A rule-based proxy client for iPhone and iPad, with rule-based routing and import for existing configurations. Available as a one-time purchase on the App Store. This official guide covers getting the app, setup, and connection checks.
Check the App Store listing for system requirements and device compatibility.
App Store availability and device information
Shadowrocket is available only on the App Store. Check the developer, official app icon, and app ID, then confirm that your account can purchase it and your device is compatible. See the App Store listing for system requirements and purchase eligibility.
Your purchase covers use of the client app. Importing configs and connecting require your own existing subscription or server details; the app purchase does not provide server configuration.
Check your current account
Store availability, billing currency, and purchase history depend on your current App Store account. If the product page won’t open, check your account’s storefront and purchase restrictions first.
Complete the initial setup
After installing the app, prepare your existing config and follow the guide to import it. When you connect for the first time, read the system VPN configuration permission prompt and confirm only if you initiated the action.
iPhone
After purchasing and installing from the App Store, check the SERVER list on Home. Import your existing config, then select a server and set Global Routing. Before the first connection, iOS may ask for permission to add a VPN configuration; this is part of the system authorization process. Keep your network stable while testing, and avoid changing several settings at once.
Eligible purchases may be available on both iPhone and iPad; check the App Store listing for purchase eligibility. Use the original purchasing account to check your purchase history. Redownloading the app and restoring its configuration are separate tasks: check your server details, Config, and currently selected policy.
First, distinguish between servers, config files, and connection status before changing settings. A server determines where you connect; Config determines how traffic is handled; the switch on Home controls whether a connection is active. The sections below cover common tasks. Rule examples explain syntax and are not complete configs.
Rule order and policy outcomes
Rule-based routing selects a policy based on domains, addresses, or other conditions. In Config, check the active config’s Rule section, then make sure Global Routing on Home is set to Config. If you select Proxy or Direct, traffic won’t follow the config’s rule-based routing. Check rules in order: an earlier match may prevent later entries from taking effect. Back up your config before making changes, test the intended policy with a single destination, and then check the final outcome in FINAL. PROXY, DIRECT, and REJECT are policy keywords, not guarantees that a server is available.
On Demand can start a connection when specified conditions are met. Set it up only after you’ve tested a manual connection. Open Settings and review On Demand, making sure you understand the network conditions and existing config before enabling options one at a time. If the connection drops and then reconnects, check these conditions before repeatedly deleting servers. To troubleshoot, temporarily disable the relevant conditions and compare with a manual connection from Home. On Demand does not guarantee server availability or replace rule-based routing; check server settings, the active policy, and the system VPN configuration separately.
Settings → On Demand
Home → Global Routing → Config
Choose Type to match your existing server details
Shadowrocket supports protocols including Shadowsocks, VMess, VLESS, and Trojan. To add a server manually, select the correct Type in Add Server, then enter the remaining fields using your existing server details. Authentication and transport settings vary by protocol and are not interchangeable. Correct Host and Port values alone don’t guarantee a complete config; check the authentication details and any transport parameters required by the server. Import shared content using the appropriate method, then verify that it was recognized correctly. A protocol name alone says nothing about connection speed, which also depends on the network path and server status.
Add Server → Type
Host / Port
Shadowsocks / VMess / VLESS / Trojan
Import and manage an existing Subscribe
Subscribe reads server details from a subscription URL you already have; future updates also depend on that URL being accessible. To add one, choose Subscribe in the app, paste the full URL, save, and check the resulting group and entries. If an update fails, determine whether the URL was entered incorrectly, the request failed, or the returned content could not be recognized. Avoid adding the same subscription repeatedly. Updates may change entry names or list contents, so confirm your selection before connecting. Subscription URLs may contain account identifiers; conceal the entire URL and any authentication details in screenshots, logs, and support requests.
Add Server → Type → Subscribe
Home → SERVER
Manage config files separately from servers
Config organizes rules and related network settings. Importing a server list does not mean that a suitable config file is selected. In Config, check the active file and review sections such as General, Rule, and Hosts. Keep a recoverable copy before editing, and don’t overwrite your everyday config with experimental rules. If you use iCloud sync, check the account, sync scope, and content actually selected on this device. A config on another device does not prove it is active here. To verify, return to Home and compare Global Routing with the actual access result.
Connectivity Test is useful for an initial connection check, but a successful test does not mean every website or app will work. Check Test Method in Settings, then test the actual destination. Data can help you observe traffic changes, but cannot by itself confirm that a rule matched. If something fails, use Diagnostics and connection logs to distinguish server connectivity, DNS resolution, and policy selection. Change one condition at a time and record the result so you can reproduce it. Before sharing troubleshooting details, remove subscription URLs, server authentication information, and anything that identifies your account.
