Official guide · FAQ index
Shadowrocket FAQs
Start with the part where the issue occurs: purchase history, system permissions, existing configurations, rules, or the network. Verify what’s happening before changing settings, and adjust one thing at a time.
- Four question categories
- Expand answers individually
- Interface labels remain in English
If you haven’t completed the initial setup, start with the user guide. To verify the App Store listing, visit the App Store listing verification page.
App Store · Account and purchase history
Verify and purchase
Can’t find Shadowrocket on the App Store? What to check first
Open the App Store product page from this site’s listing verification page to distinguish missing search results from an unavailable product page. If the page says the app isn’t available for purchase in your region, check the region and payment details for the Apple Account you use for App Store purchases. To make changes, go to your Apple Account in system Settings, open Media & Purchases, then check Country/Region and follow the prompts about your balance, subscriptions, and payment requirements. Not finding the app in search does not, by itself, mean it is no longer available.
How can I verify that the app on the store is the genuine Shadowrocket?
On the product page, check the developer, Shadow Launch Technology Limited; the app ID in the link, 932747118; and the official icon, which should match the one shown on this site. The official icon has a white background with a blue-purple outlined design. The app name and search ranking are not substitutes for checking these three details. Check the price, compatibility, and update history on this product page. If any details don’t match, don’t proceed with the purchase; return to this site’s listing verification page.
Do I have to buy Shadowrocket again after getting a new iPhone or reinstalling it?
First, make sure the Apple Account you use for App Store purchases is the same one used for the original purchase. Then look for Shadowrocket in your account’s Purchased section or app list. If the purchase is listed and your device is compatible, you can usually download it again; the App Store listing is the final reference. If you still see a price, check your purchase history, account, and storefront before paying again. Restoring a purchase record is separate from restoring in-app settings, so make sure any settings from your old device are backed up separately.
Does the one-time purchase include a connection service?
A one-time purchase of the app is not a connection plan. It grants use of the Shadowrocket client; users must provide their own subscription or server details for connections. The US storefront price is about $2.99; prices appear in local currency in other storefronts, and the amount shown at App Store checkout is final. This site does not provide, sell, or recommend servers, subscriptions, or connection services. If you’ve purchased the app but the SERVER list is empty, import your own valid configuration.
Can I install Shadowrocket on iPad? Where can I check compatibility with other Apple devices?
Shadowrocket is primarily for iPhone and iPad. Check device compatibility on the same App Store product page. On iPad, first confirm the Apple Account used for the purchase, then check your purchase history. Compatibility with Mac, Apple TV, and Apple Vision is also listed on that page; refer to the App Store listing for system requirements and whether a purchase applies across devices. Don’t assume that the interface, configuration syncing, or purchase entitlements are identical across devices based on the device name alone.
Related: Three ways to verify the listing · Restore a past purchase · Price and one-time purchase
Home · System permissions and first connection
Installation and first launch
Why does the system ask to add a VPN configuration on first launch?
The system is asking permission to create a VPN configuration so device traffic can be handled by the client. Once you confirm the prompt was triggered by a Shadowrocket connection attempt, authenticate and allow it as requested. Granting this permission does not add server details or mean a remote connection is ready. Return to Home, select a valid configuration you already have, and start the connection. If you canceled the prompt, try connecting again and follow the system prompts; check the VPN configuration in system Settings if needed.
The connection switch on Home won’t turn on. What should I check?
First, make sure there’s a configuration to select in SERVER. Then check whether you granted the system VPN configuration permission the first time you connected. If the switch turns off immediately, note any system message and check system Settings for a VPN configuration that needs attention or a device management restriction. Pause any other VPN features in use and try again. Don’t troubleshoot by repeatedly tapping the switch. First determine whether the issue is an incomplete permission prompt, a device policy restriction, or incorrect configuration parameters, then address that specific cause.
The interface is in English. Which items should I learn first?
Start with the three main sections: Home, Config, and Settings. Home shows connection status, lets you select a configuration from the SERVER list, and provides Global Routing options. Config manages configuration files, and Settings contains app settings. Add Server is for entering server details; Subscribe imports an existing subscription; Connectivity Test checks connectivity. This guide keeps these interface labels in English so you can match them on screen. To change the app language, first check the language options provided by the system.
Does a successful Connectivity Test mean webpages will load normally?
Connectivity Test reports connectivity under the test conditions; it does not replace checking access to a webpage. Page loading also depends on DNS resolution, rule matching, the destination site’s response, and the selected configuration. After the test, check that the connection is on, then try a webpage you know is available and see whether the failure affects only certain domains. Note what you tested and when it failed so you don’t conflate results from different conditions. A single test result can’t guarantee that every request will succeed.
What should I save before updating or reinstalling the app?
Updates are handled through the App Store. Before updating, make sure you have a way to restore your current configuration. Save anything you need to keep, including your subscription URL, manually entered server details, the Config file in use, and custom rules. An App Store purchase record does not guarantee that this information will be restored after reinstalling. Prefer the app’s current export or backup feature, and make sure you can access the backup before proceeding. Subscription URLs, passwords, and keys are sensitive; don’t post them publicly or include them in screenshots of a support issue.
Related: Complete first-time setup · VPN configuration permission and the Home screen
Add Server · Subscribe · Config
Subscriptions and server imports
The steps below assume you already have your own subscription or server details. Identify the type of information first, then choose the appropriate import option.
