Learn configuration, rules, and connections for Shadowrocket, a rule-based proxy client for iPhone / iPad. First verify the official App Store listing and one-time purchase details, then import your own subscription or server configuration.
Start by distinguishing server details, subscriptions, and the role of Config, then adjust connection behavior. Browse by task; interface labels and rule keywords remain in English.
To choose how each website connects, set Global Routing to Config in Home and confirm which configuration file is active. Config routes requests according to rules; Proxy and Direct select an overall proxy or direct-connection mode. Rules are evaluated from top to bottom: put specific domains first and use FINAL at the end for requests that do not match earlier rules. After making changes, check the actual match records rather than relying only on the connection switch. The example below illustrates syntax only; PROXY also requires a working server selection.
Read the guide ›
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
FINAL,DIRECTOn Demand triggers connection behavior based on conditions you set; it does not determine which rule a particular website follows. Before configuring On Demand in Settings, connect manually and test a webpage. Confirm that the server details, system authorization, and Config are correct, then set the network conditions. After changing behavior for Wi-Fi or cellular networks, switch between them and test each one. If a connection starts again after disconnecting, review the On Demand conditions first rather than assuming the switch is faulty.
Read the guide ›Settings
On Demand
Verify the connection manually
→ Set network conditions
→ Switch networks and test againShadowrocket supports multiple protocols, but sharing a protocol name does not mean that all parameters are interchangeable. In Add Server, choose the Type that matches your existing server details, then check Host, Port, and the relevant authentication and transport settings. Shadowsocks, VMess, VLESS, Trojan, WireGuard, and Hysteria2 each use parameters differently; do not guess values based on the protocol name. If a test fails after import, compare the original details with the field mappings first. Changing the protocol name cannot replace the corresponding support on the server side.
Read the guide ›Shadowsocks · VMess
VLESS · Trojan
WireGuard · Hysteria2
HTTP · SOCKS5
Add Server → TypeA subscription keeps your existing server entries in one place. Once you have your own subscription link, add it through an import option supported by the app, then check that the imported details match the original. An update may change entry names, counts, or parameters, so confirm that the selected server is still available before testing. Subscription URLs may contain authentication details; do not include them in public screenshots or logs. The example URL shows link syntax only and is not a working service. This guide explains importing subscriptions but does not provide or recommend them.
Read the guide ›Subscribe
https://example.com/sub?token=xxxx
Example URL; not for connecting
After updating, check the selected serverConfig manages rules and related settings. Importing a server does not automatically switch to the Config you expect. Open Config, confirm which file is active, then review sections such as General and Rule. Save a copy before editing and change one thing at a time so you can identify what to revert based on the results. When using iCloud sync, also check the account, sync status, and file contents on each device; seeing the file appear does not mean the connection is working again. Verify server selection, system VPN authorization, and current network conditions on the device you are using.
Read the guide ›[General]
bypass-system = true
dns-server = system
[Rule]
FINAL,DIRECTThe connection switch shows the system connection state; by itself, it does not prove that a particular website is reachable. Use Connectivity Test to check the server, and refer to Test Method in Settings to understand how the test works. Test results are not the same as actual download speeds. Data lets you monitor traffic; distinguish the statistics view, upload and download directions, and the period covered. If something looks wrong, note the time, target domain, Global Routing mode, and relevant logs. Check the server, DNS, and rules layer by layer instead of changing multiple settings at once and losing a useful comparison.
Read the guide ›Connectivity Test
Settings → Test Method
Data
Settings → Diagnostics
Record the details first, then troubleshoot one item at a timeShadowrocket is available only on Apple platforms, and the App Store is the only place to get it. Read the device guide, then check the product page for pricing and compatibility. Refer to the App Store listing for system requirements and general purchase terms.
After purchasing and opening Shadowrocket from the App Store, import your own server details. On your first connection, read the system prompt to add a VPN configuration and follow the system steps to approve it. Return to Home to check Global Routing and the connection status. Authorization does not confirm that the server parameters are correct, so test access to a webpage as well.
Open the iPhone guide ›Use the same Apple ID used for the purchase to check purchase status and general purchase terms in the App Store. A larger display does not change the meaning of server parameters or rules. Even if another device connects successfully, check Config, server selection, and system authorization on this device rather than assuming the other device's status applies.
Open the iPad guide ›Shadowrocket is also available for Mac / Apple TV in the same App Store. Check the store listing for compatibility.
Before purchasing, check whether you already have your own subscription or server details. The client reads configuration, establishes connections, and applies rules; purchasing the app does not provide Host, Port, or authentication details. The address, port, and authentication method in your server details must match. If you have only partial information, verify it with the original source rather than guessing passwords or protocol types in Add Server.
After importing, select a specific server, check the current Global Routing mode, and then connect. To use rules, select Config and confirm which configuration file is active. For temporary troubleshooting, compare how access behaves with Proxy or Direct, then restore your usual mode after testing. A one-off success after switching modes does not mean the rules are fixed.
The system VPN configuration prompt shown on first connection is an authorization step that lets the app establish a connection through the system network mechanism. It is not a purchase screen and does not include a server subscription. Read the prompt before approving it. If you deleted the corresponding configuration in system settings, you may need to authorize again. If the prompt keeps appearing, first check the relevant system entry and the app's current state.
