Shadowrocket
Installation and usage guide
Manage subscriptions and rule-based connections on iPhone and iPad. Covers installation, subscription import, everyday use and troubleshooting.
Get ready to connect
- A WahooVPN account you can sign in to, with an active plan and remaining traffic.
- Create a separate subscription link for this device using this format: V2Ray.
- Do not share your account password with strangers when installing third-party clients.
This guide uses V2Ray subscriptions. Recognizing a subscription does not mean supporting every transport parameter it contains. Verify VLESS / REALITY / XHTTP against the installed app version. Testing with WahooVPN on a physical device is still pending.
Install from the App Store
Open the official store link below, confirm the app is Shadowrocket, then download it with your own account and open it.
Check the developer and app details in the App Store and download with your own Apple account. Availability and pricing depend on the store. Do not buy or borrow a stranger's account or use it to sign in to iCloud.
Create and copy a subscription
Sign in to WahooVPN's Subscription Links page, choose V2Ray, create a link and copy the full URL.
Open WahooVPN subscription managementA subscription URL is an access credential. Do not share it in group chats, online subscription converters or public screenshots.
Add a subscription
Tap + at the top right of the home screen, choose Subscribe, paste the full URL into the address field, add a recognizable label and save.
Update and select a node
Return to the home screen, update the subscription group and confirm the node list has loaded. Tap a node to make it the current connection. The update button's location may vary by version.
Choose routing and connect
If suitable routing rules are configured, you can select Configuration routing. A node subscription alone does not guarantee rules are included. Enable the connection and allow iOS to add a VPN configuration on first use.
Check network access
Open the target website, then check your everyday apps. The VPN icon only means the tunnel has started. If the website fails, check routing rules, the node and subscription status.
Everyday use
Once connected, switch nodes, maintain subscriptions and check routing as needed.
Switch nodes and check the current connection
- Return to the home screen, expand your subscription group and tap the node you want to use.
- Confirm the connection switch is on before opening the target service. If existing connections do not change after switching nodes, disconnect and reconnect.
- Region and purpose labels in node names are only a selection aid. Actual access still needs testing.
Choose global routing and configuration rules
- Check the current Global Routing selection. Routing by configuration requires a suitable rules configuration.
- Importing a subscription usually adds nodes, not routing rules. Check the active configuration file before using Configuration routing.
- Temporarily adjust routing to troubleshoot a website, then restore your everyday configuration after testing.
Update subscriptions and manage device permissions
- Update the existing subscription group rather than creating a new one each time. Check whether the node list has changed.
- If a link is revoked or replaced, enter the new URL in subscription settings and update. Changing only the label is not enough.
- When asked for VPN permission, confirm that you initiated the action. Do not install unknown certificates or profiles to import a subscription.
Having trouble? Check these first.
Shadowrocket says VPN is connected. Why do some websites still fail?
Check the selected node, Global Routing and active rules. The VPN icon only shows that the system tunnel has started; it does not prove node connectivity or that every request uses the proxy. Check for conflicts with other VPN or network filtering apps too.
Why did the rules stay the same after updating subscription nodes?
Node subscriptions and rules configurations are separate. Check whether the subscription output contains the required content and which configuration the app uses. Do not use another client's YAML rules as a Shadowrocket configuration.
What if Shadowrocket is unavailable in the App Store?
Use your own Apple account to check availability in your store. Prices and regions are determined by the store. Do not buy shared accounts or sign in to iCloud with an unknown account.
What is a subscription link?
A subscription link is a personal configuration address supplied by a proxy service provider. It contains information such as nodes, connection configuration and traffic plan details.
How do third-party proxy clients differ from the WahooVPN app?
Both use the same WahooVPN server resources, but their workflows and features differ. The official WahooVPN app lets you sign in and connect with one tap, with automatic server selection and smart routing. Third-party clients such as Clash and v2rayN load server configurations through subscription links without signing in to your WahooVPN account; available features depend on the client.
Which client should a beginner choose?
Start with your device: Shadowrocket for iOS, v2rayNG for Android, or Clash Verge Rev for macOS and Windows. Once you choose an app, open its guide on this site to find the matching subscription format.
What if an update fails or the node list is empty?
Check that the URL is complete, the format matches and the link is enabled, unexpired and not revoked. Also check your account expiry and remaining traffic. Confirm your network can reach the subscription service. Do not paste credentials into third-party online testing tools.
Why can I import a subscription but still not connect?
Confirm an active node is selected and the proxy is started. Then check system proxy or VPN permissions, routing and conflicts with other VPNs. Some nodes may use transport parameters unsupported by the current core. Successful subscription parsing does not establish protocol compatibility.
What is the difference between the system proxy and TUN?
The system proxy is used by apps that follow system proxy settings. TUN handles traffic through a virtual network interface and usually needs extra permissions. Routing and app exclusions still determine its scope; it does not guarantee that all traffic uses the proxy.
What if a link is lost, exposed or expired?
The full link is shown only when created. Create a new link if you lose it. If you suspect exposure, revoke the old link in your account, then create and import a new one. Revocation is irreversible. Check link expiry and account plan expiry separately.
Sources and verification status
This guide is based on official client documentation. It has not yet been tested on the corresponding physical devices. Interface labels may change between versions; real screenshots and tested version records are still pending.
Read official client documentation