EN | 中文 | ES

FYDI Sing-Box WhatsApp VPN Access

Use the form below to generate your personal subscription link, then follow the setup guide for your device.

API Key is only required when connecting outside of office network.

✓ Links in the setup guides are updated

Setup Guides

Cloud downloads

All client APKs (SFA, Hiddify, v2rayNG, NekoBox), WhatsApp, Aurora Store and the FYDI Sing-Box UI Windows app are hosted in the FYDI downloads folder.

Enter a username above and click Generate to get your personalized link.

Sing-Box for Android (SFA)

  1. Download SFA-1.13.18-arm64-v8a.apk from the FYDI downloads folder and install it — if Android asks to allow installation from your browser, tap Allow from this source.
  2. Open SFA — the Profiles screen is the home tab. Tap + → Create Manually → select Remote → enter a name (e.g. FYDI) and paste your subscription URL.
  3. Alternatively, scan the QR code below — it opens the same Create Manually → Remote flow with the URL pre-filled.

    generate first

    Scan this QR for the subscription URL (pre-fills a remote profile; enable Auto Update on the profile screen for auto-updating).

    Or scan this sing-box import QR (opens a pre-filled profile; tap Create to save):

  4. Tap Create to save the profile, then switch Auto Update on (the egress IP rotates — keep the profile current).
  5. Tap the profile to start — accept the Android VPN permission prompt.
  6. Go to Settings → Profile Override → Per-App Proxy, enable it, set Proxy Mode to Include (only selected apps go through the VPN) and select WhatsApp.
  7. Go to Android Settings → Network → VPN, enable Always-on VPN and disable Block connections without VPN.
  8. Verify the VPN before opening WhatsApp

    Add Chrome browser (com.android.chrome) to per-app routing, in addition to WhatsApp.

    Open Chrome and navigate to www.whatsapp.com — the page should load successfully.

    Open a new Chrome tab and navigate to https://www.google.com — this should fail/not load, because the egress whitelist only allows WhatsApp/Meta IPs.

    Only after both checks pass (WhatsApp loads, Google does not), open/run the WhatsApp app to avoid account blocking.

Fake DNS and auto-switch (www.whatsapp.com) are enabled automatically — nothing else to configure.

Hiddify — Android & iOS

  1. Download Hiddify-Android-universal.apk from the FYDI downloads folder and install it.
  2. Open Hiddify, tap + New Profile.
  3. Paste your subscription URL (or scan the QR code above).
  4. Save the profile.
  5. Go to Settings → DNS, enable Fake DNS.
  6. Go to Settings → Routing → Per-app proxy, set mode to Proxy (not Bypass), select WhatsApp.
  7. Tap the Connect button.
  8. Only WhatsApp traffic goes through the proxy.
  9. Go to Settings → General → Connection test URL, set the URL to https://www.whatsapp.com.
  10. Go to Android Settings → Network → VPN, enable Always-on VPN and disable Block connections without VPN.
  11. Verify the VPN before opening WhatsApp

    Add Chrome browser (com.android.chrome) to per-app routing, in addition to WhatsApp.

    Open Chrome and navigate to www.whatsapp.com — the page should load successfully.

    Open a new Chrome tab and navigate to https://www.google.com — this should fail/not load, because the egress whitelist only allows WhatsApp/Meta IPs.

    Only after both checks pass (WhatsApp loads, Google does not), open/run the WhatsApp app to avoid account blocking.

Both HY2 and VLESS appear as separate configs in the profile. If one fails to connect, tap the other.

v2rayNG — Android

  1. Download v2rayNG_2.2.6_arm64-v8a.apk from the FYDI downloads folder and install it.
  2. Open v2rayNG, tap + → Add [Policy group], add a new subscription group.
  3. Paste your subscription URL (or scan the QR code above), then tap Update Subscription.
  4. Return to the main screen and select the imported config.
  5. Tap the Connect button — accept the VPN permission prompt.
  6. Go to Android Settings → Network → VPN, enable Always-on VPN and disable Block connections without VPN.
  7. Verify the VPN before opening WhatsApp

    Add Chrome browser (com.android.chrome) to per-app routing, in addition to WhatsApp.

    Open Chrome and navigate to www.whatsapp.com — the page should load successfully.

    Open a new Chrome tab and navigate to https://www.google.com — this should fail/not load, because the egress whitelist only allows WhatsApp/Meta IPs.

    Only after both checks pass (WhatsApp loads, Google does not), open/run the WhatsApp app to avoid account blocking.

    8. Manual configuration required for this app

    • Go to Settings → VPN Settings → VPN DNS, add DNS server 1.1.1.1. Also enable Enable local DNS and Enable FakeDNS.
    • Both HY2 and VLESS import as separate profiles. If one fails to connect, switch to the other.
    • Open the side menu → tap Per-app proxy, select WhatsApp.
    • Open the side menu → tap Subscriptions → tap the edit icon → enable auto-update and set interval to 60 minutes or less (the egress IP rotates every 2 hours).
    • Go to Settings → Advanced → True delay test URL, set the URL to https://www.whatsapp.com.

NekoBox for Android

Do NOT install NekoBox from Google Play — the listing is controlled by a third party since May 2024 and is not open-source. Install from the FYDI downloads folder only.

