How to Set Up Proxies on Windows

🦊 Firefox (The Simplest Option) Built-in Support

Firefox is the only major browser that has a built-in authorization manager for SOCKS5 right "out of the box".

• Step 1: Go to Settings → search for Proxy → click Settings....
• Step 2: Select Manual proxy configuration.
• Step 3: In the SOCKS Host field enter the IP, and in Port — the port.
• Step 4: Make sure to select SOCKS v5. Click OK.
• Step 5: When you first visit any site (e.g., google.com), a window will pop up asking for your Rich Proxy username and password. Check the "Save" box so you don't have to enter it again.

How to prevent DNS leaks:

By default, Firefox might send domain name requests (DNS) outside the proxy, exposing your browsing history to your ISP. To fix this:

• In the address bar, type about:config.
• Find the preference network.proxy.socks_remote_dns.
• Toggle its value to true.

🌐 Chrome, Edge, Opera, Yandex.Browser

These browsers rely on the Windows system settings (which lack a password field). You cannot simply enter login:pass@ip in the address bar or system console.

Solution: SwitchyOmega Extension

Install a proxy manager that will intercept the browser's network request and add the authorization header.

• Step 1: Install Proxy SwitchyOmega from the Chrome Web Store.
• Step 2: In the extension, create a new profile (click New profile).
• Step 3: Select the SOCKS5 protocol.
• Step 4: Enter the server, port, username, and password (via the lock icon) into the corresponding fields.
• Step 5: Click Apply changes to save.
• Step 6: Click on the extension icon in the browser toolbar and select this profile before surfing.

🥇 Proxifier (Gold Standard) Recommended

Paid, but the most stable and user-friendly routing program for Windows.

• Step 1: Install the program. Go to Profile → Proxy Servers.
• Step 2: Click Add, enter the IP and port.
• Step 3: In the protocol, select SOCKS Version 5.
• Step 4: Check the Authentication box and enter your username/password.
• Step 5: Click Check to ensure the test connection passes with a green color.
• Step 6: Next, go to Profile → Proxification Rules.
• Step 7: In the Default rule, change the Action to your newly created proxy server.
• Done! All your computer's traffic is now forced through the proxy.

🥈 Free Alternatives

There are free alternatives. **ProxyCap** has a convenient interface (but works on a trial basis), and there are free open-source solutions like **SSTap** / **Netch** / **Tun2Socks**.

Important: Be careful with free programs from unverified sources or forums. Working at the network driver kernel level, they have access to all your unencrypted traffic. Always check hashes and download software only from GitHub.

CURL

A console utility for requests. It's important to use the --socks5-hostname flag instead of --socks5 so that DNS resolving also goes to the proxy server, not to your local router.

Git (Version Control)

If you clone or push to blocked repositories:

Environment Variables (Universal Method)

You can set a proxy for the entire current terminal session. All utilities (including python/npm) launched from this terminal will pick up these variables.

In PowerShell:

In CMD console (.bat files):

🐍 Python (requests module)

For it to work correctly with socks5, you will need to install an extension: pip install requests[socks].

import requests

proxies = {
    "http": "socks5://login:[email protected]:1080",
    "https": "socks5://login:[email protected]:1080",
}

# It's important to set a timeout so the script doesn't hang forever
response = requests.get("https://api.ipify.org", proxies=proxies, timeout=10)
print(response.text)

🟩 Node.js (JavaScript)

In the Node.js ecosystem, agents passed into fetch or axios parameters are usually used for routing traffic. Install: npm i socks-proxy-agent.

const { SocksProxyAgent } = require('socks-proxy-agent');
const fetch = require('node-fetch');

// Initialize SOCKS5 agent
const agent = new SocksProxyAgent('socks5://login:[email protected]:1080');

fetch('https://api.ipify.org', { agent })
  .then(res => res.text())
  .then(console.log);

Telegram Desktop

• Go to Settings → Advanced.
• In the "Network and Proxy" section, choose Connection type → Use custom proxy.
• Select SOCKS5 protocol. Enter the server address, port, and authorization data (login/password separated into different fields).
• Once the green "Connected (Ping ...)" text appears, Telegram is secured.

OBS Studio (For Streaming)

• To hide the stream's IP address (to prevent DDoS attacks on the streamer) or bypass platform RTMP server blocks (Twitch/YouTube), you can route the stream through a proxy.
• Open File → Settings → Stream.
• If your version supports network binds, SOCKS5 can be specified in the advanced network settings.
• Tip: If your version of OBS lacks the needed authorization fields, use Proxifier, linking the Default / OBS64.exe rule specifically to your streaming platforms.

Torrent Clients (qBittorrent, uTorrent)

Critically important: If you download files without SOCKS5, your real IP address is visible to absolutely all participants in the distribution (peers) and copyright holders.

• In the network connection settings (Connection section) find the Proxy section.
• Select the SOCKS5 type and enter credentials: IP, Port, Username, Password.
• Make sure to enable the options: "Use proxy for peer-to-peer (P2P) connections" and "Use proxy for hostname (DNS) lookups".

Spotify, Discord, Steam 🎮

These applications do not have their own built-in SOCKS proxy settings with password support in the interface. For them, you will have to install Proxifier (see Chapter 3).

If you have your own remote server (VPS), this is the safest method. You connect to it, and SSH conceptually "spins up" a local SOCKS5 port on your computer without asking for a password. You don't store plain-text usernames and passwords in Windows configurations, everything relies on the server's crypto-keys (RSA/Ed25519).

• Step 1: Open the built-in Windows 10/11 terminal (CMD / PowerShell).
• Step 2: Enter the dynamic forwarding command: ssh -D 1080 -N root@your_server.com
• Step 3: Minimize the window (keeping the tunnel active).
• Step 4: Now in any app (Telegram, Firefox, Proxifier), you configure the proxy to 127.0.0.1 with port 1080. Leave the Username and Password fields completely EMPTY.
• Authorization and data encryption from your PC to the server is handled by the SSH daemon and remains hidden from your ISP.

• Step 1 (IP): Open the site `whoer.net` or `ipinfo.io` in your browser. You should see the IP address of the rented proxy server, not the address of your home Wi-Fi provider.
• Step 2 (DNS Test): This is critical. Go to `dnsleaktest.com` and run the Extended Test. If you see your home operator in the provider list, your DNS resolving leaks past the proxy.
• *Fixing leaks:* In the browser, enable socks_remote_dns. In programs like qBittorrent, check the box "Proxy peer-to-peer connections". In Proxifier, ensure that Name Resolution in the global settings is set to "Resolve hostnames through proxy".
• Step 3 (WebRTC): In browsers, WebRTC technology for P2P cameras can bypass the proxy and expose your real IP to the person you are communicating with on the website. It is better to completely disable it in the browser settings (via about:config -> media.peerconnection.enabled = false) or by using the WebRTC Control extension.