Updated November 2026
12 min read
Guide
What Is a Proxy Server? A Beginner’s Guide (2026)
A proxy server is worth turning on when one app or one job needs a different IP address, and not before. If your current connection keeps failing at a site that blocks your region, or your free proxy dies every hour, this guide answers what is a proxy server in plain words, then walks you from proxy details to a first working request in 6 steps.
🤖 Direct answer
A proxy server is a computer that sends your web requests for you, so the website sees the proxy’s IP address instead of yours. You give an app the proxy’s host and port (often with a username and password), and its traffic goes through that server. Most beginners need a forward proxy for one browser or script, not for the whole device.
⚡ TL;DR · skip here if you are in a hurry
- Two choices decide everything: the protocol your app speaks (HTTP, HTTPS or SOCKS5) and where the IP comes from (datacenter, residential, ISP or mobile).
- Setup is a few fields: host, port, username and password, typed into Windows, macOS or a single curl command.
- Check before you trust it: compare your IP with and without the proxy. Two different answers mean it works; a 407 means the login is wrong.
What is a proxy server, in plain words?
A proxy server is a go-between. Your app sends its request to the proxy, the proxy sends it on to the website, and the answer comes back the same way.
- Your deviceYour browser or script opens a connection to the proxy’s host and port instead of the website.
- The proxyIt checks your login, then makes the request to the website from its own IP address.
- The websiteIt answers the proxy. To the site, the visitor is the proxy’s IP, not yours.
MDN’s HTTP guide splits proxies into two families. A forward proxy, “or gateway, or just ‘proxy'”, works for clients like you. A reverse proxy sits in front of websites to spread load and cache files, so you never set one up as a visitor. When people say “buy a proxy”, they mean a forward proxy.
Not every proxy hides you
Some proxies pass your real address along in an X-Forwarded-For header, which MDN describes as identifying the originating IP of a client connecting through a proxy. A random free proxy might do this, which is one more reason to run the check further down.How is a proxy different from a VPN?
A VPN usually takes over all traffic from the whole device and encrypts it between you and the VPN server. A proxy is usually set per app or per request. An HTTP proxy doesn’t encrypt anything by itself, but HTTPS sites stay encrypted: your app asks the proxy to open a tunnel with the CONNECT method, normally to port 443, and the proxy only passes encrypted bytes along.
That split is why scrapers and testers use proxies. You can send one script through 50 different IPs while your browser and email keep using your normal connection.
Which kind of proxy do you need?
If your current setup keeps failing at a task, the cause is usually one of two mismatches: the wrong protocol for your app, or the wrong kind of IP for the site.
| Choice | Options | Pick it when |
|---|---|---|
| Protocol | HTTP or HTTPS proxy | Your app is a browser, curl or a scraping library. Most tools accept it. |
| Protocol | SOCKS5 | Your app sends traffic that isn’t web pages, or it only lists SOCKS. |
| IP source | Datacenter | The site doesn’t block cloud IPs and you want low cost per IP. |
| IP source | Residential | The site blocks datacenter ranges. Usually billed per GB. |
| IP source | ISP (static residential) | You need one fixed IP that looks like a home connection for days. |
| IP source | Mobile | The target is an app or social platform that trusts carrier IPs most. |
Protocol and IP source are separate choices: a residential proxy can still be reached over HTTP or SOCKS5.
Prices follow the IP source. On the pages read on October 28, 2026, residential entry rates ran from $1 per GB (DataImpulse, with an intro pack of 5 GB for $5) to $7 per GB (IPRoyal, 1 GB). Mobile proxies start at $2 per GB at DataImpulse and from $10 per IP at Proxy-Seller. The full per-GB table is in our residential proxy prices report.
For a first proxy, start with HTTP and residential: it’s the pair that works in the most tools and on the most sites.
What details does a proxy provider give you?
Every provider hands you the same four pieces, even when the dashboard looks different.
| Field | Looks like | What it does |
|---|---|---|
| Host | HOST (a name or an IP) | Where your app connects |
| Port | PORT (a number such as 8080) | Which door on that server to use |
| Username | USERNAME | Proves the traffic is yours; often carries country or session options |
| Password | PASSWORD | Sent with the username on every connection |
Many dashboards print all four on one line as HOST:PORT:USERNAME:PASSWORD. Some let you allowlist your own IP instead of using a password.
