FAQs

PandaVPN currently supports Windows, macOS, Android, iOS, Linux, Android TV, Apple TV, and the CLI version.

You can use PandaVPN on Windows PCs, Mac, Android phones, Android tablets, Android TV, iPhone, iPad, Linux devices, and Apple TV.

If you need to use PandaVPN on servers, router environments, or other command-line-supported devices, you can also choose the PandaVPN CLI version. We recommend downloading the latest client for your platform from the official website:
https://pandavpnpro.com/download

After installing PandaVPN, open the app or client and go to the Sign In or My Account page.

• If you already have a PandaVPN account, sign in with your account information.
• If you purchased PandaVPN through the App Store or Google Play, sign in on the same device; if your membership status does not appear, tap Restore Purchase or Restore Subscription.
• On mobile devices, PandaVPN may automatically create a trial account after installation. You can directly choose a server and connect.
• If you use the PandaVPN CLI client, open a terminal, run panda login, and follow the on-screen instructions.

After signing in, choose a server and click Connect to start using PandaVPN.

If you forgot your password, click Forgot Password on the sign-in page. If your account is not linked to an email address, contact the support team and provide your PandaVPN digital ID or proof of payment.

We recommend downloading PandaVPN only through the following official channels:

• Official website: https://pandavpnpro.com/download
  You can download Windows, macOS, Linux, Android APK, Android TV APK, as well as the CLI client by chip architecture (Windows / macOS / Linux).
• Android: download from Google Play or get the official APK from the official website.
• Android TV: download from Google Play or get the official APK from the official website.
• iPhone / iPad / Apple TV: download from the Apple App Store; the official website entry will eventually redirect to the App Store as well.
• GitHub: you can also download from the official repository: [https://github.com/PandaVPN/PandaVPN]

Do not download third-party APKs, cracked versions, cloud drive installers, or versions from unknown websites. If a VPN installer is tampered with, it may affect your network connection, account security, and privacy protection.

If you are using PandaVPN for the first time, you can start with Smart-Select Server, or choose a server from the Recommend list. These options help you quickly choose a suitable route without manually comparing different regions.

You can also choose a server based on what you need:

• For everyday web browsing, use Smart-Select Server, or choose a server close to you.
• If you want to access content from a specific country or region, choose a server in that country or region.
• For streaming, gaming, or video calls, try nearby servers first to get lower latency.
• If a server is slow or the connection is unstable, disconnect and switch to another server.

After choosing a server, click it directly and PandaVPN will automatically connect to that route. Once connected, you can start using PandaVPN.

After connecting to PandaVPN, you can confirm whether the connection was successful in the following ways:

• The PandaVPN app shows the Connected status.
• The current server or line is shown as connected, and the connection duration starts to appear.
• Your device status bar may show a VPN icon, key icon, or VPN indicator.
• When you open websites or apps, the network can be accessed normally.
• For further confirmation, you can check whether your current IP address or region has changed to the location of the connected server.

If the app shows connected but the network cannot be used normally, try disconnecting and reconnecting, or switch to another server and try again.

You can choose the appropriate installation method based on your device type:

• Windows / macOS / Linux: Go to the official PandaVPN website at pandavpnpro.com/download, choose the matching system, download the installer, and follow the prompts to complete installation.
• Android phone or tablet: Download from Google Play, or download and install the official Android APK from the website.
• Android TV: Download from Google Play, or download and install the official Android TV APK from the website.
• iPhone / iPad / Apple TV: Go to Apple App Store, search for PandaVPN, and install it; the official website entry will also redirect to the App Store.
• CLI client: Go to the official download page, choose the Windows, macOS, or Linux version, and download the appropriate installer based on your device chip architecture.

After installation, open PandaVPN, log in to your account, choose a server, and click connect to start using it.

To stay safe, download only from the official PandaVPN website, official app stores, or the official GitHub repository. Do not install third-party APKs, cracked versions, or installers from cloud-drive links.

If the first connection fails, disconnect and reconnect first, or switch to another server and try again.

You can also restart PandaVPN or your device, and check whether the network, firewall, or security software is blocking the connection.

If you are not sure which protocol or connection method to choose, we recommend using Smart Mode. PandaVPN will automatically choose a suitable connection method based on the current network conditions, making it suitable for daily browsing, streaming, and first-time use.

If PandaVPN cannot open or does not run properly after installation, try the following first:

• Confirm that your device system version meets PandaVPN’s runtime requirements.
• Close PandaVPN and reopen it, or restart your device and try again.
• Check whether you downloaded and installed it from the official PandaVPN website, an official app store, or the official GitHub repository.
• If it is an Android APK, confirm that you have allowed app installation from that source.
• If it is Windows, macOS, or Linux, try uninstalling it, then download and install the latest version again.
• Check whether the system firewall, security software, or network settings are blocking PandaVPN.
• If the issue still exists, contact the PandaVPN support team and provide your device model, system version, app version, and a screenshot of the error message.

Do not re-download the installer from third-party websites, cracked versions, or cloud-drive links, as this may affect device security and privacy protection.

We recommend installing PandaVPN and signing in first on the device you use most often, such as your phone, computer, or TV. After setup is complete, you can sign in with the same account on other devices as needed.

After the connection succeeds, the PandaVPN app will show the Connected status. You can also open a web page or app to test whether the network is working normally, or check whether your current IP address and region have changed to the location of the connected server.

Before connecting for the first time, make sure PandaVPN was downloaded from the official website or an official app store, and ensure the network is available, your account is signed in, and the device has allowed VPN permissions.

On mobile devices, if a VPN configuration authorization prompt appears, please allow it as instructed.

PandaVPN currently has only one official website:

https://pandavpnpro.com/

Please download or purchase PandaVPN only through the following official channels:

1. Official website:
   https://pandavpnpro.com/
2. Official Google Play page:
   https://play.google.com/store/apps/details?id=com.pandavpn.androidproxy
3. Official Apple App Store page:
   https://apps.apple.com/app/id1450910298

Please do not download or purchase PandaVPN from other websites. Unofficial channels may provide counterfeit software, which may cause service failure, privacy leakage, or funds loss.

If you find a suspected counterfeit website or app, or are not sure whether a channel is official, please contact us through customer support email for confirmation:

[email protected]

Yes. PandaVPN is safe.

PandaVPN supports OpenVPN, WireGuard, and the self-developed PandaVPN Mode. It protects your network connection through encrypted transmission, reducing the risk of data monitoring or leakage.

For privacy protection, PandaVPN uses random digital accounts, does not require excessive personal information during registration, and supports a no-logs policy to minimize user privacy data retention.

PandaVPN also supports payment methods such as Bitcoin and includes an AdBlocker feature to help reduce some ads, pop-ups, and malicious content.

The PandaVPN Android and iOS clients support the AdBlocker feature.

You can enable AdBlocker in the client settings. After enabling it, connect to any server in a supported mode to filter some ads.

AdBlocker is mainly used to filter some website ads, pop-up ads, banner ads, and some in-app ads.

Please note:

Ad filtering results may vary depending on the website, app, region, and ad loading method. It cannot guarantee that all ads will be blocked.

Please use a secure password and do not share your account information with others. We recommend linking an email address you use regularly, and signing in only through the official app or official website. Do not enter your PandaVPN login information on third-party websites.

After a successful connection, websites and apps will usually see the IP address of the PandaVPN server instead of your real IP address. You can use an IP lookup website to confirm the IP and region currently being shown.

PandaVPN needs VPN permissions to establish a secure connection on your device and protect network traffic. This is a normal system authorization prompt. Please only grant VPN permissions to the official PandaVPN app.

Please download only from the official PandaVPN website, official app stores, or the official GitHub repository. Do not install third-party APKs, cracked versions, cloud-drive installer packages, or versions from unknown websites.

