Genuine App Store app · Official Manual
A rule-based proxy client for iPhone and iPad, with rule-based routing and a one-time purchase on the App Store.
Devices & App Store
Shadowrocket is available only on the App Store. Before purchasing, verify the developer, official icon, and app ID. After installing, import your existing subscription or server details. App purchase records and connection configurations are separate; after restoring the app, check that your configuration is still in place.
Purchase and install the app from the App Store. When adding a VPN configuration for the first time, read the system authorization prompt, then return to Home to check the selected server and Global Routing. Check the App Store listing for system requirements and device compatibility.
See how to get Shadowrocket on iPhoneCheck your purchase history using the Apple ID you used to buy the app, then download it. Check the App Store listing for eligibility to download and restore purchases on iPhone and iPad. The wider display makes configuration fields easier to review, but you should still verify each step of importing and connecting.
See how to get Shadowrocket on iPadShadowrocket is also available from the same App Store on Mac and Apple TV. Check the App Store listing for system requirements and device compatibility.
Features & Settings
Start by choosing a connection mode, then check your configuration and server. These six areas cover routing, automatic connections, rule matching, subscription updates, file management, and protocol settings. They work together, but are not interchangeable.
In Home, select Config, Proxy, or Direct under Global Routing. Config applies the policies in the active configuration file and suits setups that handle different requests differently. Proxy sends applicable requests through the selected proxy; Direct connects without a proxy. For rule-based routing, select Config and verify which file is active—not just which file you edited. You can temporarily switch modes to compare results while troubleshooting, but restore your original setting afterward. A mode determines how requests are handled; it cannot supply a server address, authentication details, or DNS settings.
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
FINAL,DIRECTOn Demand starts connections when specified conditions are met. Review the relevant options in Settings. Before enabling it, connect manually and confirm that your configuration works. Then set conditions for Wi-Fi or cellular networks to avoid mistaking a basic connection issue for an automation problem. During testing, check the actual connection state after switching networks rather than relying on the toggle. If you need to pause automatic connections, review the On Demand conditions so a manual disconnect does not trigger another connection. Battery use also depends on traffic, signal strength, and background activity; check your system battery records for context.
Settings
On DemandRule-based routing combines match conditions with actions. In Config, check the [Rule] section of the active file. Put rules for a specific domain or clearly defined IP range before broader conditions, then finish with FINAL. DOMAIN-SUFFIX matches domain suffixes; GEOIP checks the destination IP's geographic location. PROXY, DIRECT, and REJECT mean proxy, direct connection, and block. If a request matches unexpectedly, check the rules above it before changing the target line. The domain below illustrates syntax; it is not a recommended access policy.
DOMAIN-SUFFIX,example.com,PROXY
GEOIP,CN,DIRECT
FINAL,PROXYIf you already have a subscription, follow the guide to import it from the add option in Home, then check the subscription group and server details. Updating a subscription fetches information from its source; it does not update the app or guarantee that the selected server is still available. After an update, check your selection again and test the connection if needed. Subscription URLs may contain personal access credentials, so do not share them in public screenshots or logs. If an import fails, first check that the link is complete and has no extra spaces, then check your local network and whether the original service is still active. This site explains how to import and manage existing subscriptions.
Home
Add Server
SubscribeUse Config to manage configuration files. Maintain rules, DNS, and other settings in the correct sections. Before editing, confirm which file is active and keep a copy you can restore. Change one type of setting at a time so you can identify and revert problems. [General] manages general options, [Rule] handles policy decisions, [Host] can map domains, and [URL Rewrite] handles rewrite rules. When refreshing a remote configuration, check whether local changes are preserved. If you use iCloud sync, verify the actual file and selected configuration on each device; matching file names alone do not guarantee matching contents.
[General]
bypass-system = true
[Rule]
FINAL,PROXYShadowrocket supports multiple proxy protocols. When adding a server, select Type based on your existing server details rather than guessing from the protocol name. Shadowsocks, VMess, VLESS, Trojan, WireGuard, and Hysteria2 use different fields; matching addresses and ports do not make their configurations interchangeable. In Add Server, check authentication, transport, and TLS details one by one. After scanning or importing, verify that all fields are present. A protocol describes how a connection works; availability also depends on the server, your network, and the relevant settings. A latency test cannot replace checking whether a webpage actually loads.
Add Server
Type
Host
PortData can help you observe changes in traffic, but increased traffic does not mean a webpage loaded successfully. When checking, note your network, connection mode, and access result. If you use iCloud to sync data across devices, check the app state and configuration on each device. VPN authorization, purchase history, and server availability cannot be confirmed from sync results alone. First run a reproducible connection test on one device, then check the same settings on another to make differences easier to identify.
How rules are evaluated
Rule order determines priority. Specific domain conditions usually come first, followed by IP and geographic conditions, with FINAL at the end. REJECT is an action, not a match type on its own. The pink label in the diagram shows the action taken when a rule matches; requests do not pass through every label in sequence.
For DOMAIN-SUFFIX,example.com,PROXY, the first two fields define the domain condition, and the last field determines the action. A correct condition paired with the wrong action can still produce an unexpected result. When troubleshooting, check the rule's position as well, so a broader rule above it does not match first.
