package icon

DNS Resolver

Local DNS resolver, ad/tracker sinkhole, and traffic monitor
New in version 3.2.0
New: light mode. NetShield follows your phone, or choose Light or Dark in Settings.
New: Settings redesigned as tiles, easier to find things.
New: send your traffic through a proxy app (v2rayNG, Orbot) with step-by-step setup.
Logs are kept for 72 hours and can be searched by time.
Dark mode secondary text is easier to read.
NetShield is a local DNS resolver, ad/tracker sinkhole, and real-time
traffic monitor for Android.

Features:
* Two operation modes: a device-wide local VPN sinkhole, or a local UDP
DNS server on 127.0.0.1 for custom apps/routers.
* DNS-over-HTTPS, DNS-over-TLS, and plain UDP upstream resolvers.
* Custom and built-in blocklists for ad/tracker sinkholing, with pause
controls (5/15 minutes) and per-app split tunneling.
* Real-time traffic dashboard, live query logs, and per-domain rules.
* Quick Settings tile and a home-screen widget to toggle protection
with a single tap.
* Import your own OpenVPN/WireGuard server configs to manage alongside
the resolver (importing and managing profiles only for now - no
bundled server list, and tunneling through them is not yet
implemented).

No ads, no analytics, no tracking, no non-free dependencies.
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 3.2.0 (7) suggested Added on Oct 25, 2026

    This version requires Android 7.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • request install packages
      Allows an application to request installation of packages.
    • com.netshield.dns.psbdx.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 1.9 MiB PGP Signature | Build Log

    • New in version 3.1.1
    Connection is verified before starting; on failure you see the exact error and can switch to Google UDP.
    Fixed DoH/DoT timeouts while the VPN is active.
    Offline check: Start is disabled with a banner when there is no internet.
    Fixed corrupt launcher icons.
  • Version 3.1.1 (6) - Added on Oct 05, 2026

    This version requires Android 7.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • request install packages
      Allows an application to request installation of packages.
    • com.netshield.dns.psbdx.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 1.8 MiB PGP Signature | Build Log

Find Apps