Frequently Asked Questions
Find a concise answer, then follow the linked guide when you need instructions or reference details.
Platforms and Features
Which platforms does Vylos support?
Vylos supports iOS and iPadOS 15 or later, macOS 12 or later, and visionOS 1 or later. Compare individual capabilities in Feature Compatibility.
Can I scan QR codes on macOS or visionOS?
No. QR import is available on iPhone and iPad; Mac and Apple Vision Pro use file import or manual entry.
Can I change the app icon on Mac or Apple Vision Pro?
No. Alternate icons are available on iPhone and iPad only; see Customize Vylos.
Why can't I see the bandwidth chart?
Historical charts require iOS 16 or later, macOS 13 or later, or visionOS 1 or later. iOS 15 and macOS 12 still show cumulative totals and live tunnel counters; see Monitor and Troubleshoot.
Files and Transfers
What file formats can I import?
Vylos imports .conf, .vylos, and .zip files on every platform, plus WireGuard-text or Base64-encoded .vylos QR codes on iOS. Follow Import and Export Tunnels for limits and step-by-step instructions.
What is the maximum import size?
Each imported file can be up to 2 MB. A Base64-encoded QR payload can be up to 16 KB.
What is the .vylos file format?
A .vylos file is a ZIP archive containing a standard WireGuard configuration and optional Vylos settings. See Vylos File Format for the canonical archive layout and keys.
How do I export my tunnels?
Open Settings → Export ZIP Archive, choose .conf, .vylos, or both, then save or share the result. Managed tunnels are profile-owned and are not included; Import and Export Tunnels explains the available formats.
Connections and On-Demand
Why does my tunnel show "On-Demand" instead of "Connected"?
The Home list uses On-Demand to show that automatic activation remains armed: yellow is waiting for a match, while green is connected. The detail view shows the explicit live state; see Set Up On-Demand.
What does the On-Demand clash warning mean?
Two enabled tunnels have activation rules that can match the same network condition. Adjust one tunnel so only one rule owns that condition; On-Demand Clash Detection lists the conflict types.
App Protection
How does TOTP rate limiting work?
After five incorrect authenticator codes, Vylos starts a 30-second lockout that doubles after later failures up to five minutes. A successful unlock resets it; see TOTP Rate Limiting.
Can I use Siri Shortcuts while App Lock is enabled?
Local Authentication can verify a shortcut inline, while authenticator-app protection requires you to open and unlock Vylos first. Managed policy can bypass authentication but cannot restore actions disabled by allowManualTunnels; see App Lock and Shortcuts.
Managed Devices
Why are some settings unavailable?
Your organization may be controlling Vylos through Managed App Configuration. Review Managed Configuration in Vylos or contact your administrator if a displayed value is incorrect.
Does Vylos support per-app VPN?
Yes. Vylos supports Apple's AppLayerVPN packet-tunnel path when MDM assigns managed applications through a matching VPNUUID; follow Configure Per-App VPN for requirements and limitations.
What happens when manual tunnels are disabled?
Vylos suspends user-created tunnels from system VPN settings, Shortcuts, Spotlight, and Home Screen actions while preserving their configurations. It restores them when the restriction is removed; see Manage Restrictions.
How many languages does Vylos support?
Vylos supports 19 languages and follows the per-app language selected through Apple Settings. Open Customize Vylos for the complete list and platform-specific steps.