At a glance

This guide is for users installing Shadowrocket on a Mac or Windows PC for the first time. Check your device architecture and download source first, then distinguish reputation warnings from compatibility issues and explicit security alerts. After installation, use your existing configuration to test that the app launches, connects, and applies rules—without mistaking an installation issue for a network problem.

1. Check your device architecture and download source

Before installing Shadowrocket on a Mac, check the system information. The Mac’s appearance, screen size, and purchase year don’t tell you which processor it has; models in the same product line can use different architectures. Open Apple menu → About This Mac and check whether it shows Chip or Processor. Choose the Apple silicon build for an Apple silicon Mac, or the Intel build for an Intel Mac. Don’t try both installers to see which one works.

On Windows, go to Settings → System → About and check System type to identify your operating system and processor architecture. Then compare them with the download page’s compatibility information. Don’t assume Windows on ARM is supported just because the app is labeled for Windows; if device support isn’t specified, confirm compatibility first. A compatibility layer alone doesn’t prove native app support.

2 chip types
Mac: Apple silicon or Intel—choose the matching build
2 ways to get Shadowrocket
iPhone / iPad: one-time $2.99 purchase on the App Store; Mac, Windows, Android, and Linux: free
932747118
App Store app ID for iPhone / iPad

Choose your platform on the download page. Installers for Mac (Apple silicon / Intel), Windows, Android, and Linux are available on this site. Get the iPhone / iPad version from the App Store; the developer is Shadow Launch Technology Limited, and system requirements are listed on the App Store page. There’s no need to search for repackaged installers or download managers.

2. Mac: Install the DMG in Applications

A DMG is a disk image, not the final location of the installed app. Double-click the downloaded file to mount a volume in Finder, then drag Shadowrocket into Applications and launch it from there. Repeatedly opening the app from the disk image can make it unclear which copy is running and complicate future updates or removal.

  1. Make sure the download has finished. Don’t try to open a temporary file while your browser still shows download progress.
  2. Double-click the DMG, then drag Shadowrocket from the Finder window into Applications.
  3. If macOS asks whether to replace an existing app, quit Shadowrocket first. Back up any configuration you want to keep from within the app.
  4. When copying is complete, eject the disk image from Locations in Finder. Ejecting it won’t remove the app copied to Applications.
  5. Open Finder → Applications → Shadowrocket. Read the full warning before deciding what to do next.

“This Mac isn’t supported” and “the developer cannot be verified” are different issues. For the first, recheck your Mac’s chip and the system requirements on the download page. The second is a macOS notice about the app’s source or verification status. Changing rules, DNS, or subscriptions won’t fix an architecture mismatch.

Mac chip selection and checks

Apple silicon
  • About This Mac shows Chip and the name of your Apple chip.
  • Choose the Mac Apple Silicon build on the download page.
  • Installing Rosetta is not a substitute for choosing the correct installer.
Intel
  • About This Mac shows Intel under Processor.
  • Choose the Mac Intel build on the download page.
  • Allowing the app to open for the first time won’t turn the Apple silicon build into an Intel build.

Match the installer to your device architecture before handling first-launch warnings; neither check replaces the other.

3. Mac: Allow only apps from a verified source

If you see a warning that the developer can’t be verified or macOS can’t confirm the app is free of malware, first check that you downloaded it from this site and copied it to Applications. A source warning alone doesn’t determine whether a file is safe. Proceed with the steps for this app only after confirming its source and understanding the warning.

  1. Try opening Shadowrocket from Applications once so macOS records the block.
  2. Go to System Settings → Privacy & Security and check the Security section for a block notice for Shadowrocket.
  3. Verify the app name, then choose Open Anyway. You may need to authenticate with an administrator account, Touch ID, or your device password.
  4. When the confirmation dialog appears, read it and choose Open. Continue launching the app from Applications.

In older versions of macOS, this option may be under System Preferences → Security & Privacy → General. Whether Open Anyway is available depends on the macOS version, the specific warning, and device management policies. If the button isn’t there, don’t use Terminal commands to remove quarantine attributes or disable security checks for the entire Mac. Keep the exact warning text and recheck the download source, architecture, and system requirements.

