Official Manual · FAQ Index
Shadowrocket FAQ
Purchase, Import & Connection Troubleshooting
Shadowrocket is available only on Apple platforms, exclusively through the App Store. This page organizes FAQs by task. Check your purchase and permissions first, then review your existing subscription, routing mode, and logs.
App Store Verification
Verify the App & Purchase
Check the product page and purchase account before troubleshooting search visibility, redownloading, or payment. Buying the app and getting a connection service are separate things.
Can't find Shadowrocket in the App Store? What should you check first?
First, make sure you’re searching for Shadowrocket, then open the product page from this site’s App Store guide. Store availability depends on the country or region of the Apple Account used for Media & Purchases—not directly on your device’s location or system language. If the product page says the app isn’t available in your region, check your account region. If it says your device isn’t compatible, review the compatibility section. A missing search result doesn’t necessarily mean the app is no longer available. Refer to the App Store page for availability and system requirements.
How can you verify that the app in the App Store is Shadowrocket?
Check these three details: the app name is Shadowrocket, the developer is Shadow Launch Technology Limited, and the product page URL includes id932747118. Also compare the listing with the official icon in this site’s header. It’s a rocket outlined in blue and purple on a white background; a similar name or search position alone isn’t enough to verify the app. Open the product page to confirm the developer and app ID rather than relying on a search-result preview. Check the page itself for the current price, compatibility, and purchase button status.
Do you need to buy Shadowrocket again after getting a new iPhone or reinstalling it?
Start by signing in to the App Store with the Apple Account used for the original purchase. Look for Shadowrocket in your account’s Apps or Purchased list; the list name may vary by system version. If a cloud download button appears, follow the prompts to download it again. If you still see a price, check the Media & Purchases account and purchase history before paying again. Reinstalling the app doesn’t restore all local settings: check subscriptions, rules, and synced content separately. See the App Store page for details on purchase sharing eligibility.
What do Shadowrocket’s price and one-time purchase cover?
Shadowrocket is a paid app on the App Store. The US storefront lists it at around $2.99; prices appear in local currency in other storefronts, and the amount shown on the product page at purchase is the one that applies. A one-time purchase covers the app, not server or connection services. Buying the app once does not buy a service plan. Importing data assumes you already have your own subscription or server details. After purchasing the app, check that those details are still valid; the app purchase record is not proof of a service’s validity period.
Where can you check your Apple Account region, and what should you know before changing it?
On your device, open Settings, tap your Apple Account, then go to Media & Purchases, View Account, and Country/Region. Follow the prompts to verify your identity. Check the account used for App Store purchases—not just the device’s Language & Region setting. If you need to change the region, follow the official process on that page and read the notices about your balance, subscriptions, Family Sharing, and payment method first. You may need to resolve some items before continuing. Don’t repeatedly change regions just to troubleshoot one failed search.
Devices & System Permissions
Installation & First Launch
Keep app installation, system VPN permission, and server connectivity separate. Granting system permission only allows the app to create a network extension.
Why does iPhone ask to add a VPN configuration the first time you connect?
Shadowrocket uses the system’s network extension to handle traffic. The first time you connect, iOS may ask to add a VPN configuration. Confirm that you’re using Shadowrocket, allow the request, and complete device authentication as prompted. Then return to Home to check the connection status. This permission doesn’t enter server details or confirm that a subscription works. You can check the entry under Settings > General > VPN & Device Management. If you previously denied the request, return to the app and try connecting again. Refer to the App Store page for system requirements.
Can you install Shadowrocket on iPad, and do you need to enter all your settings again?
You can get Shadowrocket on iPad from the same App Store product page. Refer to that page for system requirements and purchase sharing eligibility. If you’ve already purchased the app, first check that your iPad’s Media & Purchases account is the one used for the purchase, then check your purchased items. In landscape orientation, iPad may show wider list and detail layouts, but interface labels such as Home, Config, and Settings still help you find your way. A purchase record doesn’t restore your configuration; check iCloud sync or reimport your own valid subscription separately.
What should you do if the connection switch on Home won’t turn on or turns off right away?
On Home, first make sure a complete server entry is selected. Then check that system VPN permission is enabled and that another VPN connection isn’t already in use. If the system reports restricted permissions, check your device management policies instead of repeatedly toggling the switch. If the connection still drops immediately, check the first relevant error in Log to distinguish a configuration read error from a connection or authentication failure. Change one setting at a time and record the result. Avoid deleting configuration and resetting network settings at the same time, so you don’t lose useful troubleshooting clues.
The interface is in English. How can you match the manual to the right controls?
This manual keeps interface labels in English and explains them in context: Home is where you select a server and connect; Config is for managing configuration rules; Settings controls app behavior; and Add Server is where you enter details. The available display language depends on the app’s language support and your system settings, so it may differ between devices. If your system offers a separate language setting for the app, check it in device Settings. Otherwise, follow the English labels; you don’t need to change your entire device language just to import a subscription.
How should you investigate increased battery use after connecting?
Check app activity for the same period in your system’s Battery settings, then compare it with your actual usage time. Don’t infer the cause from the battery percentage alone. Continuous data transfer, repeated reconnections, frequent tests, detailed logging, and changes in network signal can all increase processing. Stop unnecessary repeated tests first, check whether the connection is failing repeatedly, then see whether On Demand fits your usage. After making a change, observe the app under similar network and workload conditions. Keep only the logs needed for troubleshooting, and avoid changing several things at once.
