BLOG · 08-04

IPA and enterprise signing are not the same thing

There is no official Android or desktop version.

A memorable name is easy to impersonate. Search Shadowrocket and you’ll also get things that look installable: free IPAs, enterprise-signed builds, “official” Android packages, desktop clients, shells stamped with “VPN” or “accelerator.” They are not the Shadowrocket on the App Store. This site only recognizes the store. We don’t list those channels, and we don’t provide any connectable address.

The official app serves iPhone and iPad only, and only through Apple’s store. The name is Shadowrocket, the ID is 932747118, the price is a one-time purchase, and the icon is a white rocket silhouette on a dark field. If those four don’t match, stop. A similar name can show up in conversation or in search. It should not be your only search term, and it should never be the reason you install.

Why the side door looks easier

When your current region finds nothing, the side door looks like a shortcut: no Apple ID switch, no waiting on the store, tap once and an icon lands on the Home Screen. The cost of that ease is skipping the ID check and skipping Apple’s signature rules. Enterprise certificates, paid sideload services, and anonymous TestFlight often also ask you to trust a profile. A profile can do far more than “open an app.”

Those packages can change your profiles and read your nodes. A node is an exit. Whoever reads it can use the same exit, or later make you think “the client broke” when it dies. When the certificate expires the icon is still there, tap it and it crashes, so people go hunt the next “working IPA.” There is no handbook for that road, because the source has already left the range this site will explain.

“Official” on Android and desktop

There is no official Android version and no official desktop version. Similarly named Android packages, cracks, and third-party market installers are not Shadowrocket. People ask “which official alternative should I use on my computer.” This site does not point to any non-iOS substitute. If the official product has no such app, you should not borrow its name to install something else.

Other tools that work on Windows or Android are a different product, a different contract, and a different risk. Calling them “Shadowrocket for PC” only exists to make you relax about the app ID.

Pages that claim free lines

This site does not give out nodes, subscriptions, or invite codes. Any “free lines from the official site” or “download and get a free month” claim has nothing to do with Shadowrocket or with this site. A one-time client purchase is the software. The line is a separate bill, asked of the provider who configured you. Binding those two bills inside a mystery installer is the most common wrapper trick: you think you’re buying software; you’re handing over an exit.

Installers that need you to turn off system integrity or install a profile before they will open are also not an official door. The store is slow because it is checking. That kind of installer is fast because it skips the check.

If you already installed the wrong thing

Delete it. Don’t try to “fix” a crack, and don’t import the subscription you actually use on top of it. In Settings, check profiles and VPN configurations and delete anything that isn’t the App Store copy. Then reinstall only from the store, check ID 932747118, allow VPN again, and import the subscription you keep yourself.

If you’re unsure whether the old package read your nodes, check device count and recent activity in the provider dashboard, and rotate the subscription URL if needed. This site cannot see your line and cannot change your parameters. All we can do is point at the official door.

The checklist is on the download page. After install, follow the tutorial for permission and import. Words are in the glossary. Official door: App Store.

Don’t judge by “it opens”

A side-door package can sometimes show the VPN prompt and draw a familiar-looking list. Opening is not the same as a correct source. The hard test for official is still ID 932747118 on the store listing, and the fact that you installed from the App Store. A similar UI, a working switch, even a temporary connection cannot prove it is the official client. Signature expiry, a remote kill switch, or a revoked profile can happen on any given day, and nobody will hand you a matching handbook.

The rest of this site’s tutorial assumes you are already on the official icon. Enterprise signing and IPAs are out of scope not because the taps wouldn’t fit, but because that layer of risk is not something “tap here” can close. Get the source right, then talk permission, import, and the three modes. Wrong source, and every later checklist fails; troubleshooting starts wrong from the first sentence and drifts farther as you “fix.”

If search is empty, switch store region—not channel. Install only this one copy from the App Store.