4. Windows: Tell SmartScreen warnings apart from security detections

Microsoft Defender SmartScreen may show “Windows protected your PC” when a file has limited reputation information. This differs from a specific threat detection by Microsoft Defender and from a User Account Control prompt asking for administrator permission. Identify whether the block happened during the browser download, when launching the file, or during a security scan.

  1. Choose the Windows version on this site’s download page. After the download finishes, locate the file in your browser’s download history to avoid opening an older installer in the same folder.
  2. If a SmartScreen window appears when you launch the file, first make sure it’s the file you just downloaded, then select More info.
  3. Check the app name and Publisher information shown after expanding the details. If the publisher is unknown, don’t treat that as a verified source. Choose Don’t run if you’re unsure where the file came from.
  4. If you’ve confirmed the source and want to continue, choose Run anyway. This option may not be available under every policy.
  5. If User Account Control appears next, check the program name and request. Allow it only if the installation needs the requested permission—don’t automatically approve every prompt.
  6. After installation, launch Shadowrocket from the Start menu. Make sure the app opens before setting up a connection.

If Windows Security → Virus & threat protection → Protection history shows a specific threat, stop running the file and note the detection name. Don’t force it through using the steps for a reputation warning. If your organization’s policy hides Run anyway, changing browsers, repeatedly renaming the file, or disabling Microsoft Defender are not appropriate fixes.

Bottom line: address the specific warning; don’t disable protection across your device

If the app hasn’t launched, check its architecture, download source, and system warnings first. If it opens but won’t connect, investigate your configuration and network. Stop rather than attempting to bypass a specific threat detection or organization policy.

5. After first launch: test the app, configuration, and rules separately

Seeing the main window only confirms that the app launched—it doesn’t mean a proxy connection is working. This guide assumes you already have your own service and subscription; buying the client does not include a service plan. This site doesn’t provide, sell, or recommend nodes or subscriptions. Before importing your details, make sure they’re still valid. Never post a full subscription URL containing access credentials in a public screenshot or support request.

Check imported connection entries in Home, and review configuration files and referenced policy names in Config. Use Settings to review related options. Desktop layouts may differ, so follow the controls shown in your version rather than assuming they’re in the same place as on mobile. If the system asks to add a network configuration or grant a related permission, read what it’s for and make sure the request came from the app you just launched.

Config

Recommended

Intercepted connections are handled according to the active configuration rules. Rules such as DOMAIN-SUFFIX, IP-CIDR, and GEOIP are evaluated in order; FINAL handles connections that didn’t match earlier rules. The route ultimately used depends on the policy each rule points to.

Use when: You have a valid configuration and want to test everyday rule-based routing

Proxy

Send intercepted connections through the selected proxy policy to compare its results with Config. This doesn’t mean all device traffic is being intercepted, and it doesn’t replace checking the protocol settings.

Use when: Temporarily checking whether rules affect a particular connection

Direct

Send intercepted connections directly, without using a proxy policy. This can help test basic network access, but it doesn’t prove that a proxy endpoint is working.

Use when: Comparing access without a proxy

These are three basic troubleshooting modes in Global Routing, not a complete list of its options. If you also see Scene, check its configuration first. Change one thing at a time: verify the selected connection parameters, compare Proxy with Config, then check the matching rule. Don’t change DNS, switch protocols, and reinstall the app all at once, or you won’t know what affected the result.

6. Common first-install questions

Where can I find Open Anyway on a Mac?

Try launching the app from Applications once, then check its entry under System Settings → Privacy & Security. If it still isn’t there, note the full warning and check your device management policies. Don’t assume this button can clear every kind of block.

I downloaded the Intel build on an Apple silicon Mac. Should I install it?

Quit the app, return to the download page, select the Apple silicon build, and copy it to Applications. Some Intel apps may run through compatibility features, but using the build that matches your Mac avoids unnecessary compatibility requirements.

I selected More info on Windows, but there’s no Run anyway. What now?

First check whether the device is managed by your organization, and distinguish a SmartScreen warning from a specific threat detection. Contact your administrator if a policy blocks the option. If Protection history shows a threat, stop running the file; don’t disable security features to make the button appear.

The installation succeeded. Why can’t I open websites after importing a configuration?

Check that your basic network access works, the connection is enabled, your existing subscription is still valid, and the current Global Routing mode is appropriate. Temporarily compare the results in Proxy and Config. If only Config fails, check its rules and policy references instead of repeatedly downloading the installer.