This guide is for anyone installing Shadowrocket on an Android device. First, make sure your device can run arm64 apps, then open this site's download page in your system browser. If installation is blocked, allow installs only for the browser or file manager you're using to open the APK. Turn that permission off again after installation. Once installed, import a subscription from your provider and confirm the VPN connection. The steps below cover downloading, installation, and your first connection so you can tell browser restrictions apart from APK issues.
1. Check arm64 compatibility and download source
The Shadowrocket Android download page on this site provides an arm64 APK. arm64 refers to a 64-bit ARM app environment, commonly identified by the ABI name arm64-v8a. A 64-bit processor does not necessarily mean the installed system provides a 64-bit app environment; some older devices or specific system builds may still use a 32-bit environment. If your device specifications list only armeabi-v7a, do not treat that as proof of arm64 compatibility.
Check the model under Settings → About phone, then confirm the architecture against your device's system specifications. Changing the file extension, repeatedly tapping Install, or switching file managers will not fix an architecture mismatch. Check the download page for the minimum Android version; do not infer it from requirements for other platforms.
For any device, choose the appropriate option in the Shadowrocket download guide. The iPhone / iPad app costs $2.99 as a one-time purchase on the App Store; the developer is Shadow Launch Technology Limited, and system requirements are listed on the App Store page. The Mac version (Apple silicon and Intel), Windows, Android, and Linux versions are free. App costs are separate from service plans. If you already have a subscription, continue using your provider's details; this site does not provide, sell, or recommend nodes or subscriptions.
2. Download and install in your browser
Use the same browser to open the download page, save the file, and open the APK. That makes it easier to identify which app needs permission if Android blocks installation. The menu names below are common on Android, but manufacturers may change them. If you can't find the setting, search Settings for “Install unknown apps.”
-
Open the download page
Visit this site in your system browser, open the download guide, and select the Android option. Check that the page is on shadowrocketupdate.com, then tap the Android download button. The file is served from this site's
/dl/shadowrocket/path. -
Wait for the download to finish
Open Downloads or Download Manager from the browser menu and wait until the task shows as complete. Don't open a temporary file while the download is in progress, paused, or failed. If Android reports insufficient storage, free up space and download the file again.
-
Allow installs from this source
Tap the completed APK. If Android blocks installation, tap Settings in the prompt to open permissions for the app handling the file, then enable Allow from this source. If you opened the APK in a browser, allow that browser; if you used a file manager, allow that file manager.
-
Return and confirm installation
Return to the system installer, check that the app name is Shadowrocket, and tap Install. If the installer closed, reopen the browser's download history and tap the same completed file. There's no need to download it again.
-
Turn off source permission
After installation, make sure Shadowrocket opens, then go to Settings → Apps → Special app access → Install unknown apps → the app you used to open the APK and turn off the permission. Temporarily enable it again for the source you use when installing an update.
3. If tapping Download in WeChat does nothing, use a browser
WeChat's built-in web view may restrict APK downloads, file handoffs, or access to the system installer. You may see no download task, an open prompt, or the same page again. Android's installation process has not started yet, so changing the Install unknown apps permission usually won't help.
- In WeChat, tap the menu in the upper-right corner and choose Open in Browser. The option's name and location may vary with your system and WeChat version.
- If that option isn't available, choose Copy Link, switch to your system browser, paste the link into the address bar, and open it. Make sure the page belongs to this site.
- Go to the Android section of the download guide and tap the download button. Check the browser's download list for a new task rather than relying on whether the webpage button changes.
- When the download finishes, open the APK from that browser's download history. If Android blocks installation at this point, allow installs from that browser as described above.
Don't paste a copied webpage address into Shadowrocket as a subscription link, and don't enter an APK filename in Add Server. The webpage provides the installer, the system installer installs the app, and the configuration in Home is what you use to connect. Each has a different input.
If the browser still doesn't show a new download task, check that the page loads fully, your connection works, and storage is available. Delete any failed task and try again. An old download notification in the status bar does not mean the download has finished.
4. Diagnose installation failures from the message
The installer's exact error is more useful than simply saying the app won't install. Note the full message and when it appears: during download, when you tap the file, or during an update. Common issues and troubleshooting steps are listed below; your device's actual message takes precedence.
| Message or symptom | Check first | What to do |
|---|---|---|
| Your device isn't allowed to install apps from this source | Which app opened the file | Open Settings from the prompt, allow installs only for the browser or file manager currently opening the APK, then return to the installer. |
| There was a problem parsing the package | Whether the download completed and the system and architecture are compatible | Delete any incomplete or failed file and download it again. If it still fails, check for an arm64 environment and review the download page requirements. |
| App not installed or conflict with an existing app | The existing app's source, update compatibility, and available storage | Back up your configuration first, then download the installer again from this site. Don't uninstall an existing app that still contains configuration you need. |
| Insufficient storage | Available space in internal storage | Remove files you no longer need and leave room for installation and app data; the APK's file size alone is not enough. |
| Your administrator doesn't allow installation | Work profile, parental controls, or organization device policies | Ask your device administrator which installation methods are allowed. Don't try to bypass management policies. |
Installing over an existing app usually preserves its data, but that is not a substitute for backing up first. Before updating, note your configuration source, rule changes, and any essential settings. If you export a configuration, save it somewhere you control; it may contain subscription URLs and credentials. Uninstalling can delete local data, so don't make it your first response to an installation failure.
