Genuine App Store app · Official Manual

Shadowrocket
User Guide

Shadowrocket is an Apple-platform client primarily for iPhone / iPad. It supports rule-based routing and is a one-time purchase on the App Store. Verify the app is genuine, then import your own existing server details.

Shadowsocks Trojan WireGuard On Demand
Available fromApp Store
PaymentOne-time purchase
App ID932747118
ReferenceApp Store listing and in-app settings

Device Compatibility and App Store Access

Check device compatibility before purchasing. Installing the app and preparing server details are separate steps. Verify that your existing details use the right protocol and include all required fields; having the app installed does not guarantee you are ready to connect.

iPhone

Verify the app on its App Store product page, then purchase and install it. For your first use, add your existing server or Subscribe details in Home, then select the server you want to use by default. When you turn on the connection, iOS will request permission to add a VPN configuration. Proceed after confirming that Shadowrocket initiated the request.

Check the App Store listing for system requirements. If the purchase button does not show what you expect, first check your current store account and purchase history. Troubleshoot store display issues separately from connection problems in the app. Once your server details are ready, follow the tutorial to verify each step.

Getting Shadowrocket on iPhone

iPad

The iPhone and iPad instructions are the same. Use the Apple ID that made the original purchase and find Shadowrocket under your App Store purchases. Check the App Store listing for purchase availability and system requirements. After installation, confirm that your device has usable server details and a Config.

A larger screen does not change how rules are matched. Before connecting for the first time, check the default server, Global Routing, and the current Config. Restore your purchase history and configuration data separately; restoring the app does not necessarily restore every connection setting. Review the imported settings and test the connection.

Getting Shadowrocket on iPad

Shadowrocket is also available from the same App Store on Mac / Apple TV. Check the App Store listing for compatibility, system requirements, and purchase availability.

Rules, Config, and Connection Diagnostics

First, distinguish server details, Config, and the connection switch. Server details determine where you connect; Config determines how requests are handled; the switch controls whether a connection is established. When troubleshooting, change one item at a time so you can compare results.

Rule: Choose a policy based on the request destination

Rule-based routing assigns different handling policies to different destinations. Check Rule in Config and select that Config under Global Routing so it is used to process requests. Rules are usually matched in order, so put specific conditions before fallback rules. DOMAIN-SUFFIX matches domain suffixes, PROXY selects the proxy policy, and DIRECT selects a direct connection. This example explains the syntax, not a complete configuration. After making changes, check how the target request matched; the connection switch alone cannot tell you whether a rule took effect.

DOMAIN-SUFFIX,example.com,PROXY
DOMAIN-KEYWORD,example,PROXY
FINAL,DIRECT
Replace the example domain with your actual destination

Global Routing: Understand Config / Proxy / Direct

Config mode handles requests according to the current configuration. Proxy mode helps test how requests behave when handled by the selected server. Direct mode connects directly. These modes change how requests are handled; they do not change or repair server authentication details. Before first use, check the current mode. When troubleshooting rules, switch back to Config; when checking a server, keep test conditions consistent. Do not change the mode, replace the server, and modify DNS all in one test, or you will not know which change affected the result.

Traffic information in Data can help with observation, but it is not a measure of connection quality. iCloud sync is for managing data and is separate from whether the current connection works. The exact locations of features and options are shown in the app. For details on individual features, see Feature Guide. If timeouts, DNS errors, or connection-switch problems persist, use the Troubleshooting Manual to check each symptom.

Three Checks for Your First Connection

The steps below assume you already have your own server details or subscription. First establish a connection you can verify, then add rules gradually. Avoid changing several advanced settings at once.

Step 01 · Details

Add Server / Subscribe

To enter details manually, check Type in Add Server first, then fill in the address, port, and authentication fields. If you have a QR code, use Scan QR Code and confirm that the recognized details are yours. If you already have a subscription, import it with Subscribe. After saving, return to Home and make sure the entry appears complete.

An imported name is only a label; it does not mean that the server is selected. Tap the server you want to test and check its selection mark. If the details come from an old backup, confirm that the address and authentication information are still valid. Do not include links or QR codes containing credentials in public support images.

Step 02 · Mode

Check Global Routing

For rule-based routing, select Config and confirm the current configuration file. To see whether a rule affects a destination, run a comparison test without changing your existing settings, then restore the intended mode when you are done. Mode names and the PROXY and DIRECT keywords in rules refer to different things.

To troubleshoot rules, check the current file, match order, and final policy. Editing a file without selecting it, or checking rules outside Config mode, can produce unexpected results. Start with simple settings, confirm the basic connection, and add conditions afterward.

Step 03 · Verify

Turn on the connection and test access

Turn on the connection switch in Home and allow the VPN configuration when prompted by iOS. Then check the connection status, run Connectivity Test, and finally visit the destination you want to verify. System authorization, an enabled switch, and successful access to a destination are three separate checks.

