OFFICIAL MANUAL · APP STORE
A client for iPhone and iPad that manages existing connections with rule-based routing. The app is a one-time App Store purchase; setup starts with verifying the listing and importing your existing configuration.
01 / ROUTING & CONFIGURATION
This Shadowrocket guide explains setup in three layers: server details determine how to connect, Global Routing selects the overall handling mode, and Rules in Config determine where individual requests go. Understand the distinction before changing settings to make troubleshooting easier.
Choose a handling mode before checking whether a rule is taking effect. Open Global Routing from Home. Config applies the rules in the selected configuration, Proxy routes through a proxy, and Direct connects directly. These are global choices, not the policy names in individual rules. To test, first confirm that the selected server works, then return to Config and check routing. If Proxy remains selected, that alone does not show that a domain rule matched. After each change, run a new test request and note the selected mode.
Check each rule's conditions, policy, and position. In Config, DOMAIN-SUFFIX matches a domain suffix, DOMAIN-KEYWORD matches a keyword in a domain, and IP-CIDR matches an address range. PROXY, DIRECT, and REJECT specify proxy, direct, and reject actions. Place more specific conditions appropriately, and check how the final FINAL rule handles requests that did not match earlier rules. The snippet at right illustrates syntax; it is not a complete configuration to replace your existing settings. Save a copy of the original file before editing.
RULE EXCERPT / ORDER MATTERS
[Rule]DOMAIN-SUFFIX,example.com,PROXYIP-CIDR,192.168.0.0/16,DIRECTDOMAIN-KEYWORD,adservice,REJECTFINAL,PROXYThe protocol must match the details for your existing server. In Home, open Add Server, confirm Type, then enter Host, Port, and the authentication or transport settings required by that protocol. Fields for Shadowsocks, VMess, VLESS, Trojan, HTTP, SOCKS5, WireGuard, and Hysteria2 are not interchangeable. A display name helps identify an entry but does not change its connection settings. After importing, compare encryption, TLS, and related options with the original details. If a field is missing, check the original configuration instructions rather than guessing from the name or trying unrelated options.
Set up On Demand only after a manual connection works. In Settings, review On Demand and check its network conditions and trigger rules against your needs. Do not confuse automatic connection behavior with the current toggle state. If switching between Wi-Fi and cellular causes an unexpected connection, note the conditions and temporarily disable automatic triggers to compare. Once connected, check Data for traffic changes and use Diagnostics to investigate. An increase in traffic only shows that data passed through; it does not prove that every destination is reachable or that the correct rule was selected.
RULE EXCERPT / REJECT MATCH
[Rule]DOMAIN-KEYWORD,adservice,REJECTDOMAIN-SUFFIX,example.com,PROXYFINAL,DIRECTConnection triggers and rule matching operate at different levels. This snippet illustrates rule syntax only.
A subscription imports and maintains server details you already have. Before adding one in Subscribe, confirm the link's source and purpose. After importing, check that the entries appear, organize them so they are easy to identify, and select one to test the connection. If an update fails, first check that the link is complete, the network is reachable, and the subscription is still valid; do not immediately delete everything you imported. Subscription links may contain access credentials, so hide the full URL in screenshots and support requests. This guide covers using information you already have; it does not provide, sell, or recommend servers or subscriptions.
Configuration files and server subscriptions serve different purposes. A .conf file in Config may contain sections such as General, Rule, Host, and URL Rewrite; importing servers does not mean those rules are configured too. Before using iCloud to sync related content, check which items can sync and the current toggle state in the app, and keep a separate backup. App purchase records, configuration sync, and server validity are three different things. After using the app on multiple devices, check each device's Config, selected server, and permissions. Matching file names alone do not guarantee matching connection settings.
CONFIG EXCERPT / LOCAL NETWORK
[Rule]IP-CIDR,192.168.0.0/16,DIRECTIP-CIDR,10.0.0.0/8,DIRECTFINAL,PROXYThe example address range illustrates matching behavior. Check your local network before using it.
When troubleshooting, change one layer at a time. If server settings are incorrect, editing Rule usually will not fix a connection failure. If the server connects but some requests go to unexpected destinations, check Config, rule order, and DNS. Connectivity Test helps you observe a test result at that moment, but the method, current network, and destination response all affect it. A single latency result does not establish long-term availability.
Read the step-by-step guide →02 / DEVICES & STORE
The App Store is the only place to get Shadowrocket. Review the product page before purchasing and check that your device meets the requirements. System requirements and purchase eligibility are as listed on the App Store page. Check the App Store account used for the purchase separately from where configuration files are stored on your device.
First verify the developer and app ID, then purchase Shadowrocket or restore a previous purchase in the App Store. The first time you connect, read the system prompt to add a VPN configuration. Confirm that Shadowrocket initiated the request, then follow the system steps to authorize it. Installing the app does not provide a server; you still need to import your own configuration.
See how to get Shadowrocket for iPhone →Use the same purchase account to find Shadowrocket in your App Store purchase history and restore it if eligible. Landscape and Split View change the available screen space; use interface labels such as Home, Config, and Settings to find features. After importing content, check the selected server and Global Routing again.
See how to get Shadowrocket for iPad →Shadowrocket is also available in the same App Store for Mac and Apple TV. Compatibility, system requirements, and purchase eligibility are as listed on the App Store page.
If the product page is not visible in your current storefront, check the App Store account, storefront, and any message shown on the page. Do not buy an app based only on similar names in search results. The US storefront details shown on this site may differ from the storefront used for checkout on your device; the price and availability in the App Store on your device are final. If you have already purchased the app but see a price, check your purchase history first to avoid mistaking an account mismatch for a new purchase.
