Shadowrocket
Troubleshooting
First identify whether the issue is with purchase, authorization, import, or connection, then follow the relevant checks in order. Expand a question to read the full steps, or use a category link to jump to a section.
Purchase verification and buying
Check your account’s storefront and purchase history before deciding whether to pay. Prices, compatibility, and purchase eligibility are as shown on the App Store page.
Can’t find Shadowrocket in the App Store? Check this first
Check which storefront is associated with the Apple ID currently used in the App Store. Your device language and location do not determine your account’s storefront. In Settings, open your Apple Account, then go to Media & Purchases → View Account → Country/Region. Availability in the mainland China storefront depends on what the store currently displays. To change your region, follow the official process there and review the notices about your balance, subscriptions, and payment methods first. Changing regions does not transfer previous purchases.
How can I verify that the app in the App Store is the genuine Shadowrocket?
On the App Store product page, check all three: the app name, Shadowrocket; the developer, Shadow Launch Technology Limited; and id932747118 in the page URL. The app icon should also match the official icon shown on this site. Don’t rely on a search result’s name or a similar-looking icon alone. Once verified, check the price and compatibility. The App Store is the only place to get the app. Our download page brings the verification steps together for easy reference.
How much does Shadowrocket cost, and does the purchase include network service?
Shadowrocket is a paid app with a one-time purchase. The US storefront price is about $2.99; prices vary by storefront and are shown in local currency at checkout. The app purchase is separate from any network service. After installing the app, you’ll need to configure your own subscription or server details. This site does not provide, sell, or recommend servers or subscriptions. Before buying, make sure you understand the app’s cost and the terms of any service you already use.
Do I need to buy Shadowrocket again after getting a new iPhone or reinstalling it?
Sign in to the App Store with the Apple ID used for the original purchase, then look for Shadowrocket in your purchase history. If the purchase is available in your current storefront, you can get the app again from your purchase history. If the page still shows a price, check your account, storefront, and purchase history before paying again. Restoring the app does not restore its configuration. Check separately whether your subscriptions, rule files, and custom settings are backed up; your purchase history is not a configuration backup.
I bought Shadowrocket on iPhone. Can I use it on iPad and other Apple devices?
You can check and get Shadowrocket for iPad from the same App Store product page. Sign in with the Apple ID used for the purchase, then check your purchase history and the product page button before proceeding. The same store page lists compatibility with Mac, Apple TV, and Apple Vision. System requirements, purchase eligibility, and Family Sharing availability are as shown on the App Store page. Subscriptions and configurations must be imported or restored separately on each device; installing the app does not mean its configuration has synced.
Installation and first launch
Check app installation, configuration imports, and system authorization separately. Start by checking the connection switch, then determine whether the issue occurs after connecting.
What should I do when prompted to authorize a VPN configuration on first connection?
When you first enable a connection, the system may ask to add a VPN configuration. This authorization is required to establish a system network connection. Confirm that you’re using the verified Shadowrocket app, then follow the system prompts to allow the configuration and authenticate. Authorization does not provide a server address, password, or subscription; import those details beforehand. If you canceled the prompt, try again in the app and check the VPN section in Settings. Managed devices may have additional restrictions.
Why won’t the connection switch on in Home, or why does it switch off right away?
First determine whether the switch won’t stay on or stays on but websites won’t load. If it won’t stay on, check that VPN authorization is complete, a working server is selected in Home, and no other VPN configuration is active in system settings. On a managed device, check the management policy rather than removing management settings yourself. Close and reopen the app, then try again. If the switch still turns off immediately, note any alert or error and check App Store compatibility. Don’t start by deleting all configurations; that could remove useful troubleshooting evidence.
The interface is in English. How do I find the controls mentioned in the guide?
Look for the exact interface labels rather than relying on icons or translated descriptions. Home shows servers and connection status; Add Server adds connection details; Config manages configuration files; Settings contains app settings; and Global Routing selects how traffic is handled. This manual keeps these labels in English and explains what each control does. If a control is in a different place than described, check which screen you’re on and what you’re trying to change. The interface language doesn’t change protocol field meanings, so don’t change server parameters for that reason.
Why aren’t my iPhone configurations there after installing Shadowrocket on iPad?
Purchase eligibility and in-app configurations are separate. Even if both devices use the same Apple ID, check the server list in Home and the rule files in Config on your iPad. If they’re empty, reimport your saved subscription URL, server details, or configuration backup, then check which item is selected. The iPad layout may differ from the iPhone layout, so look for labels such as Home and Config rather than relying on fixed button positions.
How can I update Shadowrocket without losing track of troubleshooting changes?
Update the app through the App Store. You can check for updates in your account’s app updates section or use automatic updates in system settings. Before updating, save important custom configurations and note the selected server, Global Routing mode, and symptoms so you can compare afterward. App updates and subscription updates are different: an app update changes the client, while a subscription update retrieves information from an existing service. When troubleshooting, change one thing at a time; don’t update the app, replace the configuration, and switch networks all at once.
