Official Manual · Troubleshooting

Shadowrocket FAQ

Start by checking your purchase history, active server, and configuration file. Find the section for your issue, change one thing at a time, and verify the result.

  • Purchase verification
  • First-time authorization
  • Importing existing data
  • Rules and connection troubleshooting

App Store

Purchase verification and billing

Check the product page and purchase account before troubleshooting search, storefront, or redownload issues.

How can I verify that an App Store listing is the genuine Shadowrocket app?

Check three details on the App Store product page: the product name, Shadowrocket; the developer, Shadow Launch Technology Limited; and the app ID in the product page URL, 932747118. The app icon should match the official icon shown in this site's header. Don't rely on translated names or search ranking alone. Before paying, review the price, compatibility, and purchase information shown in the store. Install and update the app through the App Store.

What does the one-time purchase include, and can I connect right away?

Shadowrocket is a paid client. The US storefront lists it at $2.99 as a one-time purchase; the price and currency at checkout on the App Store product page are definitive. A one-time app purchase is not a service plan: paying for the app does not provide server connection details. Before using it, prepare your own subscription or server information, then import or enter it in Home. This site does not provide, sell, or recommend servers or subscriptions. Check connection requirements with the provider of your existing service.

Where do I check my Apple Account's country or region?

On your iPhone or iPad, open Settings, tap your name, then Media & Purchases, View Account, and Country/Region to check the storefront for your purchase account. Labels may vary slightly by system version. If you need to change the country or region, follow the official flow on that page and check requirements such as account balance, active subscriptions, and payment methods before proceeding. Your device language and system region do not determine your store account's region or replace its storefront settings.

Do I need to buy Shadowrocket again after switching or restoring a device?

Sign in to the App Store with the Apple Account you used to buy the app. Find Shadowrocket in your account's purchased items or app list, and check whether a redownload option is available. If a price still appears, first check the account used for Media & Purchases, your purchase history, and the current storefront; don't pay again straight away. Check the App Store page for details on purchase restoration. Reinstalling the app does not restore configuration data: check your existing subscription, server settings, and configuration files separately.

Home / Settings

Installation and first launch

Keep app purchases, system VPN authorization, and connection data restoration separate so you can troubleshoot each stage correctly.

Can I install Shadowrocket on iPad? Do I need to buy it separately from iPhone?

Check eligibility for both iPhone and iPad on the same Shadowrocket App Store product page. Review the compatibility section, then confirm which purchase account is signed in on the device. Check the App Store page for device compatibility, system requirements, and whether the purchase is universal. If you bought the app on iPhone, first look for it in Purchased on your iPad. Check the active server, selected configuration, and connection status on each device separately; don't assume settings are identical after installation.

What should I do when iOS asks to add a VPN configuration on the first connection?

First, confirm you're using the verified genuine Shadowrocket app and have selected your own server in Home. When you connect for the first time, the system may ask permission to add a VPN configuration. Read the prompt and complete authorization and authentication as required by your device. This permission creates a system connection configuration; it does not confirm that the server settings are correct or that the network is working. If your device is managed by an organization and adding configurations is restricted, check its management policies rather than repeatedly toggling the connection.

Home's connection switch won't turn on, or turns off right away. What should I check?

First, make sure Home has a usable server entry and that the one you want is selected. Then check that you completed the initial VPN authorization. If the system says configuration is restricted, check the VPN and device management settings for management policies or another active VPN configuration. Disconnect and try once more, noting the exact error message. Don't delete all your data as a first step. If you need to rebuild the system connection configuration, save your server details and configuration files first.

The app is in English. How do I follow the instructions?

This manual uses the app's original interface labels: Home shows servers and connection status, Config manages configuration files, Settings contains app settings, and Global Routing selects a routing mode. Navigate by these page names, then check the relevant controls instead of relying on button positions alone. To change the display language, check whether the app offers a language option in system settings; available options depend on your device. The interface language is separate from server names in a subscription.

Why are my old servers and rules missing after installing the app on a new device?

Your App Store purchase history restores your eligibility to get the app; it does not restore all your connection data. On the old device, check your existing subscription, manually added servers, and currently enabled Config file, then save or transfer them using options available in the app. After importing on the new device, select a server in Home again, check Global Routing, and verify system authorization. Subscription URLs and configuration files may contain private information; don't post their full contents in public discussions.

For a first-time setup, follow the getting started guide to import your details, choose a mode, and verify the connection in order.

Subscribe / Add Server

Subscriptions and server imports

These steps assume you already have your own subscription or server information. Identify the type of data first, then check its format, access, and settings.

An existing subscription won't import, or the list is empty after import. How can I find the cause?

