> ## Documentation Index
> Fetch the complete documentation index at: https://docs.proxies.fo/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Credentials and targeting modifiers across the Proxies.fo network

All Proxies.fo endpoints use **user : password authentication** over HTTP, HTTPS, and SOCKS5. Targeting is controlled by modifiers appended to your username — no API, no config file, no SDK.

## Credential format

```
Username: <base_user>[-<modifier>-<value>][-<modifier>-<value>]...
Password: <your_account_password>
```

Your base username and password live in the [dashboard](https://app.proxies.fo/signin). Modifiers are optional — without them, the network picks an IP at random from the pool for whichever regional gateway you connected to.

## Real-world examples

Residential — targeting Westlake Village:

```
pr-eu.proxies.fo:13337:adminpcowe-country-us-city-westlakevillage:maskxsndyb
```

Residential — targeting AT\&T (ASN 7018):

```
pr-eu.proxies.fo:13337:adminpcowe-country-us-asn-7018:maskxsndyb
```

Mobile — US carrier IP:

```
pr-eu.proxies.fo:13337:adminmobile-country-us:mobpass123
```

Datacenter — sticky session for 300 seconds:

```
dcp-eu.proxies.fo:10808:adminywsve-session-5s5d4xud-duration-300:jwqcoz4lfm
```

Shared ISP — rotating:

```
pr-eu.proxies.fo:13337:adminshared:sharedpass
```

## Modifier reference

| Modifier             | Products                                    | Purpose                                  | Example                    |
| -------------------- | ------------------------------------------- | ---------------------------------------- | -------------------------- |
| `country-<code>`     | Residential, Mobile                         | ISO 3166-1 alpha-2 country code          | `country-us`, `country-de` |
| `state-<code>`       | Residential                                 | Regional subdivision code (optional)     | `state-ny`, `state-ca`     |
| `city-<n>`           | Residential                                 | Specific city (with or without `state-`) | `city-westlakevillage`     |
| `asn-<number>`       | Residential, Mobile                         | Target a specific ISP / carrier by ASN   | `asn-7018` (AT\&T)         |
| `session-<id>`       | Residential, Mobile, Datacenter, Shared ISP | Sticky session ID                        | `session-5s5d4xud`         |
| `ttl-<minutes>`      | Residential, Mobile, Shared ISP             | Session lifetime in **minutes**          | `ttl-15`                   |
| `duration-<seconds>` | Datacenter                                  | Session lifetime in **seconds**          | `duration-300`             |

Residential and Mobile use `ttl-<minutes>`. Datacenter uses `duration-<seconds>`. Don't mix them — passing `ttl-` to a DC endpoint or `duration-` to residential is ignored or rejected.

**Mobile** does not support `state-` or `city-` — only `country-` and `asn-` for carrier targeting.

**Datacenter** does not support country / state / city / ASN — the regional endpoint determines geography.

**Dedicated ISP** uses static assigned IPs, so no targeting modifiers apply.

**Shared ISP** uses `session-` and `ttl-` for sticky rotation but doesn't take geo modifiers — region is set by which endpoint (`pr-us` or `pr-eu`) you connect to.

## Plan-based routing

Residential, Mobile, and Shared ISP all connect to the same gateway hostnames (`pr-us.proxies.fo`, `pr-eu.proxies.fo`, plus `pr-sg.proxies.fo` for residential only) on port `13337`. Your **plan type determines which pool serves your request** — there's no port switch or product modifier.

A username with a residential plan exits through residential IPs. A mobile plan username exits through mobile IPs. Same endpoint, different pools.

## Targeting granularity (residential)

| Target                        | Username format                                  |
| ----------------------------- | ------------------------------------------------ |
| Random IP, any country        | `adminpcowe`                                     |
| Any US IP                     | `adminpcowe-country-us`                          |
| New York state                | `adminpcowe-country-us-state-ny`                 |
| Specific city (state skipped) | `adminpcowe-country-us-city-westlakevillage`     |
| Specific city within state    | `adminpcowe-country-us-state-ca-city-pleasanton` |
| Specific ISP (AT\&T)          | `adminpcowe-country-us-asn-7018`                 |
| ISP + city combined           | `adminpcowe-country-us-city-pleasanton-asn-7922` |

## ASN targeting

`asn-<number>` pins your IP to a specific ISP (residential) or carrier (mobile) by Autonomous System Number.

Common US ASNs:

| ASN   | ISP / Carrier             |
| ----- | ------------------------- |
| 7018  | AT\&T                     |
| 7922  | Comcast                   |
| 701   | Verizon                   |
| 20115 | Charter / Spectrum        |
| 22773 | Cox                       |
| 209   | CenturyLink               |
| 6167  | Verizon Wireless (mobile) |
| 21928 | T-Mobile USA (mobile)     |

Find the ASN for any IP using `whois`, [bgp.he.net](https://bgp.he.net), or [ipinfo.io](https://ipinfo.io).

## Session IDs

Use alphanumeric strings, 6–16 characters. Same ID = same IP.

Good examples: `5s5d4xud`, `bot-nyc-01`, `a4f8c2e1`

Avoid:

* Spaces or special characters (`$`, `@`, `:`, `/`) — these break URL parsing
* Sequential IDs (`session-1`, `session-2`) if you want session isolation
* Reusing IDs across unrelated workflows

## Protocols

| Product         |  HTTP / HTTPS  |     SOCKS5     | UDP | HTTP3 |
| --------------- | :------------: | :------------: | :-: | :---: |
| Residential     |        ✓       |        ✓       |  ✓  |   —   |
| Mobile          |        ✓       |        ✓       |  —  |   —   |
| Datacenter      |        ✓       |        ✓       |  ✓  |   —   |
| ISP (dedicated) | ✓ (port 61234) | ✓ (port 62234) |  —  |   —   |
| Shared ISP      |        ✓       |        ✓       |  ✓  |   ✓   |

## Rotating credentials

If credentials leak, rotate from the dashboard under **Account → Security**. Existing sessions drop within 60 seconds.

Never commit credentials to version control.