Shadowrocket User Guide

Frequently Asked Questions about Shadowrocket

Purchases and restores, subscription imports, connections, and routing checks.

Choose a question category, then follow the checks in order. Change one setting at a time and keep the exact error message so you can identify what changed.

  • 4 categories
  • 20 how-to answers
  • Tap a question to expand

Purchase & authenticity

Check the storefront and purchase history first, then follow the steps to get or restore the app.

Can't find Shadowrocket in the App Store? What to check first

Check the app name, then verify the storefront used by the Apple ID for App Store purchases. Shadowrocket may not appear in the mainland China storefront. On your device, go to Settings and check Apple ID, Media & Purchases, View Account, and Country/Region; labels may vary by system version. Availability depends on the account's region and the app's storefront availability, not solely on your device's physical location. If you need to change your account region, use Apple's official process and review the requirements for account balance, subscriptions, and payment methods first.

How can I verify that the App Store listing is the genuine Shadowrocket app?

Check three details on the App Store product page: the developer is Shadow Launch Technology Limited, the app icon matches the official icon shown in this site's header, and the product URL contains id932747118. A similar name alone is not enough. Review the verification steps on the purchase page, then open the App Store from there. Before paying, confirm the app name and developer again. Check the current App Store listing for the latest price, compatibility, and update history.

Do I need to buy Shadowrocket again after changing or restoring my device?

First, sign in with the Apple Account used for the original purchase. Find Shadowrocket in the App Store account's Apps or Purchased list, then tap the cloud icon to download it again. Menu names may vary by system version. If a price still appears, check the account used for Media & Purchases, your purchase history, and the storefront before paying again. Re-downloading the app does not restore its configuration. Restore subscriptions, rules, and personal settings separately from any information you saved beforehand.

What does the one-time purchase include? Does it include server service?

Shadowrocket is a paid client; its one-time purchase does not include a server plan. The purchase covers use of the app. Server availability, data limits, service period, and subscription maintenance depend on the service you already have. Get subscription details from your service provider and import them using this guide. The US storefront price is about $2.99; other storefronts display local currency, and the checkout page shows the actual price. Changing servers or updating a subscription does not require buying the client again.

Does Family Sharing apply, and how can I check compatibility with other Apple devices?

Check the App Store product page to see whether Family Sharing is supported, then verify family members' purchase-sharing settings and storefront requirements. The App Store listing determines whether the app is available to them. This guide focuses on iPhone and iPad. For Mac, Apple TV, and Apple Vision compatibility, check the compatibility section on the same product page. Refer to the App Store listing for system requirements and whether the purchase is universal; don't infer purchase eligibility from the device name alone.

See how to verify the genuine App Store listing →

Installation & first launch

Understand the difference between system authorization, server details, and an active connection.

Why does Shadowrocket ask to add a VPN configuration the first time I connect on iPhone?

The first time Shadowrocket connects, iOS asks for permission to add a VPN configuration. This allows the client to handle network connections according to the selected mode. Make sure the request appears after opening Shadowrocket, then follow the system prompts to allow it and authenticate your device. Once authorized, return to Home and check the selected server and connection toggle. Adding a configuration doesn't confirm that the server is valid or the connection is working; test access to verify.

The connection toggle won't turn on, or turns off right away. How do I troubleshoot it?

First, make sure Home shows an available server with all required fields filled in. Try the toggle again and check for any pending system authorization prompt. Then check the VPN settings in iOS to confirm the configuration exists and that another VPN connection isn't active at the same time. If your device is managed by an organization, its policies may restrict connections; check with your administrator. If the issue persists, restart the device and note the exact error message. Avoid repeatedly deleting configurations, which could remove existing data.

Can I install Shadowrocket on iPad? How does it differ from iPhone?

Get Shadowrocket for iPad from the same App Store product page. Check the listing for system requirements. If you've already purchased it, make sure Media & Purchases is signed in with the original purchase account, then look in Purchased. A larger display or landscape orientation may change how lists and details are arranged, but interface labels such as Home, Config, Data, and Settings are still useful for finding controls. A purchase record doesn't import subscriptions; check your server details and configuration on the iPad.

The interface is in English. Which sections should I learn first?

Use Home to check servers and connection status. Add Server is where you enter existing server details; Scan QR Code reads a compatible QR code. Config manages configuration files and rules, Data shows traffic records, and Settings contains app preferences. Global Routing sets how the current connection is handled. Use the interface labels to find the right controls, then follow the instructions. Avoid changing several settings at once; otherwise, it can be difficult to identify what caused a problem.

What should I prepare before using Shadowrocket? Do I need to import everything again after an update?

