ublproxy Setup

Get your device connected in a few steps.

Install Certificate

Your device must trust the ublproxy CA certificate before the proxy can filter HTTPS traffic. Without it, every HTTPS request through the proxy will fail with a certificate error.

Download Profile (.mobileconfig)

This profile installs the CA certificate and configures proxy settings in one step.

  1. Download the profile above
  2. iOS: Go to Settings → General → VPN & Device Management → tap the profile → Install
  3. iOS: Go to Settings → General → About → Certificate Trust Settings → enable full trust for ublproxy CA
  4. macOS: Open the downloaded file → Keychain Access will prompt to install
or install manually
Download CA Certificate (.crt)
  1. macOS: Open the .crt file → add to System keychain → find ublproxy CA → set Trust to Always Trust
  2. iOS: Download .crt → Settings → General → VPN & Device Management → install → then enable full trust under Certificate Trust Settings
  3. Restart your browser after installing
Download CA Certificate
  1. Download the certificate above
  2. Go to Settings → Security → Encryption & Credentials → Install a certificate → CA certificate
  3. Select the downloaded ublproxy-ca.crt file and confirm

Menu paths vary by manufacturer (Samsung, Pixel, etc.).

Download CA Certificate
  1. Download and double-click the certificate
  2. Click Install Certificate
  3. Select Local Machine, then Place all certificates in the following store
  4. Choose Trusted Root Certification Authorities and finish the wizard
  5. Restart your browser
Download CA Certificate
  1. Copy the certificate:
    sudo cp ublproxy-ca.crt /usr/local/share/ca-certificates/
  2. Update the trust store:
    sudo update-ca-certificates
  3. Restart your browser

Firefox uses its own certificate store, separate from your OS. You may need to install the certificate here in addition to your OS trust store.

Download CA Certificate
  1. Open Settings → Privacy & Security → Certificates → View Certificates
  2. Click Import and select the downloaded .crt file
  3. Check Trust this CA to identify websites and confirm
  4. Restart Firefox

Scan to open this page on your phone:

QR code to open setup page

Configure Proxy

Use the automatic proxy configuration file (PAC) to route traffic through ublproxy.

Desktop

PAC URL:

  1. Open System Settings → Network → Wi-Fi → Details → Proxies
  2. Enable Automatic Proxy Configuration
  3. Enter the PAC URL shown above
  1. Open Settings → Network & Internet → Proxy
  2. Under Automatic proxy setup, enable Use setup script
  3. Enter the PAC URL shown above
  1. Configure your browser's proxy settings to use the PAC URL above
  2. Or launch Chromium with:
  1. Open Settings → General → Network Settings → Settings…
  2. Select Automatic proxy configuration URL
  3. Enter the PAC URL shown above
  4. Click OK

Mobile

Mobile devices use a separate PAC URL (plain HTTP proxy):

  1. Go to Settings → Wi-Fi
  2. Tap the info button on your connected network
  3. Scroll to Configure Proxy and select Automatic
  4. Enter the mobile PAC URL shown above
  1. Go to Settings → Wi-Fi
  2. Tap the gear icon on your connected network
  3. Set Proxy to Proxy Auto-Config
  4. Enter the mobile PAC URL shown above

The desktop PAC routes traffic through the encrypted HTTPS proxy. The mobile PAC uses a plain HTTP proxy because iOS and Android do not support HTTPS proxy connections. HTTPS traffic is still filtered via MITM.

Verify Setup

Check that the CA certificate is installed and trusted by your browser.

Checking certificate trust…

Setup Complete

Your device is ready to use ublproxy for ad-free browsing.

Register a passkey on the management portal to create custom blocking rules and manage your blocklist subscriptions.

Open Management Portal