No. Incognito browsing mainly prevents browsing history from being saved on this device. It does not hide your real IP address or encrypt the device’s network connection. A VPN can help encrypt network traffic and change the IP address shown externally.

First, confirm that PandaVPN is connected successfully, then try switching servers or protocols. You can also restart the app and device, and check whether the system, browser, or other apps are using custom DNS settings.

Currently, we accept Credit card, PayPal, Google Play, Payssion, and Line Pay, etc.

PandaVPN offers a 7-day money-back guarantee. If you are not satisfied with the service, please contact customer support within 7 days of purchase to request a refund.

Before requesting a refund, please cancel your PayPal or credit card subscription first to avoid future automatic renewal.

Refund request methods:

1. Contact customer support through “Online Feedback” in the app.
2. Send an email to [email protected] to request a refund.

Refund processing time:

1. UnionPay and PayPal orders are usually refunded to your account within 1–3 days.
2. Credit card refunds may take 5–10 business days to appear on your statement.

Note:

1. The 7-day plan is not eligible for the 7-day money-back guarantee.
2. Orders purchased through the App Store or Google Play are handled by the corresponding platform. Please request a refund through the App Store or Google Play according to their platform rules.

If you need to cancel PandaVPN automatic renewal, please follow the steps based on your purchase channel:

1. PayPal subscription
   Log in to your PayPal account, go to “Settings” > “Payments” > “Manage automatic payments,” find PandaVPN, and cancel the subscription.
2. Credit card subscription
   If you subscribed by credit card, you can select a plan again on the PandaVPN renewal page and try to pay. The system will usually prompt you to cancel your current subscription. Follow the prompt to cancel.
   If there is no cancellation prompt, it may mean the subscription has already been canceled. You can also log in to your Stripe account and find the PandaVPN subscription under Billing / Subscription to cancel it.
3. App Store subscription
   If you purchased through the App Store on iPhone or iPad, go to the Apple ID “Subscriptions” page, find PandaVPN, and cancel the subscription.
4. Google Play subscription
   If you purchased through Google Play on an Android device, go to Google Play “Payments & subscriptions,” find PandaVPN, and cancel the subscription.

After cancellation, the system will no longer charge you automatically. Your purchased Premium time will remain available until the current validity period ends.

If you have any questions, please contact us through in-app online feedback or customer support email:

[email protected]

To protect your account security, non-custom accounts are for personal use only. We do not recommend sharing your account with others.

If your account is used by others, it may cause device slots to be occupied, account abnormalities, connection restrictions, or personal information leakage. Any losses or risks caused by account sharing are the responsibility of the account owner.

If you need multiple people or multiple devices to use PandaVPN together, we recommend purchasing additional device slots or contacting customer support for a custom device quantity plan.

If you need the same account to support more simultaneous devices, you can purchase additional device slots in the account center.

Log in to the “My Account” page and click “Add Devices” or “Add 3 Devices.” Each purchase adds 3 additional available device slots.

If you need a custom plan with more device slots, you can contact us through in-app online feedback or by sending an email to customer support:

[email protected]

In your message, please specify the number of devices you want to purchase. Customer support will provide a quote and purchase method.

If your account is linked to an email address, click “Forgot Password” on the login page and reset your password through the linked email.

If your account is not linked to an email address, please send your PandaVPN digital ID, order screenshot, or payment success screenshot to customer support:

[email protected]

Customer support will verify the information and help you reset your password.

If you have paid successfully but Premium has not taken effect, please follow the steps based on your payment method:

1. PayPal payment
   Some PayPal orders may be delayed due to platform review. It may take up to 3 business days. Please check your account status again later.
2. App Store or Google Play subscription
   Log in to your account in the corresponding client, go to “My Account” or “Manage Subscription,” and tap “Restore Subscription” or “Restore Purchase.”
3. Other payment methods
   Please contact us through in-app online feedback or send an email to customer support:
   [email protected]

Please provide your PandaVPN digital ID, order screenshot, or payment success screenshot. Customer support will help check and resolve the issue.

If you forgot your PandaVPN digital ID, you can find it in the following ways:

1. PayPal payment orders
   Open your PayPal order details and check the item description. The PandaVPN digital ID is usually shown after the plan you purchased.
2. Other payment methods
   If you paid through another method, please send your order screenshot or payment success SMS screenshot to customer support:
   [email protected]
   Customer support will help you find the corresponding digital ID based on the order time and payment information.
3. App Store or Google Play orders
   If you purchased a subscription in the App Store or Google Play client, you can first try tapping “Restore Subscription” or “Restore Purchase” in the client.
   If you still cannot find it, please contact customer support and provide a platform order screenshot for further checking.

Yes. You can renew your Premium subscription before it expires.

After renewal, the new plan duration will be automatically added to the remaining time on your current account. Your existing Premium time will not be affected.

For example, if your account has 10 days of Premium remaining and you purchase a 30-day plan, your total account time will become 40 days.

PandaVPN is currently in a promotion period. When an invited friend makes their first payment, both you and your friend can receive free Premium time rewards.

Reward rules:

1. Friend reward
   If your friend registers through your sharing link, or enters your invitation code and completes payment, your friend will receive 30 days of Premium time.
2. Inviter reward
   Your reward depends on the plan your friend purchases for their first payment:
   If your friend purchases a plan shorter than 1 year, you will receive 30 days of Premium time.
   If your friend purchases a plan equal to or longer than 1 year, you will receive 90 days of Premium time.

Note:
If your friend’s first purchase is shorter than 1 month, neither the inviter nor the friend will receive reward time.

Yes. You can still enter an invitation code within 7 days after registration.

Official website: Log in to your account at https://pandavpnpro.com/my-account, then enter the corresponding invitation code in the “Input invitation code” field.

Please note: The invitation code must be entered within 7 days after account registration. After that, you may no longer be able to enter it.

PandaVPN supports account deletion requests and deletion of related data.

Before deleting your account, please make sure you have canceled any current subscription or automatic renewal.

Steps:

1. Open the PandaVPN client.
2. Go to “Menu” > “My Account” > “Settings” > “Delete Account.”
3. Tap “Request Deletion.”

After the request is submitted, the system will automatically process the account deletion. Once deleted, the account can no longer be used to log in or access services, and related data will also be deleted.

You can open PandaVPN and go to My Account or the subscription page to check your current membership status, subscription type, and expiration time.

If you purchased the subscription through App Store or Google Play, you can also check it on the subscription management page of the corresponding app store.

This usually happens because auto-renewal is enabled for your subscription. Before the subscription expires, App Store, Google Play, or the payment platform may automatically renew it and charge you.

If you believe the charge is abnormal, check whether you have multiple accounts, multiple subscriptions, or duplicate purchases through different platforms. If you are still unsure, contact the PandaVPN support team and provide proof of payment.

If you need to change the email linked to your PandaVPN account, please contact the PandaVPN support team for assistance.

To confirm account ownership, you may need to provide your current account information, PandaVPN digital ID, or relevant proof of payment.

If you purchased PandaVPN through App Store or Google Play, make sure you are signed in on the device with the same Apple ID or Google Account used for the purchase.

If the membership status is not displayed, tap Restore Purchase or Restore Subscription in PandaVPN.

This usually happens because the other device is signed in with a different PandaVPN account, Apple ID, or Google Account.

Please make sure both devices are using the same PandaVPN account, and try restoring the purchase on the device that matches the purchase platform. If it still cannot sync, please contact the PandaVPN support team.

Open PandaVPN, go to My Account or the subscription page, then tap Restore Purchase or Restore Subscription.

Please confirm that the current device is signed in with the Apple ID or Google Account used for the purchase. After restoration, the membership status will update automatically.

Different PandaVPN clients may support slightly different modes. Please refer to what is shown in your client.

