DNS Ad Blocker & App Firewall

Repel keeps ads, trackers and malware out of your phone and puts you in charge of which apps reach the internet. A private DNS filter, an app firewall that needs no root and no VPN, and one-tap Private DNS, in one app. No account, no subscription, and your lookups stay on the phone.

THREE LAYERS, USE ONE OR ALL

• Ad and tracker filter: a local, DNS-only VPN checks every lookup on the phone against the blocklists you choose. Allowed lookups go out encrypted with DNS over HTTPS. No setup, it works in seconds.

• App firewall without root: cut any app off the internet. The firewall does not use the VPN at all, so it runs alongside the VPN you already have. Pro adds rules for Wi-Fi only, mobile data only, roaming, screen off and bedtime.

• Private DNS in one tap: pick an encrypted DNS provider that filters ads, trackers, malware or adult content, and Repel switches Android's Private DNS for you. It keeps working with Repel closed. Presets: AdGuard DNS, NextDNS, Mullvad, Quad9, Cloudflare, Control D, CleanBrowsing, Google, or your own DNS-over-TLS host.

ON ANDROID TV TOO

The same DNS filter and blocklists on Android TV and Google TV, with a home screen made for the remote. It cannot remove ads inside video streams.

SEE WHAT YOUR APPS LOOK UP

The activity log shows which app looked up which domain, and whether it was blocked. Tap an entry to block or allow it, or cut that app off. Stats show your last 7 days, most blocked domains and busiest apps.

BLOCKLISTS YOU CAN TRUST

Community-maintained lists such as HaGeZi, OISD, 1Hosts and StevenBlack cover ads, trackers, pop-up ads, malware, phishing, scam shops and phone-maker telemetry from Samsung, Xiaomi, Huawei, OPPO, realme and vivo. They update on their own over Wi-Fi.

MORE CONTROL

• Pause the filter for 5 minutes, 15 minutes or an hour

• A home-screen widget and Quick Settings tiles

• Firewall profiles: Home, Work, Travel, each with its own app rules

• Bedtime: chosen apps go offline at night

• Wildcard and regex rules, or paste a whole list at once

• Domain rules for each app, including "only allow listed domains"

• Use your own DNS-over-HTTPS server, and test which one answers fastest

• Stop browsers going around the filter with their own secure DNS

• Block new apps until you allow them

• Automation for Tasker and similar apps

• Rooted phone? Write your blocklists into the hosts file, no VPN at all

FAMILY MODE WITH A PIN

Safe search, a restricted video mode, and blocks for adult, gambling and social sites. One switch blocks a whole service, like social apps, games or video sites, with a daily free time. Add a PIN and nothing that turns protection down works without it: not the filter switch, not the firewall, not a pause.

A FIREWALL WITHOUT ROOT

Android only lets its developer tools switch an app's network access, so Repel sets up a small built-in helper through Wireless debugging. Pair once with the code Android shows you, typed into a notification. No computer, no root, no other apps. Needs Android 13 or newer.

PRIVATE BY DESIGN

• No ads, no account, no data sold

• Anonymous usage stats and crash reports only, never the sites you visit

FREE, WITH A ONE-TIME PRO

Free: the filter with HaGeZi Light or Pro, the activity log with weekly stats, timed pauses, the widget, allow rules, letting chosen apps skip the filter, the app firewall, one-tap Private DNS, hosts mode and backup.

Pro, one payment, no subscription: HaGeZi Pro++ and Ultimate, threat intelligence and every extra list, your own lists, rules and DNS server, smart firewall rules (Wi-Fi, mobile data, roaming, screen off, bedtime) and profiles, per-app domain rules, DNS records, family mode with a PIN, 30-day stats, CSV export and automation.

***

About the VPN: Repel uses Android's VpnService to run a DNS filter on this phone. It handles DNS lookups only, never your other traffic, and sends nothing to us. The firewall and Private DNS do not use the VPN. Requires Android 11 or newer.