If it fails, disconnect and confirm that the underlying network works, then review the server details and test method. Note whether all requests fail or only some destinations. If all requests fail, check the connection setup first; if only some fail, review rules and DNS. Record only the information needed for troubleshooting, and remove personal credentials before sharing.

If the switch is on but you cannot access a destination, do not assume the rules are at fault. First check that the server selected in Home is the right one, then confirm your existing details are valid and review the test and actual request results. If a subscription update failed, troubleshoot fetching the details separately. If only a few domains fail, check their match results without changing your current settings. This breaks a vague connection problem into steps you can reproduce and verify.

View the full tutorial →

Verify the App, Purchase It, and Restore Purchases

This is Shadowrocket’s official website and manual. Get the app only through the App Store; refer to its listing for purchase details and to the app itself for the settings shown.

Check the Developer, Icon, and App ID

Official Shadowrocket app icon

Developer: Shadow Launch Technology Limited
App ID: 932747118

On the product page, first check the app name and official icon, then verify the developer’s full name, and finally confirm that the link contains id932747118. Do not rely on the name or icon alone; all three details should match. App Store search may show similarly named results, so check the product page rather than relying on the search list.

Shadowrocket is a closed-source commercial app. Verify its authenticity using information available directly in the App Store, not unverified ratings, user counts, or promotional claims. The app icon used here corresponds to the official App Store artwork. Complete the purchase in the store, and confirm the product page again before paying.

App Purchase ≠ Server Subscription

A one-time purchase covers the client app only; it does not include servers, a subscription, or connection service. You need your own valid details and should confirm the protocol, address, port, and authentication method. This site does not provide, sell, or recommend servers or subscriptions; it explains how to import details you already have and understand the app’s settings.

The reference price for the US storefront is $2.99. Prices appear in local currency in other storefronts; check the App Store listing for the actual price. The app purchase and the validity of any existing service are managed separately. The app can still open even if your server details are no longer valid; a subscription can update successfully even if the selected server cannot connect. Check each separately when troubleshooting.

Before purchasing, read the getting-started instructions to learn what details you need. After purchase, test your first connection before setting up everyday rules. For issues involving server credentials or subscription authorization, check the source of your own details; repeatedly reinstalling the app is no substitute for checking the settings.

Store Availability and Account Region

The product page, currency, and purchase status depend on the current App Store storefront and account. If the link opens but the content shown on your device differs, first check the account used for purchases, then review compatibility and the store’s guidance. Always check the App Store listing for system requirements instead of inferring compatibility from the device name.

Check purchases on iPhone and iPad under the account that originally bought the app. For other devices, check the App Store listing for compatibility and purchase availability. If the listing does not show the expected purchase status, first review your purchase history and account status. Store issues and server connections in Home are separate processes; track and troubleshoot them separately.

Before switching devices, confirm that you can find the original purchase record and back up any configuration you want to keep. This lets you verify app access and data restoration separately, avoiding the mistaken assumption that the purchase failed when the details simply have not been imported to the new device.

Restore Purchases and App Store Updates

After changing devices or reinstalling, use the Apple ID that made the original purchase to find Shadowrocket in your App Store purchases. Restoring the app restores your eligibility to get the client; check server details, subscriptions, Config, and on-device connection authorization separately. After restoring, review Home and the current configuration instead of assuming every setting has transferred from your old device.

Manage routine updates through the App Store. You can use automatic updates in system settings or check for updates in the store. Keep important configurations before updating. If something goes wrong afterward, check the selected Config, Global Routing, default server, and On Demand, then troubleshoot based on the specific symptoms. Avoid changing several settings in a row without noting their original values.

After migrating, repeat the steps: select a server, confirm the mode, connect, and test. Even if a configuration has the same name, check its contents and availability. See Restore Purchases for the restoration steps. For persistent connection issues, use the Troubleshooting Manual to investigate each setting.

Three App Store checks: developer, official icon, and App ID

Configuration Scenarios and How-To Guides

These articles cover protocol settings, your first connection, and routing specific domains. Choose the topic that matches your issue and follow the relevant fields or checks. Before editing a configuration, keep a copy of the current working file.

Protocols

Trojan Password, SNI, and Allow Insecure

Follow the Add Server field order to understand Address, Port, Password, and Peer/SNI, and learn the difference between the server address and the TLS name. For authentication or certificate errors, first verify where each value came from. Do not change security options arbitrarily just to make a test pass.

Read the parameter guide →
Getting Started

First Connection: Select a Server, Turn It On, and Test

Start by selecting a default server in Home, then follow the checks for the selection mark, VPN configuration authorization, and Connectivity Test. Learn the difference between importing details, establishing a connection, and reaching a destination. For users who have added their details but are unsure what to do next.

Read the connection steps →