Official GuideApp Store Verification
A rule-based routing client for iPhone and iPad, available as a one-time purchase on the App Store. Import your existing subscription or server details, then configure the connection.
Features and settings
Server details, Global Routing, and Config determine where to connect, which routing mode to use, and how each request is matched. Understand these three layers before changing individual settings.
DOMAIN-SUFFIX,example.com,PROXY
FINAL,DIRECTRule-based routing lets you handle domains, IP ranges, and fallback traffic differently within one configuration. In Home, set Global Routing to Config, check which Config file is active, then arrange rules from top to bottom. DOMAIN-SUFFIX matches domain suffixes; IP-CIDR matches address ranges. PROXY, DIRECT, and REJECT are rule policies, not server addresses. Put more specific conditions first and FINAL last. After making changes, test a request that should match a rule; the connection toggle alone cannot confirm that routing is working as intended.
Settings → On DemandOn Demand triggers VPN connections based on conditions. This is separate from the policy applied to each request by rules in a configuration file. First confirm that the server and configuration work with a manual connection, then review the On Demand conditions in Settings and adjust them for your network. To test, note the existing conditions and observe what happens when the network changes. If the connection returns after you disconnect manually, check these settings rather than repeatedly deleting the VPN configuration. You can temporarily turn off automatic triggers while troubleshooting, then restore them after testing so automatic behavior is not mistaken for a switch problem.
Add Server → TypeShadowrocket supports protocols such as Shadowsocks, VMess, VLESS, and Trojan. When adding a server, use the details you already have. In Add Server, choose Type, then check Host, Port, and the relevant authentication and transport settings. Required fields vary by protocol; credentials for one protocol cannot be entered under a different Type. If you have a share link or QR code, use the corresponding import option, then verify the imported details. A protocol name only describes the connection method; it does not confirm server reachability, account validity, or actual speed. Test each of these separately—switching Type alone will not resolve them.
https://example.com/sub?token=xxxxA subscription URL retrieves and updates a server list; it serves a different purpose from a share link for one server. Use a subscription you already have: in Add Server, choose Subscribe, enter the URL, and save. Then check that the expected entries appear in the list. If an update fails, first confirm that the URL is complete, the subscription is still active, and your current network can reach it. Avoid repeatedly adding the same subscription. Subscription credentials are sensitive; redact them before sharing screenshots or logs. Example URLs only illustrate the format and cannot be used to connect. This site does not provide subscriptions; contact the provider of your existing service to confirm list contents and availability.
[General]
bypass-system = true
[Rule]
FINAL,DIRECTA Config file contains settings such as global parameters, rules, domain mappings, and rewrites. It is not the same as a subscription URL that stores a server list. Before editing, keep a recoverable copy and check the syntax and purpose of the General, Rule, Host, and URL Rewrite sections. Change one group of settings at a time, then verify the expected requests before moving on. If you use iCloud sync, confirm the account and relevant settings, and distinguish file syncing from which file is active on the current device. Do not assume another device is using the same file. Never put account or server credentials in a configuration shared publicly.
Connectivity Test / Data / DiagnosticsConnectivity Test in Home can help check server responses, Data shows traffic information, and Diagnostics in Settings can help investigate connection issues. Test results reflect the method and network conditions at the time; they do not predict how every request will perform. If a test gets a response but the target page will not load, check Global Routing, the matched rule, DNS resolution, and server settings. If all entries fail, check the device's network and subscription status first, then review the parameters. When recording an issue, note the mode, steps to reproduce, and error message. Hide subscription URLs and authentication fields before sharing the report.
Config follows rules in the active configuration file and is the main mode for rule-based routing. Proxy routes applicable traffic through the proxy mode; Direct handles applicable traffic in direct mode. These names describe how traffic is handled, not whether a server is connected. Even with the Home switch on, choosing Direct does not mean requests are going through the selected server.
For initial testing, choose Proxy to check the basic connection to an existing server, then switch back to Config to verify routing. If requests work in Proxy but fail in Config, focus on the active configuration file, policy names, and rule order. If both modes fail, check the network, authentication, and transport settings first. Avoid changing many rules at once. Testing one variable at a time makes results easier to interpret and lets you restore the last working setup.
Devices and getting Shadowrocket
Get Shadowrocket on either device from the App Store. Refer to the App Store listing for system requirements, compatibility, and whether a purchase can be used across devices.
Verify the developer and app ID on the App Store. After purchase, review the system's VPN configuration permission prompt the first time you connect, then import your own server details.
Read the iPhone guide →Check your purchased apps using the same Apple ID you used to buy Shadowrocket. After installation, verify your subscription, active Config, and VPN permission separately; restoring the app does not restore its configuration.