1. Smart Mode
   The client automatically selects a suitable connection method. Recommended for most daily use.
2. Global mode
   All traffic goes through the VPN, providing stronger privacy protection, but local websites, apps, or LAN devices may become slower.
   On mobile, this is usually called: Tunnel All for Privacy
   On PC / Mac, this is usually called: Encrypted Proxy: Global (Exclude LAN)
3. Tunnel All Except Region
   Traffic goes through the VPN by default, but traffic for the selected region connects directly. For example, if United States / US is selected, US-related websites and apps connect directly, while other traffic goes through the VPN.
4. Tunnel Target Region Only
   Traffic connects directly by default. Only traffic to the selected region goes through the VPN. Suitable for accessing websites or streaming services in a specific country or region.
5. Tunnel Social Media Only
   Only social media or streaming traffic such as YouTube, Facebook, and X goes through the VPN. Other traffic connects directly.
6. Per-App VPN
   Mobile clients can use Per-App VPN to choose whether specific apps use the VPN.
7. Custom Split Settings
   Advanced users can use Custom Split Settings to customize IP, domain, or rule-based routing, deciding which traffic goes through the VPN, connects directly, or is blocked.
8. Protocol modes
   PandaVPN, OpenVPN, and WireGuard are different connection protocols. If the connection is unstable or slow, try switching protocols.

Recommendation:
If you are not sure which mode to choose, use Smart Mode first. If local websites or apps become slow, use Tunnel All Except Region or another split-tunneling mode.

PandaVPN does not limit usage traffic and does not actively limit connection speed. You can use it as needed.

However, please note that PandaVPN does not replace your internet connection and is not a “free data” tool. When using PandaVPN, your device still needs to be connected to Wi-Fi or mobile data first, and it will still consume the corresponding Wi-Fi or mobile data traffic.

In simple terms:

1. PandaVPN itself does not limit traffic.
2. PandaVPN does not make mobile data or Wi-Fi traffic free.
3. If your device is not connected to the internet, PandaVPN cannot connect or be used.
4. Actual speed may be affected by your local network, carrier, region, and selected server.

If you cannot access the internet after connecting, please first check whether your device’s Wi-Fi or mobile data is working normally, then try changing the PandaVPN server or protocol.

Premium+ is a higher-tier server category provided by PandaVPN, mainly for users with higher requirements for speed, stability, or access to specific regions.

Premium+ servers usually use higher-quality server resources and are suitable for HD video, streaming, gaming, or scenarios that require better connection quality.

Premium+ servers may still be in testing or available for a limited-time trial. The actual availability is subject to what is shown in the client. After the test or free access period ends, you may need to upgrade your plan to continue using Premium+ servers.

If the connection is not ideal, try switching to another Premium+ server or changing the protocol.

The abbreviations in server names usually indicate the network service provider, region, or supported service.

For example, HKT, HKBN, APNIC, HKCM, PCCW, HiNet, SoftBank, and similar abbreviations usually refer to the network service provider related to the server.

If a server name contains a platform name, such as Netflix, BBC iPlayer, AbemaTV, Viaplay, or VIU, it usually means the server is more suitable for accessing that platform.

If access is abnormal, we recommend switching to another server in the same region and trying again.

The server list is grouped by server tier, country or region, and some usage scenarios, making it easier to choose a suitable server.

Common groups:

1. Free / Premium / Premium+
   These are different server tier tabs. Free servers can be used for free. Premium and Premium+ servers require the corresponding account access or plan status.
2. Smart-Select Server
   Smart server selection. After tapping it, the system will automatically recommend a suitable server based on your current network conditions.
3. Recommend
   Recommended servers. The system recommends available servers based on your network conditions.
4. Country or region groups
   Groups such as America, Asia, Europe, USA, Oceania, and Middle East indicate the server location. You can choose a server based on the region you want to access.
5. BitTorrent
   Servers in this group allow BT downloads.
6. Streaming servers
   There is currently no separate Streaming group. If you want to watch Netflix, Disney+, HBO, or other streaming services, you can search for the platform name in the server list, or choose a server with the corresponding platform tag in its name.

In addition to the groups above, other servers are usually categorized by country, region, or server tier. You can choose a server based on your access needs.

Smart Mode lets the client automatically choose a suitable connection method, making it ideal for most users’ everyday use.

Global Mode routes all traffic through the VPN for stronger privacy protection, but it may slow down access to local websites, apps, or LAN devices. On mobile, it is usually named Tunnel All for Privacy; on PC / Mac, it is usually named Encrypted Proxy: Global (Exclude LAN).

This is usually related to the current connection mode or split tunneling settings. Some modes route all traffic through the VPN, while others only route traffic from specified regions, specified Apps, or specific types of traffic through the VPN.

Please check whether you are currently using Smart Mode, per-App settings, bypass specified regions, proxy only specified regions, or Custom Split Settings. Supported modes may vary by client, so please refer to what is shown in the client.

Server latency usually means the response time between your device and the server. The lower the latency, the faster and more stable the connection usually is; the higher the latency, the more likely you may experience slow loading or lag.

PandaVPN may update server names and groups based on route maintenance, server optimization, or regional adjustments. This is normal, so please refer to what is currently shown in the app.

No. PandaVPN needs to connect to the internet through mobile data or Wi-Fi. If the device itself has no network connection, the VPN cannot establish a connection either.

Premium usually refers to advanced server routes that may require the corresponding membership access to use.

Premium+ is a higher-tier route offered by PandaVPN, mainly for users with higher requirements for speed, stability, or access to specific regions. It is suitable for HD video, streaming, gaming, or scenarios that require higher connection quality.

Currently, Premium+ routes are still in testing or available for a limited time. The exact availability is based on what is shown in the client. After the test or free-access period ends, you may need to upgrade your plan to continue using Premium+ routes.

This may be caused by a delay in system status refresh, network switching, or VPN configuration synchronization. Please use the connection status inside the PandaVPN app as the main reference. If they do not match, you can disconnect and reconnect, or restart the app and check again.

Smart Mode automatically selects the appropriate connection method based on the current network conditions. It is suitable for new users who are not sure which protocol or mode to choose, as well as for daily browsing, streaming, and first-time connection.

Network conditions vary by region and carrier, so actual speed may differ.

In general, servers that are geographically closer to you and have lower latency are usually faster and more stable. You can also choose servers based on your access needs. For example, if you want to access websites, apps, or games in a specific country or region, prioritize servers in that region.

We recommend choosing a server with lower latency in the client. If the speed is not ideal, try switching to another nearby server or changing the protocol.

If local websites, apps, or LAN devices become slow after connecting to PandaVPN, it is usually because all traffic is being routed through the VPN tunnel.

You can switch protocols or enter PandaVPN Mode in the client and choose a more suitable split-tunneling mode:

1. If you mainly visit local websites or apps, we recommend choosing “Tunnel All Except Region” and adding your local region to the bypass list. This allows local traffic to connect directly while other traffic can still go through the VPN.
2. If you only want to access websites in a specific country or region, we recommend choosing “Tunnel Target Region Only.” This means only traffic to the selected region will go through the VPN, while other traffic remains direct.
3. If you only need to accelerate or access social media, you can choose “Tunnel Social Media Only.”
4. If you need to protect all network traffic, you can choose “Tunnel All for Privacy,” but local websites or apps may become slower.

If you need to access routers, printers, NAS, or other LAN devices, you can also enable LAN exclusion or local network direct connection settings in the client.

Some users refer to VPNs as “accelerators.” If you only open the PandaVPN client but have not connected to a VPN server, your IP address will not change.

Please choose a server in the PandaVPN client and click Connect. After the connection is successful, your network IP address will change to the IP address of the selected server.

If your IP address still does not change after a successful connection, try the following:

1. Disconnect and reconnect PandaVPN.
2. Change to another server.
3. Switch the connection protocol and try again.
4. Close and reopen your browser, then check your IP address again.

