Skip to main content
Questions Categories Search Providers
Proxy Basics

How to Use Potatso Proxy on iPhone: The Complete 2026 Configuration Guide

8 min read

How to Use Potatso Proxy on iPhone: The Definitive Guide (2025)

In the evolving landscape of iOS network utilities, Potatso remains one of the most reliable proxy clients for managing Shadowsocks, ShadowsocksR, and Trojan connections. Unlike standard HTTP proxies, Potatso allows you to configure rule-based traffic forwarding, effectively turning your iPhone into a secure tunneling device.

This guide provides a deep dive into configuring, optimizing, and troubleshooting Potatso on iOS, specifically tailored for the 2025 ecosystem regarding App Store policies and iOS 18/19 compatibility.

---

1. Understanding Potatso Architecture on iOS

Before installation, it is vital to understand how Potatso functions within Apple's strict sandbox. Potatso does not "jailbreak" your phone. Instead, it utilizes the Network Extension framework provided by Apple.

The Technical Workflow

1. Packet Interception: When Potatso is active, it creates a local tunnel interface. 2. Rule Processing: The app examines outgoing packets against a rule list (e.g., "GeoIP", "Ads", "Direct"). 3. Forwarding: * Proxy: If matched, traffic is encrypted and sent to your remote VPS (Shadowsocks/Trojan). * Direct: If unmatched (e.g., local traffic), it is sent directly to the ISP.

This distinguishes Potatso from a simple "Global Proxy" setup found in the native iOS Settings, which only supports basic HTTP/SOCKS proxies without domain-based rule splitting.

---

2. Installation and Initial Setup (2025)

Due to frequent changes in the App Store, the name of the app might vary (e.g., Potatso 2, Potatso Lite, or region-specific variants). The core functionality remains the same.

Step 1: Installation

1. Open the App Store. 2. Search for "Potatso". 3. Install the app. *Note: Developer signatures may change over time. If the app fails to open, check for updates or the developer's new listing.*

Step 2: Granting System Permissions

Upon launching Potatso for the first time, iOS will prompt you to add a VPN configuration.

  • Do not be alarmed: This is a local VPN configuration. It does not send your data to a third-party VPN provider owned by the app developer. It simply tells the iOS kernel to let Potatso handle the network packets.
  • Tap Allow.
  • You may need to enter your iPhone Passcode to authorize the installation of the configuration profile.

    • ---

    3. Configuring Proxy Nodes

    A "Node" in Potatso refers to the remote server you wish to connect to. You can add these manually or via a subscription URL.

    Method A: Manual Configuration (Recommended for Advanced Users)

    If you host your own VPS (Virtual Private Server), you will manually input the credentials.

    1. Go to the Proxies tab in Potatso. 2. Tap the + icon. 3. Select the Type: * Shadowsocks: Fast, widely used. * ShadowsocksR: Obfuscated protocol (often necessary in high-censorship regions). * Trojan: Mimics HTTPS traffic; highly secure. 4. Fill in the following fields: * Name: Label (e.g., "US Server 01"). * Host: The IP address or Domain Name of your server. * Port: Typically 8388 for Shadowsocks, 443 for Trojan. * Password/Key: The encryption key or specific password. * Method: Encryption cipher (e.g., aes-256-gcm or chacha20-ietf-poly1305).

    Method B: Subscription URL

    Most proxy providers offer a subscription URL.

    1. Copy the subscription link provided by your service. 2. In Potatso, go to Settings > Subscription. 3. Paste the URL. 4. Potatso will fetch the list of available nodes and allow you to add them in bulk.

    ---

    4. Rule-Based Routing: The Power of Potatso

    A common mistake is simply switching the proxy on without configuring rules. This sends *all* traffic (including local bank apps and local searches) through the remote proxy, slowing down your connection significantly.

