In short
- Keys are issued by a VPN service. The developers of Happ and INCY don't sell keys.
- A single key is tied to one server. When the server's IP is blocked, the key stops working.
- A subscription link updates the keys by itself when the service changes servers.
- A free key from a public channel works for a few days: hundreds of people share one server, and its IP gets blocked fast.
- The server owner sees where you connect and everything sent without HTTPS.
What a VPN key is
A key is a text string that starts with the protocol name. The main format is vless://; you'll also see vmess://, trojan://, ss:// (Shadowsocks) or hysteria2://. A key looks like this:
vless://…@server-address:443?…#NameThe string contains:
- the protocol — the rules the client uses to talk to the server;
- the server address and port — where to connect;
- the user ID — how the server knows it's you connecting;
- encryption and camouflage settings — what the connection looks like to the provider;
- a name — the label the client shows in the server list.
Whoever holds the key connects to the server in your name. So a key is a pass: give it to someone else and you've given away your access. How VLESS differs from other protocols is covered in VPN and proxy protocols in 2026.
Key vs subscription: what's the difference
VPN services give access in one of two ways.
A single key. One string, one server. The client stores it as is. If the service moves the server, changes its address or the provider blocks its IP, the key stops working and you have to add a new one by hand.
A subscription. The service issues a subscription instead of a key: behind it is a list of keys to all of the service's servers. The client downloads the list and updates it every time the subscription is refreshed. When the service replaces a blocked server, the new one appears in the app after a refresh — nothing needs adding again.
| Single key | Subscription | |
|---|---|---|
| Servers | One | All of the service's servers |
| Server replaced or blocked | The key stops working | The app gets a new one on refresh |
| Term and remaining traffic | Not visible | Visible in the app |
Where to get a VPN key
A key is issued by the VPN service you pay for access. The service runs the servers and is responsible for keeping the keys to them working.
Happ and INCY are clients: they connect to a service's servers but have no servers or keys of their own. The developers of Happ and INCY don't sell keys. “Official Happ keys” in Telegram bots and channels are a scam.
Free keys: why they stop working and why they're risky
Where they come from
Free keys are posted in public Telegram channels, on forums and in collections on websites. They're published by server owners, resellers and channel authors who earn from ads and subscribers.
Why they stop working
- Hundreds of people on one server. A published key gets picked up by every subscriber of the channel. The server splits its bandwidth among all of them, and each gets a small slice.
- The IP is blocked within days. A server that hundreds of people from one country connect to at the same time stands out. Providers and TSPU equipment block its IP, and the key stops working.
- No replacement. A single key doesn't update. When the server is unreachable, all that's left is to hunt for the next key.
Why they're risky
All of your traffic passes through the server. Its owner sees which websites you connect to, when and from which IP, and reads everything sent without HTTPS. Who they are and what they do with that data is unknown: a free key comes with no contract, no log policy and no support. More in The risks of free VPNs.
How to add a key to Happ and INCY
With MaskNet, the key is built into the subscription, and you don't paste it by hand. Connecting takes three steps:
- In your account, open “Installation”, choose the device and the app — INCY or Happ — and press “Download”.
- Press “Add subscription”: the app opens and imports the subscription by itself.
- Choose a country and connect.
Connecting a second device or a TV — scan the QR code from your account with that device's camera.
If a service gave you the key as a string. Copy the whole key — from vless:// to the last character. In Happ, tap “+” in the top right corner and choose to paste from the clipboard. The key appears in the server list. To refresh a subscription, tap ↻ next to its name.
How to check who you're buying a key from
- The service has a website with plans, refund terms and support contacts.
- The service issues a subscription, not a single key with no term and no guarantees.
- The service doesn't call itself an “official Happ key seller”: Happ has no such sellers.
- The app is installed from the official store, and the developer is verified.
More in How to check a key seller in the Happ article.
A MaskNet key can't be stolen
The MaskNet configuration is encrypted: it can't be opened, copied or shared, so your access doesn't end up in someone else's hands. When MaskNet changes servers, the subscription updates by itself. We refund within 30 days of payment.
Frequently asked questions
Where do I buy a key for Happ?
From a VPN service. Happ has no keys of its own: it's a client that connects to a service's servers. “Official Happ keys” on Telegram are sold by scammers. How to choose a service — in the articles for Happ and for INCY.
Why isn't my VPN key working?
The provider blocked the server's IP, the service moved the server to a different address, or your access term ran out. A single key doesn't recover after that — you need a new one. If you have a subscription, refresh it in the app with the ↻ button. Other checks are in VPN not working.
Can I use free VPN keys?
Not for regular use. A free key works for a few days: hundreds of people share one server, and its IP gets blocked fast. The server owner sees where you connect and reads unencrypted traffic. Who they are is unknown.
What is a VLESS key?
A string that starts with vless:// and contains the server address, port, user ID and encryption settings. VLESS is a traffic transport protocol. Paired with Reality, the connection looks to the provider like an ordinary connection to an HTTPS website. More in VPN and proxy protocols in 2026.
How is a key different from a subscription?
A key leads to one server and doesn't update. A subscription holds keys to all of the service's servers and gets new ones when the service changes servers.
How do I paste a key into Happ?
With MaskNet there's nothing to paste: press “Add subscription” in your account, and Happ opens with the subscription ready. If a service gave you the key as a string — copy it, tap “+” in the top right corner of Happ and choose to paste from the clipboard. All the ways — in How to add a subscription to Happ and How to add a subscription to INCY.