App Store exclusive · Official guide

Shadowrocket
Setup & Rule Configuration

Name: Shadowrocket
Price: 2.99 USD
Author: Shadow Launch Technology Limited

Download on the App Store View the Guide

A rule-based proxy client for iPhone and iPad. Manage request routing with rules. The app is a one-time purchase on the App Store; you’ll need your own subscription or server details before connecting.

Rule
On Demand
Shadowsocks
VMess · Trojan · Hysteria2

Check the App Store listing for system requirements and device compatibility.

App Store exclusive One-time purchase PROXY / DIRECT / REJECT Import your existing subscription

Feature Overview / Browse by Task

From Connection Details to Request Routing

First, distinguish server details, configuration files, and the connection toggle: servers store connection details, rules in Config determine where requests go, and the toggle on Home controls the connection. After importing an existing subscription, select a server, confirm Global Routing, and check the actual results. Find out what each item does below, using the names shown in the app.

Rule: Choose a Policy by Match Order

Rules determine whether a request uses PROXY, DIRECT, or REJECT. Before using rules, set Global Routing to Config on Home and confirm which configuration is active. Rules are generally matched from top to bottom, so place specific exceptions before broader rules and put FINAL at the end to handle unmatched requests. This example explains syntax; it is not a complete configuration for every network. After making changes, check which rule actually matches the request you’re troubleshooting.

DOMAIN-SUFFIX,example.com,PROXY
IP-CIDR,192.168.0.0/16,DIRECT
FINAL,PROXY

On Demand: Connect Automatically Under Set Conditions

On Demand starts connections when specified conditions are met; it is not a rule-based routing switch. First connect manually and verify that your existing server works, then review On Demand conditions in Settings. Check the current network, trigger conditions, and desired connection state separately to avoid mistaking an automatic connection for a faulty toggle. To temporarily stop automatic connections, review the On Demand settings as well as the connection toggle on Home.

Settings → On Demand

Subscribe: Import and Update an Existing Subscription

Subscribe imports server details from a subscription you already have into the server list. Updating it fetches the latest content from that address. Before importing, make sure the link is complete, including any query parameters. Afterward, check the groups, server entries, and protocol types, then select a server. A successful update only means the content was retrieved; it doesn’t guarantee that every connection will work. Subscription URLs may contain access credentials, so don’t share them publicly. This guide explains the steps but does not provide or recommend subscription sources.

Subscribe → SERVER → Connectivity Test

Config: Know the Difference Between File Contents and Active Status

Config manages configuration files, which commonly contain General, Rule, Host, and URL Rewrite sections. After saving or importing a file, confirm that it’s the active configuration. Rules are applied from the selected configuration only when Global Routing is set to Config. Keep a copy of the original before editing, and change one type of setting at a time to make troubleshooting easier. If you use iCloud syncing, check the results on the target device: a file appearing there doesn’t mean the selected server and connection state have also synced.

[Rule]
DOMAIN-SUFFIX,example.com,PROXY
FINAL,DIRECT

Multiple Protocols: Use the Server Details You Have

Shadowsocks, VMess, Trojan, and Hysteria2 use different connection protocols. To add a server manually, select the right Type in Add Server, then enter the Host, Port, and authentication details you have. Passwords, identifiers, and transport settings are not interchangeable across protocols; similar-looking fields may mean different things. After importing a subscription, you can still verify each entry’s type. If a connection fails, compare the details against the server requirements instead of changing the protocol name or guessing the encryption settings.

Add Server → Type → Host → Port

Connectivity Test: Test the Connection, Then Check Access

Connectivity Test checks whether a server is reachable using the selected test method. Results depend on the current network, test target, and server status. For a first connection, select a server and run the test, then turn on the connection toggle on Home and check the destination you actually need to access. A response from the test doesn’t guarantee that every request will succeed; check Global Routing and the matching rule too. Data can help you observe traffic changes, but traffic counts alone don’t prove that a site was accessed using the intended policy.

