This guide is for users installing Shadowrocket on an arm64 Android device. The steps are: open this site’s download page in your system browser, save the APK, temporarily allow the app that opens the file to install apps, revoke that permission after installation, and then add a subscription you already have. Downloading, installing, and granting VPN access are separate steps. When a prompt appears, first identify which step is blocked.
1. Check your device and download options
The Android download is an arm64 APK. Arm64 refers to the processor instruction set and system environment—not the screen size or phone brand. Your device needs a system environment that can run arm64 apps; the processor’s advertised name alone doesn’t confirm compatibility. If you see an incompatibility message, check the system information from your device manufacturer rather than repeatedly changing installation permissions.
Shadowrocket has two ways to get it: iPhone and iPad users can buy it on the App Store for a one-time $2.99; check the App Store listing for system requirements. The Mac (Apple silicon and Intel), Windows, Android, and Linux versions are free. Start all download steps from the all-platform download page. The Android APK is hosted on this site at /dl/shadowrocket/.
2. Download and open the APK in a browser
Finish downloading the file before changing installation permissions. A browser showing that a download has started doesn’t mean the APK has been saved completely; check that the download is marked complete. Button names may vary by device, but the steps always involve the browser, the file, and the system installer.
-
Open the download page
Visit this site in your system browser, open the all-platform download page, and find the Android section. If you opened the page in WeChat’s built-in browser, switch to your system browser using the steps in the next section.
-
Choose the Android package
Tap the Android arm64 download button. If your browser asks whether to keep the APK, confirm the page domain is
shadowrocket07.com, then save the file. -
Wait for the download to finish
Open the browser menu and select “Downloads” or “Download manager.” Make sure the download is marked complete. Don’t open a temporary file while the download is paused, has failed, or is still in progress.
-
Open the APK
Tap the completed APK. If the system says this source isn’t allowed to install apps, open the settings page provided in the prompt, allow installs from this source, then return to the installer.
-
Complete the installation
Check that the app name shown in the system installer is Shadowrocket, then tap “Install.” Once installation is complete, open the app and return to system settings to turn off install permission for the source you used.
You can also open the saved APK from the “Downloads” folder in your file manager. In this case, the file manager—not the browser—usually triggers the installation. Grant permission to the app that actually opens the file, as explained in the next section.
3. Which app needs “Allow unknown apps”?
On Android systems that manage install permissions by source, “Allow unknown apps” is a permission for a browser or file manager—not for Shadowrocket, which isn’t installed yet. “Unknown” is the system’s category for an app’s installation source; it isn’t a judgment about the file’s contents.
A common path is Settings → Apps → Special app access → Install unknown apps → your browser → Allow from this source. Some devices put this option under “Security” or “Privacy.” If you can’t find it, search system Settings for “Install unknown apps,” then select the app you used to open the APK. The system Settings page is separate from Settings inside Shadowrocket.
- Opened from the browser’s download list: Find the browser in the source list and enable its install permission.
- Opened from a file manager: Find the file manager in the list. Allowing installs for the browser alone may not let the file manager continue the installation.
- Opened from a system prompt: Use the “Settings” button in the installation warning when available. It usually opens the settings page for the current source directly.
- Can’t change the setting: Check whether a work profile, parental controls, or organization management policy restricts your device. The device administrator must handle these restrictions; downloading the file again won’t help.
After allowing installs, return to the previous screen and continue in the system installer. If the installer has closed, open the same file again from your download list. Don’t enable this permission for unrelated apps; otherwise, it may be unclear which sources can install apps later.
Turn it off after installation
RecommendedTurn off “Allow from this source” for your browser or file manager. Shadowrocket will still open normally after installation. If you manually install an update later, temporarily allow installs again when prompted.
Best for: after installation is complete and you’re returning to everyday device use.
Allow temporarily during installation
Allow installs only for the app that opens the APK, and only to complete this installation. This permission does not control VPN connections, import subscriptions, or change Global Routing.
Best for: when the system installer is waiting for permission from the source app.
4. Fix APK downloads that don’t work in WeChat
WeChat’s built-in browser may block APK downloads or fail to hand the file off to the system installer. If tapping the link leaves you on the same page and no download appears, the issue is with downloading. Changing “Allow unknown apps” usually won’t help because there isn’t a complete file to install yet.
