Docs menu
Docs

SOCKS5 Proxy Software and Proxy Client Apps

SOCKS5 proxy software, also called a proxy client app, sends the traffic of programs that have no proxy setting of their own through a SOCKS5 or HTTP proxy. On Windows the established choice is Proxifier ($39.95 for a perpetual license, with a 31-day trial), and the alternatives are Win2Socks, NetDetour (the successor of ProxyCap) and the free, open-source ProxyBridge; on macOS it is Proxifier, on Linux proxychains-ng, on iPhone Shadowrocket and on Android SocksDroid. You need one only when the program cannot take a proxy itself; browsers, cURL and most scraping libraries can. ProxyField's gateway works with these clients in HTTP or HTTPS mode with a username and password or an allowlisted IP, from $1.95/GB; start with the Easy Trial: 1 GB for $2.95.

residential IPs
412M+
from, traffic never expires
$1.95/GB
Easy Trial
1 GB for $2.95
gate.proxyfield.io:7000
What you enter in any proxy client app
Proxy client settingProxyField value
Server (host)gate.proxyfield.io
Port7000
ProtocolHTTP, HTTPS or SOCKS5, all on the same host and port; in Proxifier, HTTPS is the HTTP proxy's tunnel mode and carries any TCP app
Username<login>-country-us-city-new_york; the optional keys are -country-<cc>, -region-<region>, -city-<city>, -session-<id> and -ttl-<seconds> (30 to 129,600 s, 20 min when ttl is left out); add -mobile or -dc right after the login for mobile or rotating datacenter IPs (-dc takes the country only)
Passwordyour ProxyField password
SOCKS5the same username and password; where a tool asks for a proxy URL, write socks5h:// so the gateway resolves the site's name
No passwordadd the device's IP to the allowlist (up to 100 IPv4 addresses) and use the port you set up in the dashboard
PhonesShadowrocket takes SOCKS5 with username and password; Android's Wi-Fi proxy has no password field, so use the allowlist there
IP behavioura new IP on every request, or one IP for 30 s to 36 h with -session-<id>-ttl-<seconds>
Headersthe gateway adds no Via, X-Forwarded-For or Forwarded header; the headers the app sends pass through; your Proxy-Authorization is removed before the request goes to the site

Set up a proxy client app with ProxyField

  1. Check the program first: if it has its own proxy field, enter the values there and install nothing.
  2. Otherwise install a client: Proxifier on Windows and macOS, proxychains-ng on Linux, Shadowrocket on iPhone, SocksDroid on Android.
  3. Add a proxy server: gate.proxyfield.io, port 7000, HTTPS (or SOCKS5), your username and password.
  4. Add a rule that sends the app through that proxy, and let the proxy resolve hostnames.
  5. Start the app and confirm the exit IP at https://api.ipify.org.

Test the username and password once in a terminal before you set up the app.

Shell
curl -x gate.proxyfield.io:7000 -U "<login>-country-us-city-new_york:<password>" https://api.ipify.org

What a proxy client does, from its developer: Proxifier Features and Specifications (Proxifier).

On this page 12 sections

Do you need proxy software?

Check the program first: most of them take a proxy directly, and then no extra software is needed.

  1. The program has a proxy setting (browsers, scrapers, cURL, FTP clients, antidetect browsers, SEO tools): enter the proxy there. Nothing to install.
  2. The device has a proxy setting that the program follows (Windows, macOS, Android and iPhone Wi-Fi settings): set it once in the system. Many apps follow it, but not all.
  3. Neither works, or you need SOCKS5 where the system offers only HTTP: use a proxy client app. It captures the program's connections and sends them through the proxy.

A proxy client does not come with proxies: you bring the proxy server (host, port, username and password) from a provider. Proxifier's own FAQ says so: "we only provide and support the software."

SOCKS5 proxy software for Windows

To route Windows apps that have no proxy setting through a SOCKS5 proxy, use Proxifier: $39.95 for a perpetual license, a 31-day trial with no limitations, SOCKS5 and HTTPS with a login, and rules by app, hostname, IP and port. Four tools, compared from their own sites:

ToolPrice and licenseProxy typesTrafficRulesWindows versions
Proxifier$39.95 one-time (Standard or Portable edition), perpetual, minor updates included; 31-day trialSOCKS 4, 4A and 5 with a login, HTTPS (CONNECT), HTTP; chains of any lengthall outgoing TCP; DNS through the proxyapp name, IP, hostname, portXP to 11; x86, x64 and ARM
Win2Sockspaid, with a trial download; prices on its Prices pageSOCKS5, HTTPS, Shadowsocks, Trojan, AnyTLSTCP and UDP, IPv4 and IPv6; encrypted DNS (DoT, DoH, DoQ)process, file name, domain, IP, port10 and 11, 64-bit only
NetDetour (formerly ProxyCap)no price on its home page; free downloadHTTP, SOCKS, SSH tunnels; proxy chainsrules can block UDP; UDP relay not describedcustom rulesXP to 11 and Server 2003 to 2025, 32- and 64-bit
ProxyBridgefree and open source (MIT), no paid tierSOCKS5 or HTTP, with an optional loginTCP and UDPper app, by IP, port, protocol, hostname10 or later, 64-bit; needs administrator rights (WinDivert driver)

Avoid SocksCap64 for a new setup: its own site says development, maintenance and downloads stopped on November 19, 2017. ProxyCap's site now sends visitors to NetDetour.

