Official Shadowrocket Guide
A rule-based proxy client for iPhone and iPad, with rule-based routing and a one-time purchase through the App Store.
Check these three details before you buy
Buying the app ≠ buying a connection plan. You need your own subscription or server details to connect.
DOMAIN-SUFFIX,example.com,PROXYGEOIP,CN,DIRECTDOMAIN-KEYWORD,ads,REJECTFINAL,PROXYRules are generally evaluated in order. The active policy depends on the current configuration; this example is not a complete, ready-to-use configuration.
Understand the difference between connection details, routing modes, and configuration files before changing individual settings.
Rule-based routing selects a connection policy based on criteria such as the destination domain or address. In Home > Global Routing, Config follows the current configuration, Proxy uses the selected proxy, and Direct connects directly. For everyday use, make sure Config points to the intended file, then check the rule order and the final matching rule. PROXY, DIRECT, and REJECT are policies, not server names. If a site behaves unexpectedly, first check which rule matched the request before changing the configuration. Avoid editing the entire ruleset without a clear reason.
View the full guide →DOMAIN-SUFFIX,example.com,PROXY
GEOIP,CN,DIRECT
DOMAIN-KEYWORD,ads,REJECT
FINAL,PROXYOn Demand starts a connection when the specified network conditions are met. Set it up after you have verified a manual connection. In Settings, open On Demand and check each existing condition and action. Test one network scenario first, then add other conditions. On Demand controls when a connection starts; it does not replace the request-routing rules in Config. If the connection drops and reconnects, check both the On Demand conditions and the system VPN status. Keep a record of the original settings and change one item at a time so you can identify what made a difference.
View the full guide →Shadowrocket supports multiple protocols. When adding connection details, use the settings provided for your own server. In Add Server, select Type first, then fill in the fields for that protocol. Required details vary by type. The server address, port, authentication, and transport settings must match the server. VLESS, VMess, and Trojan are different protocols; changing the type while keeping all the old settings will not work. Check the key fields after importing. Protocol support does not guarantee that a particular server is available; connection success also depends on the network and server status.
View the full guide →A subscription lets you retrieve and update your own server entries in one place. In Add Server, select Subscribe for the appropriate type of details, paste the link you received from your provider, and save. Then check that the expected group appears. Updating a subscription retrieves its latest remote contents; it does not purchase or extend connection service. If an update fails, check that the link is complete and still valid, then make sure your current network can reach it. Subscription links may contain private access credentials. Do not share them or include them in public screenshots. This guide explains how to manage subscriptions but does not provide them.
View the full guide →Config stores rules and related settings; it is separate from the server list in a subscription. In Config, check which file is selected. Before making changes, keep a recoverable copy, then review sections such as General, Rule, and Hosts. A file can be present without being active. For its rules to handle requests, Global Routing must be set to Config. If you use iCloud to sync related data, check that it has arrived on the other device and confirm which item is selected. Restoring an app purchase does not restore configuration files. Keep files containing sensitive information secure.
View the full guide →When troubleshooting, distinguish system connection status, server reachability, and the result of an actual request. Connectivity Test in Home is a useful first check, but one test cannot represent every website or protocol. Diagnostics in Settings can help you investigate further, while Data helps explain traffic readings. Statistics depend on the observation range, connection status, and reset actions; they are not a carrier bill. Reproduce one specific issue, note the network type and selected policy, then compare results before and after a change. Avoid switching several settings at once.
View the full guide →Purchase records and connection settings are managed separately. First check which store account you use, then confirm device compatibility.
Open the product page in the App Store and verify the developer and app ID before purchasing. Before opening the app for the first time, have your own connection details ready. When you connect for the first time, follow the system prompt to approve adding a VPN configuration. Check the App Store listing for system requirements.
iPhone guide →Use the original purchasing account to check your purchase history, then confirm that your current device meets the compatibility requirements. Check the App Store listing for the scope of universal purchase across iPhone and iPad. After downloading the app, you still need to check the connection details and configuration on this device.
iPad guide →Shadowrocket is also available from the same App Store on Mac and Apple TV; check the listing for compatibility details.
If the App Store button differs from what you expected, first check which purchasing account is signed in. The purchase account, data syncing on your device, and current configuration are separate matters. Restoring the app does not automatically restore server details. After confirming your purchase history, check each item in the app on your device to avoid duplicate purchases or unintended setting changes.
View availability steps →Complete and verify a manual connection before setting up automatic updates or On Demand.
Have your own subscription or server details ready. In Home, open Add Server and choose the import method for your type of details. Paste subscription links in full. For manual entry, check Type, Host, Port, and the relevant authentication and transport settings. After importing with Scan QR Code, check the contents as well. A successful scan only means the details were read; it does not guarantee that they are complete or that the server is reachable.
