Android Firewall: No Root

Take control of which apps can connect to the internet.

Android Firewall is a rootless, on-device firewall that uses Android's local VPN interface to enforce per-app internet rules. Block selected apps, allow only trusted apps, or temporarily grant access without using a remote VPN server.

PER-APP INTERNET CONTROL

• Allow all apps

• Block only selected apps

• Allow only selected apps

• Block all non-critical apps

• Keep selected apps at the top of allow and block lists

• Search internet-capable user and system apps

TEMPORARY ACCESS REQUESTS

In Allow list mode, undecided user apps are blocked and can request internet access. Choose Always allow, Always block, or allow temporarily for a custom duration. App-identifying requests require Android 10 or newer.

LOCAL BLOCKED-CONNECTION LOGS

• Identify which app attempted a blocked connection

• View destination IP address, port, protocol, time, and visible plain-DNS hostname

• Clear logs or export them as CSV

• Allowed traffic is not captured

PRIVACY BY DESIGN

• No root access required

• No account or login

• No advertisements or analytics SDKs

• No DigiComfy-operated remote VPN server

• Rules, access requests, and logs stay on the device

• No decryption of messages, passwords, payments, browser content, or files

RELIABLE CONTROLS

• Optional protection restart after device boot

• Persistent notification while protection is active

• Stop protection at any time

• Supports Android 8.0 and newer

HOW IT WORKS

Android Firewall uses Android VpnService as a local packet-blocking firewall. Depending on the selected mode, traffic chosen for blocking is routed into an on-device tunnel and dropped. Allowed apps bypass the local tunnel and connect normally.

IMPORTANT

Android allows only one active VPN per user. Android Firewall cannot run at the same time as another VPN. Do not enable Android's “Block connections without VPN” option with this drop-only version because intended bypass traffic may be denied.