Shadowrocket Android APK: Installation Guide and WeChat Download Fix

In this guide

Installing Shadowrocket on Android involves three steps: download the Android arm64 package from this site, allow the app that opens the package to install it, and approve the system VPN request the first time you connect. This guide covers first-time installations and downloads blocked in WeChat. It also helps you tell a failed download from a blocked installation or a connection that was never established—without repeatedly uninstalling the app.

1. Check your device and arm64 compatibility

Open the all-platform download page in your system browser, then choose the Android option. This is the official Shadowrocket website, and this page is part of the official handbook. The Android package is available from the download page; this article does not hard-code a filename, so older copies of the article will not point to an outdated file.

Get Shadowrocket for iPhone and iPad on the App Store for a one-time payment of $2.99. The developer is Shadow Launch Technology Limited; check the App Store page for system requirements. The Mac (Apple silicon and Intel), Windows, Android, and Linux versions are free. On Android, choose the Android package—you do not need to buy a version for another platform from a mobile app store.

Architecture: The Android package on the download page is arm64, for ARM 64-bit devices. Common device identifiers include arm64-v8a and aarch64.
Compatibility: A 64-bit processor does not guarantee that the installed operating system provides a 64-bit app runtime. Check the system architecture on older devices, devices running customized builds, and emulators.
Free space: Installation needs room to unpack the APK as well as store it. If your storage is full, free up space before trying again; the APK’s file size is not the only space required.
Download result: The download should be a complete .apk file. If it opens as a web page, a sign-in prompt, or plain text, you do not yet have an installable file.

Android version and processor architecture are separate compatibility requirements. If your device information page does not show the app architecture, do not guess based on the phone’s appearance or brand. Check the system information on the device first; if it is still unclear, consult the manufacturer’s specifications.

2. Download the APK and allow installation from this source

Android’s “Allow installation of unknown apps” permission applies to the app opening the file, not to all APKs in general. For example, if you download and open the file in a browser, you may need to allow that browser to install apps. If you open the same file in a file manager instead, Android may ask you to allow the file manager separately.

Open the download page

Open this site’s all-platform download page in your system browser, find the Android option, and select the arm64 package. If you are viewing this page in WeChat’s built-in browser, switch to your system browser as described in the next section before downloading.
Wait for the download to finish

Open Downloads in your browser and confirm the task is complete before tapping the APK. A download that has started is not necessarily a file that has been fully saved. If it failed or was interrupted, download it again first.
Allow installation from this source

When Android blocks the installation, tap Settings, open Install unknown apps, and turn on Allow from this source for the app you are using. Menu names may vary slightly by device manufacturer.
Return and finish installing

Return to the installation screen, confirm the app is named Shadowrocket, and tap Install. If the installation screen has closed, reopen the same APK from your browser’s Downloads list.
Revoke installation permission

After installation, you can return to the same source-permission page and turn off the allow switch. This revokes the browser’s or file manager’s permission to install future apps; it does not uninstall Shadowrocket.

If you cannot find a shortcut from the system prompt, search Android Settings for “Install unknown apps.” On some devices, the full path is Settings → Apps → Special app access → Install unknown apps. Here, Settings means your phone’s system settings, not Settings inside Shadowrocket.

3. Fix downloads that do not start in WeChat

WeChat’s built-in browser and standalone browsers use different download environments. A page loading successfully does not guarantee that WeChat’s browser can hand an APK to Android’s installer. If tapping Download creates no task, returns you to the page, or will not open the file, switch to your system browser rather than tapping repeatedly and creating multiple download tasks.

Open the menu in the top-right corner of the WeChat page and choose “Open in browser” or a similar option. The menu and available option depend on your device and the page you are viewing.
If that option is unavailable, copy the current page address, switch to your system browser, paste it into the address bar, and open it. Do not paste it into a search box and choose an unfamiliar search result.
Make sure you are viewing this site, then open the Android option on the all-platform download page and start the download again.
Check the download task in your standalone browser. When the file is complete, open it from that browser and grant permission only to the source app identified by Android.

Copy the web page address, not your subscription URL. You do not need to submit subscription details, passwords, or tokens to download the app. There is also no need to send anyone a link containing private parameters to get help with a download.

If the download still does not start in another browser, first check that ordinary web pages load. Then look for browser messages about low storage, restricted download permissions, or a network interruption. If a task appears but stalls, pause it and try once more. If it keeps failing, switch networks and retry; repeatedly changing installation permissions is unlikely to help.

4. Tell installation permission apart from VPN permission

A successful installation only means the app has been added to your device. The first time you enable a connection in Shadowrocket, Android may also show a VPN connection request. This allows the app to create a local VPN interface to handle traffic; it is separate from the browser’s permission to install apps.

