De1984
Privacy-focused Firewall and Package Manager for Android devices
新版本 2.8.3
- Firewall: a stop and a quick start can no longer leave apps unblocked; start and stop run one at a time #121
- Firewall: if a start fails while you want it on, it is retried; the Down banner gets a "Turn off" button
- Firewall: a mode change in Settings or a boot restore no longer undoes your OFF
- Health checks: 3 failures in a row stop the restarts and report the firewall Down
- Log export includes the previous log file #121
- Firewall: if a start fails while you want it on, it is retried; the Down banner gets a "Turn off" button
- Firewall: a mode change in Settings or a boot restore no longer undoes your OFF
- Health checks: 3 failures in a row stop the restarts and report the firewall Down
- Log export includes the previous log file #121
De1984 is a powerful Firewall and Package Manager for Android devices with multiple backend support for maximum flexibility and performance.
The name **De1984** is inspired by George Orwell’s novel Nineteen Eighty-Four, reflecting the app’s philosophy of resisting surveillance and reclaiming digital privacy. It symbolizes a reversal of the dystopian control described in the book, empowering users to take back control over their devices and data.
FIREWALL FEATURES
- Multiple firewall capabilities: iptables (root, or Shizuku in root mode), ConnectivityManager (Shizuku, Android 13+), NetworkPolicyManager (Shizuku, chosen manually), and VPN fallback
- Automatic firewall method selection based on device capabilities
- Comprehensive iptables method for rooted devices provides kernel-level blocking with superior performance
- ConnectivityManager for Android 13+ devices with Shizuku, no root required
- NetworkPolicyManager with Shizuku, selectable manually. On ROMs without POLICY_REJECT_ALL it can only block metered background data, not WiFi
- VPN backend as fallback for maximum compatibility (no root required)
- Block apps on WiFi, Mobile Data and Roaming separately with iptables and VPN. Roaming is part of Mobile Data. ConnectivityManager and NetworkPolicyManager block an app on all networks or none
- Block LAN access, enforced only by iptables
- Global firewall policies: "Block All by Default" (allowlist) or "Allow All by Default" (blocklist). Switching the policy resets every app's WiFi, Mobile, Roaming and LAN rules to the new default, with no confirmation. System-recommended apps keep theirs, and critical and VPN apps keep theirs only while "Allow Firewall Critical Packages" is on
- Captive portal detection settings (root or Shizuku). These system settings stay changed after De1984 is uninstalled
- Screen-off blocking to save battery and data
- Real-time network state monitoring and automatic rule application
PACKAGE MANAGEMENT (with Shizuku or root)
- Enable/disable system apps
- Force stop running apps
- Uninstall system and user apps
- Works with Shizuku (no root required) or traditional root access
- Filter packages by system/user apps, enabled/disabled state
- Search functionality for quick package lookup
PRIVACY FIRST
- Zero tracking or analytics
- No telemetry
- Local-only data storage
- No proprietary libraries
- No Google Play Services
- 100% open source (MIT License)
- Buildable from source
REQUIREMENTS
- Android 8.0 (API 26) or higher
- For iptables firewall: Root access OR Shizuku in root mode
- For ConnectivityManager firewall: Shizuku + Android 13+
- For NetworkPolicyManager firewall: Shizuku
- For VPN firewall: VPN permission (no root required, works on all Android versions)
- For package management: Shizuku or root access
PERMISSIONS
- ACCESS_NETWORK_STATE: Monitor network connectivity for automatic rule application
- BIND_VPN_SERVICE: Create local VPN for VPN-based firewall backend
- QUERY_ALL_PACKAGES: View all installed apps
- POST_NOTIFICATIONS: Show notifications for new app installations (optional)
- RECEIVE_BOOT_COMPLETED: Start the firewall again after a reboot, if you had turned it on
- ACCESS_WIFI_STATE: Read the network state for per-network rules
- FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE: Keep the firewall services running
- REQUEST_IGNORE_BATTERY_OPTIMIZATIONS: Ask Android not to stop the firewall to save battery (optional)
- KILL_BACKGROUND_PROCESSES: Last fallback for force stop
- Shizuku API permission: Talk to Shizuku or Sui
- INTERACT_ACROSS_USERS: Read apps in other profiles. When another profile exists, De1984 grants it to itself through root or Shizuku, without asking
- WRITE_SECURE_SETTINGS, CHANGE_COMPONENT_ENABLED_STATE: Only checked, to show the permission status
- REQUEST_DELETE_PACKAGES, INSTALL_SHORTCUT, ACCESS_SUPERUSER: Declared, but not used
- Shizuku or root access: For the iptables, ConnectivityManager and NetworkPolicyManag
The name **De1984** is inspired by George Orwell’s novel Nineteen Eighty-Four, reflecting the app’s philosophy of resisting surveillance and reclaiming digital privacy. It symbolizes a reversal of the dystopian control described in the book, empowering users to take back control over their devices and data.
