Per-app routing: proxy only one browser or app

Reach doesn't have to route your whole device. On desktop you turn routing on per browser (or, on Pro and team plans, for the whole system); on Android you choose which apps are routed; on iOS routing is decided by domain rather than by app.

Desktop: one browser at a time

Each supported browser has its own toggle in the tray menu: Chrome, Chromium, Chrome Beta, Edge, Brave, Opera, Firefox and, on macOS, Safari. Switch one on and Reach configures that browser to use its local proxy; the rest of your machine is untouched.

Two shortcuts: Enable All and Disable All flip every browser at once.

Want to route one browser from a terminal-only machine, or a browser the tray doesn't know about? Point it at the local proxy ports instead — see Use Reach with any app and Use Reach with Chrome only. (There are no reach chrome-style subcommands; browser switches live in the tray or your org policy.)

Desktop: every app (System Mode)

System Mode — all apps via Reach sets the operating-system proxy so any app that respects it (mail clients, chat apps, most Electron apps, package managers) goes through Reach too. It's available on Pro, Business and team accounts, on Windows and macOS.

Apps that ignore the system proxy can be pointed at Reach directly: it listens on 127.0.0.1:8082 (HTTP) and 127.0.0.1:1080 (SOCKS5). See Use Reach with any app for curl, git, Docker and friends.

On team plans, your organisation's routing policy can also decide per process — for example, always route outlook.exe — as a domain rule variant that matches the program name.

Android: choose the apps

On the Rules tab, App routing lets you pick which installed apps go through the gateway, alongside the Rules / Direct / Global mode switch described in Proxy modes. Everything not selected uses your normal connection.

iOS: by domain, not by app

Apple's platform doesn't let a VPN profile tunnel individual apps, so on iPhone and iPad Reach routes system-wide according to your domain rules — Gateway, Direct or Block per domain — rather than per app.

Common questions

Can I route two browsers to two different regions?

No — one signed-in account uses one active gateway at a time. You can route one browser and leave the other direct, which gives you the gateway's IP in one and your own in the other.

Does per-browser routing work on Linux?

Yes for the browser toggles and the local proxy ports. System Mode isn't available on Linux yet.

I switched a browser on but a site still shows my real IP

Check the site isn't on a private address or a direct rule, then fully restart the browser — some browsers only re-read proxy settings on launch. The troubleshooting page has more.