Install-from-source permission

Where to find it: Android Settings → Apps → Special app access → Install unknown apps
App receiving permission: The browser or file manager that opened the APK
When it appears: When you open the installation file and enter the system installation flow
How to revoke it: Turn off Allow from this source on the relevant source-app page

This permission is for installation only. Changing it cannot fix a download that has not started.

VPN connection permission

Where to approve it: Shadowrocket Home → connection switch → Android VPN request
App receiving permission: The VPN connection created by Shadowrocket
When it appears: On the first connection, or when Android asks you to confirm again
How to check: Check the system VPN status and the connection status in the app

A VPN status does not guarantee that the remote route is reachable. Test by opening the page you want to access.

Before approving a VPN request, confirm that it comes from the Shadowrocket app you just installed. If another VPN connection is active on the device, disconnect it before testing. In typical personal-use scenarios, Android cannot maintain active VPN tunnels from two apps at the same time; managed work profiles and similar environments may have additional restrictions.

System request canceled: Return to Home, enable the connection again, and approve the system prompt. There is no need to download or install the package again.
Blocked by an administrator: Check whether the device is managed by your employer, school, or parent. Contact the administrator about installation or VPN permissions restricted by device-management policies.
Connection drops when the screen locks: Check battery and background-activity restrictions in the system app settings. Allow the necessary background activity using the options available on your device. Change one setting at a time, then test again with the screen locked.

5. Check Global Routing after importing your existing configuration

After installing the client, you still need your own server details or subscription to establish the corresponding proxy connection. Buying the client does not include a service plan. This site does not provide, sell, or recommend servers or subscriptions. Keep your existing subscription URL private; its token may grant access, so do not share screenshots or forward the link.

For import instructions, see the setup guide. After importing, check that the server address, port, and protocol match your original details, then open Global Routing on Home. Do not change protocol settings for Shadowsocks, VMess, VLESS, Trojan, Hysteria2, or WireGuard just to troubleshoot an installation issue.

Config

Recommended

Traffic handled by the app follows the rules in the currently enabled configuration. Whether it uses a proxy or connects directly depends on the matching rule and policy; selecting Config does not send all traffic through a proxy.

Best for: testing everyday connections with a valid configuration and its rules

Proxy

Traffic handled by the app uses the proxy mode, which you can compare with the results under Config. If the same destination works in Proxy but not in Config, check the rules and policies next rather than reinstalling the app.

Best for: briefly checking whether rule selection affects access

Direct

Traffic handled by the app connects directly, without being forwarded through the selected proxy server. Turning the connection on does not mean the current destination is being accessed through a proxy.

Best for: checking whether the same destination is reachable on the device’s regular network

For your first test, keep the destination page, network, and server the same, and change only one setting at a time. If a Scene is selected, check its actual settings first. Avoid combining a scene, rule changes, and background auto-connect conditions during initial troubleshooting; otherwise, it will be difficult to tell which change affected the result.

On Home, check the selected server, enable the connection, and confirm the Android VPN status.
Open the destination page and note whether it loads, times out, or immediately shows a network error.
To compare results, switch Global Routing temporarily, then restore your original Config setting after testing.
If only Config fails, check that the current configuration is enabled and review the rule order from top to bottom, including the final FINAL policy.

6. Common installation and first-launch issues

“There was a problem parsing the package.” Should I keep changing permissions?

Do not change more permissions yet. Delete the failed download, get the package again from this site’s download page, and confirm that the browser reports the download as complete. Then check that your device supports an arm64 runtime and meets the requirements listed on the download page. An incomplete file, an incompatible system, or an architecture mismatch can all cause installation to be rejected.

I allowed my browser, so why does Android still say installation is not allowed?

Check which source app is named in the prompt. If it is a file manager rather than the browser you just authorized, a different app opened the file. Open it from the browser’s Downloads list, or temporarily allow installation for that file manager only. Revoke that source’s permission when you are done.

An update says “App not installed.” Should I uninstall the previous version first?

Do not uninstall it first. Check available storage, system compatibility, and whether the download is complete. An existing app with the same name may also reject an update if its signature does not match. Confirm the source of the existing app and back up your configuration using the app’s export feature. Uninstalling may delete local data, so it should not be the default first step.

The app opens after installation, but there is no server available. What should I do?

Installation does not create a server or subscription automatically. Follow the setup guide to import your own details, then check the protocol, address, and port. If you do not have those details, reinstalling or granting VPN permission will not supply the missing connection settings.

The status bar shows a VPN icon, but the page keeps loading. Does that mean installation failed?

Not necessarily. First confirm that your regular network works, then check the current server on Home and the Global Routing setting. If Direct works but Proxy does not, check the server settings and whether the remote server is reachable. If only Config fails, check its rules and policies. Change one setting at a time and retry the same page.