How to pair a VPN client securely

Device pairing connects a supported VPN client to a configuration without publishing a reusable subscription address on the website.

Three-step VPN client setup

Open the supported client on your device.
Generate a fresh one-time pairing code on the home page, then scan it with the client.
Wait for pairing to finish and continue inside the client.

The pairing code expires after five minutes and is accepted only once. If it expires or has already been used, return to the home page and create a new code.

Pairing on the same phone or tablet

If the website and client are open on the same device, the rear camera cannot scan its own screen. Take a screenshot of the fresh code and choose that image from Photos or the client’s image picker. A screenshot does not extend the five-minute validity period.

Do not share, publish or archive pairing screenshots. Delete the screenshot after pairing is complete.

Supported-client requirement

A normal camera or browser can open only a non-sensitive information page. It cannot claim the code or receive a VPN configuration. Pairing must be completed by a supported client through the protected claim flow.

See the client compatibility page for current platform status or read how one-time QR code pairing works.