diff --git a/v2rayN/ServiceLib/Handler/Fmt/Hysteria2Fmt.cs b/v2rayN/ServiceLib/Handler/Fmt/Hysteria2Fmt.cs
index 83172117..3ba5973d 100644
--- a/v2rayN/ServiceLib/Handler/Fmt/Hysteria2Fmt.cs
+++ b/v2rayN/ServiceLib/Handler/Fmt/Hysteria2Fmt.cs
@@ -169,6 +169,14 @@ public class Hysteria2Fmt : BaseFmt
         if (item.CertSha.IsNullOrEmpty())
         {
             item.CertSha = GetQueryDecoded(query, "pinSHA256");
+            // NOTE:
+            // To accommodate Xray changes,
+            // some providers issue self-signed cert links with `insecure = false` and a certificate fingerprint,
+            // breaking interoperability between Xray, official Hysteria 2 client, and sing-box.
+            // Since this won't compromise the overall security model,
+            // `insecure = true` is automatically set when a fingerprint is detected,
+            // and the value is restored when generating configurations.
+            item.AllowInsecure = Global.StringTrue;
         }
         item.SetProtocolExtra(item.GetProtocolExtra() with
         {