Home → Connectivity Test
Settings → Test Method
Settings → Diagnostics
Data
These steps assume you already have your own subscription or server details. First establish a manual connection; then adjust automatic connections, syncing, or more detailed rules. Keep the original settings during initial setup. If something fails, check the previous step before proceeding to avoid conflating import, policy, and network issues.
01
Add Server: add an existing server or subscription
On Home, tap Add Server and choose manual entry, Scan QR Code, or the relevant import method for the details you have. For a subscription, select Subscribe; for an individual server, confirm its Type first. After importing, expand the SERVER group and check that the entry appears, its type is as expected, and the server you intend to use is selected. QR codes and links may contain authentication details; use them only in a trusted environment and don’t share imported content as an ordinary image.
02
Global Routing: choose Config, Proxy, or Direct
Config mode processes traffic according to the active config file. Proxy mode sends eligible traffic through the selected proxy policy. Direct mode uses a direct connection. For everyday rule-based routing, check that Config is selected and the intended config file is active; don’t rely on the server name alone. To troubleshoot, you can briefly switch modes for comparison once you understand the impact, but restore your intended setting afterward. Changing modes cannot fix incorrect server authentication details or fill in missing config content.
03
Home: connect and test actual access
Once you’ve confirmed the server and policy, use the connection switch at the top of Home. If the system asks permission to add a VPN configuration on the first connection, read the prompt and follow the system steps to confirm. Managed devices may have additional restrictions. Run Connectivity Test, then check access to the destination you need. If the test responds but the destination fails, check the rules, DNS, and destination service. If the server test times out, check your network and settings first rather than immediately resetting everything.
Verify the app, understand the purchase, and restore purchases
Shadowrocket is a closed-source commercial app. Get and update it through the App Store. To verify the app, check its developer, official icon, and app ID on the store listing. To determine whether it will work for you, also check device compatibility, your existing config, and your network conditions.
Shadow Launch Technology Limited
App ID: 932747118
One-time purchase
Check the developer, icon, and app ID
On the App Store listing, confirm the developer is Shadow Launch Technology Limited, compare the official icon shown here, and check that the product page URL includes id932747118. The app name or search ranking alone cannot confirm authenticity.
All three details should point to the same product page. If search results show similar names, return to the App Store link in this site’s availability guide and check the product details. Don’t rely on a search snippet as a basis for purchase. Review the store listing’s compatibility and app information before buying.
The one-time app purchase ≠ a network service plan
The one-time purchase covers use of the client app; it does not include servers, subscriptions, or connection capacity. This site does not provide, sell, or recommend nodes or subscriptions; it explains how to use configs you already have. If the list is empty after installation, prepare your existing server details and import them using Add Server or Subscribe.
The US storefront reference price is $2.99. Other storefronts display local currencies; the final price is shown on the App Store listing and checkout page. Check subscription updates and server availability separately from the app purchase status; buying the client again won’t resolve those issues.
Store availability and your current account
App Store content availability and purchase terms may vary by account storefront. If the product page won’t display, first check that your network can reach the store, then review your current account, storefront, and system purchase restrictions. Always check the App Store listing for system requirements; don’t rely on outdated information elsewhere.
Whether a purchase can be used on both iPhone and iPad depends on the App Store listing and your actual purchase history. Review the checkout details before buying. After switching devices, make sure you’re using the original purchasing account before deciding whether to redownload the app.
Restore purchases, update the app, and back up configs
When switching or restoring a device, find Shadowrocket in your App Store purchase history and check the original purchase. Redownloading the app does not guarantee that servers and config files will be restored. Before use, check the SERVER list, Config, and Global Routing; if needed, reimport your own backup.
App Store manages app updates; you can enable automatic updates in system settings. Keep a copy before changing important configs. If something goes wrong after an update, check your current settings and connection logs first, then troubleshoot step by step. Check the App Store listing for Family Sharing and other purchase eligibility details.
Choose an article based on what you need to do. After installing, start with Home and system authorization. If the interface is unfamiliar, use the English term reference. Before buying, verify the app’s three identifying details. App navigation may change; if an item has moved, look for its interface label rather than relying on its position in an older screenshot.
Learn what the Not Connected switch, Global Routing, Connectivity Test, and SERVER group do. Distinguish system authorization, server selection, and connection testing, then follow the checks in order for your first setup.
Keep interface terms in English and learn what each one does. First distinguish Home, Config, Proxy, Direct, Data, and Settings, then find the setting you need without repeatedly searching across screens.
Check Shadow Launch Technology Limited, the official app icon, and app ID 932747118 on the App Store product page. Learn why search results and similar app names are no substitute for verifying all three details.
Before asking for help, note which step failed, whether the issue affects only a particular destination, and whether switching networks changes the symptoms. Include relevant error messages, but conceal subscription URLs, authentication details, and personal account information. Avoid sharing a complete config file for troubleshooting.