Read the iPad guide →Shadowrocket is also available for Mac and Apple TV on the same App Store. Refer to the listing for compatibility.
When reviewing and editing a longer configuration on iPad, use the rule reference to understand each section before changing the active file. On iPhone, recheck the selected server and Global Routing in Home. Network conditions, VPN permissions, and active settings can differ between devices, so test the same configuration on each one. Matching file names alone are not enough to complete the check.
The system permission prompt shown when you connect for the first time is part of setting up the VPN configuration. Confirm that the request comes from Shadowrocket, then follow the system prompts. If a connection is blocked later, check the existing VPN configuration and app status in system settings. App purchases are managed by the App Store, while access to servers depends on your existing service; verify these separately.
View the getting started steps →First-time setup sequence
Before you begin, have your existing subscription or server details ready. These three steps outline the basic process. For field-by-field instructions and troubleshooting, read the full guide.
In Home, open Add Server. If you have a subscription URL, choose Subscribe. To enter details manually, choose Type first, then check Host, Port, and authentication settings. After saving, check the SERVER list to confirm the expected details were imported; do not rely on the save action alone.
Select the server you want to use, then check Global Routing. For rule-based routing, choose Config and verify which file is active in Config. Importing a subscription does not configure all your rules. Do not change the mode and multiple settings at once without recording their original values.
Turn on the connection switch in Home and allow the VPN configuration when prompted by the system. Then check Connectivity Test and make a real request to verify that the target is reachable. If the result is unexpected, note the mode and error message, then troubleshoot the network, server settings, and rules in that order.
App authenticity and purchase details
Shadowrocket is a closed-source commercial app. The App Store manages its availability, purchase history, and updates. To verify the listing, check the developer, official app icon, and app ID together.
Developer: Shadow Launch Technology Limited
App ID: 932747118
Open the product page rather than relying on the name shown in search results. Compare its icon with the official icon here, then check the full developer name and id932747118 in the product URL. Once all three match, review the price and compatibility details to avoid selecting a similarly named app.
Listing visibility, currency, and purchase conditions may vary by storefront. If a search returns no results, check your current App Store account region and the product page rather than assuming the app is unavailable. System requirements are always as listed on the App Store page. Before purchasing, confirm that your device is included in the compatibility information.
Changing your account region is subject to Apple's account requirements and existing purchase arrangements. Review the information in your account settings before deciding. Do not repeatedly change account settings just to find a search result; first verify the details on the correct product page.
The US storefront lists a reference price of $2.99 as a one-time purchase. The actual price and currency are shown on the App Store at the time of purchase. This fee covers use of the app; it does not provide a server address, subscription credentials, or connection service. After purchasing, you still need to import your own existing subscription or server details.
This site does not provide, sell, or recommend servers or subscriptions. For app purchase issues, check your App Store order and account history. For an expired subscription or failed server authentication, check the status of your existing service. Separating these costs and access rights helps you find the right place to troubleshoot.
To restore the app on iPhone or iPad with the same Apple ID, first check your App Store purchased apps. Refer to the App Store listing for the availability of universal purchase and Family Sharing. If the listing prompts you to buy, confirm that you are using the account associated with the original order and check the product ID before paying again.
Reinstalling restores the app itself only. Check subscription URLs, configuration files, and VPN permissions on each device based on your backups or sync settings. App updates are delivered through the App Store. If you need to troubleshoot a behavior change after an update, first review the current mode and configuration, then repeat the same verification steps.
Before importing a new configuration, changing rules, or switching devices, make sure you have a recoverable copy of the existing configuration. You can note the file's purpose, selected policies, and reasons for changes, but do not store subscription credentials in public notes. If something goes wrong, return to the most recently verified working state and compare changes one at a time. Repeatedly deleting and recreating settings can make the original issue harder to trace.
This page is the configuration hub for the official Shadowrocket guide, and this is the official site. For field-by-field instructions, see the tutorial; for rule priority, FINAL, and configuration structure, see the rule reference. These paths cover practical setup and underlying concepts—you do not need to change every setting before your first connection.
Read the full app verification guide →Continue reading
Choose a guide for the step you are on. Resolve purchase and permission questions first, then check whether your existing server connects, and finally configure rules and automatic connection conditions.
Start with the system VPN permission, then check Not Connected, Global Routing, Connectivity Test, and SERVER. Learn what each section does and which connection settings to check after granting permission.
Read the first-launch guide →Understand test results for servers in your existing subscription list, and distinguish response time from actual requests and server availability. Before choosing an entry, check how it was tested and verify it for your needs instead of sorting by a single latency figure.
Read the server selection guide →Learn how to check App Store prices in your local currency, verify purchase history, and distinguish app usage rights from service access through an existing subscription. When switching devices, verify the original purchase account before restoring configuration and permissions.
Read the purchase details →