Copy them exactly. A wrong character in the host gives a connection error, and a wrong character in the password gives an authentication error, which helps you tell the two apart later.
How do you set up a proxy server, step by step?
Pick one place to set the proxy. The system settings change every app that follows them, such as Chrome and Edge; curl changes only one request.
Steps 1 to 3: Windows 10 or 11
- Open the proxy pageOpen Settings, then go to Network & internet, then Proxy.
- Enter the serverUnder Manual proxy setup, next to Use a proxy server, select Set up. Turn on Use a proxy server, type the host in Proxy IP address and the number in Port.
- Save and keep local traffic directLeave Don’t use the proxy server for local (intranet) addresses ticked, which Microsoft recommends for most people, and select Save. When it works, the Proxy page shows Use a proxy server as On.
Windows asks for the username and password the first time an app connects, not on this page. Your browser shows a sign-in box for the proxy; type the same login there.
Or steps 1 to 3 on a Mac
- Open the network serviceChoose Apple menu, then System Settings, then Network. Click the service you use, such as Wi-Fi, then Details.
- Pick the proxy typeClick Proxies. Turn on Web proxy (HTTP) and Secure web proxy (HTTPS), or SOCKS proxy if that’s what you bought.
- Enter the detailsType the server and port. Turn on Proxy server requires password, enter the username and password, then click OK. When it works, the toggles you chose stay on.
Apple’s page also offers Auto proxy discovery and Automatic proxy configuration, which reads a PAC file from a URL. Leave both off unless an employer gave you a PAC address. A PAC file is a small script that tells the browser which addresses go through the proxy.
Windows has the same two options under Automatic proxy setup: Automatically detect settings and Use setup script. Again, a beginner with a bought proxy doesn’t need either.
How do you know the proxy is working?
Steps 4 to 6 take one terminal and two commands. curl ships with Windows 10 and 11 and with macOS, so there’s nothing to install. On Windows, use Command Prompt, or type curl.exe in PowerShell, where plain curl can point to a different command.
- Get your own IPRun the first command below. It prints the IP address websites see for you today.
- Ask again through the proxyRun the second command with your four details in place of the capital words. It prints the proxy’s IP.
- Compare the twoTwo different addresses mean the proxy works. The same address twice means the request didn’t go through it.
curl https://api.ipify.org
curl -x http://USERNAME:PASSWORD@HOST:PORT https://api.ipify.orgIf the proxy is SOCKS5, write socks5h:// instead of http:// at the start. The h tells curl to let the proxy look up the website’s name, so the lookup doesn’t leave from your own connection.
| What curl prints | What it means | What to fix |
|---|---|---|
| curl: (56) CONNECT tunnel failed, response 407 | The proxy answered but refused your login | Username or password |
| curl: (7) Failed to connect to HOST port PORT | Nothing answered at that address | Host, port, or your allowlisted IP |
| The same IP as the first command | The request skipped the proxy | The -x part of the command |
Error lines as printed by curl 8.5.0. Newer versions add timing after the port.
Prefer a web page to a terminal? With the system proxy on, open api.ipify.org in your browser and compare it with the number you saw before. You can also check a list of proxies at once with the free proxy checker at GoToProxy.
What is the most common proxy setup mistake?
A password with a special character in it. Providers often generate passwords with symbols, and two of them break the proxy line.
In a proxy URL, @ separates the login from the host and : separates the username from the password. If the password itself contains @ or :, curl and most libraries read the line wrongly and you get a 407 or a connection error even though the details are right.
The fix takes ten seconds
curl’s manual says it URL-decodes the user and password in the proxy string, so write @ as %40 and : as %3a. A password like ab@12 becomes ab%4012 inside the command. Or reset the password in the dashboard to letters and numbers only.The Windows and Mac password boxes don’t need this, because the password isn’t part of a URL there.
Free or paid: where should your first proxy come from?
Free proxies are fine for one thing: seeing that the settings above work. Our free proxy list shows country and protocol and needs no login. Don’t sign in to any account through a free proxy, because you don’t know who runs it.
