package icon

ShizuWall

Lightweight no root, no vpn firewall solution powered by Shizuku
New in version 4.6.4
App lock: protect ShizuWall with a PIN or biometrics #141
New "What's new" dialog after an update, also available in settings #143
Show system apps and Show other profiles moved to the Firewall behaviour screen #145
Empty app list state and backend banners that explain what to do next
Shizuku mode re-enables the firewall by itself after a reboot #148
Disabled apps in work profiles and Secure Folder are no longer listed #147
Clearer app monitor notifications #142
Snackbar feedback instead of toas
A lightweight, privacy focused Android firewall application that blocks network connections for selected apps without requiring VPN. ShizuWall leverages Shizuku to provide powerful network control capabilities. Requires Android 11 (API 30) or higher.

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 4.6.4 (49) suggested Added on Sep 12, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 11 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "dataSync"
      Allows the app to make use of foreground services with the type "dataSync"
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • read phone status and identity
      Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • This app can appear on top of other apps
      This app can appear on top of other apps or other parts of the screen. This may interfere with normal app usage and change the way that other apps appear.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • prevent phone from sleeping
      Allows the app to prevent the phone from going to sleep.
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.arslan.shizuwall.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
    • moe.shizuku.manager.permission.API_V23

    Download APK 15 MiB PGP Signature | Build Log

  • New in version 4.6.3
    Foreground detection now covers work profile and cloned apps, and is pushed by the system instead of polled
    No accessibility service and no usage access needed for foreground modes anymore
    Profile category chips in the app list: filter by Work, Clone or Secure Folder
    Profile labels in the "Enable Firewall" confirmation dialog, so clones are no longer indistinguishable #139
    Knox / Secure Folder apps are enumerated through dumpsys, where pm is blocked #136
    Per-user app icons and labels, so a clone
  • Version 4.6.3 (46) - Added on Aug 28, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 11 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "dataSync"
      Allows the app to make use of foreground services with the type "dataSync"
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • read phone status and identity
      Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • This app can appear on top of other apps
      This app can appear on top of other apps or other parts of the screen. This may interfere with normal app usage and change the way that other apps appear.
    • prevent phone from sleeping
      Allows the app to prevent the phone from going to sleep.
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.arslan.shizuwall.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
    • moe.shizuku.manager.permission.API_V23

    Download APK 15 MiB PGP Signature | Build Log

  • New in version 4.6.1
    New "Remember deleted apps" option: keeps the block state of removed or disabled apps and restores it when they come back #133
    Much faster profile switches and firewall toggles in Root and LADB modes: rules are sent as one batched call #131
    Shizuku mode now uses a dedicated user service instead of an in-process hidden API bypass
    Root mode keeps a persistent shell session instead of spawning su per command
    Multi-user app scans are cached, so startup no longer rescans every launch
    Floating button
  • Version 4.6.1 (44) - Added on Aug 16, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 11 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "dataSync"
      Allows the app to make use of foreground services with the type "dataSync"
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • android.permission.PACKAGE_USAGE_STATS
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • read phone status and identity
      Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • This app can appear on top of other apps
      This app can appear on top of other apps or other parts of the screen. This may interfere with normal app usage and change the way that other apps appear.
    • prevent phone from sleeping
      Allows the app to prevent the phone from going to sleep.
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.arslan.shizuwall.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
    • moe.shizuku.manager.permission.API_V23

    Download APK 15 MiB PGP Signature | Build Log