The Shadowrocket Android app is for devices that support arm64 apps. To install it, open this site’s download page in your system browser, then allow the browser or file manager you use to open the APK to install apps. If the download won’t start in WeChat, switch to a browser instead of tapping repeatedly. The steps below cover downloading, granting permission, installing, and connecting for the first time, and explain how to tell an installation issue from a connection issue.
1. Check your device and download option
On your Android device, choose the arm64 installer from the download page for all platforms. arm64 refers to the processor architecture an app targets. A 64-bit-capable processor does not necessarily mean the device is currently running a 64-bit version of Android. For older devices, lightweight system builds, or specialized hardware, check the manufacturer’s system information rather than relying on the device’s product name.
Shadowrocket is a closed-source commercial app with two ways to get it: the iPhone / iPad version costs $2.99 as a one-time App Store purchase; check the App Store listing for system requirements. The Mac (Apple silicon and Intel), Windows, Android, and Linux versions are free. This guide covers the Android APK, so you don’t need to follow the iPhone purchase steps.
- Use the right source: Open this site’s download page from this article and choose the Android section. Don’t use chat attachments or files hosted by unknown sources.
- Check available storage: Your device needs room for both the download and the app’s data after installation. If you see a storage warning, free up space before trying again.
- Check device restrictions: Work profiles, school-managed devices, and parental controls may block app installations. Ask the device administrator to adjust the policy.
- Know what installation provides: Installing the app does not give you a connection configuration. The steps that follow assume you already have a service provider and subscription. This site does not provide, sell, or recommend connection configurations or subscription services.
2. Download and install in a browser
Android installation permission is usually managed separately for each app that starts an installation. For example, if you download the APK in a browser and open it there, grant permission to that browser. If you open the same file in a file manager instead, you may need to grant permission to the file manager. Follow the app name shown in the installation prompt; you don’t need to allow every app to install files.
-
Open the download page
Open this site’s download page in your system browser, find the Android section, and select the arm64 APK. If the page is open in WeChat, use the menu in the upper-right corner to choose “Open in browser” first. The menu label may vary by system and WeChat version.
-
Wait for the download to finish
Check your browser’s download history and wait until the task is complete before opening the file. Seeing the filename in the list doesn’t mean the download has finished. Don’t start installing while the download is still in progress, paused, or failed.
-
Allow this source
After opening the APK, if Android says this source isn’t allowed to install apps, go to the settings page provided in the prompt. Check the name of the browser or file manager, then enable “Allow from this source.” A common path is Settings → Apps → Special app access → Install unknown apps.
-
Return to the installer
Go back to the installation screen and confirm. On some devices, you may need to reopen the APK from your download history after returning. If a security check explicitly reports a risk or a policy block, verify the source and read the prompt; don’t disable system-wide security protections.
-
Open the app and revoke permission
When installation is complete, open Shadowrocket and make sure it reaches the main screen. You can then return to the source permission page and turn off “Allow from this source.” This won’t uninstall the app. If you update it manually later, grant permission again when prompted.
Manufacturers may place this setting under “Security,” “Privacy,” or “More settings.” If you can’t find it, search Settings for “Install unknown apps” and check which app is starting the installation. If the switch is disabled on a managed device, downloading again won’t remove the restriction.
3. WeChat download doesn’t start? Try this
Downloads may behave differently in WeChat’s built-in browser than in a standalone browser. If tapping the download does nothing, briefly redirects, or returns to the same page, first check whether the download was actually handed off to a browser. A page without an error doesn’t mean the APK was saved to your device.
Check the download
- Open in
- This site’s download page in a standalone browser
- Select
- Android arm64 APK
- Download complete when
- The browser’s download history shows the task as complete
- If it fails
- Check your network, available storage, and download prompt, then try again
Make sure the file has finished downloading before troubleshooting installation permissions.
Check the installation
- App that starts the installation
- The browser or file manager used to open the APK
- Settings path
- Settings → Apps → Special app access → Install unknown apps
- Permission scope
- Allow only the trusted source you’re using
- Download complete when
- The app installs and opens successfully
Download permission and installation permission are separate steps; one does not replace the other.
If WeChat’s menu doesn’t include “Open in browser,” copy the address of the download page, switch to your system browser, and paste it there. Copy the web page address, not an unfinished download task. In the browser, select the Android download button again and check the result in its download list.
- No download in history: First fix where the page is opening or resolve network access. There’s no need to check installation permissions yet.
- Download failed: Check available storage and your network connection. Delete the failed task and download again to avoid opening an old file by mistake.
