create a VPN configuration after system authorization; the subscription import entry is provided by the individual client. Button names vary across platforms, but the workflow is the same: retrieve the subscription, update the configuration, choose a route, and start the connection.

How to choose between split tunneling and global mode

Global mode sends all traffic within the client’s control to the selected route, making it useful for temporarily checking whether rules are failing to match. Rule mode chooses proxy or direct access based on domains, addresses, apps, or rule sets and is better for everyday use. Direct mode bypasses remote routes and is often useful for restoring local access or running comparison tests.

The goal of split tunneling is not to create as many rules as possible, but to make match results understandable. If international sites fail while local sites work, switch to global mode as a test: if global mode works, the route is usually fine and the rules are the more likely problem; if global mode also fails, continue checking the node, protocol, and local network. Switch back to rule mode after testing so unnecessary traffic does not keep using the route.

  • ✅ Let local websites and LAN services connect directly when appropriate.
  • ✅ Send international websites through proxy routes by domain or rule set.
  • ✅ Check first whether games and work apps follow the system proxy.
  • ✅ Use global mode temporarily during troubleshooting to verify the route itself.
  • ❌ Do not run multiple clients that control the system proxy or virtual network adapter at the same time.

How to check for DNS leaks

DNS translates domain names into network addresses. After connecting to a route, problems can occur if domain lookups are still handled directly by the local network’s DNS: results may not match the exit region, specific sites may fail to open, or the local network may still see the domains being queried. A DNS leak concerns where queries actually go, not just which DNS address appears in the client settings.

When checking, first confirm that the client has enabled the intended DNS handling, then see whether the browser has its own secure DNS enabled. The browser’s built-in DNS setting may bypass the client’s expected policy or duplicate its encrypted DNS configuration. How much DNS the system proxy handles depends on the app and client implementation; TUN mode usually makes unified handling easier, but it still needs to be configured correctly.

If the route connects but domains will not open while direct access to a known service still responds, DNS should be an early suspect. Reconnect the client, flush the system DNS cache, disable conflicting browser DNS settings, and check whether split-tunneling rules send DNS requests and destination traffic along different paths. Do not copy unknown DNS configurations from random online sources, as they add more variables to the investigation.

What to check first when you cannot connect or keep disconnecting

The most common beginner troubleshooting mistake is changing too many settings at once. Start with the smallest, easiest-to-reverse checks: confirm the local network, update the subscription, switch to a similar route, and only then change the protocol, proxy mode, or system network settings. This makes it possible to identify which layer is causing the problem at each step.

  • ✅ Disconnect the client and confirm that the local network can access commonly used services normally.
  • ✅ Check that the device date and time are accurate to avoid authentication and certificate-validation failures.
  • ✅ Update the subscription and select another currently available route.
  • ✅ Check whether another client is also controlling the system proxy or virtual network adapter.
  • ✅ If a UDP protocol cannot connect, compare it with another protocol in the subscription.
  • ✅ If only certain websites fail, check split tunneling, DNS, and the destination site’s status.
  • ❌ Do not change ports, transport layers, and routes in bulk without recording the original settings.

Frequent disconnects can also result from network changes. Moving a device from one Wi-Fi network to another, waking a computer from sleep, or having a router reconnect changes the underlying connection. In these cases, manually disconnecting and reconnecting the route is more effective than repeatedly reinstalling the client. If the problem continues, record the time, platform, client version, selected protocol, and error message before submitting a support ticket; this information is much more useful than simply saying “it does not work.”

Beginner’s rule of thumb: Understand what the account, subscription, client, and route each do; use rule-based split tunneling day to day and hold variables steady when troubleshooting; check data and cycles in the user panel, and verify connection status through actual access.