Rule-based proxy client for all platforms, with step-by-step guidance from importing existing subscriptions to configuring rule routing. iPhone / iPad: $2.99 one-time purchase in the App Store; Mac, Windows, Android and Linux versions are free.
Current version Loading · iPhone / iPad: $2.99 one-time in the App Store; Mac, Windows, Android and Linux versions are free
First-time setup: read the complete guide →
Choose an acquisition method for your device. iPhone / iPad: $2.99 one-time purchase in the App Store; Mac, Windows, Android and Linux versions are free. The download page covers device selection, installation prompts and updates. Desktop and Android installers are available from this site at /dl/.
$2.99 one-time purchase in the App Store. One purchase covers both devices. Use the original purchasing account when reinstalling. Check the App Store page for system requirements; confirm the store region, developer name and app ID before proceeding.
Free · Apple Silicon / Intel. Check your chip in “About This Mac,” then choose the matching installer. If a system alert appears the first time you open the app, follow the “Privacy & Security” instructions on the download page. There is no need to try the installer for the other chip type.
Free · 64-bit installer. Follow the setup wizard after downloading. If SmartScreen blocks the installer, first confirm it came from this site, then select “More info → Run anyway” to continue. See the installation approval section on the download page for full steps.
Free · arm64 installer. Open the download page in your system browser and follow the prompt to allow that browser to install unknown apps. If a download does not work inside WeChat, open this site in a browser instead. You can revoke the temporary installation permission after installation.
Free · deb / rpm / AppImage. Choose a package format for your distribution and check the system architecture first. AppImage requires execute permission; install deb and rpm packages with the relevant package manager. Commands and permission instructions are on the download page.
Installing the client and configuring a connection are separate steps. After installation, you still need your own existing subscription or server details. A successful download, subscription update and available server are not the same thing. Install the app first, then follow the setup sequence below to check the configuration and avoid repeated imports or unnecessary changes.
View all platforms →Servers determine where a connection goes; Config determines how requests match rules. Before troubleshooting, identify which layer you are changing. These six features explain their purpose and where to find them. Interface labels remain in English to match the options on your device.
After selecting Config in Global Routing, requests are matched in the order defined by the active configuration file. DOMAIN-SUFFIX matches domain suffixes, IP-CIDR applies to address ranges, and FINAL handles requests that did not match an earlier condition. Save a copy of the original file before making changes, then put specific conditions before broader ones. PROXY and DIRECT are handling policies, not server names. If the result is unexpected, check which file is active and which rule matched, rather than checking only the connection switch.
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
IP-CIDR,192.168.0.0/16,DIRECT
FINAL,DIRECTOn Demand triggers a VPN connection based on conditions supported by the system. It does not replace a server or repair an invalid subscription. First confirm that the server, DNS and rules work with a manual connection, then check the Wi-Fi and Cellular conditions for On Demand under Settings. Test each network after making changes. If a connection starts again after you turn it off manually, check whether a trigger is still active here. Available options may vary by system; use the settings shown on your device.
Shadowrocket supports protocols including Shadowsocks, VMess, VLESS, Trojan, Hysteria2 and WireGuard. To add a server manually, choose a Type under Add Server, then enter the address, port and authentication details from your own server information. Fields differ by protocol and are not interchangeable. Options such as TLS, transport and server name must also match. If the connection fails after import, compare the settings with the original details instead of assuming that a protocol name alone confirms a complete configuration or an available server.
Add an existing subscription link by choosing the Subscribe type under Add Server. Save it, run an update and check that the expected servers appear in the group. A single share link and a subscription link serve different purposes and should not be used interchangeably. If an update fails, check that the link is complete, the network can reach it and the subscription is still valid. Give each subscription a distinct name to avoid selecting the wrong group when updating or deleting. Subscription URLs may contain personal access credentials; hide the full address in screenshots, support requests and shared backups.
Configuration files in Config and server lists in Home are two different kinds of data. [General] stores global settings, [Rule] handles rule matching, [Host] maps addresses, and [URL Rewrite] modifies request URLs. Before editing, make a copy of a working file, change one type of setting at a time, then test the connection again. When using iCloud sync, check the sync scope and the actual file on the target device. A completed sync does not mean the file is selected or that the server list has synced.
[General]
[Rule]
[Host]
[URL Rewrite]Connectivity Test in Home offers an initial check of server reachability, but results depend on the test method and network conditions; they do not guarantee that every website is accessible. After connecting, open the actual destination page and review connection and traffic records in Data. If needed, continue troubleshooting under Diagnostics in Settings. Note the time of failure, network used and matched policy, then change one condition at a time. Before sharing diagnostic information, conceal subscription URLs, authentication fields and other personal data.
Common Global Routing modes are Config, Proxy and Direct: Config applies rules, Proxy uses a proxy policy, and Direct uses a direct connection policy. Changing modes does not update a subscription. Scene is a separate configuration-scenario entry; check its settings before using it. For an initial setup, start with the clearly defined Config mode and the active rule file.
View features and requirements →The steps below use the original interface labels from iPhone / iPad. Have your own existing subscription or server details ready and proceed step by step; the complete guide explains what to check at each stage. Do not import several unfamiliar configurations at once or enable complex automatic connection conditions before the first test.