Which one fits:

  • Proxifier for the mature, documented choice: per-app rules, DNS through the proxy, proxy chains, and the same tool on macOS 10.4 to 15 and Android 8+.
  • Win2Socks or ProxyBridge when the app sends UDP (games, voice calls) and your proxy relays UDP. ProxyField residential SOCKS5 relays UDP on gate.proxyfield.io:7000.
  • ProxyBridge when you want free, open-source software and can run a newer tool with administrator rights; test it with your app first.
  • NetDetour when you also need SSH tunnels.

Set up Proxifier with ProxyField in 3 steps:

  1. Open Profile → Proxy Servers → Add. Enter gate.proxyfield.io, port 7000, protocol HTTPS, tick Enable under authentication and enter your username (for New York, <login>-country-us-city-new_york) and password. Select Check, then OK.
  2. Open Profile → Proxification Rules → Add, list the app (for example app.exe), and set the action to the proxy you added.
  3. Under Profile → Name Resolution, let the proxy resolve hostnames, then start the app and confirm the exit IP (see the test below).

In Proxifier, HTTPS is the HTTP proxy's tunnel mode: it carries any TCP app, not only web traffic. SOCKS Version 5 works too, with the same username and password as HTTP. Every setting, with screenshots, is in Proxifier setup; the system proxy is on Windows proxy setup.

How to choose SOCKS5 proxy software

Check 6 things before you buy or install a client:

  1. UDP or only TCP. Games, voice calls and QUIC use UDP. Proxifier handles TCP; Win2Socks and ProxyBridge also redirect UDP, and the proxy must relay it too.
  2. DNS through the proxy. With remote DNS, lookups happen at the proxy's location, not on your own network.
  3. Per-app rules, so only the programs you choose go through the proxy.
  4. The proxy login you need: a SOCKS5 username and password, or HTTPS (CONNECT) with Basic authentication.
  5. License and upkeep: one-time, subscription or free, and a release in the last year or two.
  6. Your Windows version and architecture: some tools are 64-bit only, and some need administrator rights.

Start with one app. Confirm that it shows the proxy's IP, then run a DNS leak test, before you route everything through the proxy.

Proxy client apps by device

Each device has a built-in setting for the common case and an app for the rest.

DeviceBuilt-in proxy settingWhen you need an appSoftware to look atSetup guide
WindowsSettings → Network & internet → Proxy (HTTP)SOCKS5, or apps that ignore the system proxyProxifier; Win2Socks, NetDetour, ProxyBridge (free)Windows, Proxifier
macOSNetwork → Details → Proxies (HTTP, HTTPS, SOCKS)Per-app rules, or apps that ignore the system proxyProxifiermacOS
Linuxhttp_proxy / https_proxy variables, GNOME and KDE settingsAny program, SOCKS5 includedproxychains-ngLinux, Ubuntu
AndroidWi-Fi → Proxy → Manual (HTTP, no login field)SOCKS5, a login, or all appsSocksDroid, Every Proxy, Clash-based appsAndroid
iPhone and iPadWi-Fi → Configure Proxy (HTTP, with a login)SOCKS5, rules, or all appsShadowrocket, Clash-based appsiPhone, Shadowrocket
Chrome, Edge, FirefoxThe system proxy, or the browser's own (Firefox)One browser only, switching locationsProxy extensionsChrome, Firefox, proxy managers
PlayStationNetwork settings (HTTP, no login field)Not neededNonePlayStation

Desktop proxy software: Proxifier and proxychains

Desktop proxy clients sit between your programs and the network and redirect their connections through the proxy you set, by rules.

Proxifier (Windows, macOS and Android) "allows network applications that do not support working through proxy servers to operate through a SOCKS or HTTPS proxy and chains," in its developer's words. You add the proxy server once, then write rules: which apps, or which destinations, go through which proxy. It can also chain several proxies and resolve DNS through the proxy. Proxifier costs $39.95 for a perpetual license (Windows Standard or Portable, or Mac), with a 31-day trial with no limitations; it runs on Windows XP to 11, macOS 10.4 to 15 and Android 8+. Step-by-step settings for ProxyField are in Proxifier setup.

proxychains-ng is an open-source tool for Linux, BSD and macOS that "redirects the connections through SOCKS4a/5 or HTTP proxies." You list the proxy in proxychains.conf and start any program behind it:

Shell
proxychains4 curl https://api.ipify.org

It hooks dynamically linked programs, which covers most command-line tools; statically linked programs are not affected. The Linux settings, including a ProxyField config block, are in Linux proxy setup.