If your IP still cannot be changed, please confirm that the client shows “Connected” and update PandaVPN to the latest version before trying again.

Please first check whether the network is working properly and make sure PandaVPN has been updated to the latest version. You can try reconnecting, switching servers, or changing the protocol before trying again.

Please confirm that PandaVPN is connected successfully, and try refreshing the web page or changing servers. If you still cannot access it, restart the browser, app, or device and try again.

Internet speed may be affected by server distance, network conditions, or current route load. We recommend switching to a closer server, or using Smart Mode to automatically choose a suitable connection method.

If the connection fails, disconnects frequently, is slow, or certain websites cannot be accessed, you can try switching protocols. If you are not sure which protocol to choose, we recommend using Smart Mode.

For daily use, you can choose Smart-Select Server or a server from the Recommend list. If you need to access content from a specific region, choose the server for the corresponding country or region.

First disconnect and reconnect PandaVPN, then restart the browser or device. You can also switch servers or protocols, and check whether the system or browser has custom DNS configured.

It may be caused by website cache, browser cache, or the IP lookup service not updating in time. Please make sure PandaVPN is connected successfully, then refresh the page, clear the cache, or try another IP lookup website.

Please first check the app version, device system, network status, server settings, and protocol settings. If the issue persists, prepare your device model, system version, app version, error message, and a screenshot of the issue.

Please do not share passwords, verification codes, full bank card numbers, private keys, or other sensitive information. When contacting support, you usually only need to provide your device model, system version, app version, issue screenshot, PandaVPN digital ID, or proof of payment.

It is possible. A firewall, security software, or network management tool may intercept the VPN connection. Please try adding PandaVPN to the allow list, or temporarily disable the related restrictions before connecting again.

Different apps may use different network rules, cache, DNS, or region detection methods. Try restarting the app, switching servers or protocols, and confirming that PandaVPN is connected successfully.

If YouTube videos load slowly or buffer, please try the following:

1. Change to a YouTube or streaming-related server and reconnect.
2. Switch to another connection protocol in the client and try again.
3. If you are using Chrome, you can disable QUIC. Steps:
   Enter the following in the Chrome address bar:
   chrome://flags/#enable-quic
   Find “Experimental QUIC protocol,” set it to Disabled, and restart the browser.

Settings may vary slightly depending on the client. If it is still slow, we recommend updating PandaVPN to the latest version and trying another region or a lower-latency server.

If you cannot watch Netflix after connecting to PandaVPN, the current server or proxy mode may not be suitable for streaming. Please try the following:

1. Prefer servers with Netflix in the name, or switch to another streaming server in the same region.
2. Mobile users: Go to protocol or mode settings and avoid selecting Tunnel All for Privacy. You can switch to a split-tunneling mode under PandaVPN Mode and reconnect.
3. PC users: If the current mode is Encrypted Proxy: Global (Exclude LAN), switch to Smart Mode or another split-tunneling mode and reconnect.
4. Reopen the Netflix app or browser and try again.

If it still cannot play, please switch to another Netflix server or change the protocol and reconnect.

Yes. Search for Disney+ in the server list, choose a server with the Disney+ tag, reconnect, and then open Disney+ to watch.

If it still cannot play, try the following:

1. Enable global proxy mode and reconnect.
2. Switch to another server with the Disney+ tag.
3. Close and reopen the Disney+ app or browser.
4. If there is still an error, check the device, account region, and playback environment according to the official Disney+ message.

Note:

Disney+ has strict requirements for device compatibility, region, and network environment. Playback performance may vary by device.

We recommend first clearing your browser cache, Cookies, and streaming app cache, then fully closing and reopening the app. If necessary, you can also restart the device before testing again.

Not necessarily. Support for different streaming services may vary by server, and the actual connection and playback results should be used as the reference. If it cannot play, please switch to another server and try again.

Please contact the PandaVPN support team and provide the streaming platform name, target region, selected server, device model, system version, PandaVPN version, error message, and a screenshot of the issue.

This may be because the streaming platform has cached old region information, or because the account region, payment method, or device location is still using the original settings. Please make sure PandaVPN is connected to a server in the target region, then restart the streaming app and try again.

Slow video playback may be related to server distance, the network environment, or current route load. We recommend switching to a closer or more stable server. You can also use Smart Mode to automatically choose a suitable connection method.

Not necessarily. Different streaming services may have different region detection and routing requirements. If a platform cannot play normally, you can try switching to another server in the same region.

YouTube may determine your location based on your account region, watch history, device location, or cache. Please confirm that PandaVPN is connected successfully, then refresh the page, restart the app, or clear the YouTube cache and try again.

The streaming App may use stricter region detection, cache, or device location. Try closing and reopening the App, clearing the cache, or switching servers before testing again.

If the Windows client shows connected but you cannot access Google or YouTube, please troubleshoot as follows:

1. Temporarily turn off antivirus software or firewall and try again to avoid the connection being blocked.
2. Close other proxy tools, accelerators, or browser proxy extensions to avoid conflicts with PandaVPN.
3. Change the server or switch protocols in PandaVPN, then reconnect.
4. Fully exit PandaVPN and open it again. If it still does not work, restart your computer and try again.

If the issue remains, please update to the latest client and contact customer support with your system version, selected server, and issue details.

If download speed is slow in Chrome, you can try enabling parallel downloading.

Steps:

1. Enter the following in the Chrome address bar:
   chrome://flags/#enable-parallel-downloading
2. Find Parallel downloading and set it to Enabled.
3. Click Relaunch to restart the browser, then try again.

If it is still slow, try changing the PandaVPN server or switching the protocol, then download again.

If Telegram still does not work properly after connecting to PandaVPN on PC, you can manually set a proxy inside Telegram.

Steps:

1. Open Telegram and go to Settings > Advanced > Connection type.
2. Choose “Use custom proxy.”
3. We recommend choosing SOCKS5 and entering:
   Proxy address:
   127.0.0.1
   Port:
   Use the port shown in PandaVPN client Settings or Advanced Settings. The common SOCKS5 port is 1090.
   If using an HTTP(S) proxy, the common port is 41091.

If you are using Secure VPN: PandaVPN, OpenVPN, or WireGuard mode, Telegram usually does not need a separate proxy setting.

Some older Windows client versions may have been falsely detected by Windows Defender. We recommend downloading and installing the latest client from the official PandaVPN website first:

https://pandavpnpro.com/download

The latest official version usually does not show this warning. Please do not download installers from unofficial sources, as they may be modified or unsafe.

If you are using an older version, or still see a Windows Defender warning, you can add PandaVPN to exclusions:

1. Open Windows Security.
2. Go to “Virus & threat protection.”
3. Find “Virus & threat protection settings” and click “Manage settings.”
4. Scroll down to “Exclusions” and click “Add or remove exclusions.”
5. Select “Add an exclusion” and add the PandaVPN installer or installation folder.

After adding the exclusion, run the installer again. We recommend updating to the latest PandaVPN client after installation.

On PC, you can add custom rules in “Settings” > “Advanced Settings.”

For websites that need to use the proxy, add them to Custom Encrypted Proxy, for example:

||abc.com

For websites that need to be excluded from the proxy, add them to Exclude domains from Encrypted Proxy, for example:

def.com

You can also use an exclusion rule:

@@||def.com

Please use English punctuation and enter one rule per line. After setup, reconnect PandaVPN for the rules to take effect.

If PandaVPN cannot connect properly on your Windows PC, you can try flushing DNS and resetting the network configuration:

1. Right-click the Start menu and choose “Terminal (Admin)” or “Command Prompt (Admin).”
2. Enter the following commands one by one, pressing Enter after each line:
   ipconfig /flushdns
netsh winsock reset
netsh int ip reset
3. After the commands are complete, restart your computer.
4. After restarting, open PandaVPN again and try connecting.

