This guide addresses the practical question “How do I use Shadowrocket?” It explains how iPhone and iPad users can import nodes or subscriptions, enable the proxy, and understand how IP addresses, DNS, and browser settings interact after connecting—helping avoid common issues such as “the proxy is on, but webpages won’t load,” “my IP changed, but DNS is leaking,” or account security checks.
1. Basic steps for using Shadowrocket
Shadowrocket is a popular proxy client for iOS. It doesn’t provide servers, so you’ll need a working node or subscription link. Nodes may use formats such as VLESS, VMess, Trojan, or Shadowsocks. This site also collects free nodes for testing, but their reliability can vary, so check whether they connect successfully.
- Install Shadowrocket on your iPhone or iPad, then allow it to add a VPN configuration.
- Open the app and tap “+” in the top-right corner. Select “Type” to add a node manually. If you have a subscription link, go to the relevant “Config” or “Subscription” section and paste in the URL.
- After importing, return to the home screen, select a node, and tap the switch on the right to connect.
- The first time you connect, iOS will display a VPN permission prompt. Tap Allow, then enter your passcode or use Face ID.
- Once connected, you’ll usually see a VPN icon in the status bar. Open a browser and test access to a webpage.
If you use a subscription, tap “Update Subscription” regularly, since node addresses, ports, or availability may change. If a node stops working, don’t repeatedly reinstall the app—try another node first.
2. How IP, DNS, and browser settings are related
Many people assume that turning on Shadowrocket makes everything secure, but it’s important to distinguish between your IP address, DNS resolution, and your browser environment. Your IP address is the public address websites see; DNS is the process of resolving domain names; and your browser environment includes information such as your language, time zone, cookies, WebRTC, and fingerprint.
Normally, when you connect through a proxy, the IP address websites see changes to the node’s exit IP. But if DNS queries don’t go through the proxy, a DNS leak may occur, allowing websites or testing tools to see your local ISP’s DNS. In Shadowrocket, you can usually enable remote DNS or choose an appropriate DNS policy in the configuration. For most users, the client’s default settings are a good choice; avoid copying configurations from unknown sources.
Your browser environment can also affect your experience. For example, if you connect through a server abroad but your browser language is still Chinese and your time zone is still Beijing time, some platforms may consider these settings inconsistent. This is usually not an issue for general browsing. If you’re logging in to websites that require an account, stick to a consistent node, avoid frequently switching regions, and clear any unusual cookies.
3. Recommended rule and mode settings
Shadowrocket’s common modes are Global Proxy, Rule-based, and Direct. In simple terms, Global Proxy sends all traffic through the node; Rule-based mode connects to domestic websites directly and routes international websites through the proxy; Direct mode doesn’t use a proxy.
- Everyday use: Choose “Config” or “Rule” mode. Domestic websites will load faster, and you’ll avoid routing unnecessary traffic through the proxy.
- Troubleshooting: Temporarily switch to “Global.” If it works in Global mode but not in Rule-based mode, there may be a problem with the rule configuration.
- Testing a node: Turn on Global mode and visit an IP-checking website to confirm whether your exit IP has changed.
If you imported a complete configuration file, it may already include rules, DNS settings, and routing. To avoid conflicts, don’t layer multiple configurations from unknown sources.
4. Troubleshooting connection failures
If you can’t connect, check the following in order: First, make sure your phone’s internet connection is working by turning off Shadowrocket and testing a domestic website. Second, check whether the node has expired or the subscription needs updating. Third, try another node in the same subscription. Fourth, switch between Wi-Fi and cellular data. Finally, restart Shadowrocket or remove the old VPN permission and authorize it again.
If the app shows that you’re connected but webpages won’t load, check the rule mode, DNS settings, and whether the client has recognized the node’s protocol correctly. If only one website won’t load, it may be blocking the node’s IP address; try a different region or node. Free nodes can become unavailable quickly, so it’s a good idea to have several backups.
In short, the basic process is to import a node or subscription, choose the right mode, connect and test, then troubleshoot using your IP, DNS, and browser settings. With these basics in hand, you can diagnose most proxy connection issues yourself.