Home → Connectivity Test
Global Routing → Config / Proxy / Direct

Global Routing: Choose a Mode, Then Check the Rules

Config routes requests according to the active configuration, Proxy sends applicable requests through the proxy policy, and Direct connects without a proxy. These are request-handling modes, not separate server lists. For routing by domain or IP, start by checking Config. When troubleshooting, compare results in different modes if needed, but note the original setting and restore the intended mode afterward. Proxy and Direct in the interface are capitalized differently from PROXY and DIRECT in rules; don’t confuse the two forms when reading a configuration.

Explore Routing Modes

Order Rules from Specific to Broad

For example, if local network addresses should connect directly, place the relevant IP-CIDR rule first, followed by domain policies, and use FINAL as a fallback. If a request takes an unexpected route, first check whether an earlier rule matched, then verify the selected configuration. Don’t keep appending similar rules at the end of the file. Make and test changes against the same target so you can identify what caused the difference.

Read the Rules & Config Reference →

Follow a Set Order for Your First Connection

Prepare your existing subscription or server details. After importing them, select an entry under SERVER and confirm Global Routing. When you turn on the connection, follow the system prompt to add a VPN configuration. Then cross-check with Connectivity Test and an actual request. If something fails, stop at that step and check it before moving on. Avoid changing the server, rules, and test method all at once so you can retrace the troubleshooting steps.

Read the Complete Getting Started Guide →

Devices & App Store

Getting Shadowrocket on iPhone and iPad

The App Store is the only place to get Shadowrocket. Verify the app, then check compatibility, price, and purchase status for your device. See the App Store listing for system requirements.

iPhone

Find and purchase Shadowrocket in the App Store. After installation, get familiar with Home, Global Routing, and SERVER. If a system prompt asks to add a VPN configuration during your first connection, make sure it follows your current action, then complete authorization as prompted.

See the iPhone Purchase Guide →

iPad

If you’ve already purchased Shadowrocket with the same Apple ID, find it in your iPad’s App Store purchase history and download it again. A single purchase covers iPhone and iPad, subject to the App Store listing. After installation, check your existing server details, active configuration, and system authorization.

See the iPad Purchase Guide →

Check Purchase History and App Settings Separately

Your App Store purchase history confirms your eligibility to get the app. Servers and configuration files in the app are used for connections; these serve different purposes. When switching devices, first make sure you’re using the Apple ID that made the original purchase, then check whether your Shadowrocket data has been restored. A working connection on your old device doesn’t mean the new device has selected the same server or enabled the same configuration. Check each item individually.

Verify the Connection After System Authorization

VPN configuration authorization lets the system establish the relevant network connection; it doesn’t guarantee that your existing server is reachable. After turning on the connection for the first time, check the status on Home, then visit the destination you need to access. If the system prompt wasn’t completed or the toggle won’t stay on, resolve the authorization and connection status first. Then check rule matching, rather than conflating issues from different stages.

Shadowrocket is also available in the same App Store for Mac and Apple TV. Check the App Store listing for compatibility, system requirements, and purchase eligibility.

Go to the App Store See How to Get Shadowrocket →

Purchase & Product Details

Verify the App, Then Confirm Your Purchase

Shadowrocket is a closed-source commercial app. This section covers App Store verification, purchase restoration, and connection services separately. Check the current App Store listing for the price and purchase status.

One-time purchase
App ID932747118
DeveloperShadow Launch Technology Limited

Three Ways to Verify the App

Verify the Developer, Icon, and App ID

In App Store search results, open the product page rather than relying on the name alone. The developer should be Shadow Launch Technology Limited, the icon should match the official icon shown here, and the product link should have the app ID 932747118. Once all three identify the same app, check the purchase or redownload button on the page. A similar name, lookalike icon, or search result position is no substitute for these checks.

Use this site’s App Store verification page to go straight to the same product listing. If you find it by searching within the App Store, carry out the same checks. Verify the product page itself; don’t rely on truncated developer details in a search snippet.

See Where to Verify the App →

App Store & Account

App Store Availability and Account Region

Whether the app appears, which currency is shown, and whether your account can make a purchase depend on the App Store storefront you’re using. If you can’t find the app, open the exact product listing to check the store’s message, then review your account region, device compatibility, and purchase restrictions. No search results and a previous purchase are different situations; check each separately.

Before changing your account region, review the relevant App Store guidance and check conditions such as your balance, existing subscriptions, and payment method. Changing regions is not a way to fix connection problems: your storefront affects app availability and purchases, but it won’t fill in server details or determine which in-app rules match.

Read About App Store Availability →

Purchases & Restores

Use Purchased Items to Move to a New Device or Reinstall

If you’ve already purchased Shadowrocket, first confirm the Apple ID used for the purchase in the App Store, then look for Shadowrocket in your purchased items. The download status reflects that account’s purchase history. If you see a price button again, don’t rush to buy it twice; first check that the Apple ID, storefront, and app are the same. Check the App Store listing and your account for Family Sharing eligibility.

Check app restoration and user data restoration separately. After redownloading, review your server list, selected configuration, and On Demand conditions. If you use iCloud syncing, verify the actual contents on the target device. Keep subscription links, passwords, and sensitive configuration details secure; don’t post them publicly.

Read How to Restore a Purchase →

Price & What’s Included

One-Time App Purchase ≠ Proxy Service Plan

The US storefront lists the app at around $2.99 as a one-time purchase; other storefronts show local currency. The final price is the one shown on the App Store payment confirmation screen. Purchasing gives you the right to use the Shadowrocket client; it does not include a server, subscription URL, or working connection. Any existing subscription’s term and service status are managed separately from the app purchase.

This site does not provide, sell, or recommend proxy servers or subscriptions. The guides assume you already have your own subscription or server details, and explain how to import, select, test, and configure them. Even after purchasing the app, check your connection details and verify them step by step. Buying the client again won’t fix a connection issue with an existing server.

Read About Pricing and the One-Time Purchase →

App Updates and Subscription Updates Are Different

Update Shadowrocket through the App Store. Subscribe updates retrieve server details from a subscription you already have, while remote Config files have their own content sources. When troubleshooting, first identify what needs updating; changes to the subscription list don’t mean the app has been upgraded. After an app update, continue checking your existing configuration and review key settings in the current interface.

Frequently Asked Questions

Why select a server after importing a subscription?

Importing adds your existing connection details to the list; it doesn’t switch the active connection to the entry you want. Check the selected item under SERVER, then verify Global Routing and the connection toggle. If the list has multiple groups, make sure you haven’t selected an old entry. Test again after selecting a server to ensure the result corresponds to the one you chose.

See How to Import and Select a Server →

When should I use Config or Proxy?

Use Config to route requests by rules, and confirm that the right configuration is active. To temporarily check the proxy connection path, compare the result in Proxy. Note the original setting before changing modes, and don’t edit rules at the same time. If a destination works incorrectly only in Config, check the rule order and matching policy next instead of assuming the entire server is unavailable.

Compare the Three Routing Modes →

Does a Connectivity Test response mean everything is configured correctly?

A test result reflects only the selected test method and target. Actual requests also depend on domain resolution, connection details, Global Routing, and the matching rule. Track server tests, connection status, and access to the destination separately. If a destination remains inaccessible after a successful test, troubleshoot that destination rather than using one test result to draw conclusions about all requests.

Browse Testing and Rule Terms →

What can changes in Data traffic tell me?

Data can help you observe traffic recorded by the app, but traffic activity alone doesn’t prove that a request used the intended policy or show how much subscription data remains. To check a specific request, also consider the destination, current mode, and connection logs. For usage and validity, refer to the details from your existing subscription service.

Read About Data →

Notes / Getting Started

Connection Steps and Routing Modes

Follow the steps in order: first learn about system authorization on first launch and the Home screen, then select a server and verify the connection, and finally understand where requests go in each Global Routing mode. Work through one stage at a time to keep your checks easy to follow.

View All Articles →

Getting Started

First Shadowrocket Connection: Select a Default Server, Turn On the Connection, and Verify with Connectivity Test

After importing your existing server details, select a default server under SERVER, turn on the connection, and use Connectivity Test to check that it works. Includes troubleshooting steps if you can’t connect.

Read the Connection Steps →