Official Shadowrocket Guide
All-platform rule-based proxy client with rule-based routing. iPhone / iPad: $2.99 one-time on the App Store; Mac, Windows, Android and Linux versions are free.
Current version v2.2.92 · Mac, Windows, Android and Linux versions are free
Features / Reference
First distinguish the roles of server details, rule files and the connection switch: server details determine the connection destination, Config determines how traffic matches rules, and Global Routing determines the routing mode. Find instructions below by task; there is no need to change every setting at once.
Rule-based routing selects where a connection goes based on conditions such as domains and addresses. In Home → Global Routing, Config matches traffic against the selected configuration, Proxy uses a proxy connection, and Direct connects directly. For everyday rule-based routing, first confirm that Config is selected, then check the rule order: specific conditions should come before fallback rules. PROXY still requires a working server; rules do not provide connection resources. After making changes, test both proxy and direct destinations. The switch state alone does not confirm that the rules are working.
Home / Global Routing / Config / Proxy / Direct
Read about rule-based routing →On Demand triggers a connection when specified conditions are met, reducing the need to switch manually. Before using it, find the setting in Settings, read the conditions shown for your platform and confirm that a manual connection works. Automatic connection changes only how a connection is triggered; it does not fix incorrect server settings or an expired subscription. If a connection starts again after you turn it off, check whether any matching conditions remain. You can temporarily disable automatic triggers while troubleshooting, test each condition, then restore the original settings.
Settings / On Demand
Read about On Demand →Support for multiple protocols lets you use different server details you already have. In Add Server, select a Type first, then enter the address, port and authentication details. Required fields vary by protocol. Do not reuse the password and TLS fields for Trojan as WireGuard keys and addresses, or vice versa. After importing a link, check the key fields, especially for extra spaces introduced during copying. If the connection fails, first confirm that the protocol type matches the details from your service provider, then check the network. Do not change Type at random to troubleshoot.
Add Server / Type / Host / Port / Password
Browse protocol terms →Use Subscribe to import your subscription URL and update it when needed. Get the URL from your service provider. After adding it, check the group and server list, then select an entry to test. Updating a subscription refreshes server details; it does not update rules in Config. If you use multiple subscriptions, give each a recognizable name and keep them separate. Before deleting one, check whether any rules or selections depend on its group. Subscription links may contain authentication details; hide the full URL in screenshots, logs and shared content.
Subscribe / SERVER / Scan QR Code
Read the subscription and server management guide →Config manages rules and related settings; it has a different role from server subscriptions. Before editing, export a working copy and note which configuration is in use. When adjusting Rule, preserve the existing order and change only one testable condition at a time. On devices with iCloud sync, check the sync status, but remember that sync is not an independent backup and deletions may propagate to other devices. Before switching devices, save a separate copy of your configuration and check that subscriptions, manually entered servers and sensitive settings are safely stored.
Config / General / Rule / Hosts / Add Rule
See configuration and backup steps →Follow a consistent diagnostic sequence: first confirm the device can access the internet, then run Connectivity Test and determine whether one server or an entire group is failing. Test Method in Settings affects what the test measures; a latency result is not a download speed. Data can help you observe traffic changes, but it does not replace connection tests. If only some destinations fail, check the rules and DNS settings. Before sharing troubleshooting details, hide subscription URLs, passwords and keys; include only the necessary symptoms and steps already tried.
Connectivity Test / Test Method / Diagnostics / Data
Troubleshoot connection failures step by step →Start by importing one of your subscriptions or adding a server, then make a manual connection. Once it works, switch to Config and review routing. This helps distinguish server setting errors from rule errors. If you change the protocol, DNS settings, rule file and automatic connection conditions all at once, it is difficult to tell which change caused a failure. Keep the previous working state before each change, check the result, then continue.
An “connected” status means the system's connection state has changed; it does not mean every destination is reachable. Test the destinations you actually need and check Connectivity Test alongside the rules. Traffic shown in Data only indicates that data is passing through; it does not confirm that a subscription is complete or a specific rule matched. For English interface labels, check the glossary first, then return to the app.
Genuine app / Purchase and usage
Shadowrocket is a closed-source commercial app. This is the official Shadowrocket site and guide, with client downloads and configuration instructions. Verify the app using information you can check, and distinguish the client license, server connection details and rule configuration; they are not the same service.
