Log In Get Started
Free tool

VLESS config generator

Enter your server address and press one button: you get a vless:// link with a QR code for your app, a server config for Xray or sing-box and a client config. The UUID and Reality keys are created right in your browser, we never see or store them.

Reality on port 443 by default. Other options are under fine-tuning.

Reality · port 443 · TCP · Chrome fingerprint · disguised as www.microsoft.com

Fine-tuning: scenario, port, disguise, fingerprint
Scenario

New keys change everything at once: an old server config will not work with the new link.

The UUID and keys are created in this tab. The page sends them nowhere and stores nothing.

How to use it

Copy the server config and save it on your VPS: for Xray this is usually /usr/local/etc/xray/config.json, for sing-box /etc/sing-box/config.json. Restart the service and open the port in the firewall. Add the link or the QR code to your app: v2rayNG, Hiddify, Streisand, Happ, sing-box. Reality needs nothing else; for WebSocket and gRPC the server must sit behind nginx or another proxy with a real certificate for your domain.

The generator installs nothing and does not check your server: it builds a consistent set where the UUID, keys and addresses match in the config and in the link. A mismatch there is exactly what breaks most hand-made setups.

No server of your own?

Then the generator will not help: it needs a VPS that you set up yourself. If you just want to connect, 404 VPN has a Free plan: no cost, no card, 2 GB a day. You only need to sign up, and the key appears in your account.

Related: parsing a ready-made node link, what your network lets through and WebRTC leak test.

Rather not deal with a server?

404 VPN is already set up: VLESS, an app and a key in your account. The Free plan costs nothing and needs no card.

404 VPN plans →

FAQ

guest@404vpn:~$ cat vless-faq.md
[01] $ Is this a free VLESS server? ▸
> No, and the difference matters. The generator builds a config for a server you already have: a VPS with Xray or sing-box installed. On its own it connects you to nothing. If you have no server, 404 VPN has a Free plan: no cost, no card, 2 GB a day, you only need to sign up.
[02] $ Which one should I pick: Reality, WebSocket or gRPC? ▸
> Reality, if the server stands on its own and you need to get through filtering: it disguises the connection as an ordinary visit to a large website and needs neither a domain nor a certificate. WebSocket with TLS, if the server has its own domain and nginx or a CDN sits in front of Xray. gRPC, if WebSocket is cut on the network but HTTP/2 gets through.
[03] $ Which site should Reality imitate? ▸
> A large site with TLS 1.3 and HTTP/2 that opens from the server’s country and is not blocked where people will connect from. Any site on the ready-made list works. What matters is that the same address sits in both the server config and the link, and the generator takes care of that.
[04] $ Is the private key stored anywhere? ▸
> No. The keys are created in the tab by the browser’s built-in cryptography, and the page makes no network requests while generating. The private key lives only in the server config and never goes into the link: the link can be shared, the server config cannot.
[05] $ The link does not connect. What should I check? ▸
> Three things, in order. That the server runs with exactly this config and listens on the port. That the port is open in the server firewall and at the hosting provider. That the UUID, public key and shortId in the link match the server: “New keys and UUID” changes everything at once, and an old server config will not work with a fresh link. You can inspect the link itself in our node link parser.