Shadowrocket for Mac and Windows: Choose the Right Version and Allow First Launch

1. Check your platform and download options

The Apple silicon and Intel versions of Shadowrocket for Mac are built for different processor architectures; they are not different feature tiers. Don’t guess based on the computer’s appearance, purchase year, or the name “MacBook.” Open the Apple menu in the top-left corner and select About This Mac. If it lists “Chip” followed by an Apple chip name, choose the Apple silicon version. If it lists “Processor” followed by an Intel name, choose the Intel version.

On Windows, go to Start → Settings → System → About and check “System type,” then compare it with the requirements listed on the download page. If the installer says it isn’t compatible with your device, check your system and architecture first. Don’t keep trying to run it or rename the file to bypass the restriction.

Start at the download page for all platforms. Shadowrocket for iPhone and iPad is a one-time $2.99 purchase on the App Store; the developer is Shadow Launch Technology Limited, and system requirements are as listed on the App Store page. The Mac (Apple silicon and Intel), Windows, Android, and Linux versions are free. Desktop installers are served from this site’s download directory via the download page. Don’t install files saved from chat attachments or transferred from file-hosting services.

2. Install on Mac: Move the app to Applications before opening it

On the download page, choose the option that matches the information in About This Mac, then wait for the browser to finish downloading. The installer’s format depends on the download provided. Don’t open a temporary file while the browser is still downloading it. Save any work in progress before installing to avoid interrupting other tasks during approval or a restart.

1. Find the file: In your browser’s downloads list, choose “Show in Finder.” Make sure you’re opening the file you just downloaded from this site, not an older copy in your Downloads folder.
2. Install based on the file format: For a disk image, open it and drag Shadowrocket to Applications. For an archive, extract it first, then move the app. If an installer wizard is provided, read the prompts and follow its steps.
3. Open it from its installed location: In Finder, go to Applications, find Shadowrocket, and open it. Don’t keep running it from a mounted disk image or a temporary extraction folder.
4. Distinguish a routine confirmation: If macOS only asks whether you want to open an app downloaded from the internet, check the app name and source, then choose “Open.” This confirmation is not the same as a malware detection alert.

If no window appears after copying the app, check the Dock, menu bar, and whether another instance is already running. Launching multiple copies can make troubleshooting confusing. Confirm whether the app is running before checking the system security settings. A successful installation doesn’t mean a connection has been configured; you can’t diagnose a network problem until you’ve imported your existing configuration.

3. If macOS says it can’t verify the developer

Gatekeeper’s first-launch check is separate from checks performed on the app’s configuration. “The developer cannot be verified” is a system launch alert, not an error with a server password, rule, or subscription setting. The steps below apply when your version of macOS offers an option to approve an individual app. Button names and locations may vary slightly by macOS version.

1. Try opening the app normally once and read the full alert, then close it. Note the app’s name so you don’t approve a different program you recently downloaded.
2. Go to Apple menu → System Settings → Privacy & Security, then scroll down to the Security section. On older systems, go to System Preferences → Security & Privacy → General.
3. If the page specifically lists the Shadowrocket app that was blocked and offers “Open Anyway,” choose it only after confirming the file’s source.
4. Authenticate as an administrator or with Touch ID if prompted. When the confirmation dialog appears again, choose “Open.” Then return to Applications and check whether the app launches.

If there’s no record in Security settings, check that you launched the app from Applications and that the page has refreshed. A managed computer may prevent users from approving apps themselves; having an administrator account doesn’t override every organization policy. Don’t change your computer’s long-term security settings to resolve a one-time launch alert.

4. Windows SmartScreen: Tell a reputation warning from a threat alert

SmartScreen’s “Windows protected your PC” message may relate to file reputation. The message alone doesn’t prove a file is safe or dangerous. Before proceeding, make sure you downloaded it from this site and check the name of the blocked file. If Windows Security explicitly reports malware or you can’t confirm the file’s source, stop. Don’t treat a malware warning like a reputation prompt.

If “Run anyway” doesn’t appear under “More info,” the device may be managed or subject to system restrictions or other security policies. This button isn’t available in every environment, so following these steps doesn’t guarantee the app can be installed. A User Account Control prompt is a separate type of authorization: it asks whether a program can make changes to your device. Check the program details and grant permission only if needed for the installation. Don’t assume every permission prompt must be accepted.

• After installation, open Shadowrocket from the Start menu. Don’t run the installer again to “launch the app.”
• If the system requests permission, approve only the specific operation shown. Don’t use “Run as administrator” permanently as a general fix for network issues.
• If Windows Firewall asks for access, decide based on the app’s actual function and your network environment. Don’t allow unnecessary inbound access on all networks just to connect for the first time.

5. After the first launch: Verify the connection before changing rules

Seeing the main window only confirms that the app has launched. Next, use your existing provider configuration to import or add a connection in Home, then check the server address, port, authentication details, and transport parameters. In Shadowrocket, Home, Config, and Settings are used for connection management, rule configuration, and app settings. Desktop layouts may differ; follow the item names shown in your app rather than relying on screenshots of the mobile interface.

The configured port must match the server. For example, if your provider specifies 443, enter that value as given; it isn’t a fixed port for every protocol. A successful launch, a latency test result, and a working webpage are separate checks. Passing one doesn’t replace the others. Note where the failure occurs, change one setting, then test again.

After testing, restore the Global Routing setting you plan to use long term. If the interface shows Scene, it’s a separate routing mode for handling traffic by scenario; don’t use it as a default troubleshooting setting unless you understand its conditions. There’s no need to enable Settings → On Demand right after installation. Connect and test manually first, then configure conditional connections once you’ve confirmed the results, so automatic triggers don’t interfere with troubleshooting.

• App won’t open: Recheck the architecture, installation location, and system security alert.
• App opens but can’t connect: Check the address, port, protocol, and system time in your existing configuration. Don’t repeat system approval steps.
• Only some destinations fail after connecting: Check which rules match in Global Routing and Config, then investigate DNS and whether the destination is reachable.

6. Common first-install questions