Import a VPN profile

Choose your import method

Method	What you need
Local profile transfer	A phone or computer browser on the same network as Apple TV
Download from a link	An HTTPS address that returns a configuration file
Manual setup	The client details supplied by your server or provider

Each method leads to a review before saving. Use the client configuration, not your VPN server’s private configuration.

Send from your browser

1. Connect Apple TV and your phone or computer to the same network.
2. In WireFuse, choose Profiles → Add VPN profile → Local profile transfer and start receiving.
3. Scan the QR code or enter the address displayed on TV. Keep the receiving screen open.
4. Enter the TV’s pairing code in your browser.
5. Upload a file is the default option. To paste a configuration instead, switch to the text option and paste the complete configuration.
6. Send it to the TV. Review the result on Apple TV, then save the profile.

The address on the TV points to the TV itself. You do not upload your configuration to wirefuse.app. A new receiving session may show a different address or pairing code.

Use a trusted home network for local transfer. The connection to your TV uses HTTP and is not encrypted. The pairing code controls the transfer session; it is not encryption.

Download from an HTTPS link

Choose Download from a link and enter the full HTTPS configuration URL. A login screen, subscription page or account dashboard is not a configuration file. If the provider only offers those pages, download its client configuration first and use local transfer.

Check the source of the link. This method contacts the address you enter; it is separate from the local browser transfer.

Enter details manually

Choose Manual setup and enter the supplied interface and peer details. Keep addresses, keys, routes and protocol settings consistent with your server. Review the validation messages before saving.

Do not invent a new key or omit a required field to clear a validation error: the server must know the matching client details.

If the browser cannot reach the TV

Make sure receiving is still active, then enter the full current address, including http:// and the displayed port. Local transfer uses port 8080. Both devices need to be able to reach each other; guest Wi-Fi or access-point isolation can prevent this even when the network names look similar.

If a profile is rejected, keep the exact error message. Check the configuration and protocol with your provider. Do not send a private key or the full configuration in a support message.

After saving

The profile appears in Profiles. Select it, then open Connection to connect. Disconnect before replacing or editing an active profile.