First grant Android VPN permission, then relax background battery restrictions for v2rayNG, and finally configure the per-app list. This guide is for first-time Android users, anyone whose connection drops when the screen locks, or anyone who wants to proxy only selected apps, such as a browser. Follow the steps in order to isolate permission failures, background process shutdowns, and apps missing from the proxy—without repeatedly switching servers and missing the real cause.
1. VPN permission and server connection are different
v2rayNG uses the Xray core to handle proxy protocols and Android's VpnService to create a local virtual network interface. Android routes traffic from eligible apps through this interface, and the client uses routing rules to decide whether each connection goes direct or through a proxy. The “Connection request” prompt on first launch is Android asking for permission—not a sign-in screen for your subscription provider.
A VPN icon in the status bar only confirms that Android's VPN interface is active; it doesn't mean the remote server is reachable. An incorrect server address, expired credentials, or DNS failure can all occur after permission is granted. Connection details for VMess, VLESS, and other configurations come from the server or subscription. Granting VPN permission won't fill them in automatically.
These version numbers mark when the relevant Android features were introduced; they are not the minimum requirements for the current v2rayNG release. Another app using a VPN interface under the same user or work profile may replace the current connection, including some local filtering tools. When testing, stop other VPN services first so interface conflicts aren't mistaken for an unreliable server.
2. First launch: grant permission, select a server, test a webpage
Import a server or subscription from a trusted source before starting the service. A successful import only means the configuration was saved. Button icons and menu labels may vary slightly between versions; the steps below refer to a typical interface. Android and your device manufacturer determine the wording on system permission screens.
-
Check your configuration
Open v2rayNG, confirm that a server configuration appears on the main screen, and select the server you want to use. If you just refreshed your subscription, verify the selected entry so you don't keep using an expired configuration.
-
Start the service
Tap the Start button in the lower-right corner of the main screen. When Android displays its “Connection request” prompt for the first time, confirm that the app is v2rayNG, then tap “OK” or “Allow.” If you deny the request, the local VPN interface can't be created.
-
Check the status
Look for the Android VPN icon and check the client's running status. On Android 13 and later, allow notifications if prompted so you can see the service notification. Notification permission and VPN permission are separate settings.
-
Test access
In a browser, first open a known-working HTTPS page, then try the site you actually need to access through the proxy. The first test checks basic connectivity; the second checks access to your target. A latency reading alone is no substitute for testing a webpage.
-
Record a baseline
Note the server name, network type, and per-app proxy setting. For initial troubleshooting, turn off per-app restrictions and establish a working baseline before narrowing the app list. Change one setting at a time.
3. Battery optimization exemptions: reduce background interruptions when the screen is locked
First remove background battery restrictions for v2rayNG, then test what happens when the screen locks. Android Doze, App Standby, and manufacturer-specific background management are separate mechanisms. Exempting the app from battery optimization can ease some restrictions, but it can't guarantee the process will never stop or fix signal changes, remote timeouts, or low system memory.
On a near-stock Android device, a common path is Settings → Apps → See all apps → v2rayNG → App battery usage → Unrestricted. Some versions show Battery → Unrestricted instead. If you can't find the setting, search Settings for “battery optimization,” open the app list, select v2rayNG, and set it to “Don't optimize.”
- Allow background activity: In v2rayNG's app info, check the battery and background activity settings. If you see “Restricted,” “Optimized,” and “Unrestricted,” choose “Unrestricted” for continued use.
- Check startup management: Some manufacturers provide “App launch management” or “Auto-start management.” If the service often stops after you leave the app, allow v2rayNG to start automatically and run in the background. The available controls vary by device.
- Keep the service notification: Allowing notifications makes it easier to check the service status. Locking the app in Recents can be an extra precaution, but it isn't a battery optimization exemption and doesn't replace VPN permission.
- Check data restrictions: If the connection drops in the background only on mobile data, open “Mobile data & Wi-Fi” or “Data usage” in the app info and check background data access. If Data Saver is on, check its exceptions list too.
Retest under consistent conditions—don't draw conclusions from one lock-screen test
Try a 15-minute screen-off test: note the time and network type, lock the screen, wait, then unlock the device and open the same test page while checking the service status and logs. Fifteen minutes is a convenient, repeatable observation window—not a fixed time for Android to enter Doze. Passing a short test also doesn't guarantee a stable connection overnight.
| Test result | Check first | Next step |
|---|---|---|
| VPN icon disappears after unlocking | Service stopped or was replaced | Check background restrictions, other VPN apps, and the client logs. |
| VPN icon remains, but all webpages time out | Server connection and network changes | Keep the current configuration, restart the service, then compare with another network. |
| Only one app can't connect | Per-app list and the app's connection cache | Check the app list, then fully close and reopen the app. |
| Fails only on mobile data in the background | Background data and Data Saver | Check data permissions, then compare performance on Wi-Fi with the same server. |
4. Per-app proxy: choose the list mode, then select apps
Per-app proxy determines which apps send traffic through the VPN interface; routing rules determine which outbound connection is used for traffic that reaches the interface. These are separate layers. Adding a browser to the list doesn't mean all its domains will go through the remote server. If a routing rule marks a domain for direct access, the browser can still connect directly.