See the tutorial → for the complete first-time setup
Subscriptions and server imports
The steps below assume you already have your own subscription or server details. Identify the type of information first, then check each field. A successful import does not confirm that the connection works.
What should I check, in order, when an existing subscription won’t import?
First, make sure you copied the complete subscription URL provided by your service—not a management page URL or a single-server share link. Check for leading or trailing spaces, line breaks, and truncated query parameters. In Add Server, choose Subscribe and enter the URL; make sure your current network can reach it. If you see an authentication, expiration, or format error, check your account with the service that provided the URL instead of changing protocol types at random. Subscription URLs may contain access credentials, so don’t share the full URL or screenshots that show credentials.
What’s the difference between a single-server share link and a Subscribe URL?
A single-server share link describes one server and its connection parameters. A Subscribe URL retrieves and updates a set of server details. Use the provider’s instructions and the content itself to identify what you have; a management portal URL is not necessarily a subscription URL. Changes to an imported server usually apply to that entry, while a subscription update may overwrite imported details. If you need to keep custom fields, note your changes first and check how a subscription update will affect them.
How do I update an existing subscription, and what should I check first?
In Home, find the relevant subscription group and use its update action. When it’s done, check the server names and the currently selected server. An update retrieves the content returned by the original URL; it won’t fix expired credentials or extend a service’s validity. If the update fails, check whether the URL is reachable on your current network. If it succeeds but entries change, compare them with the information from your service. Save any notes and manual changes you need before updating so changes to remote content aren’t mistaken for lost app configuration.
Why does Scan QR Code fail, or leave fields incomplete after import?
First check that the QR code contains server details or a subscription URL the app can recognize, not a login page. When using Scan QR Code, check camera permissions, image clarity, and whether the whole QR code is in frame. For an image from your photo library, use the image import option actually available in the app. After importing, open the entry and verify the protocol, address, port, and authentication fields instead of assuming they’re correct. If the result is plain text, check its format; don’t paste the entire string into the server address field.
A Trojan or VMess entry imported successfully, but it still won’t connect. What should I check?
A successful import only means the app read the information; it doesn’t confirm that the server is available or that every field matches. Compare the protocol, address, port, and authentication fields with the server details you were given. For Trojan, check the TLS requirements; for VMess, check the UUID and transport settings. Don’t copy fields from another entry or disable certificate verification instead of checking the parameters. Change one field at a time and note the result. If the source details have changed, update the existing subscription before testing again.
Rule-based routing and connection issues
Connection status, test results, and actual access are different kinds of information. Keep the test target the same when comparing results before and after a change.
Which Global Routing mode should I use: Config, Proxy, or Direct?
Config follows the rules in the active configuration file to decide how requests are handled. Proxy sends traffic through the current proxy route, while Direct connects directly. For everyday rule-based routing, choose Config and confirm that the correct configuration file is active. To troubleshoot, you can temporarily compare the results with Proxy and Direct to help distinguish server-route issues from rule issues, then restore the original mode. The Proxy mode in the interface is related to the PROXY policy in rules, but they’re configured in different places.
The switch says connected, but websites won’t load. What should I check first?
Connected indicates the system connection is active; it doesn’t guarantee that every destination is reachable. Disconnect temporarily and confirm that your current Wi-Fi or cellular network can load a known working page. Then reconnect and check the selected server, Global Routing mode, and active configuration. If only some domains fail, check rule matching and DNS. If all requests fail, check the server parameters and whether the server is reachable. Change only one of the network, server, or routing mode at a time and note the results so multiple changes don’t hide the cause.
Connectivity Test shows a result. Why won’t the webpage load?
Connectivity Test reports reachability for the specific test method; it doesn’t replace a real webpage request. Loading a page also depends on DNS resolution, rule matching, TLS, and the destination server’s response. First determine whether one domain or multiple sites are failing, then check DNS settings and relevant rules in the active configuration. If you recently changed DNS, compare it with your previous settings instead of adding several DNS options at once. Note the failed domain, error message, and network you’re using to help distinguish DNS issues from server-route issues.
A website is using the wrong policy in Config mode. How do I check the rules?
In Config, confirm which file is active, then review the Rule entries from top to bottom. Earlier matching rules affect what happens next. Check whether broad DOMAIN-KEYWORD, GEOIP, or IP-CIDR entries appear before the rule for the destination, then verify the DOMAIN and DOMAIN-SUFFIX syntax. FINAL is the fallback when no earlier rule matches, so don’t place it before rules that still need to be evaluated. Keep a copy of the original file, then test the same domain after editing to see whether the rule order made a difference.
A long-running connection drains the battery. How should I troubleshoot On Demand?
First check battery usage in Settings for the relevant time period and background activity; a single impression isn’t enough to identify the cause. Ongoing data transfer, repeated reconnects, and frequent tests can all increase battery use. Check whether On Demand is enabled and review its conditions to see if network changes are triggering repeated connections. To compare, note the original settings, temporarily turn off On Demand, and test under similar conditions. A persistent VPN indicator alone doesn’t mean something is wrong. Avoid changing several settings at once.