A rule-based proxy client for iPhone / iPad. Use rule-based routing to control how connections are handled. The app is a one-time purchase. Verify the App Store listing, then import your existing configuration.
DOMAIN-SUFFIX
VLESS
On Demand
Server details determine how a connection is established; the configuration determines how requests are routed. Understand these two layers before adjusting the relevant settings.
In Home, select Config under Global Routing to match requests against the rules in the active configuration, in order. DOMAIN matches an exact domain, DOMAIN-SUFFIX matches a domain and its subdomains, and IP-CIDR matches an IP address range. Once a rule matches, the request is handled by DIRECT, PROXY or REJECT; FINAL catches requests that matched no earlier rule. To troubleshoot a specific site, check the active configuration and the rule that actually matched before changing rule order. The snippet on the right is for syntax illustration only; example.com is a teaching example, not a usable server.
Explore features →[Rule]
DOMAIN,api.example.com,PROXY
DOMAIN-SUFFIX,example.com,PROXY
IP-CIDR,192.168.0.0/16,DIRECT
FINAL,PROXYOn Demand triggers connections based on configured network conditions. It does not supply missing server details or fix an expired subscription. First connect manually in Home and confirm that a webpage loads, then check the On Demand conditions in Settings. Once configured, test on each network you regularly use. If the connection starts again after you turn it off manually, check these conditions and the related VPN settings in iOS. During troubleshooting, temporarily disable automatic triggers so each test starts from the same state. Re-enable the conditions you need once you identify the cause.
Explore features →Shadowrocket supports multiple protocols. When adding a server, use the information you already have and select the matching Type in Add Server. Protocols such as Shadowsocks, VMess, VLESS and Trojan require different authentication and transport fields; the same address and port do not make them interchangeable. After entering Host and Port, check the applicable fields for credentials, TLS, server name and transport path. Preserve the complete import details where possible, and do not guess parameters from a server name. The protocol determines the connection format; actual connectivity still depends on server status and your network.
Explore features →ShadowsocksVMessVLESSTrojanHTTPSOCKS5WireGuardHysteria2
Get subscriptions from your service provider. They typically import and update multiple server entries, while a single share link describes one server. Before importing, identify which type of information you received and choose the matching option. Do not use a webpage address or a single share link as a subscription URL. If an update fails, check in order that the URL is complete, your network can reach it, and the response is still in a format the app supports. A successful import only means the entries were read; you still need to select a server and test the connection. Subscription URLs may contain credentials, so do not include them in screenshots or public posts.
Explore features →Configuration files in Config define global behavior, rules and other request-handling settings. [General] contains global options such as DNS, [Rule] determines match order, and [Host] is used for local mappings. Before editing, keep a copy of the original and confirm you are changing the active configuration. Change one setting at a time, then test with a real request. iCloud sync can help manage supported configuration data across devices, but it is not a complete backup and does not mean another device has selected the same server. Confirm system VPN permissions separately on each device.
Explore features →[General]
bypass-system = true
dns-server = system
ipv6 = false
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
FINAL,PROXYConnectivity Test checks how the selected server responds using the current test method; on its own, it cannot confirm that webpages, DNS and all traffic are working properly. After connecting, open the target webpage and review traffic in Data alongside Diagnostics in Settings. If only certain domains fail, check the rules and DNS resolution first. If all requests fail, check the system network, connection permissions and server details. Record what triggered the issue and any error messages, changing one variable at a time. Before sharing diagnostic details, remove subscription URLs, credentials and personally identifying information.
Explore features →Shadowrocket is available exclusively through the App Store. Before your first purchase, verify the product details. If you have already purchased it, check your current App Store account and purchase history before deciding what to do next.
Check the app name, developer and app ID in the App Store before purchasing or redownloading. The first time you connect, iOS will ask to add a VPN configuration. Grant permission only if you initiated the action. Installing the app does not provide server details; you still need to import your own configuration and select a server.
View the iPhone guide →Check your purchases using the same Apple ID you used to buy the app. Purchase eligibility is as shown on the App Store page. A larger screen can make configuration details easier to compare, but check the selected server, Global Routing and system permissions on each device. Do not skip verification just because another device connects successfully.
View the iPad guide →Shadowrocket is also available from the same App Store for Mac and Apple TV. System requirements and compatibility are as shown on the App Store page.
If the App Store page is unavailable or the price differs from what you expected, first check the current storefront and signed-in account. Store availability, local currency, compatible devices and purchase eligibility are determined by the information on the product page; do not rely on search result snippets instead.
