Official guide · App Store verification

Shadowrocket User Manual

A rule-based routing client for iPhone and iPad.
Start by verifying the App Store listing, then learn about the one-time purchase, setup, and connection.

  • Global Routing
  • On Demand
  • WireGuard
  • One-time purchase
Screenshot of the Shadowrocket home screen

Understand these three components before setup

Servers, configuration files, and connections

Servers store connection details, Config determines how traffic is handled, and the connection switch on Home turns the connection on or off. A successful import only means the information was added to the list. You still need to select a server, check Global Routing, and test access.

Shadowrocket User Manual is the official Shadowrocket guide. The code reference below shows rule syntax and setting names; it is not the app interface. Select a feature in the directory to view its corresponding text sample.

Explore key concepts and interface terms →
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
GEOIP,CN,DIRECT
FINAL,PROXY

Choose PROXY, DIRECT, or REJECT based on matching conditions.

Rules determine how different connections are handled. Check the active configuration in Config, then review the order of the rules. Specific domain or address conditions usually come first, with FINAL handling everything else. Traffic follows the selected configuration's rules when Global Routing is set to Config. After making changes, try the connection again and check the connection log to see which rule matched. An enabled switch alone does not confirm that routing is working as intended.

Devices and how to get the app

Installing on iPhone and iPad

Shadowrocket is available to purchase and install only through the App Store. Open the product page to verify the app, then check compatibility with your device. Refer to the App Store listing for system requirements, purchase eligibility, and whether the purchase is universal.

Your purchase history and the server details stored in the client are separate. The App Store can help you redownload a purchased app, but after reinstalling, check your subscription, configuration, and connection selection. Downloading the app does not restore all of its settings.

iPhone

Start with a complete manual connection. After purchasing and installing the app, open Home, import your own server details, select the entry you want to use, and turn on the connection switch. If iOS asks to add a VPN configuration, make sure the request follows an action you just took in Shadowrocket, then approve it using the system prompts.

When you're away from home, you may switch between Wi-Fi and cellular. If the connection fails only on one network, record the results for both rather than changing every server parameter. Before using On Demand, confirm that manual connections work on both networks.

See how to get Shadowrocket for iPhone →

iPad

A larger screen can make it easier to organize configurations and review rules. Use the Apple ID from your purchase to check your App Store purchases. Whether you can redownload the app depends on the purchase status shown in the store. Refer to the App Store listing for system requirements.

After importing an existing subscription on another device, check the default server, active Config, and Global Routing again. Even with the same details, network conditions and authorization may differ between devices. Before using iCloud sync, keep a copy of each device's configuration and confirm what will sync before making changes.

See how to get Shadowrocket for iPad →

Shadowrocket is also available through the same App Store on Mac and Apple TV. Refer to the App Store listing for system requirements and purchase eligibility.

See how to get the app →

Quick-start overview

Three steps from import to verification

These steps assume you already have your own subscription or server details. First get a basic connection working, then adjust rules, DNS, and automatic connection conditions. Check the result after each step to keep issues contained.

Step 01 · Import details

Add Server and Subscribe

To add a single server manually, use Add Server. To add an existing subscription, use the relevant Subscribe screen. If using a QR code, make sure it contains your own server details, then scan it with Scan QR Code. After saving, return to Home and check the entry name, type, and group.

An entry appearing in the list does not guarantee that its details are valid. When entering details manually, check Host and port separately and make sure authentication fields contain no extra spaces. If an imported subscription is empty, check that the link is complete and still active, then check your network. Avoid adding the same subscription repeatedly.

When describing an issue to someone else, include only the necessary field names and symptoms. Do not show server addresses, authentication details, or links containing credentials in public screenshots.

Step 02 · Confirm routing

Global Routing

Config, Proxy, and Direct correspond to configuration-based routing, proxy routing, and direct connections. For everyday rule-based routing, select a configuration in Config, then set Global Routing to Config. To isolate an issue, briefly switch modes for comparison, then restore the original selection when you're done.

If a destination is consistently routed the wrong way, first check the selected mode, then review the matching order. When editing Rule, start with specific conditions. Avoid putting overly broad rules first, where they can override more specific conditions below.

Example rules illustrate syntax only. Set domains, addresses, and policies for your own needs; sample snippets are not complete configurations for every connection.