For scripts and services, you rarely need a client: set the proxy in the code or in environment variables. See set a proxy from the command line.

Browser extensions

A proxy extension changes the proxy for one browser only and switches between saved profiles in a click, which the system setting cannot do. FoxyProxy and ZeroOmega (today's Chrome version of SwitchyOmega) are common ones; both can send only some websites through the proxy by rules. Chrome itself takes no username and password for a SOCKS5 proxy, so with Chrome use HTTP, an extension, or an allowlisted IP. Guides: FoxyProxy, ZeroOmega and SwitchyOmega, other proxy managers.

Phone apps for Android and iPhone

Phone apps are needed for SOCKS5 and for apps that ignore the Wi-Fi proxy.

  • Android's Wi-Fi proxy is HTTP only and has no username or password field: allowlist your network's IP in your ProxyField account and enter the port you set up in the dashboard, or use an app. SocksDroid and Every Proxy relay traffic through a SOCKS5 proxy; see Android proxy setup.
  • iPhone and iPad take an HTTP proxy with a login under Wi-Fi → Configure Proxy. For SOCKS5, rules per website, or traffic on mobile data, use an app such as Shadowrocket or a Clash-based app.
  • Mobile data. The Wi-Fi proxy does not apply on cellular. A proxy app works on both; the phone setup guide covers mobile data.

A "mobile proxy app" is different from mobile proxies: the app routes your phone's traffic, while mobile proxies are IP addresses on 5G, 4G and LTE carrier networks that any device can use.

Programs with their own proxy setting

Many programs have a proxy field, and you should use it rather than a system-wide client.

ProgramWhere the proxy goesProtocols
WinSCP (SFTP, FTP)Login → Advanced → Connection → ProxyHTTP (CONNECT), SOCKS4, SOCKS5, Telnet, Local; login for HTTP and SOCKS5
SSH and PuTTYProxyCommand, or PuTTY's Connection → ProxySOCKS5, HTTP
Antidetect browsersThe proxy field of each profileHTTP, SOCKS5
PostmanSettings → ProxyHTTP
SEO crawlers and rank trackersThe tool's proxy settingsUsually HTTP
Scrapers (Scrapy, Playwright, Puppeteer, Python)The proxy option in codeHTTP, SOCKS5

Guides: SSH, antidetect browsers, Postman, SEO software, Scrapy, Playwright, Python.

WinSCP's own manual adds a caution worth knowing: with SOCKS5, the password goes to the proxy "in plain text" unless the proxy supports CHAP. The same is true of most SOCKS5 clients, because the standard login sends the password unencrypted.

Routers, smart TVs and other devices without a page

For a device with no proxy field, put the proxy one step earlier in the network, on a router or a computer it connects through.

  • Routers. Stock home routers rarely have a forward-proxy client. Routers with open firmware such as OpenWrt can run one (OpenClash is a common choice); then every device behind the router uses the proxy. See Clash.
  • Smart TVs and streaming boxes. Some have a manual proxy field in their advanced network settings, usually HTTP with no login; then allowlist your home IP and enter gate.proxyfield.io with the port you set up in the dashboard. Others have none, and the router is the place.
  • Game consoles. PlayStation takes an HTTP proxy without a login: PlayStation proxy setup.

Use proxies on these devices only for lawful work such as regional content checks and app testing from a selected region; ProxyField's acceptable use policy lists what is not allowed.

Settings to enter in any proxy app

Every proxy client asks for the same 5 settings.

SettingProxyField value
Server (host)gate.proxyfield.io
Port7000 with a username and password; with the IP allowlist, the port you set up in the dashboard
ProtocolHTTP, HTTPS or SOCKS5
Usernameyour username with the location, e.g. <login>-country-us-city-new_york for New York
Passwordyour ProxyField password, or no login if your IP is on the allowlist

Region, session and session time go in the same username: -region-<region>, -session-<id> and -ttl-<seconds> (30 to 129,600 seconds, 20 minutes by default), as in <login>-country-us-region-new_york-city-new_york-session-he9f2qga-ttl-600; every part after the login is optional.

Before you set up an app, test the credentials once in a terminal:

Shell
curl -x gate.proxyfield.io:7000 -U "<login>-country-us-city-new_york:<password>" https://api.ipify.org

This test runs over HTTP. A SOCKS5 app uses the same gate.proxyfield.io:7000 with the same username and password as HTTP.

