Shadowrocket Official Manual

Shadowrocket Setup and User Guide

A rule-based proxy client for all platforms. Connect using an existing subscription and route traffic with rules. iPhone / iPad cost $2.99 once in the App Store; Mac, Windows, Android and Linux versions are free.

Download Shadowrocket All platforms

Current version Loading · iPhone / iPad $2.99 once; Mac, Windows, Android and Linux versions are free

First-time setup: import a subscription and connect →

Shadowsocks / Trojan Config / Rule On Demand
First connection

Import a subscription and verify the connection

Start with an existing subscription link or server details. Verify one connection before adding rules and automation. This makes it easier to identify whether an issue comes from parameters, the service, or routing settings.

01 / Subscribe

Add an existing server or subscription

Go to Add Server from Home and choose Type based on your existing details. To import a subscription, choose Subscribe, paste the complete URL and save. To add a single server, check Host, Port and authentication fields one by one. Query parameters in a URL are part of the address and should not be removed.

After saving, return to Home, wait for the list to load and confirm that SERVER contains an available entry. A subscription maintains server details in bulk; Config controls how requests are routed. They are not interchangeable. If the list is empty, check the URL and subscription status first rather than repeatedly toggling the connection.

02 / Global Routing

Choose a mode and server

In Global Routing, Config matches requests against the active configuration’s rules, Proxy sends proxyable requests through the selected server, and Direct connects to the destination without a proxy. For rule-based use, choose Config and make sure the expected configuration is enabled on the Config page.

Select a server on Home before checking the mode. Temporarily switching to Proxy can help determine whether a rule affects a request, but it does not replace correcting the rule. A website working in Direct mode does not mean the previously selected proxy server is available.

03 / Connectivity Test

Connect and test a request

Turn on the connection switch at the top of Home. On first use, follow the system prompt to allow adding a VPN configuration. Once the connection status changes, run Connectivity Test and then open the website you need. Permission granted, server reachable and destination website available are three separate checks.

If the test fails, check the current network, server parameters and status of your existing service in that order. If the test succeeds but some websites do not work, inspect rule matches and DNS. Change one setting at a time and retest to keep the cause identifiable.

Read the complete guide →

2 ways to get it

Shadowrocket for all platforms

iPhone / iPad cost $2.99 once in the App Store; Mac, Windows, Android and Linux versions are free. These links lead to the download page. Desktop and Android installation packages are served from this site at /dl/shadowrocket/. Choose by operating system and processor, not by appearance or file size.

iPhone / iPad

App Store $2.99 one-time purchase; other platforms are free.

Both devices share the purchase. Use the Apple ID used for the purchase to find your purchased apps. Check the App Store listing for system requirements; before downloading, verify the developer and app ID, then connect using an existing subscription.

See App Store instructions

Mac

Free · Apple Silicon / Intel

Check the chip in About This Mac and choose the matching dmg. If a developer verification prompt appears on first launch, verify the source in System Settings under Privacy & Security, then choose “Open Anyway.” See the download page for the specific steps.

See both chip versions

Windows

Free · 64-bit installer

Get the exe from the download page. Close any running older instance before updating. If SmartScreen blocks it, verify that the installer came from this site, then select “More info” and “Run anyway.” Do not disable system protection entirely.

See Windows download

Android

Free · arm64 package

The download page provides an apk. If the system asks for permission, allow “Install unknown apps” only for the browser or file manager used for this installation, then revoke the permission afterward if desired. If an in-app browser cannot download it, open this site in the system browser.

See Android download

Linux

Free · deb / rpm / AppImage

Choose deb for Debian and Ubuntu-based distributions, or rpm for Fedora-based distributions. Choose AppImage for direct execution and grant it executable permission first. The download page lists installation commands. Check that the package architecture matches your distribution before running it.

Choose a Linux format

Back up your configuration and server details before updating. System permissions and settings vary across platforms; do not assume that menu paths on one platform apply to another.

See all platforms →

Rules, subscriptions and configuration

Understand “how a server connects” separately from “which path a request takes.” The former depends on the protocol and server parameters; the latter depends on Global Routing, the active configuration and rule order. The snippets below explain syntax and are not complete files to replace your personal configuration.

