Frequently Asked Questions
Find answers to the most common questions about Vylos features, compatibility, and troubleshooting.
Which platforms does Vylos support?
Vylos runs on iOS 15.0 and later, macOS 12.0 and later, and visionOS 1.0 and later. A single app covers all three Apple platforms.
Can I scan QR codes on macOS?
No. QR code scanning is available on iOS only, as it requires the device camera. On macOS, you can use the file import option to add tunnel configurations.
What file formats can I import?
Vylos supports the following import formats:
.conf— Standard WireGuard configuration files..vylos— Vylos configuration files, which extend WireGuard configs with additional settings like split DNS and on-demand rules..zip— ZIP archives containing any combination of.confand.vylosfiles.- QR codes (iOS only) — Standard WireGuard configuration text or Base64-encoded
.vylospayloads, with a maximum size of 16 KB for Base64 content.
What is the maximum file size for imports?
The maximum file size for any import is 2 MB.
Can I change the app icon on macOS?
No. Alternate app icons are available on iOS only. On macOS and visionOS, Vylos always uses the Default icon.
Why can't I see the bandwidth chart?
The bandwidth chart requires iOS 16.0 or later, macOS 13.0 or later, or visionOS 1.0 or later. If you're running an earlier OS version, the chart area displays an unavailable message. The rest of the bandwidth statistics, including cumulative totals, remain accessible.
Why does my on-demand tunnel show "Inactive (On-Demand)"?
This is normal behavior. The status means on-demand activation is enabled for the tunnel, but the current network doesn't match any of the configured activation rules. The tunnel will connect automatically when you join a network that matches your rules, such as a specific Wi-Fi SSID or cellular connection.
What does the on-demand clash warning mean?
The clash warning appears when multiple enabled tunnels have overlapping on-demand activation rules. For example, two tunnels might both be configured to activate on cellular. Since only one VPN tunnel can be active at a time, overlapping rules may cause unexpected behavior. You should review your on-demand settings and ensure each activation rule is assigned to only one tunnel.
How does TOTP rate limiting work?
To prevent brute-force attempts against the app lock, Vylos enforces rate limiting on TOTP entry. After 5 failed attempts, you're locked out for 30 seconds. Each subsequent failure doubles the lockout duration, up to a maximum of 5 minutes. The failure counter and lockout timer reset after a successful unlock.
Why are some settings grayed out?
Your device may be managed by an organization using Mobile Device Management (MDM). When a managed configuration is active, the organization can restrict access to certain settings and prevent tunnel creation. If you believe this is incorrect, you should contact your IT administrator.
Can I use Siri Shortcuts with app lock enabled?
Siri Shortcuts are blocked while the app is locked. You'll need to unlock the app first, then use Siri to connect, disconnect, or toggle tunnels. The one exception is MDM-managed devices — if your device is managed by an organization, Siri Shortcuts are always allowed regardless of the lock state.
What happens to my tunnels if the "Allow Manual Tunnels" restriction is enabled?
When the "Allow Manual Tunnels" MDM restriction is active, your manually created tunnels are suspended from the system. This means they're removed from the device's VPN settings but are preserved locally within the app. When the restriction is lifted, your tunnels are automatically restored to the system without any action on your part.
How many languages does Vylos support?
Vylos supports 19 languages plus a System option that follows your device's language setting. The supported languages are: Arabic, Catalan, Chinese (Simplified), Chinese (Traditional), Croatian, English, Finnish, French, German, Hindi, Indonesian, Italian, Japanese, Korean, Polish, Romanian, Russian, Spanish, and Turkish.
What is the .vylos file format?
The .vylos format extends standard WireGuard .conf files with additional Vylos-specific settings. A .vylos file is a ZIP-like package that contains the WireGuard configuration alongside a settings.conf file in INI format. The settings file stores split DNS rules and on-demand activation rules that go beyond what the standard WireGuard format supports.
How do I export my tunnels?
Go to Settings, then tap "Export ZIP Archive" under the Tools section. You can choose from three format options:
- WireGuard only (.conf) — Exports only the standard WireGuard configuration for each tunnel.
- Full configuration (.vylos) — Exports the WireGuard configuration along with all Vylos-specific settings (split DNS and on-demand rules).
- Both — Exports both
.confand.vylosfiles for each tunnel.
The export produces a ZIP file that you can save or share using the system Share sheet.