DNSdome

dnsdome protects every app on your phone at the DNS level — the moment a domain is looked up, before a connection is made.

Sign in with your dnsdome account, pick the protection profile (instance) this phone should use, and turn protection on with one tap. Your filtering rules live in your dnsdome account, so the same protection follows you on Wi-Fi and mobile data, on any network.

• Blocks known malware, phishing and scam domains
• Blocks tracking domains and adult content, if you choose to
• Your own block and allow lists, safe search and YouTube restricted mode
• Pause protection for 10, 30 or 60 minutes, or schedule it
• Encrypted DNS (DNS-over-TLS, with DNS-over-HTTPS fallback)
• Stats and a query log for your instance, right in the app

How it works: dnsdome uses Android's VPN service only to take over DNS. Only DNS lookups go through it — no other traffic enters the tunnel, and the app never sees your browsing or app data. Before Android asks for permission, the app explains exactly what the connection does. The app contains no ads, analytics or third-party SDKs.

You need a dnsdome account. Create one for free at dnsdome.com.