FIREWALL FEATURES
- Multiple firewall capabilities: iptables (root, or Shizuku in root mode), ConnectivityManager (Shizuku, Android 13+), NetworkPolicyManager (Shizuku, chosen manually), and VPN fallback
- Automatic firewall method selection based on device capabilities
- Comprehensive iptables method for rooted devices provides kernel-level blocking with superior performance
- ConnectivityManager for Android 13+ devices with Shizuku, no root required
- NetworkPolicyManager with Shizuku, selectable manually. On ROMs without POLICY_REJECT_ALL it can only block metered background data, not WiFi
- VPN backend as fallback for maximum compatibility (no root required)
- Block apps on WiFi, Mobile Data and Roaming separately with iptables and VPN. Roaming is part of Mobile Data. ConnectivityManager and NetworkPolicyManager block an app on all networks or none
- Block LAN access, enforced only by iptables
- Global firewall policies: "Block All by Default" (allowlist) or "Allow All by Default" (blocklist). Switching the policy resets every app's WiFi, Mobile, Roaming and LAN rules to the new default, with no confirmation. System-recommended apps keep theirs, and critical and VPN apps keep theirs only while "Allow Firewall Critical Packages" is on
- Captive portal detection settings (root or Shizuku). These system settings stay changed after De1984 is uninstalled
- Screen-off blocking to save battery and data
- Real-time network state monitoring and automatic rule application
PACKAGE MANAGEMENT (with Shizuku or root)
- Enable/disable system apps
- Force stop running apps
- Uninstall system and user apps
- Works with Shizuku (no root required) or traditional root access
- Filter packages by system/user apps, enabled/disabled state
- Search functionality for quick package lookup
PRIVACY FIRST
- Zero tracking or analytics
- No telemetry
- Local-only data storage
- No proprietary libraries
- No Google Play Services
- 100% open source (MIT License)
- Buildable from source
REQUIREMENTS
- Android 8.0 (API 26) or higher
- For iptables firewall: Root access OR Shizuku in root mode
- For ConnectivityManager firewall: Shizuku + Android 13+
- For NetworkPolicyManager firewall: Shizuku
- For VPN firewall: VPN permission (no root required, works on all Android versions)
- For package management: Shizuku or root access
PERMISSIONS
- ACCESS_NETWORK_STATE: Monitor network connectivity for automatic rule application
- BIND_VPN_SERVICE: Create local VPN for VPN-based firewall backend
- QUERY_ALL_PACKAGES: View all installed apps
- POST_NOTIFICATIONS: Show notifications for new app installations (optional)
- RECEIVE_BOOT_COMPLETED: Start the firewall again after a reboot, if you had turned it on
- ACCESS_WIFI_STATE: Read the network state for per-network rules
- FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE: Keep the firewall services running
- REQUEST_IGNORE_BATTERY_OPTIMIZATIONS: Ask Android not to stop the firewall to save battery (optional)
- KILL_BACKGROUND_PROCESSES: Last fallback for force stop
- Shizuku API permission: Talk to Shizuku or Sui
- INTERACT_ACROSS_USERS: Read apps in other profiles. When another profile exists, De1984 grants it to itself through root or Shizuku, without asking
- WRITE_SECURE_SETTINGS, CHANGE_COMPONENT_ENABLED_STATE: Only checked, to show the permission status
- REQUEST_DELETE_PACKAGES, INSTALL_SHORTCUT, ACCESS_SUPERUSER: Declared, but not used
- Shizuku or root access: For the iptables, ConnectivityManager and NetworkPolicyManag
捐赠
版本
尽管下面提供了 APK 安装包的下载选项，但你应该注意，以这种方式安装将不会收到更新通知，这是一种不太安全的下载方式。 我们建议你安装使用 F-Droid 客户端。
下载 F-Droid-
该版本需要 Android 8.0 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
-
该版本需要 Android 8.0 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
-
该版本需要 Android 8.0 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
新版本 2.8.1
- Firewall sort: "Configured first" is now a checkbox that works with Name, Recently installed or Recently updated #120
新版本 2.7.9
Sort both app lists by name, recently installed, recently updated or (Firewall) configured first #114
Set LAN access with the firewall off or in any mode when root is available; on iptables the Wi-Fi icon shows the LAN state #113
Optionally show apps of other users on this device #109
Search also matches package names #112
Arabic translation #100
Messages that wrongly said the device was not rooted or the mode was set to AUTO
Set LAN access with the firewall off or in any mode when root is available; on iptables the Wi-Fi icon shows the LAN state #113
Optionally show apps of other users on this device #109
Search also matches package names #112
Arabic translation #100
Messages that wrongly said the device was not rooted or the mode was set to AUTO