Open Home and go to Add Server. For an existing subscription, choose Subscribe and enter the complete URL. To add a server manually, choose a Type first, then enter Host, Port and authentication details. Use Scan QR Code for a QR code. Before importing from the clipboard, make sure it contains only the required connection details. After saving, return to Home and check that the group name and server entries look as expected.
A successful subscription update only means that the server list was read. You still need to select the server you want to use and check its settings. If a group is empty or missing entries, first check whether the link was truncated and whether its contents are in subscription format, then consider importing it again. Repeatedly adding the same link usually creates duplicate groups.
Open Global Routing in Home and choose Config, Proxy or Direct for your purpose. To route by rules, choose Config and confirm the active file under Config. Read the final policy in the rules first, then check whether an earlier rule matches the destination domain. Choosing Config does not mean every request will use a proxy.
You can compare modes during testing, but reopen the destination page and record the result after every change. If Proxy works but Config does not behave as expected, check rules, policies and DNS first. If both fail, check server settings and the current network before rewriting the entire rule file.
Return to Home and turn on the connection switch. The system may ask to add a VPN configuration when connecting for the first time. Confirm that the request follows your current action, then approve it as prompted. Run Connectivity Test and visit the page you actually need. An enabled connection switch, a VPN indicator in the system and a successfully loaded page are separate checks; verify each one.
If the switch is on but pages do not load, troubleshoot in this order: server, Global Routing, DNS and matched rules. First confirm that the device can open familiar pages with the connection off, then compare what changes when it is on. A reproducible symptom is easier to diagnose than several simultaneous setting changes. After a failure, you can also restore the backup configuration and test again.
Shadowrocket is a closed-source commercial app. This is the official website and manual, with app access and configuration instructions. Verify the developer, official icon and app ID in the store. For desktop and Android, use the corresponding installer link on this site's download page.
On the App Store product page, confirm the app name Shadowrocket, developer Shadow Launch Technology Limited and app ID 932747118, then compare the official app icon. Similar names in search results do not mean the apps are the same, so do not rely on the nickname “Shadowrocket” alone. The download guide includes the store link and verification steps; check local pricing and device compatibility on the product page.
For iPhone / iPad, check the App Store page for system requirements. Compatibility, account purchase history and available device storage are separate issues. If installation fails, first read the specific store message and check the relevant condition instead of treating every issue as a connection setting problem.
See app verification steps →The app is currently unavailable on the mainland China App Store. If it does not appear in search, first check the store region used by the account, then confirm that your device is compatible with the store page. The account region determines store content and local currency display; it is not set by the device language and does not change automatically when you switch Shadowrocket's Global Routing mode.
If you need to change the account region, use the official process in Apple Account settings and first review restrictions relating to account balance, existing subscriptions and payment methods. Do not repeatedly change account settings just to complete one search. Read the region guidance on the download page and confirm the applicable conditions before proceeding.
Store and region information →iPhone / iPad: $2.99 one-time purchase in the App Store, shared across both devices. Mac, Windows, Android and Linux versions are free. When changing devices or reinstalling, use the original purchasing account and find Shadowrocket in purchased items. If the page shows a price again, check the account and purchase history before buying again.
Getting the app again and restoring your configuration are separate tasks. After installation, check your existing subscription, selected server and rule file. Keep working data from the old device before restoring. To reinstall on desktop or Android, download the corresponding installer again from this site's download page and follow the system approval instructions.
Device change and reinstallation guide →Buying the client does not include a connectivity plan. Buying or downloading Shadowrocket provides the client; a connection requires your own existing subscription or server details. This site does not provide, sell or recommend nodes or subscriptions. The manual explains how to import, update, organize and troubleshoot existing details, but does not guarantee server availability.
Updating the app does not automatically extend a subscription, and updating a subscription is not the same as updating the app. If a connection fails, check app settings, subscription status and server details separately. When sharing a support request, include only the relevant symptoms and hide full subscription URLs, passwords and authentication details. Do not share connection credentials in ordinary screenshots.
Read the subscription and server management manual →Home is where you select servers and manage connections. Config manages rule files, Global Routing determines the overall handling mode, Data shows connection and traffic records, and Settings contains app settings. Subscribe is a way to import and maintain an existing server list, not a way to select a rule file. Keeping these concepts separate helps match each tutorial step to the right screen.
If you have imported a server but are unsure what to do next, return to Home and select a server, then check Global Routing. To change the policy for a particular domain, check the current Config instead of adding the subscription again. For terms such as DOMAIN-SUFFIX, FINAL or On Demand, check the glossary and then return to the relevant setting.
Open the interface and rule glossary →Each article explains a specific operation in detail. For a first setup, follow the tutorial to complete the connection. To understand a field or address a particular prompt, open the relevant article. Keep a working configuration while reading and test one change at a time to identify which layer is causing the issue.
Explains common interface labels by screen location and distinguishes server selection, rule files and app settings. Useful if you have opened the client but cannot match the tutorial steps to the current screen.
Read the interface terminology guide →Explains the purpose and editing order of each section to help distinguish global settings, match conditions, address mapping and request rewriting. Save the original file before editing, then compare section names and rule placement with the examples.
View the configuration file structure →Explains Android installation permissions and browser download steps, including what to do when a download does not respond inside WeChat. iPhone / iPad: $2.99 one-time purchase in the App Store; Mac, Windows, Android and Linux versions are free.
See the Android installation steps →