Official Guide · App Store
iPhone / iPad client, available as a one-time purchase on the App Store. Import your own connection details, then configure rule-based routing.
Check the App Store listing for system requirements
Official app icon
id932747118
Purchases and connection details are separate
Buying Shadowrocket gives you a license to use the app. To establish a proxy connection, you still need your own subscription or server details, and they must be valid. This site is the Shadowrocket website and official guide; it does not provide, sell, or recommend servers or subscriptions.
Get the app only from the App Store. The US storefront price is about $2.99 as a one-time purchase. Actual pricing, local currency, system requirements, and compatibility are as shown on the App Store listing at the time of purchase. Verify the official listing first, then follow the guide to import your existing details. The app purchase and your connection service have separate terms and validity periods.
Read about pricing and purchases →Where to find settings and what they do
Understand what each setting controls before changing it. Server parameters, routing modes, and rule files work at different levels: parameters determine how to connect, modes determine how requests are handled, and rules define specific actions in Config mode.
Check Global Routing in Home. Config handles requests according to the selected configuration, while Proxy routes requests through a proxy and Direct sends them directly. To route traffic by domain or address, choose Config and check which configuration is active. Rules are generally evaluated from top to bottom, so specific conditions should come before catch-all rules. The example below explains the syntax; it is not suitable for every network. The actual egress for PROXY depends on the selected server or policy, so the rule text alone cannot confirm whether a connection will work.
DOMAIN-SUFFIX,example.com,PROXY
GEOIP,CN,DIRECT
FINAL,PROXYOn Demand starts connections when specified conditions are met. You can review its options in Settings. For your first connection, connect manually and verify that your existing server works before configuring On Demand conditions one at a time. On Demand controls when a connection starts; it cannot fix an incorrect password, an expired subscription, or an unreachable server. If behavior changes unexpectedly when switching networks, check the system VPN status, current network, and configured conditions. For troubleshooting, pause On Demand and connect manually to reduce variables, then restore the settings you need.
Settings
On DemandIn Add Server, select Type first, then enter the address, port, and authentication details provided for your existing server. Protocols such as Shadowsocks, VMess, VLESS, Trojan, and WireGuard use different fields; do not reuse a password or key from one protocol in another. For TLS, also check the server name and certificate verification requirements. The same protocol name does not guarantee identical optional parameters, so follow the app form and your own server details. If a handshake fails, check that each value is in the right field before changing anything else.
Add Server
Type / Host / Port
PasswordA subscription lets you import and update a list of server entries in one place. Once you have your own valid subscription URL, select Subscribe in Add Server and enter the address and a label as prompted. After saving, check that the expected entries appear in the group, then select a server to test. Updating a subscription changes the server list; it does not automatically correct Global Routing or policies in a configuration file. Subscription URLs may contain access credentials, so keep them out of screenshots and public records. If an update fails, check the URL, its validity, and your current network before importing it again.
Add Server
Type: SubscribeConfig manages rules and related settings; server subscriptions mainly manage connection entries. After importing a subscription, check which Config file is selected and whether its policies match the server you are using. Keep a working copy before editing, change one set of rules at a time, and test the intended request. If you use iCloud sync options, check the actual sync status and selected configuration on each device. Restoring an app purchase does not restore connection data. Change settings such as DNS, URL Rewrite, or HTTPS Decryption only after you understand what they do.
Config
General / Rule / Hosts
URL Rewrite / HTTPS DecryptionConnectivity Test can provide an initial check of the selected server’s response, but a test result does not guarantee that every app request will succeed. Check upload and download changes in Data, then use matched rules and any Diagnostics errors to locate the issue. Keep the network, server, and test destination the same while troubleshooting; change one condition at a time and note what happens before and after. Before sharing records, remove subscription URLs, authentication details, and personal browsing information. Interpret traffic readings in light of their reporting period and reset time; they are not a substitute for a connection service bill.
Connectivity Test
Data
Settings / DiagnosticsDevices and App Store access
Use the same App Store product page to verify and get the app on either device. If you have already purchased it, check which Apple ID is currently used for App Store purchases, then look in your purchased items. Availability and device compatibility are as shown on the App Store listing.
After verifying the official listing, purchase Shadowrocket on the App Store or redownload it from your purchased items. The first time you connect, the system may ask to add a VPN configuration. Confirm that Shadowrocket initiated the request, then authorize it as prompted. This authorization creates the system connection profile; server addresses, authentication details, and rules still need to be checked in the app.
iPhone guide →Use the Apple ID you used for the purchase to find Shadowrocket in your purchased items. Layout may differ on a larger screen; use the settings names Home, Config, and Settings to find your way around. After installation, check the server list and selected configuration on this device. A connection working on another device does not mean this one is fully configured.
iPad guide →Shadowrocket is also available on the App Store for Mac and Apple TV; check the store listing for compatibility.
See how to get the app →First-time setup order
Before you start, have your own subscription or complete server details ready, and make sure your device has a working internet connection. First establish a manual connection you can reproduce; then consider On Demand or more complex rules. This makes it easier to tell a basic parameter issue from a routing issue.