  1. Download NekoBox-1.4.2-arm64-v8a.apk from the FYDI downloads folder and install it.
  2. Open NekoBox, tap the + in the Groups tab → New Profile.
  3. Paste your subscription URL (or scan the QR code above).
  4. Tap Update Subscription to fetch the nodes.
  5. Tap the group/profile to connect — accept the VPN permission prompt.
  6. Go to Android Settings → Network → VPN, enable Always-on VPN and disable Block connections without VPN.
  7. Verify the VPN before opening WhatsApp

    Add Chrome browser (com.android.chrome) to per-app routing, in addition to WhatsApp.

    Open Chrome and navigate to www.whatsapp.com — the page should load successfully.

    Open a new Chrome tab and navigate to https://www.google.com — this should fail/not load, because the egress whitelist only allows WhatsApp/Meta IPs.

    Only after both checks pass (WhatsApp loads, Google does not), open/run the WhatsApp app to avoid account blocking.

    8. Manual configuration required for this app

    • Go to Settings → DNS and enable FakeDNS (default IP range is fine).
    • Go to Settings → Per-app Proxy, select WhatsApp.
    • Go to Settings → Connection Test URL, set the URL to https://www.whatsapp.com.

Sing-Box — Windows PC

  1. Download FYDI-SingBox-UI.exe — a single self-contained app (~66 MB), no installer required.
  2. Launch FYDI-SingBox-UI.exe. On first run, enter your VPS URL (), your assigned username, and your personal API key. The app auto-appends your machine's BIOS serial number to the username for unique identification — the same behavior as the legacy setup script.
  3. Click Save & Restart. The app fetches the subscription config, validates it with sing-box check, and starts the sing-box subprocess.
  4. SOCKS5 proxies are available at 127.0.0.1:2080 (HY2 — fast UDP), 127.0.0.1:2081 (VLESS — TCP fallback), and 127.0.0.1:2082 (Auto — urltest).
  5. The window minimizes to the system tray — sing-box keeps running. Enable Auto-start in Settings for automatic startup on login (writes to the HKCU Run key).
  6. Continue to Firefox setup below.

Your config exposes three SOCKS5 ports: 2080 — Hysteria2 (fast UDP); 2081 — VLESS (TCP fallback); 2082 — Auto (recommended, tests www.whatsapp.com via both protocols). Pick the matching port when configuring Firefox below.

Uninstall: Right-click the tray icon and select Uninstall, or run FYDI-SingBox-UI.exe --uninstall.

Firefox

Choose one method — Manual SOCKS5 uses Firefox's built-in proxy settings, FoxyProxy is an extension with more control. You only need ONE.

  1. Open Firefox, click the menu button (☰) in the top-right corner, and select Settings.
  2. In the General panel, scroll down to the Network Settings section and click the Settings... button.
  3. Select Manual proxy configuration.
  4. In the SOCKS Host field, enter the IP and Port below, and select SOCKS v5:
    • Title: WhatsApp Proxy
    • Type: SOCKS5
    • Host: 127.0.0.1
    • Port:
  5. Check Proxy DNS when using SOCKS v5 to prevent DNS leaks.
  6. Click OK. WhatsApp Web in Firefox uses the proxy.

Manual SOCKS5 routes traffic to the local sing-box service. The sing-box PC background service auto-updates when egress IPs change.

  1. Open Firefox, click the menu button (☰) in the top-right corner, and select Settings.
  2. In the General panel, scroll down to the Network Settings section and click the Settings... button.
  3. Select Manual proxy configuration.
  4. In the SOCKS Host field, enter the IP and Port below, and select SOCKS v5:
    • Title: WhatsApp Proxy
    • Type: SOCKS5
    • Host:
    • Port: 1080

    This IP changes every 2 hours. Using Via Sing-Box PC avoids manual updates.

  5. Check Proxy DNS when using SOCKS v5 to prevent DNS leaks.
  6. Click OK. WhatsApp Web in Firefox uses the proxy.

The egress VPS IP rotates frequently (every 2 hours). If using direct connection, you must manually update the proxy IP when your connection stops working. Using Sing-Box PC avoids this — it updates automatically.

  1. Install FoxyProxy Standard from Firefox Add-ons.
  2. Click the FoxyProxy icon in the toolbar, open Options, go to the Proxies tab, and click Add.
  3. Enter:
    • Title: WhatsApp Proxy
    • Type: SOCKS5
    • Host: 127.0.0.1
    • Port:
  4. Save and select from toolbar.

FoxyProxy routes traffic to the local sing-box service. The sing-box PC background service auto-updates when egress IPs change.

  1. Install FoxyProxy Standard from Firefox Add-ons.
  2. Click the FoxyProxy icon in the toolbar, open Options, go to the Proxies tab, and click Add.
  3. Enter:
    • Title: WhatsApp Proxy
    • Type: SOCKS5
    • Host:
    • Port: 1080

    This IP changes every 2 hours. Using Via Sing-Box PC avoids manual updates.

  4. Save and select from toolbar.

The egress VPS IP rotates frequently (every 2 hours). If using direct SOCKS5 connection, you must manually update the proxy IP when your connection stops working. Using Sing-Box PC avoids this.