Official Site · Official Manual
Choose the client for your platform, import an existing subscription and configure rule-based routing. iPhone/iPad: $2.99 one-time purchase on the App Store; Mac, Windows, Android and Linux: free.
Current version Loading · iPhone/iPad: $2.99 one-time; Mac, Windows, Android and Linux: free
01 / Get the app
Choose your device, then follow the download guide to install. Two ways to get Shadowrocket: iPhone/iPad on the App Store for a one-time $2.99 purchase; Mac, Windows, Android and Linux versions are free. Desktop and Android installers are available from this site under /dl/.
Use Shadowrocket on your phone or tablet to manage existing servers, subscriptions and configurations. Check your purchases on both devices using the same purchasing account. See the App Store listing for system requirements. Before buying, verify the developer, icon and app ID, then check availability in your account's storefront.
Separate installers are available for Apple Silicon and Intel Macs. Open About This Mac to check your chip or processor, then choose the matching file rather than guessing from the Mac's appearance or purchase year. If macOS displays a warning on first launch, follow the download guide's Privacy & Security steps to review and allow the app.
Get the 64-bit installer from the download page, and save any configuration you're editing before installation. If SmartScreen blocks it, first confirm the file came from this site under /dl/, then select More info → Run anyway. On a computer managed by an organization, check with your administrator before installing.
Use the arm64 installer provided on this site. After downloading it in your browser, if Android asks for permission, open that browser's Install unknown apps setting and allow installation. You can revoke the permission after installation. Import your existing subscription in the app, then approve the system VPN prompt when you connect for the first time.
Choose the package format for your Linux distribution. Install deb and rpm packages with the relevant package manager; for AppImage, grant execute permission first. You don't need to install all three formats. The download guide lists installation commands and permission checks so you can confirm your current package type before updating.
02 / Configuration and features
Server details determine how a connection is established. Global Routing sets the routing mode, while Config controls the specific matching order. Understand these three layers before changing individual settings to make troubleshooting easier.
Rule-based routing selects PROXY, DIRECT or REJECT for different destinations. For everyday rule-based use, select Config under Global Routing on Home and confirm the intended file is enabled in Config. Rules are generally evaluated from top to bottom: put specific domains and local network rules before fallback rules, with FINAL handling remaining connections. After making changes, check actual traffic and connection logs to see which rules matched; don't rely only on whether a toggle is on. The example below illustrates syntax only: example.com is not a real server or a complete, ready-to-use configuration.
DOMAIN-SUFFIX,example.com,PROXY
FINAL,DIRECTOn Demand triggers connections when configured conditions are met; it does not fix an unavailable server. First select a server manually, turn on the connection and test it, then review On Demand in Settings. Distinguish between Wi-Fi and cellular conditions, and test what happens when switching networks. If the connection starts again after you turn it off manually, review these conditions and the system VPN status. During troubleshooting, you can temporarily disable On Demand to avoid automatic reconnections interfering with your observations. Once the basic connection works, restore the conditions you need.
Shadowrocket supports multiple protocols. When adding a server, choose Type based on the server details you already have, not on assumptions about speed. Shadowsocks, VMess, VLESS, Trojan, HTTP, SOCKS5, WireGuard and Hysteria2 use different fields. Matching addresses and ports do not make their authentication, transport or TLS settings interchangeable. Import a complete link or scan a QR code when possible; if entering details manually, check each field. If the connection fails, first verify the type and required fields, then check transport settings. Battery use and speed also depend on network quality, server load and actual traffic.
A subscription can import and update multiple existing server entries. Get the link from your own provider, then choose Subscribe in Add Server, enter a recognizable name and the complete URL, save it and update. If the list is empty, check in order that the link is complete and still valid, and that its response can be recognized. Don't keep changing the rules file. Subscription URLs may contain access credentials, so redact them from screenshots and diagnostic materials before sharing. Note the currently selected entry before updating, then check that it is still present afterward. An update does not determine which servers are available.
https://example.com/sub?token=xxxxFormat example only; no connection service is provided.
Config files contain rules and related settings, while server subscriptions mainly manage connection entries. They are different types of links and cannot be imported interchangeably. In Config, first confirm which file is enabled, then review sections such as General, Rule and Hosts. Save a copy before editing and change one type of setting at a time so you can revert if something goes wrong. If you use iCloud sync, check the sync setting and the actual file on each device; sync is not a separate backup. If your current configuration is stable, keep the original before testing new rules. Avoid replacing servers, DNS and routing policies all at once, so you can compare results.
Connectivity Test checks the current connection. The Test Method in Settings affects how the test runs, and its result does not replace checking access to the actual destination. If something goes wrong, first confirm that your regular network works, then check the selected server, Global Routing and rule matches. Data shows traffic statistics, which should not be treated as a direct equivalent of your provider's usage totals. If you need Diagnostics, note the network and steps involved, and keep only the information needed to troubleshoot. Remove subscription URLs, passwords and other credentials before sharing materials.
03 / First connection
This example covers first-time setup on iPhone/iPad. Before you begin, have an existing subscription link, QR code or server details ready. Installing the app does not provide a working connection. Follow the steps below in order, completing each one before moving on.