03 / FIRST CONNECTION
Start with server or subscription details you already have. The steps below cover client operation only and do not provide connection resources. Confirm the result at each step before continuing. If something goes wrong, you can return to the last known working state instead of changing several settings at once.
To add a server manually, select Type first, then enter Host, Port, and the relevant authentication fields. To use an existing subscription, check that the link is complete before importing it. After saving, return to Home and confirm the expected entry appears under SERVER. Use a recognizable name to tell servers apart. A correct name does not mean the settings are correct; check the protocol type, transport settings, and any required TLS fields.
QR codes, links, and files carry configuration details; verify their source and contents before using them. A successful import means the client can read the information, not that the server is still valid. If an entry is missing, check the import method and original content. If it appears but will not connect, troubleshoot the settings and network instead of importing the same details again.
Select the server you want to test, then check Global Routing. For everyday rule-based handling, select Config and confirm that the active configuration contains the rules you need. To troubleshoot, you can compare Proxy and Direct when you have a specific test destination in mind. Note the original setting before switching, then restore the intended mode after testing.
PROXY in a rule looks similar to Proxy in the interface, but they operate at different levels. The former is the action for a matched rule; the latter is a global mode. If all traffic seems to follow the same route, check the global selection first, then confirm that the right rules file is selected, and finally review the matching conditions. Avoid changing many rules before checking these basics.
Turn on the connection switch, follow the system prompt to authorize the VPN configuration, then check the connection status in the app. After running Connectivity Test, visit the intended destination and check Data for corresponding traffic changes. The enabled switch, a latency test result, and a successful visit are separate observations; consider them together rather than relying on just one.
If the connection fails, first confirm that the current network works, then check the server settings and whether the original details are still valid. If only some destinations fail, check Config, DNS, and the matching policies. Before asking for help with Diagnostics, hide sensitive server addresses, authentication details, and subscription links. Recording the network and handling mode used for a test is more useful for troubleshooting than repeatedly switching several settings.
04 / PRODUCT VERIFICATION
Shadowrocket is a closed-source commercial app. Verify it by checking the product page, not just the name in search results. Compare the developer, official icon, and app ID; all three should match.
Check for Shadow Launch Technology Limited on the App Store product page. Similar names in search results are no substitute for checking the developer. Open the product details and confirm the name there rather than relying on an abbreviation or search recommendation.
Compare the icon with the official one shown on this site: a rocket outlined in blue and purple on a white background. The icon can help identify the app, but it does not prove its identity on its own; also check the developer and app ID.
The official product page URL contains id932747118. Open the product page from the verification guide and check this identifier. If a similar-looking result has a different app ID, it is not the same app.
The one-time purchase covers the app only; it does not include servers, subscriptions, or connection services. You need your own server details or subscription to import into the app. Server validity, authentication, and availability are managed by the original service and are separate from your App Store purchase. This guide does not provide, sell, or recommend servers or subscriptions.
The US storefront reference price is $2.99; other storefronts show local currency, and the amount on the purchase confirmation screen is final. If the price, currency, or purchase button differs, check your current account and storefront instead of assuming the transaction outcome from the reference shown here. Keep your purchase record to help restore the app or investigate a possible duplicate purchase.
Sign in with the same purchase account and look for Shadowrocket in the App Store purchase history on your iPhone or iPad. Purchase eligibility is as listed on the App Store page. After restoring the app, check whether the device has the server details and configuration you need. A purchase record confirms the purchase; it does not mean every setting from an old device has transferred or that the old server is still valid.
Back up your current configuration before changing devices, and check which items the sync feature actually covers. On a new device, follow the system prompt to confirm permissions the first time you connect, then select the current server and Config. If a file appears but the connection does not work, check local permissions, the current selection, and the original server status separately. Restoring a purchase does not replace connection testing.
Check the App Store for update history, compatibility, and current product details. Keep a restorable copy of your configuration before updating. Afterward, check the server selection in Home, Global Routing, and Config, then test your usual destinations. The interface may change; this guide uses English interface labels to help locate features and does not assume a button will always remain in the same place.
If you cannot install or update the app on your device, first check the App Store compatibility notice and available storage, then verify the system requirements. Keep configuration import issues separate from app availability: for the former, check the file contents and format; for the latter, check the App Store and device messages. Troubleshooting each issue at the right level avoids unnecessary repeated steps.
DNS, Rule, On Demand, and protocol fields affect different parts of the connection. Record current values and keep the original Config before making changes. Change one condition at a time, then retest using the same destination and network. If the result gets worse, undo the last change before trying another. Changing several things at once makes results hard to compare and can lead to removing settings that were working.
When reviewing Data, note the time period and reporting scope; when checking latency, note the Test Method. Traffic statistics show usage, while latency tests offer a clue about that particular test. Neither replaces visiting the destination yourself. To understand a field, look up its term in the quick reference, then read the relevant section of the system guide instead of guessing at an English option from a similar-sounding term.
05 / FURTHER READING
The articles below cover device restore, automatic connections, and app verification. If this is your first time using Shadowrocket, establish a manual connection before reading about automatic triggers. If you have questions before purchasing, verify the app identity first; there is no need to change configuration settings. Each article emphasizes clear prerequisites and step-by-step verification.
Find the app in your App Store purchase history, then check where features appear in landscape and Split View. Handle purchase restoration and configuration transfer separately. After importing, check permissions and the selected connection on your iPad.
Read the article →First confirm that a manual connection works, then review network conditions, trigger order, and how to troubleshoot conflicts. If a connection starts unexpectedly, compare behavior with automatic triggers disabled to distinguish a network change from a server configuration issue.
Read the article →Check the developer name, official icon, and app ID together. Learn what to look for in search results and on the product page, and why a similar name does not confirm an app's identity.
Read the article →