Shadowrocket Setup Guide 2026: iOS Proxy Config in 10 Min

Quick Summary: Shadowrocket is the most popular iOS proxy client, supporting Shadowsocks, VMess, VLESS, Trojan, and more. This guide walks you through purchasing, configuring servers, importing subscriptions, and optimizing proxy mode — everything you need to get running in under 10 minutes with VPN07.

What Is Shadowrocket (小火箭)?

Shadowrocket — nicknamed "小火箭" (Little Rocket) in Chinese communities — is a rule-based iOS proxy utility app developed by Shadow Launch Technology. Originally released on the App Store in 2015, it has grown into the go-to proxy tool for millions of iPhone and iPad users worldwide.

Unlike a traditional VPN app, Shadowrocket acts as a proxy client: it connects to proxy servers configured with protocols like VLESS, VMess, Trojan, or Shadowsocks. This approach offers several advantages over built-in VPN:

Shadowrocket Advantages

• Rule-based traffic routing (split tunneling)
• Supports 10+ proxy protocols
• One-tap subscription URL import
• Per-app proxy control
• Deep traffic analysis tools
• Very low battery consumption

Key Specs

• Price: $2.99 (one-time purchase)
• Platform: iOS 12+ / iPadOS 12+
• App Store: Requires non-China account
• Size: ~12MB
• Last major update: 2025
• Rating: 4.8/5 (200,000+ reviews)

Important: App Store Region

Shadowrocket is not available in the China App Store. You need a US, Hong Kong, or any non-mainland Chinese Apple ID to purchase and download it. Once purchased, you can switch back to your regular Apple ID — the app remains installed. You can also use Family Sharing.

Step 1: Purchase Shadowrocket on the App Store

Create a Non-China Apple ID

Go to appleid.apple.com and register a new account. Set the country to United States or any region where Shadowrocket is available. Use a real email address you can verify.

Sign In to App Store

Open Settings → [Your Name] → Sign Out. Then open the App Store, tap your avatar, and sign in with your new Apple ID.

Search and Purchase

Search "Shadowrocket" in the App Store. Look for the orange rocket icon by Shadow Launch Technology LLC. Tap the $2.99 price to purchase. You only pay once — no subscription.

Switch Back to Your Main Apple ID

After downloading, go back to Settings → [Your Name] → Sign In with your regular Apple ID. The Shadowrocket app stays installed on your device.

Step 2: Import Your VPN Subscription (Easiest Method)

The fastest way to add servers is via a subscription URL. Your VPN provider gives you a single URL that automatically imports all available server nodes. VPN07 supports one-tap Shadowrocket subscription import.

How to Import VPN07 Subscription into Shadowrocket

1. Log into your VPN07 dashboard at vpn07.com
2. Navigate to "My Subscription" and copy your subscription URL
3. Open Shadowrocket on your iPhone
4. Tap the + button in the top-right corner
5. Select "Subscribe" from the options
6. Paste your VPN07 subscription URL and tap "Done"
7. All VPN07 nodes across 70+ countries will instantly appear

70+

Server Countries

1000Mbps

Max Bandwidth

$1.5

Per Month

Auto

Node Updates

Subscription URLs are much better than manually adding servers because:

All nodes update automatically when your VPN provider adds new servers
One tap refreshes all server configurations
If a node goes down, alternatives are always available
No manual copying of ports, passwords, or encryption keys

Step 3: Add a Server Manually (Alternative Method)

If you prefer manual configuration or your VPN doesn't offer subscription URLs, you can add servers individually. Tap + → "Type" to select your protocol, then fill in the server details.

Protocol	Required Fields	Typical Port
Shadowsocks	Host, Port, Password, Encryption	443, 8388
VMess	Host, Port, UUID, AlterID, Network	443, 80
VLESS	Host, Port, UUID, Flow, Network	443
Trojan	Host, Port, Password, SNI	443
SOCKS5	Host, Port, Username, Password	1080

Pro Tip: Use QR Code Import

Many VPN providers display a QR code for each server. In Shadowrocket, tap + → "Scan QR Code" to instantly import server details without any manual typing. This is especially useful for Trojan and VLESS nodes that have long UUIDs.

Step 4: Choose Your Proxy Mode

Shadowrocket's main screen has a mode selector at the top. Choosing the right mode is critical for both performance and compatibility.

GLOBAL

Global Mode

All traffic (including Chinese and local apps) goes through the proxy. Slowest but most complete. Use only when you need everything encrypted, such as on public WiFi.

AUTO

Rule-Based Mode (Recommended)

Uses built-in rules to decide which traffic goes through proxy. Chinese apps (WeChat, Alipay, Baidu) use direct connection; blocked services (Google, YouTube, Twitter) use proxy. Best balance of speed and access.

DIRECT

Direct Mode

Shadowrocket is loaded but all traffic bypasses the proxy. Use this to temporarily disable proxy without disconnecting the VPN profile.

For most users, Rule-Based (Auto) mode is the ideal choice. It keeps domestic apps fast while routing international traffic through your VPN07 proxy server.

Step 5: Connect and Test

Select a Node

Tap any server node in the list to select it. For best performance with VPN07, tap the speed test icon (⚡) to ping all nodes and the app will rank them by latency.

Toggle the Connection Switch

Tap the large switch at the top of the Shadowrocket home screen. iOS will ask permission to configure a VPN profile — tap "Allow." The status bar will show "VPN" when connected.

Verify Your Connection

Open Safari and visit google.com or youtube.com. If they load, you're connected. Alternatively, visit whatismyipaddress.com to confirm your IP has changed to your VPN07 server location.

