A rule-based proxy client for iPhone / iPad. It routes requests using rules and is available as a one-time purchase on the App Store.
First, distinguish server details, Config (the configuration file), and Global Routing. Server details define how to connect; the configuration defines how requests are matched; the routing mode determines whether those rules are used. Use the six sections below to find the relevant settings.
Rule-based routing lets different requests use different policies. In Config, check the Rule section, then set Global Routing to Config. Rules are typically evaluated from top to bottom; the first match determines whether a request goes to PROXY, DIRECT, or REJECT. DOMAIN-SUFFIX matches a specified domain and its subdomains, while FINAL handles requests that did not match earlier rules. Put specific conditions before broader ones, and make sure the edited configuration is enabled. Saving a file without selecting it will not change routing for the current connection.
DOMAIN-SUFFIX,example.com,PROXY
FINAL,DIRECTOn Demand starts a connection when the configured network conditions are met. It can be useful when you want an existing configuration to remain in use after switching networks. Check the relevant options in Settings, verify the server with a manual connection first, and only then enable automatic triggers. On Demand controls when a connection starts; it does not replace Global Routing or change the order in which Rules are matched. When testing, check the current network, system connection status, and actual access results separately. If a connection quickly starts again after you disconnect manually, review the trigger conditions before deciding whether to turn the feature off temporarily.
View On Demand settings →Support for multiple protocols means the client can read different connection parameters; it does not mean every Type can connect to the same server. In Add Server, select the Type that matches your existing details, then check the Host, Port, and authentication fields required by that protocol. Fields for Shadowsocks, Trojan, Hysteria2, and WireGuard are not interchangeable. After importing, also check transport, security, and certificate settings. Get connection details from your own service provider. If a field is missing, refer to the original information rather than trying to connect by changing the protocol name or repeatedly editing the port.
Read the WireGuard field guide →Subscribe imports a subscription address you already have and updates the server entries associated with it. When adding one, check the Type, subscription address, and label; after saving, confirm that the servers appear in the group. A subscription update usually affects connection details; it does not enable a rule configuration. Check routing separately. If an update fails, verify that the address is complete, access is still authorized, and your current network can reach the subscription source. Subscription addresses may contain credentials. Hide the full address before sharing screenshots or logs, and never expose its query parameters.
See how to import an existing subscription →Config stores routing rules and related settings. Before making changes, identify the currently enabled file and keep a working copy, then adjust sections such as General and Rule one at a time. Editing, saving, and enabling are separate actions; return to the configuration list to confirm which file is selected. When moving to a new device, you can use iCloud sync and exported backups to preserve your data, but check what was actually restored item by item. Reinstalling the app alone does not mean your subscriptions, servers, and rules are ready. Exported files may contain sensitive information, so keep them somewhere you control.
See how to back up and restore configurations →When troubleshooting, check connectivity, rule matches, and usage readings separately. Connectivity Test reports results for the selected test method; it cannot, by itself, confirm that every service will work. Also visit the target service and check the relevant records. Data shows upload, download, and categorized usage. Client readings may differ from your provider’s metering because of different measurement scopes or reset times. When something fails, note the current network, Global Routing mode, selected server, and exact error. Change one condition at a time and compare results so you can identify the cause.
Understand Data usage readings →Shadowrocket is available only on the App Store. Verify the app’s identity on its store page, then check compatibility and purchase information. System requirements and the scope of universal purchase are as listed on the App Store page; do not infer them from a device’s appearance or a search result title.
Purchase and install the app on the App Store, then have your existing server details ready when you first open it. If iOS asks to add a VPN configuration when you connect, confirm the prompt comes from the Shadowrocket you are using, then follow the system steps to authorize it.
Read the guide →Check your purchases using the same Apple ID used to buy the app. The scope of universal purchase across devices is listed on the App Store page. After installation, check the device’s configuration, selected server, and system authorization separately; a purchase record does not mean your configuration has synced.
Read the guide →The App Store manages app purchases and redownloads; subscriptions, server details, and rule files are connection data. Back up your data before switching devices. Afterward, restore the app and check each imported item. If the store says you need to pay again, first verify the account used for the purchase and its purchase history.
View the getting-started steps →These steps assume you already have your own subscription or server details. Start with a manual connection, then set up automatic updates, On Demand, or sync. This makes it easier to check input errors, rule issues, and automatic trigger conditions separately.