Rule: match from top to bottom

Rules connect request conditions with handling policies. After editing Rule in Config, enable that configuration and set Global Routing to Config. DOMAIN-SUFFIX matches a domain and its subdomains; GEOIP classifies by the destination IP’s region; FINAL handles requests that did not match earlier rules. Put specific conditions first and the fallback last. PROXY, DIRECT and REJECT respectively mean proxy, direct connection and rejection. Check which rule actually matches after editing; the connection switch alone does not confirm that rules are working.

Learn more → 
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
GEOIP,CN,DIRECT
FINAL,PROXY

Global Routing modes and rule policies

Config, Proxy and Direct are the three Global Routing modes; PROXY, DIRECT and REJECT are policies used in rules. Choose Config to match requests against rules in the active configuration. Proxy is useful for temporarily checking a proxy connection, while Direct connects without a proxy. To route only a few websites through a proxy and connect to others directly, use specific domain rules with FINAL,DIRECT rather than repeatedly switching modes in Home.

Data and iCloud boundaries

Traffic statistics in Data show transfers recorded by the client and do not represent a provider’s bill or remaining allowance. iCloud sync helps maintain data across supported Apple devices. Before using it, check system iCloud permissions and the in-app sync options. Sync does not make connection status, system permissions or settings identical across all platforms. Back up important configurations separately, then recheck the selected server and Global Routing after migration.

Read about proxy modes →

App verification and purchase details

Shadowrocket is a closed-source commercial application. Verify the product using its developer, app ID and download source rather than relying on similar names in search results. Shadowrocket Tutorial is Shadowrocket’s official website and manual, covering how to get and use the client. It does not provide, sell or recommend proxy servers or subscriptions.

Developer Shadow Launch Technology Limited App ID 932747118 iPhone / iPad $2.99 once · Other platforms free

Check three details on the App Store

Check that the product name is Shadowrocket, the developer is Shadow Launch Technology Limited and the product link contains app ID 932747118. The icon should match the official icon shown in this site’s header, but a similar image alone does not confirm the product. On the product page, also check device compatibility and refer to the App Store listing for system requirements. Do not mistake an app with a similar name in search results for the same product, or rely only on an old screenshot in a guide.

Store availability and account region

Whether the iPhone / iPad app appears in search results depends on the App Store region for the current Apple ID. The app is not available in the mainland China storefront. Check the account’s Media & Purchases and Country/Region settings, then review Apple’s region-change process, including balance, subscriptions and payment requirements. Changing the device language does not change the storefront region. Prices shown on a product page depend on the current storefront; do not infer the storefront from the page language.

Two price tiers and restoring purchases

The iPhone / iPad version costs US$2.99 as a one-time purchase in the US App Store, and both devices share the purchase. Mac, Windows, Android and Linux versions are free. After changing iPhone or iPad, use the Apple ID that made the purchase to redownload it from the App Store’s purchased apps. If a purchase button still appears, first check the purchase account and storefront region rather than paying again immediately. Redownloading the app and restoring personal settings are separate steps; check your server details and configuration files or restore them from a backup.

Installation packages and updates for other platforms

Mac has versions for Apple Silicon and Intel. Get Windows, Android and Linux versions in the formats listed on the download page. Installation packages are served from this site at /dl/shadowrocket/ and are not linked separately on this page. Back up your configuration and quit the running application before updating. If the system blocks the first launch, verify the source and follow the installation instructions on the download page. Do not disable system protection globally to run a single application.

Manage the client and proxy service separately

Client purchase ≠ proxy service plan. After getting Shadowrocket, import an existing subscription or server details to establish the corresponding proxy connection. The app purchase does not include server addresses, access passwords, data allowance or service duration; those depend on the service you already have. An expired subscription, an unreachable server and whether the client has been purchased are separate issues. When troubleshooting, check the current list and parameters first, then check the status of your existing service. Reinstalling the app is not a universal way to restore a service.

Record changes before migrating

Before moving to another device, note the active configuration, Global Routing mode and any rules you added manually; do not keep only a server list. App updates on iPhone / iPad are managed through the App Store, while desktop and Android versions are obtained from this site’s download page. After updating or migrating, recheck system permissions, subscription import and a real request. If a test screenshot includes a subscription URL, address or authentication field, hide that information before sharing it.

Guides and troubleshooting

Each article addresses a specific issue, from managing existing subscriptions to checking a single rule. Confirm that the assumptions match your situation before following the steps. Example domains illustrate syntax and do not represent an available service.

See all articles →