App Store purchase verification · Official manual

Shadowrocket Setup Guide & Rule Configuration

Download on the App Store View tutorials

A client for iPhone and iPad with rule-based routing, available as a one-time purchase on the App Store.

  • Trojan
  • Shadowsocks
  • Config
  • On Demand
Home › Controls

How connections, subscriptions, and configurations work

Understand the difference between server details, routing modes, and Config before changing individual settings. The examples below explain rule syntax and settings; they are not app screenshots or ready-to-use service configurations.

Choose a mode, then check the rules

Global Routing determines how connections are handled overall. Config applies the policies defined by the active configuration; Proxy sends matching connections through the selected proxy; Direct uses a direct route. To route traffic differently by domain or address, select Config and check the rule order and final FINAL rule. Switching modes can help isolate a problem, but don’t treat a temporary test result as a permanent setting. Defaults depend on what the app currently displays. Before making changes, note the original mode and selected server.

Rule › Example
DOMAIN-SUFFIX,example.com,PROXY
GEOIP,CN,DIRECT
FINAL,PROXY
Global Routing

Global Routing modes: Config / Proxy / Direct. The initial value depends on what the app currently displays.

App Store › Devices

Getting Shadowrocket on iPhone and iPad

The App Store is the only place to get Shadowrocket. Check the product page, then review device compatibility, purchase status, and system requirements. Refer to the App Store listing for system requirements and whether the app is a universal purchase.

iPhone

On the App Store product page, verify Shadowrocket’s developer and app ID, complete the purchase, and open the app. If you already have a subscription or server details, import them and check the list before selecting an entry to connect. The first time you connect, iOS may ask for permission to add a VPN configuration. Read the prompt and follow your device’s verification steps.

VPN configuration permission allows the client to establish a connection; it doesn’t confirm that the server is available or that all traffic will use the same route. After granting permission, check Global Routing and run Connectivity Test. If the system prompt differs from the description here, follow what your device displays.

See how to get Shadowrocket and open it for the first time on iPhone →

iPad

If you’ve already purchased Shadowrocket, first check which Apple ID was used for the purchase in the iPad App Store, then review your purchased items. Refer to the App Store listing for whether the purchase can be used on both iPhone and iPad. Once the store shows that you can download the app again, open it as usual. Device configuration isn’t proof of purchase.

The larger display may change how lists and settings are arranged, but the steps remain the same: import your information, select a server, check the mode, and test the connection. Restoring a purchase doesn’t automatically restore subscriptions, selected entries, or rules. If you use sync, check the actual contents item by item.

See purchase and configuration guidance for iPad →
On the App StoreDownload Shadowrocket View access steps →
App Store › Verify

Verify the app and understand the purchase

This is the official Shadowrocket website and manual. Shadowrocket is a closed-source commercial app. Refer to the App Store product page for purchase, compatibility, and update information; settings depend on what the app currently displays.

  • DeveloperShadow Launch Technology Limited
  • App ID932747118
  • One-time purchase
Verify › Identity

Check the name, icon, and developer

On the product page, first confirm the name is Shadowrocket, then compare its icon with the official app icon shown in this site’s header. Check that the developer is Shadow Launch Technology Limited and that the product page URL contains id932747118. The app ID identifies the specific product; don’t rely on the name or its position in search results alone.

Search results with similar names can lead to the wrong app. Verify the details before paying instead of trying to identify the app from its interface afterward. This site’s access guide shows where to check. If the store listing doesn’t match what you expect, pause and return to the product page through a trusted entry point.

Store › Availability

Check store availability separately from account region

Whether the product appears, which currency is shown, and whether you can complete the purchase depend on the current App Store storefront and account status. On the product page, rely on the purchase button, compatibility details, and payment prompts shown for your account. The U.S. reference price on this site is not a universal price across storefronts.

If the page won’t open or doesn’t show the expected purchase status, first make sure the App Store is accessible, then check the account and region settings used for store purchases. Don’t mistake a storefront display issue for a connection problem in the app, and don’t repeatedly change subscriptions, DNS, or rules in the client to check purchase status.