In Home, open Add Server. To enter details manually, choose a Type first, then fill in the address, port, and authentication fields using the original information. To use an existing subscription, follow the Subscribe import steps and save the full address. Return to the server list, confirm the entry appears, and select the server you want to test. The name is only a label; it does not confirm that the protocol or fields are correct.
If you import using Scan QR Code, check the key fields after scanning. A readable QR code only means its contents were recognized; it does not confirm that the server passed a connection test. If details are missing, refer to the original information from your service provider. Do not copy parameters from another entry.
To route requests by rules, select Config and confirm the relevant configuration is enabled. Proxy and Direct can be used to compare results for the same request. The mode describes how requests are handled; it does not supply missing server details. Even with Proxy selected, you still need valid, accurate connection parameters.
If an existing configuration uses custom policy names, first check what each name actually points to before interpreting a match. Do not infer the final route from the text at the end of a rule alone. For an initial setup, start with a few rules you understand, confirm the results, and add conditions gradually to make conflicts in rule order easier to identify.
Turn on the connection switch and complete the device authorization steps shown by the system. Then run Connectivity Test and visit the target service you want to check. System connection status, test results, and access to the target are three separate types of evidence; consider them together. Seeing the connection switch turned on does not confirm that every request is routed as intended.
If a test fails, note the error first, then check the device’s network connection, selected server, Global Routing mode, and active configuration. Change one thing at a time and test again. If direct access works but proxy access fails, focus on the connection details and service status. If only one domain is affected, check the rule matched by that request and its resolution result.
This is the official Shadowrocket website and manual. Verify the product before purchasing, then manage the app, connection details, and rule files separately. Shadowrocket is closed-source commercial software, and app downloads and updates are handled through the App Store.
On the store page, verify that the developer is Shadow Launch Technology Limited, the icon matches the official app icon used on this site, and the product link contains id932747118. The App ID is 932747118. All three should point to the same product page. A similar name or icon in search results alone is not enough to verify an app.
If any detail does not match after opening a search result, return to the App Store link on this page and check again. Do not decide whether to purchase based only on search ranking, description text, or an alternate name. “Little Rocket” is used to identify the app in Chinese; the official product name is always Shadowrocket.
See the app verification steps →App Store product availability, currency, and payment terms depend on the storefront associated with your account. If you cannot open the product page or find it in search, first check the App Store message and your account details; do not assume the issue is with your device. Compatible devices and system requirements are listed on the App Store page.
The App Store button on this page links to the specified product. After opening it, review compatibility and pricing for your current storefront before deciding whether to purchase. The price, availability, and purchase terms shown by the store apply to your transaction; this guide explains the steps but does not replace the checkout page.
Learn about the App Store link →The US storefront price is about $2.99 as a one-time purchase. Other storefronts show local currency; check the App Store page for the current price. The purchase gives you the right to use the client. You must already have your own subscription or server details for a connection. This site does not provide, sell, or recommend nodes or subscriptions.
Installing the app successfully and connecting to a server are separate things. The app price does not tell you whether an existing service is active, has data remaining, or is authorized; check those details with your own service provider. The subscription import guide explains how to load existing details, but does not change their original scope or terms.
View pricing and purchase details →The scope of a purchase shared across devices is listed on the App Store page. When reinstalling or switching devices, check your purchases using the same Apple ID used to buy the app, then redownload it. Family Sharing eligibility is also listed on the store page; being signed in to an account does not mean it has a purchase record.
App updates are managed through the App Store. If you plan to change your configuration, back up the working file first. After restoring, check subscriptions, servers, the active configuration, and system authorization separately. iCloud sync and local exports can help manage your data, but check what was actually restored on the new device, item by item.
See how to check purchases and restore on a new device →After your first connection works, consult the guides on usage statistics, backups, and verifying the app as needed. Each note covers a specific issue rather than combining unrelated setup steps. Before changing account or connection details, save the current working state and follow the checks in the relevant article.
After opening a product page from App Store search results, check the developer, official icon, and App ID 932747118 one by one. Learn where the App ID appears in the link, and avoid identifying an app by a similar name alone.
Read the guide →Learn what iCloud sync and configuration exports are each for, what to keep before switching devices, and how to check subscriptions, servers, and active rules after redownloading the app.
Read the guide →Learn how to read upload, download, and categorized usage in Data, how reset times and measurement scope affect the numbers, and why client readings may differ from your provider’s usage totals.
Read the guide →