Your server. Your connection.

What you host

OK Connect Panel manages users, connection configurations and subscription links on your own infrastructure. OK Connect is its client application. This software does not include a shared public VPN service or automatically provide access to company-operated servers.

Download the corresponding source and follow its installation guide. Use a server and domain you control, terminate HTTPS with a valid certificate, set a strong unique administrator password and enable two-factor authentication. Restrict administration access and keep tested backups.

Configure a server

1. Open Inbounds and create a supported connection configuration. Choose its listening address, port and protocol.
2. For a TLS or reverse-proxy deployment, keep the client-visible hostname, certificate, port and transport consistent with your server configuration. Do not copy demo hostnames or keys into a production setup.
3. Create a client under that inbound. Configure its access identifier, data allowance and expiration. Enable the client and keep its subscription identifier private.
4. Check the Xray status and logs, then verify a real connection from a client device. A running panel alone does not prove the data tunnel is working.

Advanced routing and core options retain their technical names. Only configure options you understand; changing inbound or reverse-proxy parameters can interrupt existing connections.

Add access to OK Connect

1. In Settings → Subscription, enable subscriptions and configure the public HTTPS subscription address for your deployment.
2. Create or select a client, then open its subscription links or QR-code dialog. Share only that client's subscription, never an administrator login or API token.
3. Open the client's public subscription page on the device with OK Connect installed and choose Open in OK Connect. Alternatively, copy the subscription URL and use Add from clipboard in the app, or scan the subscription QR code.
4. Choose a server in the app and connect. The device may request VPN configuration permission. Verify traffic and availability using the actual server you configured.

The import action uses okconnect://import-sub?url=… to pass your subscription directly to the installed client. QR codes are generated locally in the browser; the panel does not need an external QR-code service.

Treat a subscription URL as a credential. Anyone with it may obtain its connection configuration until access is revoked or changed. Avoid putting it in public posts or support screenshots.

Security and data responsibility

An encrypted tunnel can help protect traffic between your device and your configured server on untrusted networks, including public Wi-Fi. Your server operator still controls the server, configuration, accounts and logging. This is not antivirus protection, guaranteed anonymity or a no-logs promise. Self-hosting operators must provide appropriate privacy information and follow applicable laws.

Support: ceo@okcorp.io · Company privacy policy

Open source

OK Connect Panel is a modified distribution of 3x-ui v3.10.2, distributed under GNU GPL v3. Original contributors retain their copyright. This project is independently maintained and is not endorsed by the upstream project.