Domain rules and IP rules rely on different information. If a webpage will not load, do more than repeat a latency test: check whether the domain resolves, which rule matched, and whether the selected server can complete the request. Record the original setting before changing it, then retest the same destination.
App authenticity and purchase details
Shadowrocket is closed-source commercial software. This is the official Shadowrocket website and manual. Use the App Store product page to get the app, check its price, and read its update history. For configuration, refer to the options shown in the app and the file currently in use. Keeping these two types of information separate helps avoid treating a purchase issue as a connection problem.
Searching by name is only the first step. Open the product page and confirm the developer is Shadow Launch Technology Limited. Compare its icon with the official icon shown in this site's header, then check that the app ID in the product link is 932747118. The official icon has a white background with a blue-purple outlined design; do not rely on a similar name in search results alone. All three details should match the same product page. Then review the purchase button, compatibility, and app description.
If you reached the app through a guide on this site, read the app verification guide before opening the store. App Store manages app updates; check the store page for update details and history. The homepage does not list specific version numbers or system requirements, so static text is not mistaken for your device's current eligibility.
The US storefront lists the price as $2.99; check the App Store listing for the current price. Other storefronts show local currency. A one-time purchase describes how you pay for the app; it says nothing about server access, subscription validity, or network quality. A one-time app purchase is not a service plan. This site does not provide, sell, or recommend servers or subscriptions. The connection steps below assume you already have your own subscription or server details.
After purchasing, you may still need to add a server or import an existing subscription in Home. If the app is installed but you do not yet have connection details, organize the configuration information you already have rather than purchasing the app again. Likewise, valid server details do not replace an App Store purchase record. Check each separately to identify the source of a problem.
App Store search results depend on your account's current storefront. If you cannot find the app, first check your App Store sign-in and storefront, then use the product link on this page to verify the listing. Always check the App Store listing for system requirements, device compatibility, and purchase availability. Before changing your account region, review the conditions shown in your Apple Account settings, including any remaining balance, payment methods, and active services. Avoid repeatedly changing settings just to run a search.
For use across iPhone and iPad, check the App Store listing for eligibility to download and restore a universal purchase. Whether your device can install the app, your account is eligible for the purchase, and your connection configuration is complete are three separate checks. If an older device cannot get the app, check the compatibility details first rather than blaming an import link or rules file.
After deleting and reinstalling the app or switching devices, first confirm that you are signed in to the App Store with the Apple ID used to purchase it. Then find Shadowrocket in your purchased items. If eligible, download it again from your purchase history. If you are prompted to buy it, check your account, storefront, and purchase history before paying again. See the purchase restoration guide for details.
Downloading the app again does not automatically restore all connection settings. After opening it, check your server list, subscriptions, active Config, and Global Routing. If you use iCloud sync or a configuration backup, verify the file contents and selected configuration too. Read the authorization prompt before allowing the system to add a VPN configuration. Once restored, test a manual connection before re-enabling On Demand conditions; this makes it easier to identify the cause if something goes wrong.
Once you have your own connection details, import them and check each field. Then select a server, confirm Global Routing, and turn on the connection. Connectivity Test can help check reachability, but on its own it cannot confirm that DNS, rules, and the destination site are all working. Test with a specific destination and note the network and mode in use. If it fails, change one setting at a time and retest before deciding whether to keep the change.
If latency shows a value but webpages will not load, check in order: your local network, DNS resolution, the matching rule, and the actual request to the server. Traffic in Data only shows that data was transferred; it does not mean the request succeeded. Remove sensitive details before sharing logs that contain subscription URLs, authentication details, or personal domains. See the setup guide for the full process, or visit Troubleshooting for connection issues.
First check that Global Routing is set to Config, then confirm that the file you edited is active. Next, see whether an earlier rule already matches the destination. If FINAL appears too early, later rules cannot work as intended. See the rule-matching reference →
No. A subscription update fetches connection details from your existing subscription; App Store manages app updates. After updating a subscription, check that your selected server is still available. After updating the app, review the store notes and check your settings. See subscription management FAQs →
Check your server details, active configuration file, Global Routing, and system VPN authorization, then test the connection manually. A purchase record confirms your eligibility to get the app; it does not mean your connection settings have been restored. See the restoration checklist →
Guides & Troubleshooting
After establishing a basic connection, explore the guides relevant to your issue. Protocol articles explain settings and use cases; DNS articles distinguish resolution from forwarding; and the On Demand guide covers automatic connections and battery records. Avoid changing every setting based on a single test result.
Learn how QUIC and UDP work, and what to expect on long-distance links or networks with high packet loss. Before configuring it, check the protocol, port, and authentication fields provided with your existing server details. Do not judge connection performance by the protocol name alone.
Read the protocol guide →Compare DNS resolution methods by looking at the dns-server setting in the [General] section. Learn the trade-offs between speed, reliability, and privacy. Keep the original setting before making changes, and retest with the same domain to avoid mistaking a rules issue for a DNS problem.
Read the DNS configuration guide →Compare persistent and On Demand connections using system battery records, actual traffic, and network changes. First confirm that a manual connection works, then set conditions for Wi-Fi and cellular networks and check for repeated triggers.
Read the On Demand troubleshooting guide →