Windows 11 has gathered proxy configuration under Settings → Network & Internet → Proxy ; however, the checkbox there applies only to applications that use WinINET (Edge, Chrome, Office, Store). Terminal tools, Docker and some game clients look at their own environment variables. In this article we cover all three layers in turn: the system interface, the command line and per-application configuration.
Which Layer Should You Configure?
A proxy configured on the wrong layer is the number one cause of "I set it up but it doesn't work" complaints. Make the decision like this:
Windows carries three separate proxy stacks: WinINET (user session), WinHTTP (services) and applications' own settings. These do not inherit from one another automatically.
1. Manual Proxy from the Settings App
Start → Settings → Network & Internet → Proxy Follow that path. In the "Manual proxy setup" section, press Editand fill in the following fields:
- Proxy IP address: the IP or domain name only — the
http://prefix must not be typed, Windows treats it as invalid. - Port: usually 8080, 3128 or 8000 for HTTP proxies; 1080 for SOCKS5.
- Do not use for the following: leave local addresses out —
localhost;127.0.0.1;*.local;192.168.*. - Don't use the proxy server for local addresses Tick this checkbox; it preserves printer and NAS access.
After saving, open the My IP Address page: the address shown should be the proxy's exit IP. If it is not, close the browser completely and reopen it.
Proxies That Require a Username and Password
The Windows 11 proxy screen has no username/password field not exist. When you configure a proxy with authentication, the browser opens a credentials window on the first request and stores the details for the session. This behaviour is not suitable for automation; there are two permanent solutions:
- IP whitelist: report your public IP to your provider and have password-free access enabled — the cleanest method.
- Local bridge: run a small local proxy on the machine that holds the password and point Windows to
127.0.0.1.
Embedding the credentials in the URL (http://kullanici:sifre@ip:port) is not supported in the Windows proxy field; that format is only valid in clients such as curl/Python.
2. Configuring from the Command Line
netsh winhttp command does not change the WinINET setting; you have to configure the two separately. After the change, close and reopen any open terminals.
3. Conditional Routing with a PAC File
If you do not want to route all traffic through a single proxy, use a PAC (Proxy Auto-Config) file. A PAC is a small JavaScript function that determines which proxy is selected based on the destination domain:
| Scenario | PAC expression | Result |
|---|---|---|
| Local network direct | isInNet(host, "192.168.0.0", "255.255.0.0") | DIRECT |
| A specific domain | shExpMatch(host, "*.ornek.com") | PROXY 1.2.3.4:8080 |
| Everything else | — | DIRECT or a fallback proxy |
All you need to do is place the PAC file on a web server and enter its address in the "Use setup script" field. On corporate networks it is distributed automatically via WPAD; however, since WPAD is open to DNS spoofing, disabling it on external networks is recommended.
Verifying the Setting and Troubleshooting
The items marked in red are the two mistakes behind most failed setups in the field: the wrong protocol, and a VPN left running in the background.
You can measure in seconds whether an address is genuinely up with the Proxy Check tool ; the tool reports latency, exit IP and anonymity level together.
Removing the Proxy Completely
Turning off the switch on the Settings screen clears the WinINET layer, but netsh winhttp and the environment variables stay in place. For a complete cleanup, apply all three steps: turn it off in the interface, run netsh winhttp reset proxy and delete the HTTP_PROXY/HTTPS_PROXY variables. Then, flushing the DNS cache with ipconfig /flushdns also clears out any residue of the old routing.
To set up the same configuration on other platforms, see our macOS and Linux guides; for choosing an address, see the free proxy list .