- Download complete, but the file won’t open: Open it from your browser’s download history or a file manager. If Android reports a parsing error, check that the download completed and that your device supports the app’s architecture.
4. First launch: installation, configuration, and connection
Opening Shadowrocket confirms that installation succeeded. To connect, you’ll also need a valid configuration of your own, a working network, and system VPN permission. Home shows connection status and entries, Config is for configuration files, and Settings contains app settings. Labels and locations may vary by version; Android’s “Install unknown apps” switch is not an in-app setting.
If you already have a subscription, follow the getting started guide to import your own link, then check that an entry you can select appears. For illustration, https://example.com/sub?token=xxxx is a dummy value and won’t connect. Real links may contain access credentials, so don’t post them in public comments, screenshots, or support requests.
- Check the import first: If the list is empty or the subscription update failed, check the original link, its validity period, and your network. Reinstalling the app repeatedly won’t help.
- Then select a connection entry: In Home, choose an entry from your own configuration and start the connection. The first time Android asks to set up a VPN connection, read the prompt and confirm the app’s identity.
- Check for another VPN: Android usually allows only one active VPN service per user or profile. Another VPN or a filtering tool that uses the VPN interface may cause a conflict.
- Check background restrictions last: If the connection drops only after the screen locks, check Settings → Apps → Shadowrocket → Battery for background restrictions. Labels vary by manufacturer; there’s no need to loosen every permission in advance.
5. Installed, but access is unreliable? Check Global Routing
After installation, access can also depend on Global Routing. Note the current mode before troubleshooting, then change just one setting to compare. Don’t update a subscription, switch connection entries, and edit rules all at once; even if access returns, you won’t know which change fixed it.
Config
RecommendedUse the policies selected by rules in the current configuration file. You’ll get the expected routing only when the configuration matches your needs. Config does not automatically send every address in mainland China direct.
Best for: everyday use with a ruleset you understand
Proxy
Route traffic handled by the app through a proxy. Use this mode for comparison with Config. If sites work in Proxy but not Config, check which rules match and which policies they select; that alone doesn’t mean you need to reinstall.
Best for: temporarily distinguishing a rules issue from a connection issue
Direct
Use a direct connection without relying on a proxy entry. While Direct is selected, whether a webpage opens cannot tell you if the selected proxy entry is working.
Best for: checking direct access on your current network
The syntax below shows how rule order works; it is not a connection configuration and contains no server details. Check the effect of these rules only in Config mode; they are not required for installation. PROXY requires an available proxy policy. The example domain is for demonstration only.
[Rule]
DOMAIN-SUFFIX,example.com,PROXY
IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
GEOIP,CN,DIRECT
FINAL,PROXY
DOMAIN-SUFFIXmatchesexample.comand its subdomains, but not other domains that merely contain the same string in their names.- The
IP-CIDRexample covers the specified private IP range.no-resolvemeans this IP rule won’t trigger an additional domain lookup. GEOIP,CN,DIRECTuses an IP geolocation database; it does not make decisions based on a webpage’s language or a website’s name.FINALhandles requests that didn’t match any earlier rule, so place it last. Rules are evaluated from top to bottom. A broad rule near the top may prevent a more specific rule below it from matching.
6. Installation and update FAQs
I allowed installation. Why does Android still send me to Settings?
Check the source name in the prompt. You may have allowed your browser but opened the APK from a file manager. Go to Settings → Apps → Special app access → Install unknown apps and allow only the app that is actually starting the installation. If an administrator has locked the switch, contact them.
What should I do if Android says “There was a problem parsing the package”?
Delete any incomplete or failed download, then download the Android arm64 APK again from this site’s download page. If the error persists after the download completes, check compatibility with your device’s Android version and architecture. Changing the file extension won’t fix it; don’t keep opening the same failed file.
An update says it wasn’t installed. Should I uninstall first?
Don’t uninstall right away. Check available storage, make sure the download completed, and review the specific reason shown by Android. The update may fail because the installed app and update package have different signatures, device policies restrict installation, or the installer is malfunctioning. Save your configuration and any other information you need before deciding whether to change the existing installation.
The app installed. Why can’t I access anything?
First confirm that your subscription imported successfully and that you have an entry to select. Then check VPN permission and Global Routing. If no entries work, check your network and the status of the service you already use. If only Config has issues, compare the rules as described above. Installation permission can’t fix a connection configuration problem.
Can I delete the APK after installation?
Once you’ve confirmed Shadowrocket opens normally, you can delete the downloaded file from your browser’s download history or file manager to free up space. Deleting the APK won’t uninstall the app. To uninstall it, use Android’s app settings; these are separate actions.