Authentication

FlashProxy uses Basic authentication at the gateway. Every request carries a proxy username and password — there are no API tokens or bearer auth.

Your credentials

Each plan ships with its own proxy_username and proxy_password. Find them on your plan's page in the dashboard — copy them straight into your proxy string:

curl -x "http://USERNAME:[email protected]:8080" https://api.ipify.org

The same USERNAME:PASSWORD pair works for both HTTP and SOCKS5. See Proxy formats for the full connection-string shapes.

Regenerating credentials

If your credentials leak or stop working, regenerate them from the plan's page in the dashboard. The old pair stops working immediately, so update every client that uses it.

407 Proxy Authentication Required

A 407 means the credentials you sent are stale or invalid — the gateway rejected the Basic auth. Re-check the username and password against the dashboard, and regenerate them if they don't match. More in Troubleshooting.

IP allowlist (optional)

You can add an IP allowlist as an optional second-factor lock layered on top of user:pass — requests are accepted only from approved IPs. It is not a standalone method: user:pass is always required.

Note: user:pass is the only primary authentication method, and it works the same way across every plan.