NoirShield: Encrypted DNS

NoirShield is a network tool that runs entirely on your device.

It encrypts your DNS lookups and can match them against blocklists stored on the device. Your traffic is never routed through a server of ours: there is nothing to relay it through, and your IP address does not change.

ENCRYPTED DNS

Resolve names over DNS-over-HTTPS or DNS-over-TLS. Choose from built-in encrypted resolvers or enter your own custom endpoint. Measure them on the network you are on and switch to the fastest.

ON-DEVICE FILTERING

Optional lists for ads and trackers, malware, phishing and crypto mining — 470,943 domains, matched on the device. Every list is off until you turn it on. You can import your own list and add your own allow and block rules, which take priority.

DIAGNOSTICS

Fourteen checks: reachability, IPv4 and IPv6, captive portals, latency, DNS resolution, DNS interception, DoH, DoT, HTTPS, TLS, QUIC, WebSocket and UDP.

AUTOFIX

Measures the network, applies a compatibility profile, verifies the result and remembers what worked for that network.

NO ACCOUNT

No sign-up, no sign-in, no subscription. Nothing about your lookups is uploaded. The activity log stays in memory and is gone when the app closes, unless you switch on "Keep activity after restart" in Settings. The app reaches our server for two things only: signed blocklist updates, and the connection tests while you are running diagnostics.

NoirShield is not a country-switching VPN. It has no relay or proxy server, does not change your IP address and never decrypts HTTPS. On iPhone and iPad, iOS shows its own VPN badge whenever an on-device tunnel is running; NoirShield uses that tunnel only to hand DNS queries to the resolver on your device.