    How to Optimize Rules

    1. Go to the Rules tab. 2. You will see a list of domains (e.g., google.com, github.com) tagged with actions like PROXY or DIRECT. 3. Standard Configuration: * Proxy: Use for censored or geo-restricted sites. * Direct: Use for CDNs (like Cloudflare) and local websites. * Reject: Use for ad-tracking domains.

    Updating Rule Lists

    In 2025, maintaining an updated rule list is critical as domains change. 1. Go to Settings > Rule URL. 2. Input a reliable source for rule lists (often provided by the community or your proxy provider). 3. Pull down to refresh within the app to update the rules.

    ---

    5. Technical Comparison: Potatso vs. Native iOS Proxy

    Many users ask why they should use an app like Potatso when iOS has a built-in proxy setting in Settings > Wi-Fi > (i) > HTTP Proxy.

    | Feature | Potatso (Client) | Native iOS HTTP Proxy | | :--- | :--- | :--- | | Protocol Support | Shadowsocks, Trojan, SSR | HTTP / HTTPS / SOCKS5 (No encryption) | Scope | System-wide (Global) | Per-Wi-Fi Network (Not Cellular) | Rule Support | Domain-based splitting (Smart Routing) | None (All or Nothing) | Encryption | Strong (AES/ChaCha20) | Weak/None (Local ISP visible) | Battery Usage | Low to Medium | Low |

    Why use Potatso? If you need to proxy Cellular data (4G/5G), the native iOS settings cannot do this. Potatso creates a universal tunnel covering both Wi-Fi and Cellular data.

    ---

    6. Troubleshooting Common Issues (2025)

    Issue 1: "Cannot Connect" / Timeout

  • Cause: Incorrect Shadowsocks method or password.
  • Fix: Verify the server logs. Ensure the server firewall (iptables/ufw) allows traffic on the specified port.

    • Issue 2: Apple Configuration Profile Warning

    If iOS warns that the profile is "Not Signed":

  • This is normal for self-hosted proxy setups.
  • Go to Settings > General > VPN & Device Management.
  • Verify the profile is installed there. If it says "Not Verified", you may need to remove it and re-add it via Potatso.

    • Issue 3: High Battery Drain

  • Cause: Sending too much traffic through the remote proxy.
  • Fix: Enable WiFi Boost (if available) or ensure your Direct rules cover video streaming sites like YouTube or Netflix. Decrypting/streaming video through a proxy consumes high CPU cycles.

---

7. Advanced: Automating with Shortcuts (Python/Script Integration)

For power users, Potatso can be triggered via the iOS Shortcuts app. While Potatso does not have a native Python scripting interface *inside* the app, you can use Python to manage the URL subscriptions.

Example: Updating Subscription via Script (Concept) If you manage multiple subscription links, you can use a Python script to filter or merge them before copying the URL into Potatso.

import requests

import base64


Example: A simple Python script to merge two subscription configs


This would be run on your PC/Mac to generate a clean URL for your iPhone


def merge_subscriptions(url1, url2): try: # Fetch content from both providers data1 = requests.get(url1).content data2 = requests.get(url2).content


# Simple logic to decode base64 (common in ss:// links) # In production, you would parse the JSON/YAML structure properly merged = data1 + b'\n' + data2


# Re-encode to base64 for Potatso import return base64.b64encode(merged).decode('utf-8') except Exception as e: print(f"Error merging subscriptions: {e}") return None


Usage


final_url = merge_subscriptions('https://provider1.com/sub', 'https://provider2.com/sub')


print(f"Potatso URL: potatso://import/sub/{final_url}")

While you cannot run this *on* the iPhone directly (without Pythonista), generating a clean, optimized subscription URL is the best way to manage Potatso profiles efficiently.

Conclusion

Using Potatso on the iPhone allows for a level of network control that standard iOS settings cannot match. By configuring Shadowsocks or Trojan nodes and defining granular Routing Rules, you ensure that your device remains secure, fast, and capable of bypassing network restrictions. Always ensure your Node configurations are up to date and respect your local privacy regulations.

Share: