Genuine App Store app · One-time purchase
The official guide for iPhone / iPad: verify the genuine App Store app and one-time purchase, then import existing service details and set up rules and routing.
App Store
Shadowrocket is a paid app for Apple platforms, available only through the App Store. Verify the store listing first, then follow the first-launch steps for your device. Check the App Store page for system requirements and general purchase availability.
For initial setup, follow Home → Add Server → Global Routing. After installing the app, prepare your existing subscription or server details. When connecting, review the system prompt to authorize the VPN configuration. Granting permission does not confirm that the server is reachable; open a website to test the connection.
View the iPhone setup steps →Use the Apple Account you used to make the purchase, then check the purchase status and universal purchase availability in the App Store. Follow the English interface labels when setting up; screen layouts may vary. On each device, check the current server, selected Config, and connection switch rather than relying on another device’s status.
View the iPad setup steps →Shadowrocket is also available through the same App Store on Mac / Apple TV. Check the store page for compatibility details.
View the setup steps →Configuration
First, distinguish server details, routing modes, and Config files before changing settings. They answer different questions: “Where does the connection go?”, “How is traffic handled?”, and “Which rules match which requests?” They are not interchangeable.
Global Routing
Open Global Routing from Home and check the current mode. Config routes traffic according to the rules in the selected Config file; Proxy sends applicable traffic through the proxy policy; Direct connects directly. To route specific domains through PROXY and other requests through DIRECT, select Config—not just import a file while leaving the previous mode selected. For testing, use one server and one target website, then switch modes and compare results. This helps distinguish server issues from rule issues.
Use this mode for rules-based routing. Select the Config file you want to use, then check the rule order and the final FINAL rule. A file appearing in the list does not mean it is the active Config.
Use this mode to check whether the selected proxy route works. It does not replace domain-based routing in Config. After testing, reset the routing mode to match your original use case.
Use this mode to compare results over a direct connection. Direct does not use the selected proxy server, but access still depends on your network, DNS, and the target service.
Rule
Rules are usually evaluated from top to bottom; the matching rule determines the policy. DOMAIN matches an exact domain, DOMAIN-SUFFIX covers a domain and its subdomains, and IP-CIDR matches an address range. Put FINAL at the end to handle requests that did not match earlier rules. Start with a few clear rules and expand them gradually; this makes troubleshooting easier than adding many rules at once. Check policy names, English commas, and rule order. Rules determine the route; they do not provide server details.
To proxy only selected websites, start with a DOMAIN-SUFFIX rule for each target domain, then add FINAL,DIRECT as a fallback. Here, example.com is a syntax example, not a service address. After editing, make a new request and check the matching rule in the log. Do not assume the rules are working just because the connection switch is on.
View the rules guide →Config · iCloud
Config files in Config handle global settings, rules, and related logic; they are separate from the server list in Home. When reviewing a file, start with [General], then check [Rule], and review [Host] if you need local mappings. Keep a working copy before editing and change one type of setting at a time. If you change DNS, rules, and routing mode together, it becomes difficult to identify the cause of a failure. After importing, confirm which file is selected.
To keep details across devices, review the iCloud options in the app and check the Apple Account and iCloud permissions on each device. Syncing does not replace a backup before editing, and it does not mean both devices have the same connection status. Check server details, selected Config, and system authorization separately on the device you are using. Treat files containing personal service details as sensitive.
View the Settings guide →On Demand
On Demand triggers connections according to the conditions you set in Settings. First disable automatic triggers and confirm that manual connection, the selected server, and Config all work. Then enable only the conditions you need, one at a time. Test both connection and disconnection in the relevant network environments; do not judge by the switch alone. On Demand changes when a connection is triggered. It cannot fix an incorrect password, an expired subscription, or an unresponsive server.
If the connection drops and immediately reconnects, check On Demand and the system VPN status first, then see whether the network changed. Keep a record of the original settings and temporarily disable the relevant conditions for comparison. Once you identify the cause, restore only the conditions you need. On Demand and rules-based routing are separate settings: the former controls when to connect, while the latter controls how requests are handled after connecting.
View the Settings guide →Data · Diagnostics
Data shows traffic recorded by the app; Connectivity Test helps assess the connection. They answer different questions. A test response does not mean every website is reachable, and traffic in the statistics does not prove that requests followed the intended rules. When troubleshooting, note the test time and target, then check Global Routing, the current server, and the matching policy. Retest under the same conditions to compare results before and after a change.
Shadowrocket’s traffic statistics may use a different measurement method from your service provider’s billing, so a local figure cannot be used to estimate your remaining allowance. For further diagnosis, check entries such as Diagnostics and Log in Settings. Before sharing logs, check for subscription URLs, server details, and visited domains. Share only what is needed to explain the issue and avoid exposing personal information.
View the Settings guide →Subscribe · Add Server
Follow the guide to import an existing subscription. To add a server manually, open Add Server, select Type, then enter the Host, Port, and authentication fields for that protocol. Fields differ between Shadowsocks, VMess, VLESS, Trojan, and other protocols; available options depend on what the app displays. Use details from your existing provider or a server you manage. This site explains how to enter and check them; it does not provide, sell, or recommend nodes or subscriptions.
Subscribe updates the server details included in the subscription; it does not automatically fix rules in Config. Before updating, confirm the subscription is still valid. Afterwards, check that the entries changed as expected and verify the current selection. Subscription URLs often contain personal credentials, so do not include them in public screenshots or discussions. If importing fails, check that the full link was copied and is accessible, then verify the service details.
View the import guide →Purchase & Verification
This is the official Shadowrocket website and manual. Refer to the App Store product page for availability and the app’s interface for settings. Verify the app first, then proceed with purchase, restore, and connection setup.
When searching, do not rely on the app name alone. Open the product page and check that the developer is Shadow Launch Technology Limited, the icon matches the official icon in this site’s header, and the App ID in the product page URL is 932747118. Verify all three; a similar name alone is not enough. If any details differ, return to the product page linked from the app access guide and verify the listing before purchasing.
Shadowrocket is a closed-source commercial app. Purchase and installation are handled through the App Store. Check the store listing for features, compatibility, and purchase requirements; this guide explains setup steps and does not treat results on one device as universal. For system requirements, read the compatibility section on the store page rather than relying on remembered requirements.
The app purchase is not a service plan. The US Store reference price is $2.99 as a one-time purchase; check the App Store price before paying. Prices are shown in the local currency for each storefront. Buying the app does not provide a server or subscription, or change the validity period or data limits of an existing service. Before setup, prepare your own subscription or server details and follow the import guide.
This site does not provide or sell nodes or subscriptions, and is not involved in related purchases. If a connection fails, check the app settings separately from the service status: verify that the details are complete, authentication is correct, and the server responds, then check the mode, DNS, and rules. Buying the app again will not fix incorrect service details. Before changing multiple settings, narrow down the issue with one test at a time.
Whether an App Store listing is visible depends on the current account storefront and store availability. The page opening, whether the account has purchased the app, and device compatibility are three separate questions. If you cannot find the app, first check the storefront and the Apple Account used for purchases, then open the product page from this site’s access guide. Missing search results do not necessarily mean the app has been removed. Do not pay again before checking your account.
Check the App Store page for purchase availability on iPhone and iPad, as well as compatibility and universal purchase terms for Mac / Apple TV. After changing devices, app access and configuration migration must be handled separately. Restoring the app does not automatically restore the subscription, selected server, current Config, or system VPN authorization to their previous states.
When reinstalling or changing devices, sign in to the App Store with the original purchase account, find Shadowrocket in Purchased, and check the download button. If the page still shows a price, first verify that you are using the original account, the storefront is the same, and the purchase appears in your history. Check these before proceeding. Family Sharing availability is also determined by the App Store listing; do not assume that one successful restore applies to every account.
Manage future updates through the App Store. Before updating, you can review the store’s release notes and keep a copy of any configuration details you need. If interface elements move after an update, use English labels such as Home, Config, and Settings to find them. This guide does not list specific version numbers or release dates, so temporary details are not mistaken for permanent requirements.
Reading Notes
After your first connection, follow the guide for your situation: check purchase history when changing devices, troubleshoot connection issues layer by layer, or start with minimal rules to route selected websites. Interface labels remain in English so you can match them in the app.
Start with the original purchase account and purchase history, then follow the checks before redownloading. After restoring the app, check service details, the current Config, and connection authorization separately so purchase issues are not confused with connection issues.
Read article →An enabled switch does not prove that websites are reachable. Check the server, Global Routing, dns-server, and rule policies in order. Keep one comparison condition constant each time to narrow down where requests are failing.
Read article →List target domains with DOMAIN-SUFFIX, handle other requests with FINAL,DIRECT, and set Global Routing to Config. Includes a verification approach to distinguish valid syntax from rules that actually match.
Read article →