Firewall

A firewall for Android that needs no root, with tracker blocking, DNS over HTTPS, and a log of everything your phone looks up. You decide, app by app, what the firewall does with it.

No ads. No tracking. No analytics. No data collection. No external servers. Everything runs locally on your device.

HOW IT WORKS

Firewall runs a local VPN, but it does not carry your traffic. The tunnel claims one small, reserved range of addresses, and what comes through it is every name your phone looks up. That is the point where a firewall can actually decide something, and it is cheap: your photos, your video and your downloads never enter the app at all, so nothing is slowed down and nothing keeps the CPU awake.

A name that is blocked is answered with an address that goes nowhere, and the connection that follows is refused on the spot. A name that is allowed is resolved for real, encrypted if you asked for that.

HOW EACH APP IS HANDLED

Not filtered: outside the firewall. Untouched, unfiltered, costs nothing.

Filtered: its lookups go through the firewall, so encryption, tracker blocking and your domain rules all apply.

Blocked: no working addresses at all, so it cannot open anything new.

Changes take effect on the app's next lookup. Nothing has to be restarted.

FEATURES

Domain rules

• Your own block list and allow list for ordinary websites

• A rule covers the domain and everything under it

• The more specific rule wins, so block a domain and allow one name inside it

• Rules apply the moment you add them, in every filtered app

Tracker and ad blocking

• Checks every lookup against known tracker, ad and fingerprinting domains

• Bundled list active out of the box

• Optional community lists: HaGeZi, OISD, 1Hosts, Steven Black, AdGuard

• Refresh any list, or add your own by https link

• See how many names your lists hold and the memory they take

DNS over HTTPS

• Encrypts your lookups so your network operator cannot read which sites you open

• Cloudflare, Google, Quad9 or AdGuard

• Falls back to the network's own resolver rather than leaving you with no answer

Activity

• Lookups seen, how many were stopped, and what share were encrypted

• Which did the stopping: tracker lists, your own rules, or a blocked app

• Charts of the last 24 hours, the last 7 days and your busiest hours of the day

• The apps that look up the most, and the tracker companies behind blocked names

• The names blocked most often

• The full log, searchable, with the app behind every entry

• Tap an entry to block that domain, or to always allow it

• Export to CSV

Watch only (Pro)

• Nothing is stopped, every app keeps working

• The log still shows which app looked up what, and why your rules would have stopped it

• See what an app talks to before you block it

• Switch it off and your rules are back exactly as they were

App Lock

• A passcode before the app opens, letters and symbols included

• Hashed with PBKDF2, locked out after repeated wrong tries

Backup and restore

• Export how each app is handled, your domain rules and your settings to JSON

• Restore here or on another phone

Starting on boot

• Restarts after a reboot or an app update, before you unlock

Quick settings tile

• Toggle from the notification shade, and it respects App Lock

PRIVACY

Nothing is collected. No analytics, no crash reporting, no telemetry. The only outbound connections are encrypted lookups to the provider you chose, and tracker list downloads when you add or refresh a list.

COMPATIBILITY

Android 7.0 through Android 16. No root. Works on all devices.