View availability details →These steps assume you already have your own subscription or server details. For your first setup, establish a repeatable manual connection and confirm it works. Then consider On Demand and more detailed rule changes.
Get subscriptions from your service provider. First identify whether you received a subscription URL, a single share link or parameters to enter manually. Use the corresponding import option, then return to Home and check that the server entry appears. When entering details manually, check the Type, Host, Port and any protocol-specific credentials. If the list is empty after importing, check the source content and format before repeatedly toggling the connection switch.
Use Scan QR Code to read an existing QR code. Before importing from the clipboard, make sure the copied content is complete. QR codes and links may contain access credentials, so handle them like passwords. Keep the original details for reference, but never post them in a public question.
Config mode routes traffic according to the active configuration file. Proxy mode sends requests through the selected proxy route, while Direct mode uses a direct route. For your first test, note the current selection and server name so you can compare results without losing track after switching between modes. To test routing rules, use Config and confirm which configuration is active there.
PROXY in a rule is a policy keyword; it is not the same as Proxy mode in the interface. The former is the action for a specific rule, while the latter is the overall Global Routing selection. If a request takes an unexpected route, check the mode first, then the rule order, and only then edit individual rules.
Select a server, turn on the connection, and approve the VPN configuration when prompted by iOS. Then run Connectivity Test and open an actual webpage. A connected status only indicates that the connection process has started; it does not replace testing at the app level. Try an ordinary webpage and a site you regularly need to access, and check whether only certain domains fail.
If the test responds but webpages will not load, check DNS, matched rules and the destination service. If all requests time out, start with your network connection and server details. Test again after switching networks, and record what changed. The full troubleshooting guide follows the sequence “symptom, checks, next step” so you can return to a clear point when something fails.
This is the official Shadowrocket site and guide. Shadowrocket is a closed-source commercial app. Verify the product using the developer, official app icon and app ID shown on the App Store page. Purchases and updates are handled through the App Store.
932747118
One-time purchase
On the App Store product page, confirm the developer is Shadow Launch Technology Limited and compare the app with the official icon shown here. The id932747118 in the product page URL is the app ID. Do not identify the app by a similar name or icon color alone; check all three details together.
Follow the availability link on this site to the App Store, then verify the product page that opens. Search results may include apps with similar names; the app ID helps identify the exact product. Check the page for system compatibility and purchase requirements.
See where to verify →The app purchase does not include a connection plan. The U.S. reference price is $2.99 as a one-time payment. Other storefronts show local currency; the amount on the purchase confirmation screen is final. The purchase covers use of the app. You must obtain your own subscription or server details to connect.
This site does not provide, sell or recommend servers or subscriptions. Get subscriptions from your service provider. Your app purchase and subscription validity are separate: restoring the app purchase will not extend an existing subscription or provide missing server credentials.
View pricing and purchase details →Check your purchase status on iPhone and iPad using the same purchasing account. Universal purchase availability is as shown on the App Store page. Before changing devices or reinstalling, confirm the Apple ID used for the purchase, then look for Shadowrocket in your App Store purchase history.
Restoring the app and restoring configuration require separate steps. After redownloading the app, check your existing servers, active configuration file and connection permissions. If you use iCloud sync, verify what actually synced and what is selected; a sync-complete message does not confirm that the connection works.
Restore a previous purchase →App Store availability and billing currency depend on the account’s storefront. If you cannot find the app or complete a purchase, first check the information currently shown in the App Store and your account status. System requirements are as listed on the App Store page.
App updates are delivered through the App Store. Before changing configuration or updating the app, keep a usable configuration and any necessary server details. After updating, test using your usual steps. If something goes wrong, note the conditions, Global Routing selection and error message, then work through the troubleshooting steps one at a time. Avoid changing multiple settings at once.
Go to troubleshooting →After your first successful connection, explore the guides that match your next task. These three articles cover DNS resolution failures, choosing an import method and identifying share links—helping you check the steps between “imported” and “working.”
First distinguish DNS resolution failures from incorrect routing and destination connection failures. Then check how dns-server, system DNS and the configuration file interact. Test the same domain on the same network, one item at a time, rather than drawing conclusions from a single test.
Read the DNS troubleshooting steps →Compare what to import using Subscribe, Add Server, QR code scanning and clipboard import. Identify the type of information you have before choosing an option. After importing, check the entries, update results and selected server to avoid mistaking a format issue for a connection problem.
Read the import guide →Learn how to identify ss://, vmess://, vless:// and trojan:// links, and how managing a single set of server details differs from maintaining an updateable subscription. Focus on the field structure in examples; tutorial addresses are not usable connection resources. Never share real links that contain personal credentials.
Read about link formats →