Purchase › Restore

Restore purchases and configurations separately

When switching devices or reinstalling, use the original purchase account to check your App Store purchases and restore the app as offered by the store. Refer to the App Store listing for details on purchases shared between devices, Family Sharing, and other purchase conditions. If the store still shows a price, check the account and purchase history before assuming you need to pay again.

A purchase record confirms eligibility to use the app; server details, subscription links, and Config are app data. After reopening the app, check that the list is complete, the correct entry is selected, and synced content is as expected before connecting. App updates are managed through the App Store. After an update, review the settings you rely on.

Purchase › Scope

App purchase ≠ network service plan

Shadowrocket is a one-time purchase on the App Store. The U.S. reference price is $2.99; other storefronts display local currency, and the actual price is shown on the store page. The purchase covers the app itself, not access to a server, and it doesn’t create a subscription link for you.

This site does not provide, sell, or recommend servers or subscriptions. Import instructions assume you already have your own subscription or server details. Check service validity, access permissions, and app purchase records separately. Being able to open the app doesn’t mean an existing service is still valid, and an expired service doesn’t invalidate your app purchase.

Home › First Connection

Four checks before connecting for the first time

Follow this order to avoid the difficulty of diagnosing several changed settings at once. See the tutorials for complete steps and interface guidance. This homepage doesn’t prescribe universal defaults for settings.

Where do I add existing server details?

In Home, tap Add Server, choose a Type that matches the details you already have, and fill in the corresponding fields. Host and Port specify the connection address; authentication fields must match the protocol. Don’t assume different protocols use the same fields. After saving, return to the list, confirm the new entry appears, and select it. Saving an entry doesn’t connect to it. See the Add Server tutorial for the steps.

The list is empty after importing a subscription. What should I check first?

First, check that the subscription link is complete and still valid, that the current network can retrieve its contents, and that the response is a parseable subscription rather than a notice page. Don’t share the subscription URL in logs or screenshots; it may contain access credentials. Run one manual update, then check whether the number of entries is as expected. For the import steps and checks, see how to import an existing subscription.

Why check Global Routing after selecting a server?

Selecting a server chooses an available proxy entry; Global Routing determines whether connections use the configuration, a proxy, or a direct route. With Config, the policy matched by each rule also matters: DIRECT bypasses the proxy, PROXY uses the proxy policy, and REJECT blocks matching connections. So selecting a server doesn’t necessarily mean a destination is routed through it. Check the mode first, then review the rules and route for the destination. See the first connection tutorial.

The test passes, but some destinations don’t work. Should I reset everything?

Keep your current configuration and first check whether the issue is limited to a particular destination. Then review its rules and DNS settings. Connectivity Test reports results under specific test conditions; it doesn’t replace checks of actual destinations. Change one variable at a time and record the results before and after. If you need to review Log, take care not to share addresses or authentication details. Follow the verification steps in the tutorial to isolate the cause; this is easier than resetting multiple settings at once.

Manual › Journal

Connection and settings topics

Articles provide additional steps for specific issues. Verify your purchase and establish a basic connection first, then read the topic that matches what you’re seeing. Keep your original settings during troubleshooting, and avoid applying fixes for different issues at the same time.

Getting Started

Shadowrocket first connection guide: Select a server, turn on the connection, and verify it with Connectivity Test

Select a server in the Home list, check the dot beside it, then turn on the connection and review the system’s VPN configuration permission prompt. The article explains the difference between selecting, connecting, and testing, and what to check at each step. If something fails, you can return to the relevant step instead of importing everything again.

Read the first connection guide →
Advanced Settings

How to configure DNS in Shadowrocket: System DNS, custom DNS, and DNS over HTTPS

Explains the routes and checks involved in different DNS resolution methods. DNS affects domain name resolution; it doesn’t determine proxy server selection. If a particular domain doesn’t work, consider its rules and actual connection behavior. The article explains how to compare settings by keeping the original value, changing one item at a time, and testing again.

Read the DNS configuration guide →
View all articles →