For testing, choose a specific webpage and note the network, server, and Config used. First check whether the page loads, then review whether traffic and logs match expectations. Results may differ between cellular and Wi-Fi, so test again after switching networks. Change one condition at a time to identify whether the issue is caused by server parameters, the local network, or a routing rule.
If you want to carry your setup between two devices, distinguish app purchases, file syncing, and system authorization. Purchase status lets you get the app; iCloud sync transfers relevant data; each device handles VPN authorization separately. After switching devices, check each item rather than assuming that seeing the app icon means all connection requirements are met.
Shadowrocket Config Guide is the official Shadowrocket guide. Refer to the App Store product page for purchase, compatibility, and update information. Configuration examples explain syntax only.
Shadowrocket
id932747118
Check the icon, developer, and App ID together.
Read how to verify the listing ›The name and icon in search results are only a starting point. Open the product page and verify the app name, Shadowrocket, the developer, Shadow Launch Technology Limited, and the App ID 932747118 in the product link. The official icon matches the one shown here, but color or a rocket shape alone is not enough to identify the app. Before confirming your purchase, check the developer and product details again to avoid mistaking a similarly named app for the right one.
App Store visibility depends on the storefront associated with your Apple ID. If you cannot find the product, check which App Store storefront you are browsing and whether the product page opens. The currency, purchase status, and compatibility shown on the page also depend on your current account. Do not assume a reference price shown in US dollars online is the amount you will pay locally. Confirm availability for purchase and installation in the App Store on your device.
Shadowrocket is a paid, closed-source commercial app available as a one-time purchase. The US storefront reference price is $2.99; other storefronts show local currency, and the final amount is shown on the purchase confirmation screen. The purchase gives you the right to use the client; it is not a monthly network service. Before buying, understand the app price and the terms of any service you already use as separate items.
A client purchase is not a network plan. This guide does not provide, sell, or recommend servers or subscriptions; it explains how to import and use your own configuration. If no server entries appear after opening the app, that does not mean the purchase failed. You may still need to import your own subscription or enter details from a server you already have using Add Server. Check the original service details and test results to see whether a subscription can update or a server is working; purchase status alone cannot tell you.
The purchase association between iPhone and iPad depends on the App Store purchase status for the same Apple ID and the applicable purchase terms. To use Shadowrocket on another device, check the store account first, then look for the app on its product page or in your purchased items. Do not rely on the account name used for other device services to determine which account made the App Store purchase; the purchase record should match the Apple ID currently signed in to the App Store. Refer to the App Store listing for compatibility, system requirements, and whether the purchase is universal.
When replacing a device or reinstalling the app, find it in your App Store purchased items and check that you are using the original purchasing account. Restoring the app and restoring its configuration are separate steps: after reinstalling, check your server details, Config file, and device authorization. If you use iCloud sync, wait for it to finish and verify the result before importing again, to avoid editing data before confirming what synced. For Family Sharing, check the App Store listing and your account for the sharing options actually available.
App updates are delivered through the App Store; check the store's release notes for details. If interface elements move after an update, look for them by their labels, such as Home, Config, and Settings, rather than relying on fixed coordinates in a screenshot. The homepage does not list fixed version numbers or update dates. Check the App Store listing for system requirements too, and do not treat older guide text as confirmation that the app is compatible with your current device.
Before editing a configuration, keep a restorable copy and note the current Global Routing mode, server selection, and key settings. Importing a new Config may change rule order, DNS behavior, or fallback handling; a successful import does not mean the previous behavior will remain unchanged. Review General and Rule first, then test under comparable conditions. If something goes wrong, restore a known-working copy instead of piling on uncertain changes.
Authentication parameters in subscription links, server passwords, and access logs may contain private information. Before asking for troubleshooting help or sharing a screenshot, check full URLs, authentication fields, and target domains, and remove anything you should not share publicly. The example.com and token=xxxx values in the guide illustrate format only; they are not real server details. When saving a configuration copy, check whether it contains account information and avoid putting files with authentication details in public locations.
Troubleshooting requires reproducible conditions, not full disclosure of your details. You can usually start by noting the network, Global Routing mode, rule keyword, where the error occurred, and which tests you have completed. Keep specific server authentication details in your own configuration. If only one website is affected, check which rule matches its domain. If all destinations fail, check the server, system authorization, and DNS. Isolating the issue layer by layer is more useful than changing several settings at once.
For a specific issue, choose a troubleshooting path based on what you observe. The test methods in these articles help identify conditions; a single reading does not represent long-term performance, and the articles do not rate service providers.
Troubleshoot speed issues by checking the local network, protocol settings, route quality, and server load one at a time. Compare Wi-Fi with cellular, and distinguish Connectivity Test results from actual browsing speeds. Avoid changing every setting based on a single test.
Read the troubleshooting steps ›Start with the access requirements for specific websites. Learn how DOMAIN-SUFFIX and DOMAIN-KEYWORD differ, how rule order works, and what FINAL and DIRECT do. Use example.com to understand the syntax, then check which rule matches your own target domain.
Read the rules guide ›Learn what the system prompt does on first connection, which corresponding entry appears in the system VPN list, and how to check authorization again if it is deleted. Understand the difference between system connection permission and server details, and why you still need to test actual access after authorization.
Read the authorization guide ›For your first setup, start with the setup guide. Check the glossary for interface labels and rule keywords, and see Settings explained for commonly used Settings options.