Add & Manage Your Existing Details
Subscription & Server Import
The steps below assume you already have your own subscription or server details. First check the data source and format, then update it or review an individual entry’s settings.
Where do you import an existing subscription link?
First, make sure you have your complete subscription URL—not an account sign-in page or an ordinary webpage URL. On Home, open Add Server, select the Subscribe type, enter a recognizable name, and paste the full URL. Check it, save it, and update the subscription. Return to the list and confirm that the expected subscription group and server entries appear, then select one to test. Importing a subscription only adds a data source; it doesn’t grant system VPN permission or guarantee that every entry can connect. Check Global Routing and the connection status as well.
What should you do if subscription import fails with a format error or an empty list?
Check the URL, access, and response in turn. First, make sure the link is complete and contains no extra spaces or line breaks or missing parameters. Next, confirm that the current network can reach it. Finally, verify that the response contains subscription data Shadowrocket can read—not a sign-in page, error page, or expiration notice. An empty list can also mean the subscription has expired or its contents have changed; check its status and format with your own service provider. Keep any working entries before retrying, and don’t delete all groups just to test. Hide private URL parameters included in any error message before sharing it.
How do you update a subscription, and why did server names change afterward?
On Home, find the relevant subscription group and use its update action. Wait for it to finish before checking the list. An update rereads the subscription, so names, sort order, or entry counts may change to match its source; this isn’t an app update. If the update fails, first check whether your current network can reach the subscription URL, then confirm that the subscription is still valid. After a successful update, check which entry is selected instead of assuming an entry is missing because its old name changed. Updating a subscription usually doesn’t update a separate Config rules file; check each one independently.
How can you avoid mistakes in Add Server when you have your own server details?
In Add Server, select the protocol specified by your server provider, then check the address, port, authentication details, and transport fields one by one. Shadowsocks, VMess, VLESS, Trojan, WireGuard, and Hysteria2 require different fields; don’t apply one protocol’s setup to another. A correct address and port don’t guarantee that the authentication or TLS settings are right. Don’t guess missing details. Save the entry and test it. If you see an authentication or handshake error, compare the relevant fields against the original information.
Can you share a subscription link or QR code to get troubleshooting help?
Subscription URLs, share links, and QR codes may contain credentials that grant access, so treat them as private. When asking for help, share the error type, steps that triggered it, network conditions, and what you’ve tried—not the full subscription or authentication details. If you need to share a screenshot, check whether the QR code, URL parameters, password, user ID, or server label need to be hidden. Masking just a small part of a link usually isn’t enough. If a URL is exposed, use your own service provider’s account tools to replace the affected credentials, then update the saved address in the app.
Trace the Traffic Path to Find the Cause
Routing Rules & Troubleshooting
Check the original network, server connection, DNS, and rule matching separately. The connection indicator, test results, and actual access each reflect a different part of the process.
How do you choose between Config, Proxy, and Direct in Global Routing?
Config follows the rules in the active configuration and is suited to rule-based routing. Proxy handles intercepted connections in proxy mode and can help you check whether the selected server is reachable. Direct sends intercepted connections straight to their destinations and can help you compare results with your regular network. These are traffic handling modes, not server protocols, and none guarantees access to a particular destination. Before using Config, make sure a rules file is enabled. For troubleshooting, change one mode at a time and test the same destination; then restore the mode that suits your usual needs.
It says connected, but webpages still won’t load. What should you check, and in what order?
Temporarily disconnect Shadowrocket and confirm that your Wi-Fi or cellular connection works on its own. Then reconnect and check the selected server and Global Routing. Test more than one destination to distinguish a single-site issue from a general access problem. In Config, check whether the rules send the destination to the expected policy. Finally, check Log for DNS resolution, authentication, or handshake errors. A system connection indicator only means the network extension has started; it doesn’t confirm that the server, DNS resolution, or destination site is working. Test again after each step. Don’t change DNS, the protocol, and rules all at once.
Why can a Ping test succeed while actual connections still fail?
Ping results depend on the selected test method and may reflect only one part of a connection, not the full process of loading a webpage. Even if the test gets a response, authentication, TLS, DNS, rule matching, or the destination site can still fail. Conversely, no response from one type of test doesn’t prove that all access is failing. Cross-check with Connectivity Test and by visiting the actual destination, using the same network for comparison. Test values are useful clues; don’t judge whether an entry suits your needs by the numbers alone.
If DNS seems to be failing, should you switch to a different resolver address?
First, check Log to see whether the failure occurred during domain name resolution. Then review DNS settings in Settings and any related settings in the active Config, so you don’t mistake an authentication failure for a DNS issue. Before changing anything, record the current value and change one setting at a time, testing the same domain each time. Don’t combine options with unclear purposes. The resolver must also be reachable over your current network or selected route; switching it at random may not help. If only some domains fail, check the matching rules and destination site status rather than resetting all network settings.
Could On Demand be reconnecting after you disconnect manually?
It could. On Demand starts a connection when specified conditions match, and a network change or a later request may meet those conditions again. Check the feature and its matching settings in Settings, and note the current configuration. To stay disconnected temporarily, turn off the relevant On Demand behavior first, then use the connection switch on Home. Don’t delete the system VPN entry instead of checking the trigger conditions; the same behavior may return when you grant permission again. If it still reconnects after you turn off On Demand, check the system VPN settings and device management requirements.