On the iPhone / iPad App Store product page, first confirm the name is Shadowrocket, then check the official icon and developer, Shadow Launch Technology Limited. Finally, verify app ID 932747118 in the product link. Expand the full developer information if the name is long; do not rely only on truncated text in search results. Similar names do not mean the apps are the same.
Verifying the app and troubleshooting a connection are separate tasks. After installing the correct client, you still need your own server details. A temporarily unavailable server does not mean the app came from the wrong source. Get desktop and Android versions from this site's download page, confirm the installer URL is under /dl/shadowrocket/, and select the platform and format as instructed.
App Store / Region and system
App Store availability depends on the storefront associated with your account. If the app is unavailable in the mainland China storefront, searching the name repeatedly will not change the result. First check the account and region used for Media & Purchases in your system account settings, then follow the options available in your account to manage the region. Review requirements for balances, subscriptions and payment details before making changes; do not make changes blindly just to run one search.
For iPhone / iPad, check the App Store listing for system requirements. Check separately whether your device meets the requirements, the product page is available and your account has a purchase record. For details on the store listing, account region and restoring purchases, see the App Store download guide.
License / Two price tiers
The iPhone / iPad version costs $2.99 as a one-time purchase on the US App Store; other storefronts show local currency. Mac, Windows, Android and Linux versions are free. iPhone and iPad can use the same account's purchase history. When changing devices or reinstalling, check your purchases first and make sure you are signed in with the original purchasing account before restoring the download. Changing devices does not mean you need to purchase again.
Restoring the app does not automatically restore all connection details. Before changing devices, check configuration files, your subscription URL and manually entered server details separately. If you use iCloud sync, confirm it has completed and keep a separate exported copy. After restoring, verify your details before testing the connection to avoid importing duplicate entries multiple times.
Resources / What you need
The client provides configuration and connection features. The connection destination, authentication details and validity period depend on the service you already use. This site does not provide, sell or recommend servers or subscriptions. Before first use, get your own subscription URL or server details from your service provider and learn how to update them. Installing the app alone will not create a working server list.
If a subscription will not update, first check that the URL is complete, its authorization is still valid and the device is online. Do not post links containing authentication details in comments, screenshots or logs. If you need help troubleshooting, specify whether the failure occurs during download, import, update or connection, and share only error messages with sensitive details hidden.
Update the iPhone / iPad version through the App Store. Mac, Windows, Android and Linux users can get the latest installer from this site's download page. App updates change the client, Subscribe updates refresh server details, and Config updates modify rules and settings; none replaces the others. Before updating, note the working configuration and server selection. Afterward, test a basic connection before restoring personal settings.
If the system blocks the first launch on a desktop or Android device, confirm the file source and platform, then see the installation permission guide and follow the prompt shown by your current system. Do not ignore the warning or repeatedly run the installer, and do not mistake an installation permission issue for a server failure. If installation succeeds but the connection fails, troubleshoot the subscription, protocol settings and routing mode next.
Use Config for rule-based routing, and confirm the selected configuration is valid. Proxy uses a proxy connection; Direct connects directly. A mode cannot fix incorrect server settings. First confirm the server connects successfully, then choose a mode for your purpose. See the Global Routing glossary for details.
Check the group and server list, select a server to test, then review Global Routing and the current Config. A subscription provides server details; a rule file handles routing. Do not confuse the two. See the server management guide for specific steps, or the setup guide for your first connection.
Results depend on Test Method, the network path and the destination service; they do not guarantee that every connection will work. First identify the scope of the failure, then check protocol settings, system time and rules. Do not repeatedly change configurations based on a single latency result. Change one setting at a time and record whether it resolves the issue.
Articles / Task guides
Once the basic connection works, read the guide for the specific issue you encounter. When organizing multiple subscriptions, first identify their groups; for timeouts, determine the scope of the failure; before migrating to a new device, prepare a recovery copy. Avoid combining unrelated issues into a full reset.
When using two or more of your own subscriptions, name them by purpose and keep their sources separate before sorting and cleanup. Learn how to remove an expired subscription and check for duplicates after updates.
Read the multiple-subscription guide →Follow a consistent order: confirm local connectivity and the scope of the failure, check protocol settings, then verify the system time and automatic time settings. Treat a single-server failure differently from an entire group being unavailable.
Read the connection troubleshooting steps →Before changing devices, organize configurations, subscriptions and manually entered details separately. Understand the difference between sync and an independent backup, then restore them in order. Check groups, rule selection and connection status afterward to avoid duplicate imports.
Read the backup and restore steps →