If it still does not work, go to Windows Settings, open “Network & Internet,” go to “Proxy,” and enable “Automatically detect settings.” You can also try changing the PandaVPN server or protocol.

This may be caused by the system proxy not refreshing, browser cache, different app proxy rules, or a conflict with other proxy software.

Please try disconnecting and reconnecting PandaVPN, restarting the browser or app, and checking whether other proxy or VPN tools are enabled at the same time.

You can first restart your computer and router. If the network issue continues, go to Windows Settings, open Network & Internet, select Advanced network settings, and then use Network reset.

After the reset, you need to restart your computer and reconnect PandaVPN.

Please only download the Windows installer from the official PandaVPN website at pandavpnpro.com/download.

Do not download the installer from third-party download sites, cloud-drive links, cracked-version websites, or unknown sources, as this may affect your device security and privacy protection.

Open the PandaVPN Windows client and click Online Feedback in the left menu.

In the feedback window, enter the issue you are experiencing, then click or check Send logs at the bottom. If needed, you can also add a screenshot of the issue, then click Send.

When contacting the support team, please also provide your Windows version, PandaVPN version, the time the issue occurred, and an error screenshot. Please do not send sensitive information such as passwords, verification codes, or bank cards.

Windows 7 is an older system, and some newer client versions or protocols may have compatibility issues. If you cannot access the internet after connecting, we recommend downloading the Windows 7 compatible version from the official website.

Please go to the PandaVPN official website to download:
https://pandavpnpro.com/download

Legacy version for Windows 7: 7.1.2

After installation, restart your computer, then open PandaVPN again and connect to a server.

If WireGuard mode still cannot access the internet, try switching to OpenVPN or PandaVPN Mode. Since Windows 7 is outdated, we recommend using the compatible version for better compatibility.

Please go to the PandaVPN official website pandavpnpro.com/download and download the Windows installer. Once the download is complete, open the installer file and follow the prompts to complete the installation.

After installation is complete, open PandaVPN, log in to your account, choose a server, and connect to start using it.

Please first try restarting PandaVPN or restarting your computer. If it still won’t open, make sure the latest version is installed, then try uninstalling it and downloading and installing it again from the official website.

If the problem persists, please contact the PandaVPN support team and provide your Windows version, PandaVPN version, and an error screenshot.

Yes, it is possible. Firewalls, antivirus software, or security management tools may block PandaVPN’s network connection.

Please try adding PandaVPN to the allow list, or temporarily turn off the related restrictions and reconnect.

If PandaVPN cannot be used properly after installation on Mac, please troubleshoot as follows:

1. Make sure you downloaded the latest macOS client from the official website and completed the installation using the pkg installer.
2. After installation, open PandaVPN from “Applications.” Do not run it directly from the Downloads folder or a temporary location.
3. If the browser cannot access websites after connecting, test with Safari first.
4. If Safari works normally, other browsers may be affected by proxy extensions, VPN extensions, or ad blocker extensions. Please disable those extensions and try again.

If it still does not work, restart your Mac, then try changing the server or switching the protocol and reconnect.

Command-line tools in Mac Terminal may not automatically follow the PandaVPN client proxy. If you need Terminal to use a proxy, you can use the following methods:

1. Recommended: Use PandaVPN CLI
   If you mainly use PandaVPN in Terminal or command-line environments, we recommend using the PandaVPN CLI version, which is better suited for command-line scenarios.
2. Use HTTP/HTTPS proxy
   Run the following commands in Terminal:
   export http_proxy=http://127.0.0.1:41091
   export https_proxy=http://127.0.0.1:41091
   41091 is the common local HTTP/HTTPS proxy port. Please refer to the port shown in the PandaVPN client settings.
3. Use SOCKS5 proxy
   If the tool supports SOCKS5, enter:
   Proxy address: 127.0.0.1
   Port: 1090
   1090 is the common local SOCKS5 proxy port. Please refer to the port shown in the client.
4. Use proxychains
   If some commands do not support proxy settings directly, you can install proxychains-ng:
   brew install proxychains-ng
   Then set the proxy in the proxychains configuration to:
   socks5 127.0.0.1 1090

Note:
If the Mac client is using Secure VPN, OpenVPN, or WireGuard mode, additional settings are usually not required. If it is using Smart Mode or Encrypted Proxy mode, some Terminal commands may need separate local proxy configuration.

Please go to the PandaVPN official website pandavpnpro.com/download and download the macOS installer. Once the download is complete, open the installer file and follow the prompts to complete the installation.

After installation is complete, open PandaVPN, log in to your account, choose a server, and connect to start using it.

Open the PandaVPN macOS client, go to Settings or the protocol-related page, select an available protocol, and reconnect.

If you’re not sure which protocol to choose, we recommend using Smart Mode（智能模式）. If the connection is unstable or slow, you can switch to another protocol and try again.

Open the PandaVPN macOS client and click Online Feedback in the left menu.

In the feedback window, enter the issue you are experiencing, then click or check Send Log at the bottom. If needed, you can also add a screenshot of the issue, then click Send.

When contacting the support team, please also provide your macOS version, PandaVPN version, the time the issue occurred, and an error screenshot. Please do not send sensitive information such as passwords, verification codes, or bank cards.

PandaVPN is available in the App Store in most countries and regions. If you cannot find it, please first make sure you are using the correct search keyword. We recommend searching directly for “PandaVPN.”

Please also make sure to identify the official PandaVPN name and logo to avoid downloading unofficial apps.

Currently, PandaVPN is not available in the App Store in Russia or mainland China. If your Apple ID region is Russia or mainland China, you may not be able to search for or download PandaVPN. We recommend switching to an App Store region where PandaVPN is available and trying again.

This is the normal iOS security confirmation process. PandaVPN needs to add a VPN configuration so it can establish an encrypted connection on your iPhone or iPad.

When connecting for the first time, tap Allow, then enter your device passcode as prompted, or use Face ID / Touch ID to confirm. After authorization is complete, return to PandaVPN and reconnect.

Only add a VPN configuration for the official PandaVPN app, and do not authorize apps from unknown sources.

If you purchased PandaVPN through the App Store but your membership status does not appear in the app, first confirm that the current device is signed in with the same Apple ID used for the purchase.

Then open PandaVPN, go to My Account or the subscription page, and tap Restore Purchase or Restore Subscription.

If it still cannot be restored, check whether the App Store subscription is active, or contact the PandaVPN support team and provide the Apple purchase receipt.

Yes. You can install PandaVPN on your iPad and sign in with the same PandaVPN account.

If your subscription was purchased through the App Store, make sure your iPad is signed in with the same Apple ID used for the purchase. If your membership status does not appear, tap Restore Purchase or Restore Subscription in PandaVPN.

After signing in, choose a server to connect and start using it.

Open the App Store on your iPhone or iPad, search for PandaVPN, then download and install it.

After installation is complete, open PandaVPN, log in to your account, choose a server, and connect to start using it.

This is the normal security confirmation process in iOS. PandaVPN needs VPN permission to establish a secure connection on your iPhone or iPad.

When connecting for the first time, tap Allow（允许） and enter your device passcode as prompted, or use Face ID / Touch ID to confirm.

First, make sure your network is available and check whether PandaVPN has VPN permission. You can try reconnecting, switching servers, or restarting PandaVPN and your device before trying again.

If you still cannot connect, try using Smart Mode or switching to another available protocol.

This is normal. After connecting to PandaVPN, iOS will show the VPN indicator in system settings or the status bar, meaning the device is using a VPN connection.

After disconnecting PandaVPN, this status usually disappears automatically.

Make sure the current device is signed in with the same Apple ID used for the purchase, then tap Restore Purchase or Restore Subscription in PandaVPN.

If it still cannot be restored, check whether your App Store subscription is active, or contact the PandaVPN support team and provide your Apple proof of purchase.