Step 03 · Test the connection

Connection switch and Connectivity Test

On Home, select the server you want to use, then turn on the connection switch at the top. When prompted, add the VPN configuration. Next, run Connectivity Test and open the destinations you actually need to access. Check the test results and real-world access separately.

If the test fails, check that your regular network works, the correct server is selected, and the authentication details are accurate. If the test passes but a destination still has issues, check the rules and DNS. Avoid changing the server, configuration file, and DNS settings all at once; otherwise, it is hard to tell what made a difference.

You can leave On Demand off while testing. Keep a repeatable manual connection process, then add automatic conditions one at a time after confirming that the connection is stable.

Check the connection status, test results, and actual access separately

The connection switch shows the client's status, Connectivity Test reports the result of a specific test, and access to a destination also depends on its own status and the rules. When troubleshooting, note the network, selected server, and Global Routing setting. Repeating the test under the same conditions makes it easier to find the cause than changing several settings at once.

Read the full guide →

Purchase and App Store details

Verify the App Store listing and purchase terms

Shadowrocket is a paid, closed-source app. Before purchasing, verify the App Store listing rather than relying on the name or ranking in search results alone. You provide your own details for connecting through the app. This site provides the official manual and does not provide, sell, or recommend servers or subscriptions.

Developer, official icon, and app ID

On the App Store product page, check that the developer is Shadow Launch Technology Limited. Then verify the official app icon and check that the product page URL contains id932747118, corresponding to app ID 932747118. Check all three details together; a matching name alone is not enough to identify the right app.

This site's header uses the same official icon as a visual reference. For search results with similar names or descriptions, confirm the developer and app ID. After verifying the app, review its price, compatibility, and purchase details before paying.

App purchase and network service are managed separately

The app purchase does not include network service. The US storefront reference price is about $2.99; other storefronts show local currency. Check the App Store listing before payment for the actual price. A one-time purchase covers the app only; it does not include servers, subscriptions, connection allowances, or service duration. Check the App Store listing for in-app purchases and their terms.

After purchasing the app, import your own subscription or server details. The app purchase record, subscription status, and server availability are managed separately. If the app opens normally but a server connection fails, check that server's details and status first rather than assuming the purchase is no longer valid.

App Store availability and account region

Whether the product page is visible and the app can be purchased depends on the current App Store storefront, account status, device compatibility, and actual store availability. Read the App Store prompts when you open the page. If you encounter a region or payment restriction, check your account and payment options through Apple's official process. Refer to the App Store listing for system requirements; availability on another device does not guarantee compatibility with yours.

Before purchasing, make sure you're signed in to the store account where you want to keep the purchase record. If you can't find the app in search, open the product page from this site's getting-the-app page and check the store's response, then review your storefront and device eligibility. Trying different search terms is no substitute for checking the App Store prompts.

Restore a purchase and prepare a second device

When switching devices or reinstalling the app, use the Apple ID from your purchase to check your App Store purchases. Refer to the App Store listing for whether one purchase covers both iPhone and iPad, eligibility on other devices, and Family Sharing terms. The store's redownload status confirms your right to get the app; it does not mean the client data has all been synced.

After reinstalling, check your server list, active Config, Global Routing, and VPN configuration authorization. If your original configuration is saved in iCloud or a personal backup, make sure it contains your own details before restoring it. Even if the app opens on both devices, verify the connection on each one.

Before deleting the app, make sure you can retrieve your subscription link, have safely saved any manually added server details, and have a recoverable copy of your configuration. Purchase history does not replace this information. Store backups containing keys or authentication details in a secure place you control.

What to check after an update

Shadowrocket updates through the App Store. Refer to the store's release notes for update details. Manage automatic updates through your device settings. If connection behavior changes after an update, keep your current configuration and check the selected server, Global Routing, On Demand, and DNS. There is no need to rebuild everything right away.

Interface terms in this manual remain in English so you can match them with the app. Screen locations may change as the app is updated, so refer to the fields and features shown in your current version. To learn about Subscribe, Config, or rule keywords, start with the terminology guide before continuing with the relevant steps.

  • Shadow Launch Technology Limited
  • id932747118
  • App Store

Articles and topic guides

DNS, On Demand, and rule syntax

After your first connection works, read the topic guide that matches your issue. For DNS problems, start with DNS; for automatic connections, check On Demand; for unexpected routing, review the rules. Change one setting at a time and note its original value.

Browse all articles →

Get Shadowrocket on the App Store