An IP address that is not yours means the proxy works, and any app problem is in the app's settings. The proxy checker does the same in a browser, and the proxy error guide explains failures. Your credentials, the IP allowlist and the configurator, which generates as many proxy lines as you need, are in your account once the payment is confirmed; 24/7 live chat helps with setup.

ProxyField residential proxies cost $2.95/GB for 1 GB down to $1.95/GB from 1,000 GB, with no subscription, and the traffic never expires. What SOCKS5 is and how it differs from HTTP is covered in the post "What is a SOCKS5 proxy?".

Sources

The tools' own pages:

SOCKS5 Proxy Software and Proxy Client Apps FAQ

Which SOCKS5 proxy software works with ProxyField?

ProxyField works with any proxy client that takes a host, a port and a login, from $1.95/GB: Proxifier, Win2Socks, NetDetour or ProxyBridge on Windows, Proxifier on macOS, proxychains-ng on Linux, Shadowrocket on iPhone, SocksDroid on Android, browser extensions, and every program with its own proxy field. Enter gate.proxyfield.io, port 7000, and your username and password in HTTP or HTTPS mode (SOCKS5 takes the same port and login), or allowlist your IP and use the port you set up in the dashboard.

What's good SOCKS5 proxy software for Windows to route apps that have no proxy setting of their own?

Proxifier is the established choice: $39.95 for a perpetual license, a 31-day trial, per-app rules, SOCKS5 and HTTPS with a login, and DNS through the proxy, on Windows XP to 11. Win2Socks and the free, open-source ProxyBridge also redirect UDP, and NetDetour (ProxyCap's successor) adds SSH tunnels; SocksCap64 stopped development in 2017.

Is there a free SOCKS5 proxy client for Windows?

Yes: ProxyBridge is free and open source (MIT license), routes chosen apps' TCP and UDP traffic through a SOCKS5 or HTTP proxy, and runs on 64-bit Windows 10 or later with administrator rights. Proxifier and Win2Socks are paid, with trial versions.

What is a proxy app?

A program that sends other apps' internet traffic through a proxy server you choose, often by rules: which apps, which websites, which proxy. It is software only; the proxy server itself comes from a provider.

What is a proxy client?

The side of a proxy connection that sends requests to the proxy server: your browser, your script, or a dedicated app such as Proxifier that redirects other programs. Any program with a proxy setting is a proxy client once you fill it in.

What is a proxy server application?

The phrase is used for two things: server software that runs a proxy (Squid, 3proxy and similar, for people who host their own) and client apps that connect to someone else's proxy. If you buy proxies from a provider, you need at most the client side; the provider runs the servers.

Which proxy apps are there for each device?

On Windows, Proxifier, Win2Socks, NetDetour or ProxyBridge; on macOS, Proxifier; on Linux, proxychains-ng; on Android, SocksDroid, Every Proxy or a Clash-based app; on iPhone and iPad, Shadowrocket or a Clash-based app; in browsers, extensions such as FoxyProxy and ZeroOmega. Each device also has a built-in HTTP proxy setting that covers the simple case.

Does a proxy app come with proxies?

No. A proxy app only routes traffic; you add a proxy server from a provider, with its host, port and login. Proxifier's FAQ, for example, states it provides "only" the software.

Is there a mobile proxy app?

Yes, for routing a phone's traffic: Shadowrocket on iPhone, SocksDroid and Every Proxy on Android, and Clash-based apps on both. Mobile proxies are a different thing: IP addresses on 5G, 4G and LTE carrier networks, which ProxyField sells per GB and which work in any app.

Can system-level proxy settings override an app's own proxy settings?

Usually the app's own setting wins for that app, and the system proxy covers apps that have none. A client like Proxifier works below both: it captures connections at the system level, which is why its makers advise turning off proxies built into your apps while it runs.

Show 3 more questionsShow fewer questions

How do I configure a proxy in WinSCP?

Open the site's Advanced settings, go to Connection → Proxy, choose HTTP or SOCKS5, and enter the host, port, username and password. WinSCP also supports SOCKS4, Telnet and Local proxy types; with SOCKS5 the password reaches the proxy in plain text unless the proxy supports CHAP.

Can I set up a proxy on a router?

Only on routers whose firmware can run a proxy client, such as OpenWrt with OpenClash; most stock home routers cannot. A router proxy covers every device behind it, including TVs and consoles that have no proxy setting.

Can I use a proxy on a smart TV?

If the TV has a manual proxy field in its network settings, yes, usually HTTP without a login, so allowlist your home IP with the provider. If it has none, set the proxy on the router or share the connection from a computer that runs a proxy client.

Easy Trial: 1 GB for $2.95.

Try for the price of 1 GB, no subscription, traffic never expires.