In v2rayNG, open Settings from the side menu, find the per-app proxy options, enable them, and open the app list. Some versions label the list “Per-app proxy settings.” Check whether “Bypass mode” is on before selecting apps. “Proxy selected apps” means an allowlist; “Bypass selected apps” means a blocklist.
Proxy selected apps
RecommendedEnable per-app proxy, turn off “Bypass mode,” and select only the browser or other apps that should use the proxy. Apps you don't select won't enter this VPN interface. This is the easier option to verify when only a few apps need the proxy.
Best for: routing one browser or a small number of selected apps through the proxy.
Bypass selected apps
Enable per-app proxy and turn on “Bypass mode,” then select the apps to exclude. Apps on the list bypass the VPN; other apps enter the interface, and routing rules determine their outbound connections.
Best for: routing most apps through the VPN while keeping a few on their normal network path.
Disable per-app restrictions
Turn off per-app proxy so traffic from regular user apps can enter the client within the VPN's coverage. This doesn't “force all traffic through the proxy”: direct-connection rules still apply, and system or management policies may also affect which traffic is captured.
Best for: an initial connection test or a general review of routing rules.
Bottom line: test the list mode with one browser first
Turn off Bypass mode, select one test browser, save the settings, then stop and restart the v2rayNG service. Fully close and reopen the browser as well. Once the behavior matches your expectations, add apps one at a time. Don't change the server, DNS, and app list simultaneously, or you won't know which setting made the difference.
The app list matches app identities, not guessed icon names. Cloned apps and apps with the same name in a work profile may belong to different users or have different identities. Opening a link from a browser in another app may also switch to an app that isn't on the list. If the same link sometimes uses the proxy and sometimes doesn't, first check which app actually opened it.
5. Common issues: things still don't work as expected after permission is granted
Why does Android ask for VPN permission every time I start the app?
First check whether you've used another VPN app or reinstalled v2rayNG or cleared its data. Android's saved VPN consent state may change in these cases. Close other VPN apps and grant permission again. If your phone is managed by a work profile or device policy, check those restrictions too—reinstalling the client repeatedly won't address them.
The app is set to Unrestricted, but the connection still drops when the screen locks. What should I do?
First determine whether the service stopped or the remote connection failed. If the VPN icon disappeared, check startup management and other VPN apps. If it remains, note when the problem occurred and check the logs for connection timeouts or network changes. Keep the same server and test on both Wi-Fi and mobile data to see whether the issue is limited to one network.
Why are other apps using the proxy when I selected only my browser?
First check whether Bypass mode is enabled. When it's on, selected apps are excluded, not allowed. Turn it off, review the app list, then stop and restart the service. Existing connections may keep using their previous route, so fully close and reopen the affected app too.
I enabled “Block connections without VPN.” Why can't unselected apps get online?
Go to Settings → Network & internet → VPN, open the settings for v2rayNG, and check “Always-on VPN” and “Block connections without VPN.” When blocking is enabled, Android may prevent excluded apps from connecting directly. If unselected apps need normal direct access, consider turning off the block setting. This also relaxes the restriction on network access when the VPN disconnects.
The server latency looks fine, but selected apps still can't load webpages. Why?
A latency test doesn't prove that a particular website is reachable. In the same app, try several known-working pages, then check the v2rayNG logs for DNS, TLS, or connection timeout errors. Don't change Android Private DNS, the browser's encrypted DNS, and the client's DNS all at once. Change one setting at a time and retest to identify its effect.
6. Keep a repeatable Android troubleshooting checklist
After setup, keep a record of reproducible conditions—not just a screenshot that says “Connected.” Subscription updates can change servers, system updates can alter battery policies, and new networking tools can affect VPN status. When a problem comes back, first restore the last known-working setup, then test one setting at a time.
- Permission status: Confirm v2rayNG has Android VPN permission and that no other VPN service is active for the same user or profile.
- Background settings: Record battery, background activity, and background data settings. Don't rely on locking the app in Recents as your only safeguard.
- Per-app list: Record whether Bypass mode is on and which apps are selected. After making changes, restart the service and test the affected apps.
- Connection tests: Test a webpage with the screen on, observe the connection with the screen locked for 15 minutes, and test once while switching between Wi-Fi and mobile data.
- Troubleshooting notes: Record when the problem occurred, the network type, and relevant error messages. Before asking for help, redact your subscription URL, server credentials, and other access details.
If you need to download the client again, choose v2rayNG under Android on the downloads page. It's a different client from v2flyNG, which uses the v2fly core; their interfaces and configuration features aren't interchangeable. On desktop, you can use v2rayN. Desktop system-proxy troubleshooting steps don't apply directly to Android's VpnService.