Proxy settings: what they mean and how to check

Short answers

What does Configure Proxy mean on Wi-Fi?

It selects how compatible traffic uses a proxy for that Wi-Fi network. Manual needs server details; Automatic needs a configuration URL. Off removes that network’s manual or automatic proxy selection. It does not describe every app’s route or a separate managed global proxy.

Do I need a proxy for home Wi-Fi?

You do not need to invent a proxy address to use ordinary home Wi-Fi. Use the configuration required by your network. If a proxy is unexpectedly selected, identify whether you, an app or an administrator supplied it before making changes.

Are the proxy password and website password the same?

They serve different logins. A proxy credential authenticates the connection to the intermediary. A website credential signs in to the destination. For Portproof, the account password and API key are also separate from the generated traffic username and proxy password.

Will turning off system proxy settings affect every app?

Apps can have their own proxy configuration. Chrome extensions and policies can set browser rules; Firefox has its own connection settings; command-line clients can use environment variables or explicit options. Check the app you actually use after changing system settings.

The menu locations below were checked against Windows 10/11 support, Apple’s macOS Tahoe 26 documentation, its iOS 14.7-and-later developer walkthrough and current Chromium references on 4 October 2026. This is a documentation-checked explanation; no device walkthrough was recorded.

Manual, PAC and automatic discovery

What each configuration needs
Mode	What you supply	What happens
Manual	Proxy hostname, port, protocol and any required authentication.	The client follows the configured server rules and exceptions.
Automatic configuration or setup script	The URL of a proxy auto-config file, usually called PAC.	The script selects a proxy or a direct connection for a request.
Automatic detection	Usually no manually entered server address.	Web Proxy Auto-Discovery, or WPAD, can find a PAC URL through the network.
Off or direct	No proxy for the setting being edited.	The request connects directly unless another active configuration selects a proxy.

A PAC URL points to a configuration file. It is not the address of the proxy carrying the traffic, and it does not replace a proxy password. A rule can choose different routes for different sites, so a working page does not establish the route taken by another page. Chrome’s proxy API reference explains these modes.

Automatic does not mean that a proxy exists on every network, that the connection is authenticated, or that every request must use it. Keep an organisation’s supplied mode and URL intact while diagnosing a problem. Switching a required PAC setup to an invented manual server removes the rules you need to investigate.

Read the connection fields correctly

Server or hostname: The address of the proxy gateway. In a separate Server field, enter the hostname rather than a full URL containing a username and password.
Port: The listener on that gateway. Copy it with the protocol; a reachable host with the wrong port can still fail.
HTTP or SOCKS: The protocol used to talk to the proxy. Choose a protocol the client supports and use its matching port.
Authentication: The proxy’s issued username and password. Separate fields take the original values, rather than URL-encoded text.
Exceptions: Hosts which should use a direct route. Match the syntax of the actual operating system or client; exception formats are not interchangeable.

An HTTP proxy can carry an HTTPS website through CONNECT. The website’s https:// address therefore does not tell you to choose a SOCKS port or use https:// for the gateway. In clients that accept a proxy URL, http:// and https:// describe the connection to that gateway. See HTTP and SOCKS5 proxies before changing protocols.

For Portproof’s HTTP connection, the separate host and port are gw.portproof.org and 7000. Get the complete generated username and proxy password from the connection builder. A saved account login, destination login or API key cannot substitute for those connection values.

Find the setting used by your device or app

Where to inspect the route
Device or client	Starting point
Windows 10 or 11	`Settings > Network & internet > Proxy`; inspect automatic setup, setup script and manual setup. A VPN connection has separate proxy settings.
macOS Tahoe 26	`System Settings > Network`; select the network service, then `Details > Proxies`.
iPhone or iPad	Inspect the connected network in `Settings > Wi-Fi`, then its `Configure Proxy` entry under `HTTP Proxy`.
Desktop Chrome	Open `chrome://settings/system`; follow the system proxy control or the indication that an extension or administrator supplies the settings.
Firefox	Use the Firefox proxy setup guide for native host, port and authentication settings, plus a check and restoration steps.
Android	Inspect the Wi-Fi network’s proxy option. Google’s Pixel steps show the network, Edit and Advanced options; other devices differ.

These are starting points for inspection. Use Microsoft’s Windows proxy reference, Apple’s Mac proxy reference or Wi-Fi proxy walkthrough, and Mozilla’s Firefox connection settings for the relevant fields.

On desktop Chrome, system settings are only one possible source. A browser extension, launch option or managed policy can supply another configuration. Chromium also says Chrome ignores credentials embedded in manual proxy settings; authentication has its own flow. Check the browser’s effective configuration when its behaviour differs from another app.

Check one request after saving

Record the selected mode, host and port or PAC URL before editing. Keep passwords out of screenshots and shared notes.
Save one intended change, then open a small authorised HTTPS page in the app whose route you changed.
If a recognised proxy asks for authentication, enter its connection credential. For an unexpected prompt, use the username and password guide.
Keep the exact error if the page fails. A connection refusal, authentication challenge and failed CONNECT tunnel require different checks.

The proxy error directory routes those messages to the appropriate diagnostic. An exit-IP check in one browser confirms only the tested request. Repeat the small check in any other app that needs the proxy; a system pane does not establish that the app reads it.

Turn off a proxy you added yourself

On your own unmanaged device, return to the pane that supplied the setting. Disable your manual entry, or remove your setup script if that was the change you made. On iPhone and iPad, a personal Wi-Fi entry can be set to Off. In a browser extension, restore its intended system or direct mode. Save, then retest in the same app and network.

Do not disable an employer’s or school’s proxy to make an error disappear. Ask the administrator to check its server or script. Apple’s managed global proxy reference describes a route which can be supplied outside the individual Wi-Fi pane. Deleting a management profile can remove associated configuration and data, so it is not a routine proxy reset.

Sources and scope

Primary documentation checked on 4 October 2026. Device labels and managed configurations can differ.

What is not allowed

Proxy configuration does not grant access permission. Follow the destination’s rules and the acceptable-use policy.

What are proxy settings?