If your current free proxy keeps failing at basic page loads, a paid trial is a better option when you need it to work for more than an afternoon. The fastest route to a first working request is a plan you can start without a big commitment.
| Provider | What you can start with | If it doesn’t work out |
|---|---|---|
| Decodo | 3-day trial with 100MB; paid from $3.75 per GB (3 GB, $11.25 a month) | 14-day money-back, not for trial usage |
| DataImpulse | Intro pack of 5 GB for $5 for new customers, then $1 per GB | 7-day refund |
| Oxylabs | $5 welcome credit; residential $6 per GB up to 5 GB | Not listed |
| Proxy-Seller | Residential test plan at $3.50 per GB for 30 days; code GOTO15OFF at checkout | Refund or replacement within 24 hours |
| SOAX | Free Sandbox with no card; proxies need credits | Not listed |
| Evomi | Free trial, length not stated | Refund within 30 days, capped at 10% or 1 GB |
As advertised on each provider’s residential page, checked on October 28, 2026. Terms change; read the page before you pay.
Switch to a paid plan because you need a stable login and IPs nobody else is abusing, not because of the headline pool size. Before you choose, compare independent proxy ratings on ProxyRates and our all proxy rankings.
Speed and success figures on these pages are the providers’ own numbers. Our article on proxy speed claims explains what they measure and how to run a small check of your own.
Writing a scraper rather than browsing? Our Playwright vs Selenium comparison shows where each tool takes the same four proxy details.
What can’t a proxy server do?
A proxy changes the IP a site sees. It doesn’t change anything else about you.
- Cookies and logins still identify you. Signing in to the same account through 10 IPs still looks like one person.
- Browser fingerprints, such as screen size and fonts, travel through the proxy unchanged.
- An HTTP proxy doesn’t encrypt plain HTTP pages. HTTPS sites stay encrypted through the tunnel.
- A site can still block a proxy IP, so even paid plans see some failed requests.
To turn the proxy off, switch Use a proxy server to Off on Windows, or turn off the proxy toggles on a Mac. curl stops using it as soon as you drop the -x part.
FAQ
A proxy server is a computer that makes web requests for you. Your app connects to the proxy, the proxy contacts the website, and the website sees the proxy’s IP address instead of yours. You set it up with a host, a port and usually a username and password.
No. A VPN usually covers the whole device and encrypts traffic between you and the VPN server. A proxy is usually set per app or per request, and an HTTP proxy doesn’t add encryption. HTTPS pages stay encrypted through a proxy because the proxy only opens a tunnel for them.
Run curl https://api.ipify.org to see your own IP, then run it again with -x and your proxy line. Two different IPs mean it works. If curl prints CONNECT tunnel failed, response 407, the username or password is wrong; error 7 means the host or port is wrong.
There’s no single port. The provider tells you which one to use, and numbers such as 8080 are common. If you leave the port out, curl’s manual says it assumes 1080, which is rarely what a provider gave you, so always type the port.
Use them only to test settings. A free proxy is run by someone you don’t know, it may pass your real IP along in a header, and it can see any traffic that isn’t HTTPS. Never sign in to an account through one. For anything that lasts more than an afternoon, a paid trial is safer.
Pick HTTP unless your app only lists SOCKS. HTTP proxies work in browsers, curl and nearly every scraping library. If you do use SOCKS5 with curl, write socks5h:// so the proxy looks up website names instead of your own connection.
On the pages read on October 28, 2026, residential proxies ran from $1 per GB at DataImpulse to $7 per GB at IPRoyal for 1 GB. Decodo offers a 3-day trial with 100MB, and Oxylabs gives a $5 welcome credit. Mobile proxies start at $2 per GB at DataImpulse.
🔎
How we put this together
Last verified: October 28, 2026 · ProxyAdvice · affiliate links marked ↗ may earn a commission
This guide follows Microsoft’s and Apple’s own help pages for the Windows and Mac steps, MDN for the definitions, and curl’s manual for the command options and URL encoding. The curl error lines were checked against curl 8.5.0. Provider trial and price terms come from each provider’s residential page, checked on October 28, 2026, and are labelled as advertised.
Steps
6
Systems
Windows, macOS, curl
Provider terms
October 28, 2026
Providers listed
6 for trials