Yes. As long as your iPhone or iPad is connected to the internet, PandaVPN can be used over cellular data or Wi-Fi.

If the connection behaves abnormally after switching networks, you can disconnect PandaVPN and reconnect.

In iOS, open Settings, go to General, select VPN & Device Management or VPN, then find and delete the PandaVPN configuration.

After it is deleted, PandaVPN will no longer be able to connect using that VPN configuration. To use it again, reopen PandaVPN and authorize it as prompted.

If your Android phone shows “feature conflict” when connecting to PandaVPN, please troubleshoot as follows:

1. Uninstall and reinstall PandaVPN. When the system asks to create a VPN connection during the first connection, tap “Allow” or “OK.”
2. If it still cannot connect, restart your phone and try again. You can also try resetting the phone’s network settings.
3. Open phone system settings, go to VPN settings, and check whether there are other VPN connections.
4. If another VPN has “Always-on VPN” enabled, turn off that option first, then reconnect PandaVPN.

If the issue remains, please update to the latest PandaVPN client and try again.

When the Android client connects for the first time, the system will show a VPN connection request. If you cannot tap “OK,” please try the following:

1. Turn off Eye Comfort Mode, dark eye protection, blue light filter, or similar display enhancement features, then try again.
2. If full-screen mode or gesture navigation is enabled, temporarily turn it off and reconnect.
3. Close other apps that may display floating windows, such as phone manager apps, translation floating windows, or screen recording tools.
4. Restart PandaVPN and connect again.

After completing the steps above, tap Connect again and confirm the system VPN request.

If the Android client disconnects automatically, it is usually because the system restricts PandaVPN from running in the background. Please adjust the following settings:

1. Open phone Settings, go to App Management, and find PandaVPN.
2. Allow PandaVPN to run in the background, and enable permissions such as auto-start and associated launch.
3. In Battery settings, set PandaVPN to “Unrestricted” or turn off battery optimization.
4. Allow PandaVPN to use background data to avoid restrictions from Data Saver mode.
5. If your phone manager or security center has background cleaning or power-saving protection, add PandaVPN to the whitelist.

After finishing the settings, reopen PandaVPN and connect to a server.

Connection drops on Samsung phones are usually related to system restrictions on background network usage or battery optimization. Please follow these steps:

1. Open phone Settings, go to Apps, and find PandaVPN.
2. Go to Mobile Data or Data Usage settings, and enable options such as “Allow background data usage,” “Allow data usage while Data Saver is on,” or “Allow unrestricted data usage.”
3. Go to Battery settings, set PandaVPN to “Unrestricted” or “No restrictions,” and make sure PandaVPN is not added to Sleeping Apps or Deep Sleeping Apps.
4. If Power Saving Mode, Data Saver, or Ultra Power Saving Mode is enabled, we recommend turning it off before using PandaVPN.
5. After finishing the settings, fully close PandaVPN and open it again to connect.

If the connection still drops, try changing the server or protocol, and make sure you have updated to the latest PandaVPN client.

If PandaVPN disconnects every few minutes after connection, it is usually because the Android system restricts PandaVPN from running in the background. Please adjust the following settings:

1. Open phone Settings, go to App Management, and find PandaVPN.
2. Allow PandaVPN to run in the background, and enable permissions such as auto-start and associated launch.
3. In Battery settings, set PandaVPN to “Unrestricted,” “No restrictions,” or “Do not optimize.”
4. If your phone manager or security center has background cleaning, power-saving protection, or auto-cleaning, add PandaVPN to the whitelist.
5. If Power Saving Mode, Data Saver, or Game Booster is enabled, we recommend turning it off and trying again.

Common brand settings:

• Huawei: Turn off battery optimization and enable background activity.
• Xiaomi: Set battery saver strategy to “No restrictions.”
• OPPO / vivo: Allow background running or allow running during high battery usage.
• OnePlus: Set battery optimization to “Do not optimize.”
• Samsung: Allow background running and turn off Sleeping Apps or Deep Sleeping Apps restrictions.
• Meizu: Allow background running in permission management.

After finishing the settings, reopen PandaVPN and connect to a server. If it still disconnects, update to the latest client or try switching servers and protocols.

PandaVPN can currently be installed on Meta Quest 3 using the APK file. We recommend downloading the installer from the official PandaVPN website first:

https://www.pandavpnpro.com/download/android

Method 1: Install with a computer and SideQuest

1. Enable Developer Mode in the Meta Quest app on your phone.
2. Install SideQuest on your computer.
3. Connect Meta Quest 3 to your computer using a USB-C cable.
4. Download the Android APK installer from the PandaVPN official website.
5. Open SideQuest, choose to install an APK file, and select the downloaded PandaVPN APK.
6. After installation, open the app library on Meta Quest 3, choose “Unknown Sources,” and you will find and open PandaVPN there.

Method 2: Install without a computer

1. Open the browser on Meta Quest 3 and visit the PandaVPN official website to download the Android APK.
2. Install Mobile VR Station or another tool that supports APK installation.
3. Follow the tool instructions to grant access to the Downloads folder.
4. Find the downloaded PandaVPN APK and tap to install it.
5. After installation, open PandaVPN from “Unknown Sources” in the app library.

Note:

Please download the APK from the PandaVPN official website whenever possible, and avoid unofficial sources to prevent installing a modified version. After installation, choose the server you need and connect.

If the Linux AppImage file cannot be opened directly, it is usually because it does not have executable permission.

Open Terminal and go to the folder where the file is located, for example:

cd ~/Downloads

Then run:

chmod +x Panda6.9.1.AppImage

Then run:

./Panda6.9.1.AppImage

Please replace Panda6.9.1.AppImage with the actual filename you downloaded.

If it still cannot be opened, you can also try the PandaVPN CLI version, which is better suited for Linux Terminal and server environments.

If WireGuard mode shows connected on Linux but cannot access the internet, the system may be missing DNS-related components or the kernel version may be old.

Ubuntu / Debian users can run the following commands in Terminal:

sudo apt update
sudo apt install resolvconf

After installation, restart PandaVPN and reconnect WireGuard mode.

If it still does not work, try switching to PandaVPN Mode or OpenVPN mode, or use the PandaVPN CLI version.

You can install PandaVPN on Android TV in two ways:

1. Search for PandaVPN in Google Play on your Android TV, then download and install it on the TV device.
2. Go to the official PandaVPN website pandavpnpro.com/download, download the official Android TV APK, then install it.

After installation is complete, open PandaVPN, sign in to your account, choose a server, and connect to start using it.

Only download from Google Play or the official PandaVPN website. Do not install third-party APKs, cracked versions, or cloud-drive installation packages.

If you cannot choose a server or protocol on Android TV, the system may be restricting PandaVPN from running in the background or blocking interface switching.

Please try the following settings:

1. Enable Developer Mode on Android TV.
2. Enable “Allow apps to run in the background” or a similar option.
3. Enable “Force allow apps on external” to allow apps to run on external devices.
4. Turn off “Don’t keep activities.”

After finishing the settings, reopen PandaVPN and try again. If you still cannot choose a server or protocol, restart Android TV and make sure the latest PandaVPN client is installed.

If your IPTV app supports proxy settings, you can configure it as follows:

1. Open the IPTV app or device network settings, and find “Proxy Server” or “Proxy.”
2. Enter the proxy information:
   Proxy address:
   127.0.0.1
   Proxy type:
   SOCKS5
   Port:
   1090
   Please refer to the SOCKS5 port shown in PandaVPN client “Settings” or “Advanced Settings.”
3. Save the settings, then reopen the IPTV app or restart the device.
4. Connect to a server in PandaVPN. For routing mode, we recommend using Global Mode first, or choosing Smart Mode or split-tunneling mode as needed.

After setup, test whether IPTV can play normally.

If you are using PandaVPN on Android TV and the remote cannot select a button or control, first try pressing the Back button to exit the current page, then enter it again.