- Keep this site’s page open in WeChat and tap the menu in the upper-right corner.
- If the menu has an “Open in browser” option, tap it and choose a browser on your device.
- If that option isn’t available, copy the page link, open your system browser, and paste the link into the address bar—not the web search box.
- Check that the address bar still shows
shadowrocket07.com, open the Android section on the all-platform download page, and tap the download button again. - Check the browser’s download manager to confirm the file is complete, then open the APK. There’s no need to keep tapping the same download button in WeChat.
5. Diagnose installation failures and download issues
When an error appears, note its exact wording first. Then determine whether the file is incomplete, source permissions are restricted, the device is incompatible, or an existing app is causing an update conflict. Each issue needs a different fix; don’t assume every message means a permission is disabled.
Where can I find the file after the download completes?
First, open Downloads in the browser you used and tap the completed item. Then check the Downloads folder in your file manager, sorted by most recent. If neither location shows a completed file, return to the download page and download it again instead of looking for an app icon.
Why does it still say the source is restricted after I allowed installs?
Check whether the prompt names your browser or file manager. If you downloaded the APK in a browser but opened it in a file manager, check the file manager’s source permission. Return to the system’s “Install unknown apps” page, change permission for that source only, and try again.
What should I do if I see “There was a problem parsing the package”?
Delete the failed download, download the file again, and wait for it to finish. If the same message appears, check that your system supports arm64 and review the system requirements on the download page. An incomplete file or an incompatible system can cause this error; enabling install permission alone won’t fix either problem.
Why can’t I update Shadowrocket when it’s already on my phone?
Note the full error message and check where the existing app came from and which download link you used this time. The system may block an update because of a signature mismatch, a restriction on downgrading, or insufficient storage. Don’t uninstall the app right away; uninstalling may delete local settings. First, export or back up your existing settings using the app’s available options.
Can I ignore a system security warning?
Don’t confuse permission to install from a source with a security warning. Check the download domain, confirm the file is complete, and read the reason for the warning. If the system flags a malicious app or an organization policy blocks the installation, stop and keep the warning details. Don’t disable system protection to continue.
6. Add an existing subscription and check the connection
When the app icon appears on your home screen and you can open Home, installation is complete. The APK doesn’t include a usable connection; you’ll need your own subscription or server details. A subscription URL may contain access credentials, so don’t include the full link in public screenshots or support requests.
- Add an existing subscription: On Home, tap “+” in the upper-right corner to open Add Server. Set Type to Subscribe, enter your own subscription URL, and save. This guide does not provide subscription sources.
- Check the update result: Return to Home and check whether the subscription has created server entries. After updating the subscription, confirm that the list has changed. If you see a subscription name but no server entries, check the URL and update result first.
- Check your routing mode: Confirm the current selection under Global Routing. Config applies the rules in the selected configuration; Proxy and Direct route traffic through a proxy or directly; Scene switches according to scene settings. Don’t assume all requests take the same route before checking your configuration.
- Allow the VPN connection: Select an existing server and turn on the connection switch. When Android asks to set up a VPN connection, check the app name and confirm. This permission is separate from the browser’s “Install unknown apps” permission.
- Test access: Open a website you can normally reach, then test the site you want to visit. If the system says the connection is established but the site won’t load, check the server, Global Routing, DNS, and Config instead of reinstalling the APK.
Rules in Config determine what happens to matching traffic. For example, DOMAIN-SUFFIX matches domain suffixes, IP-CIDR matches IP address ranges, and FINAL handles connections that didn’t match earlier rules. Switching to Config doesn’t guarantee that the rules are suitable or that unmatched traffic will go direct. Check the actual policies in the selected configuration.
7. Keep your configuration before future updates
When you need to update, return to this site’s all-platform download page and open the Android section. After downloading, let the system installer handle the file. If the installer offers an update, check the app name before continuing. Back up important settings first, then check that your subscription list and current Config still meet your needs after the update.
- Download complete: The browser’s download list marks the file complete, and you can open the APK in the system installer.
- Installation complete: The system confirms installation, and Shadowrocket opens to Home.
- Connection working: After selecting a server from your own subscription, a real-world access test gives the expected result. A VPN icon alone doesn’t verify access.
- Revoke install permission: Return to system “Install unknown apps” settings and turn off source permission for the browser or file manager you used. You don’t need to uninstall the app.