# Quick connectivity test in Safari

https://www.google.com — should load

https://whatismyipaddress.com — should show VPN IP

https://www.youtube.com — should play videos

Key Settings to Configure After Setup

Always On (WiFi)

Go to Settings → General → Always On WiFi. Enable this to keep Shadowrocket active even when switching WiFi networks. Prevents accidental IP leaks.

DNS over HTTPS

Settings → DNS → Enable DoH. Prevents DNS queries from being visible to your ISP. Use Cloudflare (1.1.1.1) or Google (8.8.8.8) for fastest resolution.

Auto Update Subscription

In Settings, set Subscription Update Interval to 24 hours. This ensures you always have the latest VPN07 nodes without manual refresh.

Exclude Background Refresh

Under per-app rules, exclude heavy download apps like App Store and Apple Maps from the proxy. This saves battery while keeping important traffic secure.

Choosing the Right VPN07 Node in Shadowrocket

With 70+ countries available in VPN07, choosing the right node significantly impacts your experience. Here's the recommended node selection strategy:

Use Case	Recommended Region	Expected Latency
Google / YouTube	Japan, Hong Kong, Singapore	8–30ms
Netflix US content	United States	120–180ms
ChatGPT / Claude	Japan, Singapore, US	15–50ms
Online gaming	Japan, South Korea	8–20ms
General browsing	Nearest auto-selected node	Auto-optimized

Security Best Practices for Shadowrocket Users

Running a proxy client on your iPhone significantly improves your privacy, but there are additional security practices that make your setup much stronger:

Use Trojan or VLESS+Reality on Public WiFi

Public WiFi at cafés, hotels, and airports can be monitored by operators. When connecting on public WiFi, always ensure Shadowrocket is active and use Trojan or VLESS+Reality protocol — these make your traffic indistinguishable from normal HTTPS browsing, even if someone is monitoring the network.

Disable MitM Unless Necessary

Shadowrocket's MitM (Man-in-the-Middle) HTTPS decryption feature is a debugging tool, not a security feature. If enabled with an untrusted certificate, it weakens your HTTPS protection. Leave it disabled for normal use — it's only needed by developers who need to inspect encrypted app traffic.

Enable DNS over HTTPS

DNS queries reveal which websites you're visiting even when your traffic is encrypted. Shadowrocket's built-in DoH (DNS over HTTPS) support encrypts DNS resolution. Enable it in Settings → DNS → DoH Server and use Cloudflare (1.1.1.1) or Google (8.8.8.8) for maximum privacy.

Monitor the Activity Log

Shadowrocket's Activity tab (bottom navigation) shows every network request and which rule it matched. Review this occasionally to spot unexpected connections from apps making requests you didn't authorize — a useful privacy audit tool built right into the app.

Keeping Shadowrocket Updated and Running Smoothly

Shadowrocket updates regularly to maintain compatibility with new iOS versions and to support new proxy protocols. Here's a maintenance checklist to keep everything running smoothly:

Weekly Maintenance

Refresh subscription to get latest nodes
Run speed test (⚡ button) to re-rank nodes by current latency
Check Shadowrocket App Store for updates

After iOS Updates

Test connection immediately after iOS update
If broken, delete and recreate VPN profile (Settings → General → VPN)
Check for new Shadowrocket update addressing iOS compatibility

Frequently Asked Questions

Does Shadowrocket work on iPhone 14/15/16?

Yes, Shadowrocket is fully compatible with all iPhone models running iOS 12 or later, including the latest iPhone 16 series with iOS 18. It also works on iPad and Apple Silicon Macs via the iOS apps feature.

Is Shadowrocket a VPN app?

Technically, Shadowrocket is a proxy client, not a traditional VPN. It creates a VPN-like tunnel using proxy protocols such as Shadowsocks, VLESS, and Trojan. From iOS's perspective, it creates a VPN network extension, which is why you see "VPN" in the status bar when it's active.

Why does Shadowrocket need a VPN configuration permission?

iOS requires all apps that intercept network traffic to use the built-in VPN framework. This is an Apple security requirement and doesn't mean Shadowrocket is actually a full VPN — it's still a proxy client using this framework.

Can I use Shadowrocket with VPN07?

Yes! VPN07 fully supports Shadowrocket. After subscribing to VPN07, you get a subscription URL that can be imported into Shadowrocket with one tap. All 70+ country nodes are immediately available, supporting VLESS, VMess, Trojan, and Shadowsocks protocols.

What if Shadowrocket shows "Connection Failed"?

First, try switching to a different node. If that doesn't work, long-press on your subscription to refresh it. Check that your VPN07 account is active. If issues persist, try switching protocols — for example, change from VMess to VLESS or Trojan.

Pre-Flight Checklist: Before You Start Browsing

Before relying on Shadowrocket for day-to-day use, run through this quick verification checklist to ensure everything is configured optimally:

✓

VPN07 subscription imported and nodes visible

✓

Speed test run — fastest node selected (under 50ms)

✓

Mode set to "Rule" (not Global — for better speed)

✓

DNS over HTTPS enabled (Cloudflare or Google)

✓

VPN profile created (iOS shows "VPN" in status bar)

✓

Test: google.com and youtube.com load successfully

✓

Subscription auto-update set to every 24 hours

✓

Subscription URL saved in a safe location (Notes app)

VPN07 — Best VPN for Shadowrocket

1000Mbps · 70+ Countries · Trusted Since 2015

VPN07 is fully compatible with Shadowrocket and supports all major protocols including VLESS, VMess, Trojan, and Shadowsocks. Subscribe once and instantly import all 70+ country nodes into Shadowrocket with a single URL. With 1000Mbps bandwidth, 10+ years of stability, and a 30-day money-back guarantee, VPN07 is the perfect server backend for your Shadowrocket setup.