If you still cannot select it, try the following:

1. Close and reopen PandaVPN.
2. Restart your Android TV device and try again.
3. Check whether PandaVPN is the latest version.
4. If your device supports it, try using a Bluetooth mouse, keyboard, or phone remote control app.

If the issue still exists, contact the PandaVPN support team and provide your device model, system version, and a screenshot of the issue.

If you are not sure which protocol to choose, you can directly select Smart Mode. PandaVPN will automatically choose a suitable connection method based on the current network conditions.

If the connection is unstable, you can also try switching to other protocols available in the app, then connect again.

Open the App Store on Apple TV, search for PandaVPN, then download and install it.

After installation is complete, open PandaVPN, sign in to your account, choose a server, and connect to start using it.

If you click the Apple TV or tvOS download entry on the official PandaVPN website, it will usually redirect you to the App Store page.

This may happen because the streaming app has cached old region information, or because the account region or Apple ID region is still set to the original settings.

First confirm that PandaVPN is connected to a server in the target region, then fully quit the streaming app and reopen it. If needed, restart Apple TV, or sign out of the streaming account and sign in again.

If it still shows the original region, check the region settings of the streaming account itself. Some platforms show content based on the account registration region, payment method, or content licensing rules, and do not rely entirely on the VPN connection region.

Apple TV can use PandaVPN normally, but the available features may be slightly different from the mobile or desktop version. Please refer to what is shown inside the Apple TV app.

If you are not sure how to connect, we recommend selecting Smart Mode directly. PandaVPN will automatically choose a suitable connection method based on the current network conditions.

If some servers, protocols, or features are not shown, it usually means the current Apple TV version does not support them yet. We recommend using the options available in the app to connect.

Yes. PandaVPN can be used on Apple TV. You can search for PandaVPN in the App Store on Apple TV and install it.

After installation is complete, open PandaVPN, log in to your account, choose a server, and connect.

If you click the tvOS download entry on the official website, it will usually redirect you to the App Store page as well.

Panda CLI is Panda’s command-line client and supports the following through the terminal:

• Login and account management
• Node refresh and node connection
• Switching between PandaVPN / Proxy / WireGuard / Auto modes
• System proxy configuration
• Split rules
• Split DNS configuration
• Kill-switch protection
• Auto-connect
• Logs and diagnostics

It is suitable for internal beta users, developers, advanced users, and testing scenarios that require scripted operations.

It is recommended to disconnect first and turn off Kill-switch:

panda disconnect
panda kill-switch off

For a manual upgrade or Linux service upgrade, it is recommended to also stop the daemon:

sudo panda stop

When upgrading macOS and Windows with an installer, the installer usually handles service installation and restart automatically. After the upgrade is complete, run:

panda version
panda doctor
panda connect

After a manual Linux upgrade, run:

sudo panda service install
sudo panda service restart
panda version
panda doctor

panda log
panda log --lines 200
panda log --all

Clear logs:

panda log clear

Temporarily enable debug:

panda log level debug dns,tcp --ttl 10m

Restore default:

panda log level reset

Supported versions can configure this:

panda config tcp-fast-open auto
panda config tcp-fast-open on
panda config tcp-fast-open off

Notes:

• The recommended default is auto;
• Changing it will not trigger a hot reconnect;
• A reconnect is required for it to take effect on new TCP sockets;
• Nodes that do not support TFO should not show a noticeable connection latency regression.

If the current version does not have this config option, follow panda config --help or the actual CLI help.

In newer versions, Windows Kill-switch has been upgraded from a daemon-held dynamic session to persistent WFP filters.
This means the guard can remain in place after the daemon exits abnormally.

However, persistent WFP is not the same as a boot-time filter. The very early startup window is still part of future hardening scope.

Linux Phase 1 mainly supports GNOME gsettings.
Environments such as KDE / XFCE may show as unsupported.

This does not necessarily affect the PandaVPN packet runtime, but it may affect the system proxy mode experience.

In a no-tunnel IPv6 scenario, awdl0 / llw0 may be blocked, causing AirDrop / Continuity to become temporarily unavailable.
It usually recovers after disconnect.

If it is still abnormal, recommended:

panda disconnect
panda kill-switch off
panda repair
panda doctor

This usually happens because the official service / LaunchDaemon is installed, and you also manually ran:

sudo panda start

sudo panda start starts an unmanaged daemon, which may manage the following at the same time as the official daemon:

• VPN routes
• DNS
• TUN
• system proxy
• Kill-switch

The rule is: keep only one daemon.

Common handling on macOS / Linux:

panda disconnect
panda kill-switch off
sudo panda stop
panda repair
panda doctor

On Linux, if you use systemd service, restart the official service afterwards:

sudo panda service restart
panda doctor

On macOS, if installed with .pkg, usually let LaunchDaemon / helper manage the daemon, and do not use sudo panda start long-term as your daily startup method.

If you only want to disconnect the VPN, you do not need to exit the daemon:

panda disconnect
panda kill-switch off

If you really want to stop the daemon:

sudo panda stop

Confirm:

panda status

If it shows panda daemon unavailable, it means the main daemon has stopped.

Note: The LaunchDaemon / helper installed by the macOS .pkg may be managed by the system. Regular users are not advised to manually stop the service frequently.

trace is used to see which rule, DNS action, and route a target will use.

panda trace example.com:443
panda trace 8.8.8.8:53 --json

Note: full trace capability requires an active PandaVPN packet runtime. Without a compatible runtime, only limited validation is available, or it falls back to legacy trace.

Usually no. Split DNS configuration changes are hot-loaded.

Common commands:

panda split dns status
panda split dns local set 223.5.5.5 114.114.114.114
panda split dns policy tunnel-only
panda split dns fake-ip on

If the platform does not support certain local DNS sources, doctor will show a warning.

On a Fresh install, the default is proxy system-proxy on.
If the user explicitly saved off, that configuration is preserved.

View or set:

panda proxy system-proxy on
panda proxy system-proxy off
panda proxy system-proxy lock-on

Note: under mode auto, pandavpn, and wireguard, the VPN runtime ignores the persisted system proxy preference; the VPN companion proxy remains available and uses scoped egress.

Windows system proxy is the current user's HKCU WinINET setting and requires a per-user user-agent.
If you are in an SSH or non-interactive session, proxy repair may not always be able to start the user-agent automatically.

Recommended:

panda proxy status
panda proxy repair
panda doctor

If it still does not take effect, try again in a desktop login session.

Common reasons:

• you are not logged in yet;
• the node directory has not been refreshed;
• the current account has no available nodes;
• the network is unavailable;
• the daemon is not running;
• the current mode is incompatible with the target node;
• under mode auto, the recommended protocol failed to start and fallback also failed.

Recommended checks:

panda account
panda node refresh
panda node list
panda mode
panda doctor
panda log --lines 200

panda status

Structured output:

panda status --json

Shorthand:

panda stat

doctor is a read-only diagnostic command used to view the current key status of Panda CLI.

panda doctor
panda doctor --json

Short form:

panda do

Focus on:

runtime
kill_switch
selected_node
vpn_dns
dns_lockdown
split_policy
system_proxy_state
vpn_routes
last_error

panda repair is more comprehensive and may repair:

• VPN route
• DNS snapshot
• Kill-switch guard
• system proxy-related state

panda proxy repair mainly repairs system proxy drift for the current user.

panda repair
panda proxy repair

Yes.

mode auto + kill-switch on is allowed, but the final path must resolve to PandaVPN / WireGuard and must not fall back to standalone proxy. During connection, if it falls back from WireGuard to PandaVPN, it must also keep guard active, and there must not be any fail-open window.

Recommended:

panda mode auto
panda kill-switch on
panda connect
panda doctor

Not recommended.

