Official Manual · Access and Configuration

ShadowrocketSetup Guide

Rule-based proxy client for all platforms for configuring rule routing with existing server details. iPhone / iPad: $2.99 one-time App Store purchase; Mac, Windows, Android and Linux: free.

Current version v2.2.92 · iPhone / iPad: $2.99 one-time; Mac, Windows, Android and Linux: free.

  • Global Routing
  • VMess
  • VLESS
  • Hysteria2

All platforms · 2 access options

Settings reference

Find values by interface term

DNSOn DemandLog

CONFIGURATION / CAPABILITIES

Shadowrocket core features and Settings

First distinguish servers, subscriptions and configuration files, then decide how traffic should be handled. The sections below explain common interface terms and their purpose; the exact option locations depend on the current client interface.

Global Routing: choose a mode, then check the rules

In Home's Global Routing, Config matches requests against the active configuration file, Proxy sends proxyable requests through the selected server, and Direct connects without a proxy. For everyday rule-based use, select Config first, then confirm the active configuration and final policy. Rules are usually matched from top to bottom, so more specific entries should precede broader ones. PROXY, DIRECT and REJECT are rule actions, not the names of the modes at the top. When troubleshooting, temporarily switch modes to compare the same destination, then restore the original setting so a temporary test does not become a permanent configuration.

DOMAIN-SUFFIX,example.com,PROXY
IP-CIDR,192.168.0.0/16,DIRECT
FINAL,DIRECT

For real-world configuration, check in this order: can the existing server connect → is the current configuration enabled → did a rule match → is DNS appropriate for the network environment? Changing every switch at once makes before-and-after comparisons impossible. Keep one working configuration and change one variable at a time to identify the cause of any difference.

See the Settings reference by item →

GET / PLATFORMS

All-platform access and device selection

Two access options: iPhone / iPad are a $2.99 one-time App Store purchase; Mac, Windows, Android and Linux are free. The links below lead to the download page. Check your device and system type before installing.

iPhone / iPad

$2.99 one-time App Store purchase; other platforms are free. iPhone and iPad can share the same purchase record. Check the App Store page for system requirements. Before purchasing, verify the developer, icon and app ID on the product page. When changing devices, first check the purchased items under the original purchase account.

On first connection, follow the system prompt to allow adding a VPN configuration. Allowing the configuration enables the client to handle traffic, but you still need to import your existing server details. Follow the guide to import, choose a mode, connect and verify.

Mac

Free · Apple Silicon / Intel. Check About This Mac for the chip or processor, then choose the matching dmg. Separate builds are available for both architectures. Do not infer the chip from the browser or treat an iPhone / iPad purchase as a requirement for Mac access.

If you see “Developer cannot be verified” on first launch, confirm the file came from this site, then follow the download page's “Privacy & Security → Open Anyway” instructions. For other prompts, follow the relevant steps rather than treating every system warning as the same issue.

Windows

Free · 64-bit installer. Check the system type first, then get the installer from this site's download page. If SmartScreen blocks it, verify the source and file, then select “More info → Run anyway.” On organization-managed devices, follow the administrator's policy.

After installation, test one existing server before enabling everyday rules. App launch, a test result and access from an actual request are three separate checks; verify each rather than judging the configuration by a single test reading.

Android

Free · arm64 package. Get it from this site's download page. If prompted by the system, allow “Install unknown apps” only for the download or file app you are using, then revoke that permission afterward if desired. Settings names may vary slightly by device; follow the system's actual prompt.

Read the system's VPN authorization prompt when setting up the first connection. If the connection has problems after switching networks, check the client status first, then review background restrictions and current network conditions. Reimporting a subscription repeatedly is not a substitute for diagnosing the network.

Linux

Free · deb / rpm / AppImage. Choose deb or rpm according to your distribution's package system. Before using AppImage, grant execute permission as described on the download page. Confirm the architecture and runtime environment first; do not mix installation commands from different distributions when addressing permissions or dependencies.

For upgrades, return to this site to get the package in the required format. Before replacing it, note the current configuration location and keep a copy. After upgrading, check the selected server and rule status, then verify an actual request; successful installation does not mean the existing configuration has been restored correctly.

IDENTITY / PURCHASE / CONTENT

Verify the genuine app and purchase scope

This site is the Shadowrocket website and official manual. Shadowrocket is a closed-source commercial app. Identifying the product, understanding how to get it and preparing connection details are three separate steps before setup.

  • Developer: Shadow Launch Technology Limited
  • App ID: 932747118
  • iPhone / iPad: $2.99 one-time · Other platforms: free

Check three details on the App Store

First check the app name, Shadowrocket, and its official icon. Then verify the developer, Shadow Launch Technology Limited, and finally confirm that the product page's app ID is 932747118. Similar names and images in search results are no substitute for checking these three details, and search ranking is not a reliable way to identify the app.

Open the product details page to verify the information rather than relying only on small images in search results. The site header uses the official icon as a visual reference; before purchasing, rely on the specified product page. Get apps for other platforms through this site's download page, using installation package addresses under this site's /dl/shadowrocket/ path.

See the app verification steps →

Store availability and account region

App Store availability depends on the store region of the purchasing account. The app is currently unavailable in the mainland China store. If you cannot find it, first check the store region in use instead of repeatedly changing search terms. Product page availability, purchase eligibility and the local-currency price depend on the store page shown to that account.

Before changing regions, check the account's subscription, balance and payment information requirements, then follow the system's account-region settings. Changing the language or displayed device region does not change the App Store purchasing account's region; check these settings separately.

See store and region details →

One-time purchase and restoring on a new device

The US App Store price for iPhone / iPad is $2.99, paid once, and the purchase record can be shared between the two device types. Mac, Windows, Android and Linux versions are free. Other stores show prices in local currency; the purchase confirmation page shows the final amount. Changing devices does not erase a purchase record, so confirm the original purchase account before reinstalling.

On iPhone or iPad, use the original purchase account to view purchased items and download Shadowrocket again. The app purchase record is separate from your subscriptions, servers and Config. After restoring the app, check whether your configuration is still present; if needed, restore it from a copy you saved earlier.

See how to restore a purchase →

Access and updates on other platforms

Mac versions for Apple Silicon and Intel are available separately. Get Windows, Android and Linux versions in the formats for their respective systems. This site's download page brings together version selection, first-launch system approval steps and current package links to help avoid mixing platform formats or processor types.

Update the iPhone / iPad app through the App Store; for other platforms, return to this site's download page for the latest package. Keep the current working configuration before updating. Afterward, check the selected server, Global Routing and Config. If behavior changes, consult the Settings reference before deciding whether to adjust parameters.

Check platform and access options →

What else should you verify after connecting?

Open a specific destination and check whether the request uses the expected policy, then cross-check with another destination that should connect directly. A VPN-connected status only indicates that the connection configuration is active; it does not prove that every destination follows the same route. In rule mode, different requests may match PROXY, DIRECT or REJECT, so some requests connecting directly is often expected.

If the test result differs from what you expect, note the destination, current mode, selected server and configuration file name, then check the relevant logs. Keep before-and-after comparisons when changing DNS, rules or server parameters. When describing an issue to someone else, share only necessary fields and hide authentication details. For the differences between “subscription,” “configuration file” and “final policy,” first consult the glossary, then continue troubleshooting.

TECHNICAL NOTES

Technical notes and topic guides

Continue with the issue at hand: for installation problems, check the platform and system prompt; for DNS issues, distinguish the resolution path; for protocol issues, verify the complete parameters supplied by the server.