Where a proxy hides in Windows
The Proxy page in Settings is the obvious place: under Manual proxy setup, the “Use a proxy server” toggle routes browser and app traffic through an address and port, and under Automatic proxy setup, “Automatically detect settings” lets Windows look for a proxy script (WPAD) on the network. What many people miss is the second layer: WinHTTP, a separate API used by Windows Update, services and installers, which keeps its own proxy and ignores the Settings page. A third possibility sits outside Windows entirely — Firefox can use its own proxy configuration, and command-line tools obey http_proxy and https_proxy environment variables.
Each of those places produces a different symptom, which makes the diagnosis easier. A leftover manual proxy breaks everything at once: pages fail with ERR_PROXY_CONNECTION_FAILED in Chrome and Edge, and even Windows Update may stall. A WinHTTP proxy usually shows up only in system components, so updates refuse to download while browsers work fine — and an environment variable only confuses terminals and developer tools, which is why “the browser works but npm doesn't” is such a classic complaint.
- Settings → Network & internet → Proxy — the “Use a proxy server” toggle under Manual proxy setup, the usual leftover after a VPN
- The same page, “Automatically detect settings” — WPAD auto-discovery, which some networks and rogue tools abuse
- WinHTTP, checked with netsh winhttp show proxy in an administrator terminal — the layer Windows Update and services use
- Environment variables http_proxy and https_proxy — set by developer tools, obeyed by terminals, invisible to browsers
- Firefox, which keeps its own proxy in its network settings and ignores the Windows page entirely
Turning it off, step by step
Open Settings → Network & internet → Proxy and switch “Use a proxy server” to Off; that single move clears the manual proxy for browsers and most apps, and the change takes effect without a reboot. If “Automatically detect settings” is On and you are not on a managed corporate network, turn it off as well — WPAD adds a startup delay on home networks and can be poisoned on untrusted ones. The old route to the same settings is inetcpl.cpl → Connections tab → LAN settings, unticking “Use a proxy server for your LAN”; both dialogs write to the same place.
Then handle the WinHTTP layer: open Terminal (Administrator) from the Win+X menu, run netsh winhttp show proxy, and if the answer is not “Direct access (no proxy server)”, run netsh winhttp reset proxy. In Firefox, open the network section of its settings and choose “Use system proxy settings” or “No proxy”, and confirm. Finally, if only terminal tools misbehave, check the environment: Win+R → sysdm.cpl → Advanced → Environment Variables, and delete http_proxy and https_proxy if some tool left them behind.
When the proxy won't stay off
A proxy that re-enables after every reboot is not a ghost — some program is rewriting it. The usual suspects are leftover VPN clients, “free” proxy utilities, adware, and some antivirus web shields that set the system proxy on purpose; check Installed apps for anything proxy-shaped and remove it, then run a quick scan with Windows Security. The manual proxy lives in the registry under HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings with its ProxyEnable value — worth knowing for diagnosis, but editing it by hand buys nothing that the Proxy page doesn't already do.
If you turned the proxy off because a network demanded it — a captive portal, a school or office network — remember that some networks simply break without their proxy, and the honest fix is to re-enable it on that network only, or to use a VPN you actually trust. For privacy, a system proxy is not a privacy tool; it just moves your traffic to a different middleman. If the goal was safety rather than removal, keep “Automatically detect settings” off on networks you do not control.
Questions and Answers
Why does Windows keep turning the proxy back on?
Some installed app is rewriting it at every boot — typically a leftover VPN client, a free-proxy utility or adware. Uninstall it in Installed apps and run a Windows Security scan, and the toggle stays where you put it.
Should “Automatically detect settings” be on or off?
Off for home users: WPAD auto-discovery adds delay and can be abused on untrusted networks. Corporate managed networks are the exception, where IT may rely on it.
What does netsh winhttp reset proxy do?
It clears the proxy stored in the WinHTTP layer that services like Windows Update use, restoring direct access. It does not touch the Settings-page proxy, so both places need checking.
Know what is included before you buy.
The one-time 30-minute trial covers core tools. PRO-labelled features stay locked until a paid license is activated.
Read next
Write to us: [email protected]