For an individual server, select Type and fill in the corresponding fields. For an existing subscription, choose Subscribe and enter the complete URL. You can use Scan QR Code to import a QR code; afterward, check the protocol, address, and port. Add a label you can recognize, save, and confirm the entry appears in the Home server list before selecting it.
If the number or names of entries do not match what you expected, first check the source of the details and the subscription update result. Do not immediately delete other entries in bulk. A subscription contains a set of servers; it does not necessarily include a rule file. Choose manual server details or a subscription based on the information you already have.
For rule-based routing, select Config and check which file is currently selected in Config. Proxy and Direct can be useful for controlled comparisons, but switching modes changes how requests are handled and is not a general fix for connection problems. Note your original mode and restore your intended setting after testing.
If only some destinations fail, check which rule matched the destination domain before replacing all your servers. FINAL is the catch-all rule in a configuration file and should come after the other conditions you want to match. Before adding a rule, decide whether the traffic should go direct or through a proxy, then confirm that the policy name actually exists.
Turn on the connection switch and allow the VPN configuration when prompted by the system. Then check the system connection status, run Connectivity Test, and visit the destination you want to test. Keep the server and network unchanged while testing, and check for corresponding changes in Data. A connection indicator alone does not prove every request reached its destination as expected.
If the connection fails, check the basic network, server parameters, authentication details, Global Routing, and matched rules in that order. If system authorization is incomplete, resolve the VPN configuration prompt before investigating in-app rules. A clear error message and reproducible steps are more useful for troubleshooting than repeatedly toggling the connection.
Verify the app and check purchase records
Shadowrocket is a closed-source commercial app. Check the App Store product page for the purchase link, current price, compatible devices, system requirements, and update history. Verify the product by its official name, Shadowrocket, and the three details below.
On the product page, look for developer Shadow Launch Technology Limited, compare the official app icon shown on this site, and check id932747118 in the product URL, which corresponds to app ID 932747118. Search results may show similar names or artwork, so do not identify the app by its icon alone. Confirm all three details before purchasing. If anything does not match, return to the official listing and check again.
Verification is not just for your first purchase. Use the same steps when changing devices, reopening the product page from search results, or checking your purchased items. The app’s display language and the store’s currency do not identify the app; check the developer, official icon, and app ID.
See how to verify the official app →Whether a product link opens in the App Store on your device depends on the storefront used by your purchasing account, local availability, and device compatibility. If you cannot find the app, first check the App Store account and region settings, then use the official listing to see whether it is available to buy or redownload. A storefront path in a web address does not mean your device’s purchasing region has changed; rely on the listing that actually opens in the App Store.
If you need to change your account region, first review Apple’s guidance on account balance, subscriptions, and payment methods, and confirm that you meet the requirements. Changing regions is not necessary for every download issue; network problems, device restrictions, and purchase record mismatches may need separate checks. See the Getting the App guide for a more complete troubleshooting sequence.
Read the complete App Store guide →A one-time purchase refers to how you buy the app. With the same Apple ID used for the purchase, you can find and redownload Shadowrocket from your purchased items on compatible iPhone and iPad devices. Whether it can be restored depends on your App Store purchase history and what the listing shows. If you see a price instead of a redownload option, check the purchasing account and purchase record before paying again.
Check the product page and Family Sharing settings to see whether sharing applies to your purchase and family members. App updates are managed through the App Store and can be handled with your device’s automatic update settings. Restoring the app and restoring its configuration are separate tasks. After reinstalling, check your subscription, selected server, and rule file to make sure the connection details on this device are complete.
See how to restore purchases after reinstalling or changing devices →App purchase ≠ connection service. Buying the app does not provide a working server or change the validity period, data allowance, or authentication requirements of your existing connection service. The app can open normally while a subscription fails to update; these are separate issues. Check the app installation and your existing service details independently.
This site explains how to add your existing information to Shadowrocket and how to configure and troubleshoot the app. Keep subscription URLs and server credentials secure. Before sharing a screenshot or error report, remove passwords, keys, full subscription URLs, and anything that could identify your personal usage. Keep only the interface details and error text needed to describe the problem.
Read about the purchase and pricing →For a specific issue, follow the guide for what you are seeing instead of changing every setting at once.
Technical notes
Find details for the task at hand: check the reporting scope when viewing Data, verify the purchase record and local configuration separately when setting up an iPad, and use your own server details when filling in protocol fields. These three notes cover operations that are easy to confuse.
Understand how upload, download, and different views are counted; when counters reset; and how to use rules and connection records to check whether requests were handled as expected. Traffic readings are one troubleshooting clue, not a complete measure of service usage.
Read the guide →Find the purchased app using the Apple ID used for the purchase, understand the layout in landscape and Split View, and check the server list and configuration on each device. The guide explains the difference between redownloading the app and restoring connection data.
Read the guide →Understand which keys and address fields belong to your device and the remote peer, verify your existing server details, and learn how MTU and DNS settings work. Confirm what each field is for before entering values, so you do not mix up keys with different purposes.
Read the guide →