On Home, open Add Server. For a single server, enter the details according to its Type. For a subscription, select Subscribe and enter the complete URL; to use a QR code, choose Scan QR Code. After saving, return to the SERVER group and confirm the entry appears. A name is only for identification; it does not replace the address, port or authentication details. After scanning, check that the imported type matches the server details.
Add Server / SubscribeConfig routes traffic according to the enabled file's rules; Proxy sends applicable traffic through the selected proxy; Direct uses a direct connection. For everyday use with existing rules, select Config and check that the relevant file is enabled. Don't confuse Proxy in Global Routing with PROXY in rules, and avoid changing multiple modes at once when the cause is unknown.
Global Routing · Config / Proxy / DirectTap the dot beside a server to select it, then turn on the connection switch. When the system prompts you for the first time, allow it to add a VPN configuration. Run Connectivity Test, then open a page you actually need to access. If the test or page fails, check the network, server, mode, DNS and rules in that order. An enabled switch does not mean every connection has succeeded.
Connectivity Test04 / Authenticity, purchases and usage
Shadowrocket is a closed-source commercial app. To verify it, check the product name, developer and app ID rather than relying on similar names in search results. This is the official Shadowrocket site and manual. The information below helps distinguish app downloads, account purchases and connection setup.
CLIENT / CONNECTION
iPhone/iPad: $2.99 one-time purchase on the App Store; Mac, Windows, Android and Linux versions are free. Getting the app and preparing server details are separate steps.
This site does not provide, sell or recommend servers or subscriptions. Before connecting, prepare your own existing subscription or server details. This manual explains how to import, configure and troubleshoot them.
View pricing and download details →On the App Store product page, first confirm the name Shadowrocket, then check the developer, Shadow Launch Technology Limited, and app ID 932747118. The official icon is a blue-and-purple outlined rocket on a white background, matching the icon in this site's header. Don't rely only on a Chinese nickname, search ranking or similar-looking artwork. The app ID at the end of the product page URL is a stable way to identify the listing. If the name, developer or ID doesn't match, return to the download guide and open the product page again instead of buying a similar listing.
Whether the App Store shows the app depends on the storefront for the signed-in account, not the device's interface language. If the app isn't available in the mainland China storefront, check your account region and purchase history instead of repeatedly changing your search terms. Before changing your own account's region, review your balance, active subscriptions and payment method, and follow the region settings in your system account. See the App Store listing for iPhone/iPad system requirements. Checking compatibility before installation is more reliable than inferring requirements from an old guide.
When you use the same purchasing account on iPhone and iPad, you can find Shadowrocket in App Store purchase history. Before changing devices or reinstalling, confirm which account was used for the purchase; the device's signed-in account may differ from the one under Media & Purchases. Reinstalling the app does not guarantee that old server details will return, so check your configuration backup and sync status. iPhone/iPad: $2.99 one-time on the App Store; Mac, Windows, Android and Linux versions are free. Keep these two ways of getting the app separate from any service term offered by a provider.
Mac downloads are available for Apple Silicon and Intel; Windows has a 64-bit installer, Android an arm64 package, and Linux deb, rpm and AppImage packages. All installer links on this site point to /dl/ paths through the download page; there's no need to search for repackaged files. If the system blocks the first installation, verify the source, then follow the installation prompts guide on the download page. Permission steps differ across Windows, macOS, Android and Linux; don't apply instructions for one system to another. Managed devices must also follow their administrator's installation policies.
Check for iPhone/iPad app updates in the App Store; get desktop and Android installers from this site's download page. Before updating, note the server in use, the Global Routing mode and the Config file, and keep a copy of any configuration you need. Updating the app, refreshing a subscription and replacing rules are three separate tasks. Do them one at a time and verify after each step. If the connection changes, this makes it easier to identify whether the cause was the app, server list or rules, instead of starting over. Version information on this page is read dynamically by the download system; don't use numbers from old articles to decide what to install.
Subscription URLs, passwords, keys and QR codes may contain access credentials. Keep their full contents when importing, but redact them before sharing publicly. Don't mistake example.com in a tutorial for a real server, and don't overwrite working details with a new subscription link before backing them up. To troubleshoot, first note the steps taken, network type and error message, then collect only the necessary excerpts from Diagnostics. A successful Connectivity Test confirms only that particular check; verify rule matches and access to the actual destination as well.
05 / Technical notes
After the basic setup, continue with the topic that matches your question. Interface labels are kept in English. Protocol references explain fields and types in existing server details; they are not for evaluating or recommending providers.
After importing, you still need to select a default server. Follow the steps on Home to check the selection dot, connection switch and system permission, then run Connectivity Test. This distinguishes a saved entry from a verified connection.
Read the connection guide →Understand the differences between Types through protocol design and transport characteristics, including VMess, VLESS, Trojan, HTTP/SOCKS5 and WireGuard. Identify the type used by your existing configuration, then check its corresponding fields.
Read the protocol overview →Understand common labels and switches by where they appear in the interface. Distinguish Proxy in Global Routing from PROXY in rules and from a server entry to avoid changing the wrong setting when names look similar.
Read the interface terms guide →