This guide answers the beginner question “How do I use Shadowrocket?” It covers installation, importing a node, and connecting, and explains why your IP, DNS, or browser behavior may differ after connecting. It’s intended for new iPhone and iPad users. Interface labels may vary by version, so refer to what you see on your device.
1. What to prepare before installation
Get the official version of Shadowrocket from the Apple App Store. Availability depends on the region associated with your account. Shadowrocket is a proxy client, not a node service, so you’ll still need a node link, subscription URL, or QR code after installation. First, make sure your regular network can access the internet, and check that your device’s date and time are set automatically.
Subscription URLs and node links may contain access credentials. Don’t share them publicly, upload them to unfamiliar testing websites, or send others screenshots showing the full links. When using free nodes, consider their source, expiration date, and privacy risks, and avoid using them for sensitive activities.
2. Import a node and connect
- Copy the node link or subscription URL provided by your service. A single node usually corresponds to one connection profile, while a subscription is used to retrieve and update a group of profiles.
- Open Shadowrocket and tap “+” in the top-right corner of the home screen. For a single node, try importing it from the clipboard or scanning a QR code. For a subscription URL, select the “Subscribe” type, paste it into the URL field, and save. The steps may vary slightly by version.
- Return to the home screen and check whether the node appears. If the subscription hasn’t expanded or contains no profiles, update it and make sure the URL is complete and hasn’t expired.
- Select a node and set “Global Routing” to “Proxy” to check whether the node works. Turn on the connection switch on the home screen. The first time you connect, follow the system prompt to allow Shadowrocket to add a VPN configuration and complete verification.
- Open a browser and visit the website you want to access. Once you’ve confirmed the connection works, you can use “Config” mode for rule-based routing in everyday use. Only use rules from trusted sources; if you’re unsure about a rule set, don’t import it.
The VPN icon only indicates that the system tunnel is enabled; it doesn’t mean the node is working. Latency tests are only a guide. Ultimately, check whether websites and apps load as expected.
3. How IP, DNS, and your browser environment are related
Your IP is the network exit address that websites see. When you visit an IP lookup page in Proxy mode, you’ll usually see the proxy’s exit address. In Config mode, some websites may connect directly, so the lookup may still show your local network’s IP. Before investigating an unexpected result, check which routing rule the website is using.
DNS resolves domain names to IP addresses. If the proxy is connected but domain names won’t load, the cause may be a DNS resolution failure or a rule conflict. Keep the default settings at first, and don’t change multiple DNS options at once. If you need to make a change, note the original value and test one change at a time. A region shown on a DNS test page alone isn’t enough to determine whether your connection is secure.
Your browser also retains cookies, sign-in status, and site permissions. Changing your exit IP won’t automatically clear your browser identity, and it doesn’t make you anonymous. If a page still shows the same region, test it in a private window and check the region associated with your website account and your location permissions.
4. Troubleshoot connection failures in this order
- Turn off Shadowrocket to test your regular network, then try again over Wi-Fi or cellular.
- Update your subscription and try another node. Check that there are no limits on traffic or validity.
- Temporarily disable any other VPN and check for configuration conflicts.
- Test temporarily in Proxy mode. If Proxy mode works but Config mode doesn’t, check your routing rules first.
- If the issue only occurs in one browser, compare results in a private window or another browser. If it still fails, check DNS.
When contacting your provider for help, include the client version, error message, and steps you’ve tried, but hide your subscription URL and credentials. Follow local laws and the rules of the service you use.