After saving, return to the list and check that the entry appears in the expected group. Select the server you plan to use. Do not assume two entries are the same based on their display names alone; their addresses, protocols, or ports may differ. If you do not yet have your own connection details, get them ready before continuing.
If you are new to Shadowrocket, start by learning the difference between Config, Proxy, and Direct. Config selects a policy based on the rules in the current configuration; Proxy sends applicable traffic through the selected proxy; Direct connects directly. If you select Config, open Config and check which file is active, especially its rule order, policy references, and FINAL rule. The mode and configuration must work together to route requests as expected.
Changing the server and changing the routing mode are different actions. The former changes the server details used for the connection; the latter changes how requests are handled. When troubleshooting, change only one at a time and note its original value so you can identify which setting affected the result.
Turn on the connection switch. The first time the system asks to add a VPN configuration, check which app initiated the request and follow the system prompts to approve it. Return to Home to check the connection status, run Connectivity Test, and visit a specific destination page. A system-reported connection, a successful test, and accessible destination content are three different results; check each one separately.
If the result is unexpected, first make sure the device itself can access the internet, then check the selected server, Global Routing, and current configuration. If only some destinations fail, check rule matching and DNS first. If all requests fail, start with the network connection and connection settings. Once manual testing works, enable automated settings one at a time to avoid confounding the results.
Shadowrocket is a closed-source commercial app. Purchase, payment, and app updates are handled through the App Store.
On the App Store product page, verify that the developer is Shadow Launch Technology Limited, compare the listing with the official icon used on this site, and check for id932747118 in the product link. The app name and search ranking are not substitutes for these three checks. For a similar-looking search result, return to the product page and review its details instead of relying on the icon color or promotional text.
The app ID 932747118 identifies the product. The store’s display language and currency may vary, but the product verification steps are the same. Check the App Store listing for system requirements, compatible devices, and purchase eligibility. This guide does not substitute a fixed system version for the store’s current information.
The US App Store reference price is $2.99; other storefronts display prices in local currency. The amount charged is shown on the store’s confirmation screen. A one-time purchase covers use of the app; it does not buy connection service by the month. Buying the app ≠ buying a connection plan. You need your own subscription or server details to connect. Service validity and app purchase history are managed separately.
This site does not provide, sell, or recommend servers or subscriptions, and does not configure connection services for users. If you have purchased the app but the list is empty, import your own details instead of buying the app again. If a subscription has expired, a server has been disabled, or settings have changed, check with the original source of your details. Reinstalling the app usually will not fix these issues.
Read about the one-time purchase →The App Store shows products based on the storefront associated with your account. If you cannot find Shadowrocket, first check the account and storefront region you use for purchases, then try opening the product page directly. Your device’s language, current network location, and storefront region are separate settings. Changing just one does not determine whether the product is available.
If the product page says it is unavailable in your current storefront, read the store’s message and check your account status. If you are considering a region change, use Apple’s standard account settings and first review conditions such as account balance, existing subscriptions, and payment methods. Do not repeatedly change account details without checking the requirements, and do not mistake an App Store availability issue for a client connection problem.
Read the storefront region guide →When changing devices or reinstalling, use the original purchasing account in the App Store to find your purchased items, then check whether you can download the app again. Check the App Store listing and your account status to see whether universal purchase across iPhone and iPad or Family Sharing applies. Restoring purchase history is different from restoring local configuration. After downloading the app, check your server list, active Config, and connection permissions.
Manage app updates through the App Store. Before updating, keep a recoverable copy of important configurations, then check your usual settings afterward. If you use iCloud sync, confirm that the data has appeared on the target device instead of assuming sync is complete because the account is the same. Updating a subscription retrieves remote server details; it does not update the app. Check these operations separately.
Read how to restore purchases →Find guidance for specific issues, from system permissions and automatic connections to traffic readings.
Interpret upload and download readings in Data in the context of the statistics range. Learn how per-server and per-app data views differ, why client statistics are not a substitute for your carrier bill, and how to tell whether a connection used the expected amount of traffic.
Read the Data guide →First distinguish connection triggers from request-routing rules, then check the actions for each network. Testing On Demand with one scenario at a time makes it easier to identify the cause of automatic reconnections or conflicting conditions.
Read the On Demand guide →The system prompt on your first connection sets up a VPN configuration on your device; it is not a purchase confirmation. Learn what happens when you allow, deny, or remove the configuration, then try connecting again based on its current status. This helps distinguish a permissions issue from a server problem.
Read the VPN configuration guide →If you are not sure what kind of problem you have, note where it occurs: App Store purchase, importing details, system connection, or accessing a destination. Keep relevant error messages, but hide subscription links and authentication details. Then check the relevant section step by step. See the App Store guide for purchase and restore questions, or the FAQ for issues after connecting, rather than repeatedly changing unrelated settings.