5. Import a configuration and grant VPN permission
Opening the app confirms that installation succeeded; it doesn't mean a connection is ready. Get your subscription link from your provider. In Home, tap + in the upper-right corner to open Add Server, select Subscribe for Type, paste the full subscription URL, and save. Then update the subscription in Home. Button locations may vary between layouts; use the English interface labels to identify each function.
- Before importing: Make sure you've copied the subscription URL, not your provider's login page, payment page, or this site's download page. Query parameters are part of the URL, so don't truncate it.
- After importing: Check that the expected entries appear in Home, then select the one you want to use. Saving a subscription source and getting usable connection entries are separate checks.
- First connection: Turn on the connection switch and read Android's VPN connection request. Confirm that the requesting app is Shadowrocket before approving it. This permission is separate from install-source access.
- If there's a conflict: A user or work profile can usually have only one active VPN at a time. If another VPN is connected, check whether you need to disconnect it before starting Shadowrocket.
Use Home to manage connections and entries, Config for configuration files, and Settings for app preferences. You don't need to enable automatic connection for an initial test. Settings → On Demand controls automatic connection conditions; it isn't required to install an APK and won't fix a failed download.
6. Tell rule issues apart from connection issues
If Android shows that the VPN is connected but webpages don't behave as expected, check Global Routing. Config, Proxy, and Direct handle traffic differently. Note the current setting before changing it, and restore it after testing. These comparisons assume you already have a usable configuration; installation does not create connection details automatically.
Config
RecommendedRoutes requests according to the rules in the current configuration. This does not guarantee that a particular site will use a proxy; the outcome depends on the matching rule and its associated policy.
Best for: everyday rule-based routing after checking your configuration
Proxy
Sends requests handled by the client to the proxy policy. Use it temporarily to see whether rule-based routing is causing the issue. It still requires a usable connection profile.
Best for: comparing rule matching when you already have a working connection
Direct
Handles requests within the client's scope as direct connections. If this mode is active, a webpage still using a direct connection does not mean the APK installation failed.
Best for: comparing results with your local network connection
For example, in Config, rules are matched in order. example.com and its subdomains match the first rule; requests that don't match any rule fall through to FINAL. This is a syntax example only. The example domain does not indicate which sites need a proxy, and PROXY must correspond to a policy available in your configuration.
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
FINAL,DIRECTIf a site works in Proxy but not as expected in Config, check rule order, domain matching, and the fallback policy first. If both fail, check your subscription entries and network. Change one variable at a time and note the mode and result. Otherwise, reinstalling, switching configurations, and editing rules at once makes the cause hard to identify. For details, see the Rules reference.
7. Common questions about installation and background connections
Why is installation still blocked after I allowed it?
Check that you allowed the same app you're using to open the file. For example, if you allowed your browser but then opened the APK in a file manager, Android will check the file manager's permission instead. Open Settings from the current block prompt and check the app name shown there; you don't need to allow every source.
Can I turn off permission to install unknown apps after installation?
Yes. Go to Settings → Apps → Special app access → Install unknown apps and turn off permission for the source you just used. Shadowrocket will still launch normally. Enable the permission again for the source you use when installing an update. This setting does not control VPN access.
Do I need to reinstall if the connection drops after the screen locks?
Check background restrictions first. Go to Settings → Apps → Shadowrocket → Battery and see whether background activity is restricted. Allow the background operation you need using the options on your device, then test again with the screen locked. Menu names vary by manufacturer; there's no need to change battery policies for every app.
There are several APKs in my download history. Which one should I tap?
Find the task from this site's download page that shows as complete, then open that file. Don't assume a higher number at the end of the filename means it's newer; browsers may add sequence numbers to duplicate downloads. If you're unsure, delete the duplicates and download the file again from the download page.
Check three things when you're done: the browser's download history shows the file as complete, Shadowrocket opens on your device, and Android shows a VPN status when you initiate a connection. If the issue persists, note your device model, Android version, the step where it failed, and the full error message. Hide subscription URLs and passwords before sharing these details. This information makes it easier to identify whether the issue is with the browser, installer, or connection configuration than simply saying “the download doesn't work.”