Have a valid subscription from your service provider or complete details for a server you already have, and make sure your device has working internet access. Before your first use, read the instructions and follow the steps in order: import, choose a mode, authorize the connection, and test it. App updates come through the App Store and usually don't require reimporting. After an update, check that your existing list and selected configuration are still there. Keep a backup of important settings, and don't include subscription links or authentication details in public screenshots.

Follow the first-use guide step by step →

Subscriptions & server imports

Start with a subscription or server details you already have, and confirm what type of information it is.

Where do I import a subscription link?

Get the subscription from your service provider. Copy the full link, open Add Server from Home, select Subscribe, enter the link in URL, and save. The layout may vary by app version. Wait for the import to finish, then check that the corresponding group and servers appear on Home. Select a server to test it. A subscription URL retrieves server details; it isn't a regular website address or a Config file URL. Confirm what type of information you have before importing it.

Subscription import failed or the list is empty. What should I check, in order?

First, check that the link is complete and doesn't contain extra spaces, line breaks, or explanatory text. Confirm that it's in a subscription format the client supports. With the connection toggle off, make sure your internet connection works and the subscription is still valid. A login page, error message, or empty response can't create a server list; ask your service provider to verify the link and format. Don't post a full subscription link publicly or keep adding the same link instead of troubleshooting it.

How do I update a subscription? Should I delete the existing group if the update fails?

Find the subscription group on Home and use its update action. Wait for it to finish, then check the server list and any status message; the control may vary by app version. If the update fails, keep the existing group. Check your internet connection, the link's validity, and the response from your service provider before trying again. In Settings, check the subscription options for automatic updates when opening the app. Automatic updates can't fix an expired link or guarantee that every server in the list still works.

When should I use a server link, a QR code, or manual entry?

For a single-server share link, use the import action recognized by the app. For a QR code, scan it with Scan QR Code and verify the details before saving. If you only have the address, port, and authentication details, select the matching protocol in Add Server and enter each field. Shadowsocks, VMess, VLESS, Trojan, Hysteria2, and WireGuard use different fields; don't assume their settings are interchangeable. If information is missing, ask your service provider instead of guessing.

Can a subscription update change manually added entries? How should I back up configurations and subscriptions?

Subscription updates use the latest remote content, so entries in a group may be added, removed, or renamed. Don't rely on local edits to subscription entries as a permanent record. Keep manually added entries separate from subscription-sourced ones, and save important parameters securely. When backing up, check server details, subscription URLs, and Config files separately; don't assume any one of them contains all your settings. After restoring, verify the selected server, current configuration, and Global Routing to make sure they match your intended setup.

Read how to update subscriptions and troubleshoot failures →

Routing rules & troubleshooting

Verify your internet connection first, then compare the server, mode, and rules.

How do I choose between Config, Proxy, and Direct in Global Routing?

Config uses the rules in the current configuration file to route traffic. Proxy generally sends connections through the selected proxy server. Direct generally connects using the device's own network. For everyday rule-based routing, check that Config and its rules are set up correctly. To troubleshoot, briefly compare Proxy and Config to see whether routing rules are involved. Direct won't fix a server issue or replace a working internet connection.

It says connected, but I can't access the internet. Should I check the server or the rules first?

Turn off the connection and confirm that your current Wi-Fi or cellular network works. Reconnect, then check that the selected server is valid, its authentication details are correct, and the service hasn't expired. Compare Proxy and Config. If both fail, check the server, your internet connection, and DNS first. If only Config fails, review the matching rules and selected policies. A VPN-connected status only means the tunnel is active; it doesn't prove that the remote server or destination website is reachable.

Some websites won't load. How do I check the rules and DNS?

Note the affected domain and current Global Routing mode, then review the relevant request records to see which rule matched and which policy was used. Rules such as DOMAIN-SUFFIX are generally evaluated in configuration order, so an earlier match can affect what happens next. If the domain doesn't resolve, check both your current network and the DNS settings in your configuration. If it resolves but the connection fails, check the selected server. Back up Config before making changes, change one setting at a time, and test the same destination again.

Do Connectivity Test and Data prove that the connection is working perfectly?

Connectivity Test shows reachability under specific test conditions. Results depend on the test target, network path, and server response, so they don't represent every website or app. Data lets you review traffic records and trends; its readings aren't the same as your service provider's billing records. To verify a connection, consider test results alongside actual access and request records. If a test succeeds but the target app still fails, check the domains it uses, the rules, and the network conditions.

Battery use increases when connected. What should I check in On Demand?

Continuous traffic, frequent reconnects, weak network signals, and extensive diagnostic logging can all increase battery use. Compare activity over the same period on your device's battery screen, then check Data for sustained traffic rather than relying on battery drain alone. If you don't need automatic connections, check whether On Demand is configured as expected. It may reconnect when its conditions are met, so turning off the Home toggle alone may not prevent a later automatic connection. Compare results under similar network conditions and usage periods after making changes.

Learn what rule keywords and settings mean →