How to Import a sing-box Subscription: Hiddify by QR Code, Desktop by Paste, Other Clients

Subscription link (config URL): an https:// address that returns a native sing-box JSON configuration. sing-box-family clients — Hiddify, the official sing-box app, GUI.for.SingBox — read it directly. Our configuration already includes routing rules and a rule that rejects IPv6, so no “subscription template” is needed on top.

Import link (deep link): starts with sing-box://import-remote-profile?url=… and, when tapped, opens the app and adds the config URL above. This is what the QR code contains.

Share link: a single line starting with hysteria2:// that describes one node without rules. For NekoBox, Shadowrocket, Stash, Clash Meta and other clients that do not consume sing-box JSON.

Subscription converter: a third-party service that turns one client’s subscription format into another’s. We provide both formats directly, so no conversion is needed — and handing a link that contains your credentials to a converter site is a common way to leak an account. Do not.

1. Install Hiddify. Android from this site’s download page or Google Play; iOS from the App Store (search “Hiddify”). It ships with the sing-box core, nothing else to install.
2. Log in to this site, open the sing-box page and tap the flag of the region you want; the page shows that region’s QR code.
3. On the same phone, tap “copy import link” — the sing-box:// link is copied to the clipboard, and switching to Hiddify prompts you to add it from the clipboard. From another device, use Hiddify’s “Scan QR code” instead.
4. Tap connect in Hiddify; the first connection asks for VPN permission — allow it. For more regions, go back and tap another flag; each region is a separate profile.

1. Install Hiddify desktop from this site’s download page (Windows, macOS and Linux; separate packages for Intel and Apple Silicon).
2. On the sing-box page tap a region’s flag, then “copy config URL” — desktop gets a plain https:// address rather than a sing-box:// deep link, because deep links do not reliably open the app on Windows and Linux, while pasting a URL works everywhere.
3. In Hiddify click “+” → “Add from clipboard” or “New profile → Remote profile”, paste the URL and save.
4. Click connect. To change region, add another profile and switch in the profile list.

These do not read sing-box JSON but all support the hysteria2 protocol. Tap “copy share link (other clients)” on this site to get a hysteria2:// line, then choose “import from clipboard” in the client.

The share link carries the node only, not the rules, so split routing and IPv6 handling are up to the client: users abroad watching Chinese content should route Chinese domains through the node rather than “direct” and disable IPv6, or video sites will show the region-restriction error.

On iOS, Shadowrocket is a paid app while Hiddify is free and reads the subscription directly; without a specific reason, use Hiddify.

It does not expire with time. The token in the config URL is tied to your account and works as long as the account is valid; renewing or changing plan never requires a re-import.

Changing your password invalidates the old config URL immediately — by design, so you can revoke access if a phone is lost or a link leaks. After changing it, scan the QR code again.

After the account expires the config URL returns 401, which the client shows as “failed to fetch subscription” or a connection failure; after renewing, the existing profile works again without changes.

One case does need a manual re-import: profiles imported before September 2026 lack the IPv6-reject rule, and Chinese video sites may show a region error from abroad. Delete the old profile and scan again to pick up the new rules.

• “Failed to fetch subscription / 401”: log in to the site and check whether the account has expired or the password was changed; either invalidates the old URL — scan again.
• Import succeeded but the connection times out: try another region first. A region’s address may have just been replaced — tap “update subscription” in the client to fetch the latest config. Regions are separate profiles; one failing does not affect the others.
• Connected but no internet: usually the client’s own routing rules send traffic to “direct”. Set the default outbound to the node, or remove rules you added.
• “Invalid QR code” when scanning: the QR code is for sing-box-family clients; Shadowrocket and similar need the share link. The code also contains your credentials, so one scanned from someone else’s screenshot will not work.
• Slow: hysteria2’s advantage is largest on lossy networks. If your connection is clean but still slow, the region is probably congested at evening peak — check the red/yellow/green light on the region list and switch.