DNS Ad Blocker & App Firewall

Repel keeps ads, trackers and malware out of your phone and puts you in charge of which apps reach the internet. A private DNS filter, a per-app firewall that needs no root, and one-tap Private DNS, in one calm app. No account, no subscription, and your lookups stay on the phone.

THREE LAYERS, USE ONE OR ALL

• Ad and tracker filter: a local, DNS-only VPN checks every lookup on the phone against the blocklists you choose. Allowed lookups go out encrypted with DNS over HTTPS. No setup, it works in seconds.

• App firewall: cut any app off the internet. Pro adds rules for Wi-Fi only, mobile data only, roaming or screen off. The firewall does not use the VPN, so it runs alongside the VPN you already have.

• Private DNS in one tap: pick an encrypted DNS provider that filters ads, trackers, malware or adult content, and Repel switches it for you after the one-time setup below. It keeps working with Repel closed. Or enter any DNS-over-TLS hostname of your own.

SEE WHAT YOUR APPS LOOK UP

The activity log shows which app looked up which domain, and whether it was blocked or allowed. Tap an entry to copy the domain, always block or allow it, or cut that app off the internet. The log is kept on this phone only.

BLOCKLISTS YOU CAN TRUST

Community-maintained lists such as HaGeZi, OISD and StevenBlack cover ads, trackers, malware, phishing and phone-maker telemetry. They update on their own over Wi-Fi.

MORE CONTROL

• Stop browsers going around the filter with their own secure DNS

• Block newly installed apps until you allow them

• Domain rules for each app, including "only allow listed domains"

• Custom DNS records: send a name like nas.home to an address you pick

• Family mode: safe search, a restricted video mode, and blocks for adult, gambling and social sites

• Rooted phone? Write your blocklists into the system hosts file, with no VPN at all

• Quick Settings tiles for the filter and the firewall

• Export and import your settings

A FIREWALL WITHOUT ROOT

Android only lets its own developer tools switch an app's network access, so Repel sets up a small built-in helper through Wireless debugging. Pair once with the code Android shows you, typed straight into a notification. No computer, no root and no other apps to install. Rooted users can pick root instead. The firewall needs Android 13 or newer. Keep USB debugging on and the helper survives Wi-Fi changes.

PRIVATE BY DESIGN

• No ads, no account, no data sold

• DNS lookups are filtered on the phone and never sent to us

• Anonymous usage stats and crash reports only, never the sites you visit

• Available in 11 languages

FREE, WITH A ONE-TIME PRO

Free: the ad and tracker filter with the built-in blocklists, the activity log, allowing any domain, letting chosen apps skip the filter, the app firewall, one-tap Private DNS, the hosts file mode and settings backup.

Pro, one payment and no subscription: your own blocklists and blocking rules, Wi-Fi, mobile data, roaming and screen-off firewall rules, domain rules per app, custom DNS records, family mode, and every Pro feature added later.

Turn on Repel and take back your privacy: fewer trackers, fewer ads, no malware domains, and apps online only when you say so.

***

About the VPN: Repel uses Android's VpnService to run a DNS filter on this phone. It handles DNS lookups only, never your other traffic, and sends nothing to us. The firewall and Private DNS do not use the VPN. Requires Android 11 or newer.