Kill-switch is an enhanced privacy protection option, and it is not suitable for the shortest usable path. Reasons:

• disconnect does not turn off Kill-switch;
• After it is enabled, normal networking may be blocked;
• It also involves LAN access, DNS lockdown, firewall, and platform permission differences;
• New users may mistakenly think the network is broken.

New users are recommended to complete this first:

panda login
panda node refresh
panda mode auto
panda connect
panda doctor

After confirming the connection works normally, enable it as needed:

panda kill-switch on
panda doctor

No.

This is expected behavior. Kill-switch is a persistent safety switch, and disconnect only disconnects the current runtime; it does not automatically turn off Kill-switch.

To restore normal network access, run:

panda kill-switch off

In strict mode, Kill-switch blocks normal LAN / WAN traffic.
Versions that support allow-lan can enable limited LAN access:

panda kill-switch allow-lan on

Turn off LAN allowlisting:

panda kill-switch allow-lan off

Note: allow-lan allows private network / link-local / ULA unicast and v1 discovery, but LAN DNS should still be blocked to avoid bypassing Panda DNS lockdown.

Privacy mode can be understood as a stricter security mode, and is recommended to be equivalent to:

panda mode pandavpn global
panda kill-switch on

Or, under the default automatic protocol selection:

panda mode auto
panda kill-switch on

In Privacy mode, the following restrictions are recommended:

• Does not support proxy mode;
• Does not support split mode;
• Only allows VPN global semantics;
• Kill-switch must be enabled;
• Normal egress is blocked.

View all nodes:

panda node list

Refresh and then view again:

panda node refresh
panda node list

Short form:

panda no re
panda no list

View a specific region or group:

panda node list us
panda node list jp
panda node list de

View node groups:

panda node group

View details for a specific group:

panda node group show us

The new version supports a more complete split profile syntax:

panda mode pandavpn split default direct proxy-region <cc>
panda mode pandavpn split default proxy direct-region <cc>

Common tokens:

Examples:

panda mode pandavpn split default direct proxy-region us custom-rules
panda mode pandavpn split default proxy direct-region in direct-lan custom-rules

Long commands are not recommended for beginner documentation. They are better suited for advanced split routing documentation.

The meaning of Kill-switch is to allow traffic only through TUN, while other normal traffic is blocked.

proxy mode is a standalone local proxy mode. It does not have packet VPN / TUN, nor does it provide equivalent DNS and routing protection. Therefore, Kill-switch does not support standalone proxy mode.

When you need Kill-switch, use:

panda mode auto
panda kill-switch on

Or:

panda mode pandavpn global
panda kill-switch on

Or:

panda mode wireguard
panda kill-switch on

No.

Auto-connect mainly covers best-effort connect when the daemon / service starts, plus pending retry when the network is temporarily unavailable at startup.

Enable:

panda config auto-connect on

Disable:

panda config auto-connect off

It is not a general runtime automatic reconnection mechanism.

Split rules are used to specify that certain domains, keywords, regex, or IPs go through proxy, direct, or block.

Rule files:

split/rules/proxy.txt
split/rules/direct.txt
split/rules/block.txt

Common commands:

panda split rules list
panda split rules add proxy suffix:github.com
panda split rules add direct ip-cidr:10.0.0.0/8
panda split rules add block keyword:adservice

Current known limitation: after login, pending auto-connect waiting for retry will not be woken automatically.

After login, manually run:

panda connect

| Pattern | Example | Meaning | |---|---|---| | Bare domain | example.com | Suffix match | | domain: | domain:api.example.com | Exact host | | suffix: | suffix:google.com | Suffix match | | || | ||google.com | Suffix match | | keyword: | keyword:netflix | Substring match | | regexp: | regexp:.*\.cdn\.example\.com | Go regex | | ip-cidr: | ip-cidr:10.0.0.0/8 | IP rule |

Search for the node first:

panda node list us

Then connect:

panda connect --node 1822

You can also connect by name:

panda connect --node "US Node"

Shorthand:

panda no list us
panda conn --node 1822

panda connect uses the last target.
If there is no previous target, it attempts global smart connect.

Smart connect requires:

• you are logged in;
• the node directory is cached;
• when needed, run panda node refresh first.

Short form:

panda conn

panda connect us

This means a bare group selector. It does not pin the VIP / SVIP / FREE tab; the API selects the appropriate tab.

panda connect svip us

This means always using us under the SVIP tab.

The colon form is equivalent and suitable for scripts:

panda connect svip:us

The favorite tab is currently a flat favorite channel list and does not support favorite group smart connect such as connect fav us; for favorites, use:

panda connect fav

or:

panda connect --node <NODE_ID>

Mainly supports:

Common settings:

panda mode auto
panda mode pandavpn global
panda mode proxy global
panda mode wireguard

openvpn is currently not recommended as a mainline mode in user documentation.

Recommendation:

Note: mode proxy and Kill-switch are mutually exclusive.

Panda CLI is operated through the command line and is better suited for:

• Automated testing
• Remote troubleshooting
• Scripted connections
• Viewing detailed diagnostic information
• Validating low-level behaviors such as Kill-switch, DNS, routing, and system proxy

The desktop client is better suited for everyday graphical operations by regular users.

Note: The legacy Qt desktop client and CLI are not recommended to manage VPN / system proxy at the same time, to avoid overwriting each other’s configuration.

Some capabilities require system-level permissions, such as:

• Creating TUN / WireGuard network interfaces
• Modifying DNS
• Setting the system proxy
• Applying the Kill-switch
• Repairing routes
• Managing the packet VPN runtime

Therefore, the CLI performs these operations through the platform-specific daemon / service.

Daemon forms on different platforms:

Yes. The main difference is the architecture of the downloaded .pkg package.

The installation steps are the same. After installing with .pkg, LaunchDaemon / helper is usually installed and started automatically.

For global users, we recommend using mode auto by default:

panda login
panda node refresh
panda mode auto
panda connect
panda doctor

If a new installation already defaults to mode auto, you can use a simpler version:

panda login
panda node refresh
panda connect
panda doctor

Corresponding shorthand version:

panda login
panda no re
panda conn
panda do

The official download page and beginner onboarding should prioritize showing the full commands; shorthand should be shown later in advanced documentation or interactive mode explanations.

gfwlist is a specific source for split rules and is not suitable as the default mode for global users.

For global users, the recommended default is:

panda mode auto

Or use PandaVPN global mode consistently:

panda mode pandavpn global

gfwlist can remain in advanced split-routing documentation, but it is not recommended for the official website’s first screen, the download page Hero, or the beginner quick start.

The key difference is: On Windows and macOS, the service is usually installed automatically through the installer, while on Linux users usually need to manually run sudo panda service install.

On Windows, you only need to run the following in an administrator PowerShell if you are not using the installer and are placing the binary manually:

panda service install windows

On macOS, this is only needed for development and debugging, when not using the .pkg installer, or when the daemon does not start automatically:

sudo panda start

On Linux, we recommend:

sudo panda service install
panda service status

Yes. The main difference is the architecture of the installation package you download.

The installation steps, commands, and service management method are the same. The installer will automatically elevate privileges and register the Windows Service.

mode auto is the new default mode.

Its behavior is:

• API node / smart connect prioritizes the runtime based on meta.protocol;
• If WireGuard is recommended, it will try WireGuard first;
• If WireGuard metadata, address allocation, runtime startup, handshake, or connectivity probing fails, it falls back to PandaVPN global compiled from the SS payload;
• SS, OPENVPN, unknown, or missing protocols use PandaVPN global as the fallback;
• mode auto does not accept a policy parameter, and the resolved runtime is always global.

Recommended for new users:

panda mode auto
panda connect

direct-region is the recommended syntax; bypass-region / bypass are compatibility aliases.

For example:

panda mode pandavpn direct-region in

Equivalent to the compatibility alias:

panda mode pandavpn bypass-region in