First, check that you copied the complete subscription URL provided by your existing service, not an account sign-in or information page. Pay particular attention to the beginning and end of the URL, line breaks, and spaces. Then confirm your current network can reach the URL and that your subscription access is still valid. If parsing fails, ask the service provider whether the returned format is compatible with Shadowrocket. A URL opening successfully doesn't guarantee it returns subscription data. Keep the error message for reference, but don't share the full URL or its access credentials while troubleshooting.

Scan QR Code doesn't create a usable entry. What should I do?

First, confirm the QR code comes from your own server or subscription details, not a payment, sign-in, or information page. In Home, when using Scan QR Code, check camera permission and make sure the code is complete and clear. Review the scan result to see whether it imported a single server or a subscription, then check the server type and required settings. If the code can't be recognized, compare the text details provided with the same service. A successful scan doesn't necessarily mean all connection settings are present.

Which settings are easiest to get wrong when using Add Server manually?

In Add Server, first select the protocol type that matches your original details. Then check the address, port, authentication, and transport settings one by one. For TLS configurations such as Trojan, also verify the SNI and certificate requirements; don't assume fields for other protocols are interchangeable. The address field usually takes only the hostname or address required by the server, not a full block of instructions. Save the entry, select it in Home, and test again. If it fails, compare the original settings first; don't disable certificate verification without a clear reason.

How do I update an existing subscription, and why did the server count change?

Find the relevant subscription group in Home and use the update action shown for that group. Check for a success or failure message; the exact location depends on the current app interface. Updating fetches the latest remote content, so entry names, counts, or settings may change along with the subscription. After updating, check that the currently selected server is still available instead of relying on the list refresh alone. If the update fails, check your network, URL validity, and service access. Avoid repeatedly deleting and reimporting the same details.

What's the difference between Subscribe and Config, and why didn't importing a subscription change my rules?

A server subscription usually maintains multiple connection entries in Home. Config manages configuration files containing rules and related settings; the two are not interchangeable. After importing a server subscription, open Config to check which file is enabled, and confirm Global Routing is set to Config. Otherwise, rule changes may not affect the current connection. If your service provides a separate configuration file, review its purpose before importing it. Don't use a server subscription URL as the contents of a configuration file.

Global Routing / Config / On Demand

Routing rules and troubleshooting

Verify the basic network first, then distinguish between server, routing mode, DNS, and rule issues. Comparisons are useful only when the destination and network conditions are the same.

How do I choose between Config, Proxy, and Direct in Global Routing?

Config mode routes requests according to the rules in the active configuration file. Proxy mode sends applicable traffic through the selected proxy route, while Direct uses a direct route. For rule-based routing, check the Config file first, then select Config. For troubleshooting, you can temporarily switch to Proxy or Direct and compare the same destination, but note the original setting and restore it after testing. Global Routing selects a route; it cannot fix incorrect server settings or guarantee that a remote service is available.

The connection switch is on, but webpages won't load. What order should I troubleshoot in?

First, disconnect and confirm your current Wi-Fi or cellular network can load ordinary webpages. Then check the server selected in Home and its authentication details. Next, check Global Routing and compare the same destination in different modes to narrow down whether the issue is with the server route or a rule. If domain names fail, check DNS settings in Config and use any visible connection records to see whether resolution failed. Change one setting at a time and test again. An illuminated switch only means the connection is enabled; it doesn't mean every request succeeded.

I changed a rule, but why are requests still taking the old route?

First, confirm you're editing the currently enabled file in Config. After saving, check that Global Routing is set to Config. Then review the Rule section from top to bottom: a broad DOMAIN-SUFFIX or IP-CIDR rule may match first, preventing a more specific rule below it from taking effect. FINAL should be the last fallback. Also distinguish the Proxy option in the interface from the PROXY rule policy; they are different fields. Make a new test request and check the visible app records to confirm which rule matched. Don't rely on the rule text being present alone.

Battery drain seems higher after using Shadowrocket. What should I check?

Check app activity for the relevant period on your system's Battery screen, then consider network changes, data transfer, and usage time. Don't infer the cause of battery drain from the VPN icon in the status bar alone. Weak signal, sustained transfers, repeated reconnects, and frequent tests or updates can all increase activity. Stop unnecessary repeated tests, check whether On Demand is triggering unexpected reconnects, and observe usage under similar conditions. Note the original settings before making changes; avoid turning off several features at once just to compare battery use.

Could On Demand be reconnecting automatically after I disconnect manually?

Check On Demand and its related conditions in Settings, then see whether the corresponding on-demand connection is enabled in the system's VPN settings. The system may reconnect when the network changes or a specified condition is met, so disconnecting manually doesn't necessarily change the on-demand rules. Note the current conditions, temporarily disable the relevant on-demand settings, and see whether automatic connections continue. Once you identify the cause, restore settings as needed. On Demand controls when a connection starts; it doesn't replace request routing rules in Config.

For a line-by-line explanation of the Rule section and match order, read the rule reference. To identify protocol or policy names, see the quick reference.