An existing subscription won’t import. Should I check the URL or the protocol first?
First, make sure you’ve entered the complete subscription URL—not an account management page, an information page, or a link for sharing a single server. Check for extra spaces or line breaks and make sure no parameters are missing. Then check whether the subscription source requires sign-in, whether the URL is still valid, and whether it’s reachable on your current network. Finally, check that the response uses a configuration format the client can read. A subscription URL may contain access credentials, so don’t share it publicly. Check its contents on your own device and ask the original provider to confirm that it’s valid.
When should I use a single share link, a QR code, or Subscribe?
Start by identifying what the content contains: a single share link usually describes one server, while a subscription URL retrieves a set of configurations that may be updated. Import an existing single link using the method provided in the app. To read an existing QR code, use Scan QR Code and check the result. For an existing subscription URL, go to Add Server, select Subscribe, and enter the URL. A QR code is just a way to carry information; its image alone doesn’t reveal what kind of information it contains. After saving, check the protocol, address, and required parameters so you don’t mistake an ordinary webpage for a connection configuration.
The list didn’t change after updating a subscription. What should I check?
First, make sure you updated the Subscribe entry currently in use, not another entry with a similar name. Check for update errors and confirm the subscription URL is still valid. If the source returned the same content, a successful update may leave the list unchanged. If the source changed its information but the local list didn’t, confirm the request succeeded, then check whether you’re still using an old group or configuration. Don’t delete the original subscription right away. Save any necessary details first so you don’t lose a working configuration while the URL is temporarily unavailable.
Import succeeded, but the connection fails. Which fields are easiest to get wrong?
A successful import only means the content was read; it doesn’t mean every parameter matches the server. First check Type, the server address, and Port. Then verify the protocol-specific fields that are actually required, such as the password, UUID, encryption method, TLS, SNI, and transport settings. Don’t mix fields from different protocols or disable verification just to test the connection. Follow the details for your own server. Keep the original values, change one item at a time, then test again and note the result to identify the cause.
What’s the difference between a subscription and a Config file? Can one replace the other?
A subscription is generally used to retrieve and update a server list. A Config file organizes rules and related configuration options; they serve different purposes. Importing a subscription doesn’t mean custom rules have been set up, and switching Config files doesn’t update the server list. When troubleshooting, check the selected server on Home and the active configuration file in Config separately. Before using your own configuration file, review its rules and settings and keep the original. Changing the server and rules at the same time makes it harder to tell which change caused the issue.
Related: Share links vs. subscriptions · Protocol parameter reference
Global Routing · DNS · On Demand
Rules & Routing
How do I choose between Config, Proxy, and Direct in Global Routing?
Config applies the request policies in the active configuration and is suitable for everyday use once you’ve checked the rules. Proxy routes requests through the proxy and can help narrow down rule issues after you’ve confirmed the server works. Direct sends requests directly and can help you compare access on your current network. The interface labels are Config, Proxy, and Direct. Changing the routing mode won’t fix incorrect server settings; restore your preferred mode after testing.
It says connected, but webpages won’t open. What order should I troubleshoot in?
Temporarily disconnect and confirm your Wi-Fi or cellular connection works on its own. Reconnect and make sure the correct SERVER is selected. Then check whether all webpages fail or only a few domains: for all pages, start with server connectivity, subscription validity, and DNS; for specific domains, check rule matches and the destination site. Note the current Global Routing setting and, if needed, compare once using Proxy. Change one thing at a time and restore it after testing. If another VPN feature is active, pause it before testing again.
Routing under Config isn’t behaving as expected. How do I check rule order?
First, confirm Global Routing is set to Config and that the active configuration file is the one you’re editing. Rules are usually evaluated from top to bottom, and matching stops at the first hit. A broad rule placed too early can therefore override a more specific rule below it. Check what DOMAIN, DOMAIN-SUFFIX, GEOIP, and IP-CIDR rules match, and use FINAL as the last fallback. Also distinguish PROXY, DIRECT, and REJECT actions in rules from the Global Routing interface options; similar names don’t make them settings at the same level.
Why does the connection start again after I enable On Demand?
On Demand starts a connection when its configured conditions are met. If you disconnect manually while those conditions still apply, the system may start the connection again; this differs from using a manual switch alone. Check whether On Demand is enabled and review its trigger conditions. Note whether the issue occurs after switching between Wi-Fi and cellular networks or waking the device. To troubleshoot a manual connection, temporarily turn off On Demand, compare the results, and re-enable it if needed. A condition-triggered reconnection doesn’t necessarily mean the app is malfunctioning.
Battery use seems higher. How can I tell which settings might be contributing?
Check the battery usage statistics in system Settings for the relevant period. Compare screen use, background traffic, and sustained connection activity rather than looking only at the remaining battery percentage. Data volume, signal strength, frequent reconnects, protocol processing, and diagnostic activity can all affect battery use. Compare under similar network conditions and usage times, stopping unnecessary continuous tests first. Then check whether On Demand is triggering frequently. Don’t rank protocols by battery use based on their names alone; server settings and network conditions affect real-world results.
Related: Rule keywords and matching order · Troubleshoot DNS resolution failures · Feature settings guide